{"type": "bundle", "id": "bundle--5010601b-0508-4196-8ca5-62e23b4cd866", "objects": [{"type": "identity", "spec_version": "2.1", "id": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "name": "James Brine", "identity_class": "individual", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "location", "spec_version": "2.1", "id": "location--7360c163-a106-4b0b-8afd-46fdd97a1e7e", "name": "DigitalOcean London", "latitude": 51.5177, "longitude": -0.6215, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"], "country": "GB"}, {"type": "location", "spec_version": "2.1", "id": "location--2e2d6be2-b37b-4392-90b9-f00de406b669", "name": "DigitalOcean Toronto", "latitude": 43.6547, "longitude": -79.3623, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"], "country": "CA"}, {"type": "location", "spec_version": "2.1", "id": "location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3", "name": "Vultr Melbourne", "latitude": -37.8136, "longitude": 144.9631, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"], "country": "AU"}, {"type": "location", "spec_version": "2.1", "id": "location--cc47317e-2c18-43a6-8938-dea748a56ad5", "name": "Vultr Tokyo", "latitude": 35.6762, "longitude": 139.6503, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"], "country": "JP"}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--8861577d-b408-4680-9df2-ec96d0d4afc4", "name": "Cloudflare Global Edge", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--8f32a0f4-03a6-487b-ace4-45ac772216e8", "name": "DigitalOcean London", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8c996743-b605-458b-aafc-527238767bbf", "relationship_type": "located-at", "source_ref": "infrastructure--8f32a0f4-03a6-487b-ace4-45ac772216e8", "target_ref": "location--7360c163-a106-4b0b-8afd-46fdd97a1e7e", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--8aa43d0f-0aab-4f23-9925-5d289d8b8289", "name": "DigitalOcean Toronto", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a8561e63-0960-41e6-855c-a8850ac68d96", "relationship_type": "located-at", "source_ref": "infrastructure--8aa43d0f-0aab-4f23-9925-5d289d8b8289", "target_ref": "location--2e2d6be2-b37b-4392-90b9-f00de406b669", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--dc19848e-5b6f-4f97-99b2-3326544ec73e", "name": "OpenCLAW Dashboard Decoy", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--1ed3d2e2-2d8e-467c-b5b0-c9833af77c27", "name": "Vultr Melbourne", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bb8aa938-0c00-41ec-8681-bd854cb68ff3", "relationship_type": "located-at", "source_ref": "infrastructure--1ed3d2e2-2d8e-467c-b5b0-c9833af77c27", "target_ref": "location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--e2e9eed4-370a-459a-a9e7-5759984f2373", "name": "Vultr Tokyo", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fdb4ad53-0ca8-4ec3-9beb-32bbe2cc5b33", "relationship_type": "located-at", "source_ref": "infrastructure--e2e9eed4-370a-459a-a9e7-5759984f2373", "target_ref": "location--cc47317e-2c18-43a6-8938-dea748a56ad5", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--cfd202b8-23f2-4da0-8b91-8dfc20bfa257", "name": "CVE-2019-0193", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-0193", "external_id": "CVE-2019-0193"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--959e92a4-5c87-49c7-84e9-05987dd9a656", "name": "CVE-2019-5418", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5418", "external_id": "CVE-2019-5418"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--56396261-db8c-43a9-aa6e-26fda3e6d2d6", "name": "CVE-2021-26855", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-26855", "external_id": "CVE-2021-26855"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--dcd22dff-dcfe-4953-a717-d5f7995ab85d", "name": "CVE-2021-31207", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-31207", "external_id": "CVE-2021-31207"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--cee9e8b2-8a5f-4336-8e8e-05d53f967e71", "name": "CVE-2021-41773", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-41773", "external_id": "CVE-2021-41773"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--73f12446-306f-430a-b214-3d2bbefbc8fb", "name": "CVE-2021-42013", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-42013", "external_id": "CVE-2021-42013"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--fb5c13fe-ad37-4059-80d4-95aa86895d35", "name": "CVE-2022-22274", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-22274", "external_id": "CVE-2022-22274"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--a1f6f84f-041b-4d7a-a59a-e7bf0952776c", "name": "CVE-2023-0656", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-0656", "external_id": "CVE-2023-0656"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50cb789c-0ee3-460a-91a9-a55c0cd470da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.169.230.214']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7ca0b6c-6643-4cc6-b46b-c517a916dce0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.193.63.85']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e88945e9-0bce-4d85-9d77-86f9bbeab9e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.214.179.202']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b279f8a-94b7-41fd-846f-c4f880228765", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.24.16.23']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e419c180-1018-4181-ae03-5d4ce5c39185", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.24.16.47']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba0bbe6e-b329-4dc0-9a48-4f917ca4b6af", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.34.57.153']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a98b2d4a-53ba-48b5-9e1f-784b888157e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.83.125.66']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1fe1b55-2cd1-4926-b741-a48b50d67cc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.83.125.71']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f71bd70-2a5a-45be-9a4a-a8f33560e3aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.85.217.40']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d4f8ecc-ff75-4de0-b29f-610f76b683bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.85.217.99']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e1dfe1e-0d83-488a-81ce-42b8cbd50eff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.85.219.167']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4488d9ae-490b-462c-b8a2-ae3a249580f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.85.219.190']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cb1efa9-4afe-426e-a57d-745244bc9b70", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.85.246.37']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--621cfe67-9043-417e-b5f3-c69131fc029f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.95.14.60']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95dfc5fe-4c3b-4b84-8eba-f388e919568a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '10.133.135.164']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c29b324-1d73-4e71-87df-f98c010aeb73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.28.153.226']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--358e1e2b-7c74-48f6-8995-aa94d05b8da3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.100']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cd091a6-a58d-48f1-9d42-23908ebde50d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.102']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b3affc1-c233-46d0-b244-716f07eea2ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.108']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36eb24e7-2ec1-46c3-b795-049003691808", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.109']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9378ec50-d605-4e26-84e8-046cfb6a2d71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.111']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79a21988-e404-4dee-a444-3a749c71e6f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.112']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe8e7b45-bd3d-4f15-bedd-236f902362f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.118']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23707196-da2d-4ddf-be71-8453d3cf08c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.121']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0974943-0b7b-46c9-b330-03a2d56ecee1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.122']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11406546-24d4-494e-8c60-a9e312c52af8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.125']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71bb2150-7026-4c0d-a9e7-3845790e6d6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.126']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5680db28-0b46-4767-b1c4-ea907237ef49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.14']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da375f38-29e5-4ab0-93ff-19b1516157ea", "name": "Malicious Host", "description": "Observed: PORTSCAN, SIP activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.19']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b069919b-04df-49f2-bf40-5231c9d66537", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.27']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea20fb87-6891-4505-b2e6-729f6a589efa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.35']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04621efa-f481-4699-b0d4-4b95396ed64a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.37']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6ae1527-0b40-4080-b988-3b2a2fc02e65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.38']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfed09fc-cf9a-44c6-b163-9c3729eda7a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.41']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88632e1a-8985-4935-abe4-be7f324db46e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.46']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--809737df-c4f4-47ef-8fbf-bb4023668ccd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.47']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b82ec48-4dd9-4c08-bf31-3d18c8394a77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.50']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94d64ce3-e98b-4688-8992-9e785ba2d472", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.52']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10cea4d6-c147-475f-a671-a95fd81eac48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.54']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9343f80b-0bbe-4265-8993-74f143e288c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.56']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--414b1004-25c1-4c81-ba01-edce273c4201", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.58']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09a30603-7bb1-426a-9210-6ebeeccc020d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.60']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46c158a8-e743-4f69-850f-28cbdabcc744", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.64']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c677559-6090-410b-a508-ddf14184f892", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.66']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac8f9a39-394e-447f-8fe3-311123de4d5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.7']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11fb69c2-43d5-4c13-9b7b-570e31d45b90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.75']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0eb897f5-1c39-48e7-9e4c-684163981a51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.77']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7143baec-e736-4d7e-b295-2bdc7d2201d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.8']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44add0b9-caf5-42fb-a108-e6e324eb1cd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.80']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2a8be54-99e0-4df8-bf06-12b40090c533", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.82']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99164086-988c-47b2-9695-098b79ef9fd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.83']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa981710-115b-4c30-a99a-c88fc0018a28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.86']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9ea51b8-6466-43af-a921-99d5555f5a3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.87']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c87163b-b704-43e7-a3de-53761d685292", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.90']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fba26761-d59c-4625-8ff9-4333d7f6d9e3", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.91']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--400d74b5-2262-42ab-a428-d2b108da0b47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.98']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac2cd4eb-b4f4-4d8e-b5ce-1f804db384b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.99']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5974ad1-92c5-4dfe-ba6d-87e2d4005b1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.49.117.77']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98c44b61-01a4-48c6-aa78-980bee32cfd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.50.17.159']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff2f65f5-32b8-4701-819c-08bd5535fe25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.51.195.110']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aaa053f3-f2cd-4c09-a2fd-f1239258c915", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.126.145.214']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4567fe8e-7051-4f7a-af9f-5dfacc35af2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.126.155.244']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dea92ec-0d70-42b7-bfd9-69caa2bac19a", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.126.55.67']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20456473-547b-412c-aea3-866e8bb30b67", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.200.242.201']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdb0df33-444d-4748-ac78-8bf3e38a975a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.200.96.234']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76e75deb-6889-4165-b9a4-a5da8b363e8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.201.104.216']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--173589ea-3323-4538-a866-c4ac30235e7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.249.63.129']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9bd20c7-3d99-46f1-864b-1a007a52bd57", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.29.52.114']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db471cc5-b7bd-4d82-90b2-d1d2b90307fb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.32.239.179']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb1b28f6-a2b8-4c31-ab58-9e187f2ac217", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.32.244.128']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c6b721b-26bc-4a95-8865-0234cf79c03a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.33.204.253']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56b27160-380e-4fa2-b93c-1fb35dbf2285", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.33.55.204']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9dc52d6-19fe-404b-a002-c33acb72ff0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.104.242']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79fb7df0-35e3-4c32-a630-d72670cb60b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.105.50']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6057b9fe-2ae5-43dd-863b-3e7841593ee1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.105.94']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f8cd0e8-54f6-44a9-ab84-d3b8464c9a73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.106.134']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6ed3cae-f942-4a70-af7a-7e7525486a92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.106.78']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--531b5166-9c8c-446e-abda-1628d2bc7b8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.106.89']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba6d9c80-67e8-4b6e-ae42-96f963c0bd60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.107.243']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b66c126-0899-49ec-a806-b0dc940925d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.107.65']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a81e1d9-0f0a-4055-a2ed-36233e794c09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.108.158']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48a24b01-f9f7-4f84-9e01-e0a27f6002ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.108.175']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc88810f-8fa2-4f30-ad37-26a3a031a15d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.108.191']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd1270e3-1289-4d4c-8aa2-93a7d48a7a88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.108.9']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ba72097-7101-4be6-94b9-e29f97e06c9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.110.201']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea591b44-6223-4f35-be72-176ca7b00514", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.111.119']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fc7c640-a79d-4587-9f49-0cd2ed667e04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.112.101']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c0abbed-7e6d-4b18-9636-c76c314a6142", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.114.124']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96d57b23-b164-4bbc-ba96-30f47d8a73b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.114.198']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7284625-554f-45ee-874c-9cfa2062242b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.114.209']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4ff9347-bf21-4e6e-9c4b-387c3b27046f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.114.222']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--002c6ea0-a454-4716-a7e5-91935c835f25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.117.15']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c19fb8d3-96e3-4738-953f-a060ce696db8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.118.248']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7318532f-e523-4dd1-902d-d2ba42c7bd47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.119.146']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdb16cf1-dc3d-4710-bbcd-45ac7c3f8642", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.121.72']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4864865a-0182-4b93-8d56-6f5cdbfddfd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.122.183']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc998157-a2f6-43da-a1f3-ce6a3b9a9ce5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.123.67']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbb38272-1a9b-4de3-9ffb-ae67bad9cada", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.124.220']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9b71770-035c-4e6d-a679-068008494bdc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.127.85']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e88ce125-06cb-49b4-b29b-5c994e3264eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.97.131']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e448485-5f52-435f-a31c-23451e2e9047", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.97.172']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d8125ca-7014-401a-ab05-4a3d1e100fe6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.97.187']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1d620be-1439-44e8-8c82-826dce9cc252", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.97.205']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69317f60-fc8b-4a0f-8e2a-ad8363694a5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.97.70']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0972ebab-f77e-49ec-9c25-b77b420f3f35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.97.74']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1072e53a-dc7e-4e01-875e-68fcb4996518", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.97.88']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05d521ef-188e-4ac4-8cb3-4c0d7b9bbfae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.43.12.186']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b1e9995-bf5d-45c6-8c6b-96cdd0340fec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.43.6.97']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fae05ce-31b3-4365-a975-2a059dfc1704", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.15.119']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d3115ba-1fcf-4eb4-8ae3-3ab2e0bdefd2", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.53.224.91']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08bb221a-06ef-447f-8a7f-920abdbb8c35", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.53.229.55']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dc069b3-2da5-4433-afa1-fdbbbc7b92cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.68.46.254']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5cef03d-9a46-42bf-adcb-32c4daa58388", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.71.211.213']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e3ca4ec-f5e1-43d6-8127-242eb666ac41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.96.202.228']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f6407ae-eff9-4062-a388-137bcc706687", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.96.220.237']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8da037c-c83e-4b87-8cea-69b27fe37b68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.129.186.87']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--937696ff-d25e-473d-8b19-2b5516ec82b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.129.200.117']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59a4afa9-9c47-4ff8-b889-b542c99f2700", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.165.127.193']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a42b68d-ce15-4bf3-bcf2-1903a9a3ede8", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.210.149.105']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7dcf742-2e58-4d2e-9df8-f7247d496386", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.216.169.161']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--869dbaee-2d91-4b0e-a0ca-87403366b102", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.219.25.33']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73d9bc8a-4594-489b-877b-03734a08b76f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.223.47.171']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc3c92d7-1f1c-47ac-8fd0-777480617324", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.33.155.126']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f19b9df-e034-4563-afed-d8da7391f0ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.67.141.165']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1c96486-32f9-47d9-9385-3928acad0260", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.88.21.136']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6688c530-9288-4eb8-9fef-cb73acebd9fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.1.210.25']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6102d00e-9950-4590-a6e5-ebe4a66c21ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.100.211.71']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a86287a-ceaa-4c48-937b-60628aa127a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.101.203.155']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7630d54-c11d-44e0-b0a6-ba20f02e9180", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.103.21.51']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05124c91-2235-4cca-bd30-d69a2c88ff5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.104.73.114']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5e2f9d2-87d9-4426-a9b3-80d5d40a5e24", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.115.64.22']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd52a780-d733-4402-afdf-e79d37ca8878", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.119.17.14']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ef38510-351b-4491-9735-e5117b7f7e4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.120.189.68']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1ee6c5b-6641-4f02-a2cf-4842d8810a19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.120.189.74']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69d715e8-68ba-418a-8d4b-78ccf1981181", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.122.204.70']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5419937-bd73-4ce9-8eec-8af061250a5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.122.221.179']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b1e9c40-4e7a-443a-a941-0befcddfffa2", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.123.226.138']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--738a0f91-3418-41fc-9a2d-000687c38668", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.125.154.72']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e47e7fb1-1d4e-47e8-bfc6-372f43bbc7ad", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.127.39.110']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1312cb33-79e4-45ba-b944-a5ba87b98a00", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.13.206.152']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffa4e37d-b3c6-4d9e-bffa-eaa963429c75", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.13.206.18']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea752b61-6e12-4e27-a909-7f2984930e5c", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.131.61.163']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--138b6402-1ce8-441e-b051-e6834753c35f", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.132.236.30']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e26859b5-d42d-43ac-8929-a643fad4f6ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.132.98.160']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8946d54-7faa-41ca-a043-e4dad95abe70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.14.32.192']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19f44252-c4cb-4aaa-9d74-f933ce571c9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.14.32.224']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5d41fe9-3686-4ea6-9171-1d4da6330c89", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.14.33.174']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b182df99-6833-4e69-872f-1ca48c1b0541", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.146.159.141']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe910bee-a999-49c6-9d47-7199c6f892d3", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.146.159.173']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6fb157b-b98b-48e0-91f3-c5a8d66bca5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.149.170.125']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--710e2ba8-d5a3-46f5-8569-ac7aeba1155d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.149.26.230']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--109f8fac-6db5-49f4-b9af-ee308f96e100", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.149.28.157']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd11e023-1ff7-4f2d-bd1d-735e6efd6b54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.15.222.183']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--259acf36-53e0-4fc4-b5a0-12df1bfd26fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.152.242.106']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1aaa1f05-f7df-47bd-a842-2a464c49f8e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.153.68.219']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15ec4030-c150-4da5-b636-bec4ab112ebb", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.154.77.48']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f514598-08c2-4514-ada4-da0bbc955eec", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.155.195.50']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcaf196e-8fee-4836-83ee-dd568d94a8d6", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.158.40.65']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--769174b0-3e50-4173-97f5-586198a54cbc", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.165.139.145']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdfd9de0-88c8-4b5c-9cd3-05120c22f97f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.166.183.65']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07bcf547-463c-4da8-a3ef-5420cf6ccd8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.167.89.178']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfd6abc1-905e-4589-87fe-938ef98a9a71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.172.78.219']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6860e61-5f90-45a5-84d2-922b6d51b600", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.173.227.136']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58bd9cde-4d20-4c87-a530-41badba43a03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.173.7.224']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca9c0c0b-4f0f-4c2d-b125-445e700b0679", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.173.7.232']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdeb8f0c-aade-4218-99b0-fa93c0b77733", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.174.153.120']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6de2b2ad-4192-4b8e-aae2-0a1868e56934", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.174.50.62']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd338a38-47a1-4c9d-a24b-c0b1cb85c66f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.175.51.88']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5c6677d-53a0-4647-a7bc-b0dd11147cbd", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.176.137.48']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15e6d1cc-536a-4743-af5a-af1f13e417f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.176.20.57']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9717223d-c260-4520-80f2-94f8664930da", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.176.24.57']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7357187a-8445-4997-a49b-526d61d24a07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.176.90.41']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edbd1437-db5b-462a-9843-7e6a7e1b59c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.181.176.69']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c648f7d-dbb2-4cba-9fb0-ae88e026715e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.185.185.251']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--671d9416-991a-4efc-bd2f-fa590741aecb", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.189.234.96']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--130a5f1a-2971-4c9e-a352-630f9ecfb254", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.191.14.243']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fdac3af-3ff7-4f52-bf4c-c70f1e96b959", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.192.175.208']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9770f33-1365-4e95-9a05-88cde5f61d54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.194.107.153']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be497744-c86d-409a-9e54-c5bb72d0ab96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.197.113.108']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--235cb056-cab2-47c4-a0b6-7f30bdf37e9d", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.20.122.54']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3786ffd6-83a7-44a2-946f-d4eaa94a0530", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.200.28.166']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d39a5bf-6878-4abb-ba37-04af34059821", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.57.12']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77841a81-2524-4f7a-bcca-eb8902b5e87d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.57.13']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95372a32-17cb-4a8c-be35-fde53486534b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.57.15']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f849e77-cddf-4740-b478-71f8f6d344f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.57.18']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fcbccff-9647-4cb5-8663-fd9db496bdf3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.57.19']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9debcbd8-3bdd-43de-8847-c3e012709646", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.57.22']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc5eb052-1749-44a5-a904-900e8a53efb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.57.28']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39b8166f-e990-4dfb-9853-41daa77a19fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.57.4']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48ee9c04-0ade-4d69-aab8-8df9ec5d7913", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.210.22.74']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0019c169-5966-4540-bb8b-90b0530f8799", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.212.186.158']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ceecdcd-4237-4288-95fc-554595cd61d3", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.214.219.39']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dd9468e-492a-42d0-a731-deda102b8002", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.218.240.78']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d918566-195c-467a-b492-741fd4385585", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.219.153.248']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c9d7d2b-a616-48ab-a549-f57d76b8dead", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.225.87.7']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c69a555-2bb6-4b4a-ac0f-514aeba14693", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.230.144.104']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3089e96-4404-4509-98a9-beebe04ef832", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.112']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f44b36f4-4870-45ff-87bf-6bd63c366907", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.20']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa2feda9-1848-4306-81b9-e0d03cc093aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.3']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c62fea59-c764-4600-a6c6-effa8537bede", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.31']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c595e75f-7468-4417-b843-4b0850a699ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.32']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67fa9dca-fa9c-4001-a65d-ec4667978ae1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.33']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--933d8b35-beea-4805-92af-da18cc73f727", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.36']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3dc2047-10ce-42f9-91b2-ead0dcadee07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.47']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6b1324f-a0c6-4783-bf05-c8589f9993fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.49']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9506df39-c1f2-4b69-8770-718b05d6af7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.52']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46ea9d99-5062-42bb-bf9f-c811b05c76fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.57']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37ef3ed5-17a7-49c7-bdb1-9d35887dfa83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.58']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f119d4b-f9a4-4143-bfd8-f25753817918", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.6']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7e023d8-c347-4a8c-b41b-532e63c3581d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.68']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd9cf1a8-c132-41d5-a20f-09a2a28f092c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.69']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8826630-e2c2-48b6-99da-6aa8bbca76c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.71']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97f28c1e-1325-44a1-b0ec-9b1fbdd8b16e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.74']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bf57792-d214-40c4-ac96-623f47b13424", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.78']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cd2b09f-49f1-4792-af5f-4015a59da0fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.80']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7c043d5-595b-4529-9aa1-cad706f02a15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.84']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e88bea6e-7b5b-4712-8787-173592e6c89c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.89']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8016d7a3-993c-4b9a-a838-1dc0a3a3b92d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.96']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2dd3e4e4-7fda-4133-a8d3-9942b57b7fb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.98']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c57e3819-b754-4020-8aa2-c71b34513c6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.244.172.227']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31540aa6-c716-40d9-b070-cc84dabc4d4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.249.201.41']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26a1c4d9-713b-48e3-ab7b-e7576d4b7926", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.250.11.176']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e344f77d-93bc-4f74-964a-a97ca7d33dd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.250.11.63']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12e0e75e-389e-4ed8-b03f-7edadbcadc7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.252.12.242']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3d2ba41-bbd9-458c-b6e4-77719f33d29d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.252.221.163']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d874f390-5d30-498b-8ee3-97c6a4a12f1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.252.90.129']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42a6a536-136f-4213-8e2e-5f7c8a64eb43", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.26.82.204']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1612186a-cccb-44e1-8e7f-064f13b0de5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.27.238.114']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b15483c-abfa-4a8a-85c7-27fdd4f83bd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.27.238.116']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9840b53d-f136-4ed0-add1-c42672315638", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.27.238.120']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7c88314-b756-4e49-952f-736ede4583a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.40.200.174']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b71a960a-d84c-413a-b86b-7622dc9be89c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.42.30.243']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b2b28d2-6b1d-49ca-9fc1-8342e443711b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.57.224.219']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec79d681-cc34-4e0b-8218-2b2d546abbba", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.59.163.132']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ece703b4-ef27-4a1b-b9cb-d4878ce9146a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.59.163.133']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--739784e0-5efa-4772-a828-e354f2711861", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.59.163.134']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36cb3800-3d35-4f55-b631-79ec390f8adf", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.59.163.135']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--850cf872-7b44-4ac3-8d28-a9ca10e36dc2", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.68.68.121']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c4f5ebc-621a-46b3-9419-a9e4b4b593fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.69.189.136']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--127e3fb5-aa27-4f25-8b1e-63d243b05d71", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.74.20.51']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d17b539-ab35-4d93-a185-cb3008584500", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.75.183.165']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06adc8f3-3a29-48d9-9c3f-c3f38b1059f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.75.187.118']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67631075-2690-41ba-b541-2ae347ef9797", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.75.71.22']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--083fc2d7-c106-44a7-b9fb-d7e6a1c22876", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.76.57.246']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a47a3727-2eec-4d86-88d0-1a9fde7ca2e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.77.175.15']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f2be587-1142-4205-9057-1ffc259fde9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.77.242.62']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9efd161f-7c3a-4753-8977-fa8f489c7f50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.77.246.187']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9540563-c650-4355-931b-769eb83b0142", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.78.0.123']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b05ff26a-1dbb-4c8f-bf52-2b9069f85110", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.78.0.229']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa8d9d5f-c089-4422-ae96-542f8e8151f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.78.29.30']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7fedf1f-54ff-45ab-bc50-4a94717363a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.81.238.70']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7591e450-aacf-4f48-b6c5-5406b43cf59d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.132.16']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57ecb1e2-665a-4f16-b8ae-04381a6c66ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.20.28']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0e81ad9-9a30-4a5a-9445-b371d143e855", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.88.76.27']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c770cb44-5055-4180-877c-4fdcd2f37af0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.204.144']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccbb3564-ca1f-4158-b8fb-984908e7282c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.204.209']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0404b176-e67e-43e5-b915-c06ccfb65b34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.204.212']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4d29ce6-3a5c-4e89-95ab-2618c0525601", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.204.35']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e505ab3d-32da-4a02-89bc-4a93468eadc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.204.47']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bcd9de7-23d6-4c18-9f22-d832c79b66a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.204.84']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3de266b4-66db-4f70-a6d0-96eab82f833f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.204.88']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0ca3f0c-450e-43fb-afbc-dd03dfead902", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.205.204']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf7afe46-a5e3-4c03-a68d-00f03d2e428e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.206.54']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b2f3318-21ce-4c90-8a55-4d8514fc000b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.77.247']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ec40918-fd01-480d-9803-1e0380098bb2", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.38.138']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39306c10-b629-4354-ab89-bb58af65a196", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.96.16.89']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41b2ff6e-f8e5-47db-942a-7828ebecc121", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.98.149.56']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cd31a26-6188-4761-89d1-d498bf31ba81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.131.174.26']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6ec5bda-8542-4e19-aa77-94c7604a559b", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.140.145.148']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc756fff-a697-4178-a7e6-b591caab4b8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.132']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffcb4876-f843-4381-a29c-5d589ea5f32e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.202']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f78a452-b1ed-4e27-9fa1-b2316c347e82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.220']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--382a848e-3b76-4f3c-ab47-7be61ed18fc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.230']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28698ad6-bf52-489d-ac24-7eebb988df00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.231']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdd24249-2673-41a4-824e-db2209a0a8d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.232']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0f95e9a-db17-498d-ac30-bd399292cea0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.233']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d9a775d-f0ab-47f0-b276-27d83970fbc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.234']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c49dd51e-9412-4e2c-a321-61978f48ee36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.235']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ed1c246-fa74-44a7-8548-372c1d95b8e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.237']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a03679f-aff9-480a-89f4-63d88fa3f92d", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.238']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b798959c-c291-4ad6-8d55-0e1cf95f0df2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.239']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e25aa1ff-66cf-4a17-8a8b-e6efdae97851", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.241']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29419421-0ea7-4291-9c7d-21f2b6e1b383", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.242']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65dc27bb-cb96-4ebc-91dc-40a75940ceac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.243']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0bde6ea-1fa6-4182-8f3a-73545daab7d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.244']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb8cae29-e583-4cf0-a994-d880a7d3e0f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.155.131.104']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e71ae36-a70f-4538-89b9-33a14786e094", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.155.31.56']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20ce31ef-5549-43f7-89fd-7ff5e0f41ae5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.155.46.179']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbb26de9-b700-4de5-8692-c2ca65053062", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.155.61.210']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51d812a5-e53d-4a65-a51c-0d63eeeed523", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.167.64.66']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0fa41d3-1fb1-45b8-86b2-aac32a32d075", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.168.114.198']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9061c458-37a8-4d51-9ac8-b226244a7c25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.168.132.37']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa775b68-41d2-453e-b01a-8497f96caaa1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.194.145.47']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1880139d-8a5f-4944-be14-4f1b99a9cf06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.194.9.81']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af9d17cd-fd1a-438e-80e5-287ed556632a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.196.101.163']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f75fae1c-362f-4868-b533-3fb6fd80dd6e", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.199.176.250']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af9ea32e-7f58-44a7-a63e-9d40ccb927c1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.210.140.142']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--736ad5b5-238d-4451-8981-bc1290b5a511", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.210.209.47']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce6c1e29-4477-4a96-a714-1a13b02d6c6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.218.164.229']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27c73226-9858-4e27-9c41-9c61fc828539", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.218.165.188']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb50f969-acad-46a3-8275-2081076441ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.218.165.211']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f730b941-19a3-4de3-bd62-87cdd856a714", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.224.31.96']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e01945e-5d1b-4524-992b-e11f5aa00e5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.232.79.58']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--070a644b-7308-4920-86da-723c149fc726", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.234.94.23']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e34049e-826a-4eb5-8c3c-248bd63c87bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.236.201.236']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--620bf022-44e0-49c3-89ef-f8bf578853ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.236.66.186']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--782eabf8-2881-414e-bb5b-65b3df3ab11b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.236.93.174']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f993dda-5ce0-4967-b0b6-1747e9693786", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.237.132.58']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f80f225-66e5-4e9a-882e-55b71e02d510", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.237.144.150']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5e68df6-4a9d-43e3-be2c-d0b51a4f1e8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.237.144.179']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e1b1377-be0a-432e-a684-7e4c517b4fcc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.237.144.217']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3797cd88-845a-4b47-94fd-c6ef707e9f27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.237.145.102']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ae0d798-c9d9-4ffc-a001-33d5581573d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.237.145.107']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a4ebf0c-b753-4de8-8780-40bdee80f39e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.237.145.144']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32fea690-971f-469e-9f97-19f6df365b5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.237.145.176']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cf43dfc-c9c3-467e-8fce-b9dc5a35fa4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.237.145.205']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ce382ac-be00-472f-b824-ca79d0ae3d99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.237.145.5']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b46b026a-a235-469b-9f6a-ba718ea99802", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.237.145.54']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4311152d-28ee-475a-8413-4be97699bb05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.237.156.209']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b88e4ca4-b455-4894-8224-a0c1afc1b946", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.237.240.112']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc775b1c-4ffd-4adf-9c50-49c041cf405d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.238.159.195']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8e91725-b4df-43ac-894c-28ac4ed53d10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.238.228.254']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b17169b-8c16-48bd-9560-9c64a8045355", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.243.32.235']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8884aa12-1e6e-4447-9cd5-1e03337536c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.243.35.104']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--827ab610-07dc-45bd-b635-957ddb9fdae0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.243.35.120']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba412a62-d05b-4e29-8982-2b190bd7bd4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.243.35.45']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79297644-8e65-4a53-a100-7b260431969f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.243.37.202']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d558c3aa-277f-4431-a9b7-da3eaed28965", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.243.43.19']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--985500b0-c776-447d-97d4-8780eee077ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.243.46.222']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee6a4f3c-bb27-45cc-860e-027938456196", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.244.74.201']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32d602db-9567-430d-bc6b-67ab67591596", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.118.57']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd598aef-0e93-4a55-b231-9e23b38109da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.130.34']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--944d205c-a8c7-4127-96c5-70b20af60c38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.160.105']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5733529-f564-4e4e-8a7e-adc0ad14355e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.177.83']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ba77f45-b683-4a06-9f93-74e5d2152fbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.2.169']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9a59e8e-930b-415f-815a-e2b1d637f2d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.206.108']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73eedf0d-cda1-45ac-ad14-035bfbfe4cfd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.231.219']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0165d751-05a3-4d70-beaf-dc7b84535549", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.238.180']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5200b490-c80b-414b-a348-7bc73fa72250", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.62.163']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7c95922-7ef6-4af0-a74d-8832dd5b7958", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.250.236.190']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed1b8bb9-03a3-4a76-be23-43389b7ca537", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.250.236.84']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d73ef272-90e8-40a8-a131-f65903e18922", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.251.180.164']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c68853d6-90c6-4901-8e7b-cc15830ec555", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.28.161.63']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40c3825d-4d08-4be5-812a-400447c80477", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.37.184.165']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--880e6f1c-a06b-46e0-9c1d-a218c62a9de4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.60.180.111']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c23a7e08-e7b3-4f9e-af12-0f6647461ff9", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '105.157.234.236']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6350bb5-afe5-4a95-a7ab-ac7e4d440c1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '105.225.156.47']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92922274-db86-4be4-ba9e-fd1348f406f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '105.225.39.137']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ac9b604-1829-4f43-a3fb-4548b89eae02", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '105.28.108.165']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8576bc0f-eeb4-4014-b476-eda965844787", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.12.108.64']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d04308d5-2ab9-4d47-a7d9-fa35fcf72a12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.13.38.13']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bb3122d-1a25-4319-938c-99463f11cd7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.13.64.124']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1ce3c01-4dbd-4b3a-8d38-13a9bd7cadff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.13.70.73']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70066eb3-efb1-46b8-8b77-afef9889e76b", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.13.98.225']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bf92b2c-ed98-45f7-a925-1016c44b1e30", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.219.167.93']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bec7cc3-193f-469b-9809-5dc6c8f84641", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.251.244.178']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97ab048f-294f-4640-b665-58f3abfac07f", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.32.30.16']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35516ff8-e9f5-4d69-962d-293cb278cc9f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.52.216.13']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71e6678e-18af-4b60-8a40-c0bb56b9fdf9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.54.132.218']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53eda91c-c694-4963-9b90-639557df31a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.137.189']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--328fdd26-26cf-4e46-a932-97818a015f20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.144.128']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0de3817-6b59-4812-ab06-efc3d36fd791", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.144.150']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0a22108-d07b-45d3-aa90-4cacfcf71c47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.144.202']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--490924d2-b711-42df-bce9-fd1651756073", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.144.37']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09f373af-7c12-4a2b-afd0-5dcffdd1bcfd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.144.39']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a2a44c9-caaf-4bd2-bee5-aa451b95c1c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.144.60']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd668cac-74b1-4dd9-a1db-c3a287faad2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.144.8']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acef7c66-d3eb-40d9-832b-bc13c7f9ba24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.144.89']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7480d641-d205-401c-81ea-2096594a0af2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.169.149']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ca0bd3d-1ca2-4d64-b530-8859edaeb0cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.176.119']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac323122-7e09-417f-b6f7-981db3758868", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.176.8']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1e5dcab-8b59-4163-a33f-ffb3657e8104", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.188.89']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fb73f7e-b1cf-4733-b3ba-a9d4474fad85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.189.102']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--636814f3-87d5-4e7b-96bd-51f2203de407", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.189.251']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8a8e4f5-742a-4a6b-b45e-a88c410c3cf2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.189.53']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eba63d22-7f8b-4db6-8f95-6db286a0946b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.191.108']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb34bee6-c9e9-42d6-920c-aa7b29bc602f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.191.112']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aae7ece4-540f-4e22-8e06-bbf935e2017e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.191.227']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b08d3c0-cfa2-4708-9ea0-b72b4cb0a83e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.191.73']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--328867a2-dbf9-4369-ab31-8382e650890d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.100.136']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccff571c-c74d-454f-8269-a3434766a44d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.100.201']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff6cbe35-925e-4536-9b13-4032c8397a5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.100.72']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86929f54-0a8f-4e77-988a-e8bda9fafa9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.101.102']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--510156af-2aa5-4249-950b-2b27cddeb8d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.101.106']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c33e45a9-ae41-44bf-90b1-8e8ca985fe94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.101.136']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f69ce8d-5d20-48b1-b5d5-ba0167ecf48e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.101.25']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3649a1a-5ba9-4df4-8e46-b38bd9947936", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.101.57']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--121e5026-fd84-4330-8f05-5eb6cf9fb14b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.102.156']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75e9cedf-5f01-41d9-b757-c67c0b790d36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.102.199']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e3edf66-f60b-4bd3-b54c-26d5c79359b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.102.47']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70752951-88b0-493a-bc68-f6a250ae2dd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.103.155']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12bd86d0-985a-4015-9437-9ddfe7ce07a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.103.164']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75a645dd-4c2e-4c82-8768-e8da967d718a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.103.220']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35b3a49d-47de-41ec-82ba-fde16f63798c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.103.249']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff3134b4-492c-42b4-8d5c-1b49f0371d29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.103.88']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e814851-6821-494b-a79d-73fc691e1ea0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.104.176']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--438f060c-59f3-4721-a24e-1270c7b142a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.104.197']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09ee4c4a-7276-4ebd-995b-693636ff28fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.104.66']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3174719e-b440-4524-8575-a180e0b6792b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.105.183']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba71ddbb-bec6-42bd-b31b-4d9831fae8d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.105.241']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8e2dfb7-82b6-461b-9533-50262d21d601", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.109.196']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51e70664-aa19-42ce-8024-a4e86731c813", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.110.123']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e91ca646-d48e-434e-9a4c-eaca355cc32d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.110.13']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d1a84fd-0f16-4efc-845f-183c0bd5eae4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.111.70']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67a76dbf-5a0b-4251-92d0-d874c9afab3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.111.98']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5717cfc-d567-4567-a8a9-6a7e15d10c2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.112.48']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab59e995-0d08-492d-bb3a-81aa4348de83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.117.121']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bae494b7-3036-4214-b380-4203dfa4ba9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.117.167']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af0ecf00-92a3-4291-8790-466f38b6c977", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.117.219']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16b838e3-0d34-4263-b9af-beee11529a76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.96.215']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e19f9b04-f4a2-4265-8ade-5325a56dc41b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.96.232']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c0e6c35-b016-4938-af8b-9051cac67662", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.97.147']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--108c5ef4-462b-42a5-8029-8492a8104fda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.97.156']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0eafc13-66e7-4de0-b32a-14a15bfed204", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.97.90']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--476398ba-5160-44b9-9e1b-7d8a419624c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.98.237']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c299aa2-2eac-40c3-b59b-6016f03725cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.98.252']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f7ddf48-0175-4020-b196-5920f7426db4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.98.59']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0f7e711-6fd9-45d6-86aa-2d6beb37ef56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.98.68']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49f53c12-cb58-4c0d-991d-6d7ea36e0437", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.98.99']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4dd036d2-50a1-4ff1-a0cb-077e4545a873", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.99.104']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ea5703c-7d86-4f0a-b59c-9d13489e97af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.99.126']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebc8688f-b0d1-4344-a3e9-b9ec750fc224", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.99.195']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8451a62-b013-4db1-9f3c-7a570022d300", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.99.9']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d33f4bf2-c6dd-4f68-92a8-baa91fc6f7ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.152.44.119']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9860f854-7709-4619-b314-9d3652993387", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.155.56.47']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8a48099-9c00-4cdf-b477-841e51fb811a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.170.247.81']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29cde6ae-9e42-4f14-9ab9-a1ca25a65d9b", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.172.235.49']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f2349e8-113e-446e-9922-e9a4c8cdada9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.172.80.207']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0afa6421-7f80-4cfa-a3d0-454c74fa1b09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.172.88.206']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d60ce198-d402-43ad-aac0-cb82362e5d6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.172.95.94']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c34c9fc0-a97a-4573-a975-d885a6808d0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.173.146.37']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fed131aa-e628-4373-ac28-bdcc2268f32b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.173.241.217']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df6d0ec6-c054-4e89-af50-1de634de9745", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.174.189.2']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc153bf9-9ebb-4995-a7f5-9f7aed4c4841", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.174.90.23']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad76ca0f-bf43-4265-aa73-479da59ffd10", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.189.20.125']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82c82f5d-33ae-4c75-8b80-e7cce7d0ba1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.189.24.77']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb33c129-c1fb-4672-891f-cf93dc1f0aba", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.178.17.26']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--944f8f75-a0bf-41a4-a450-dd15d4193da0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.178.7.34']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6a98636-02a9-4946-8644-3b5c24f4ab84", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.181.63.2']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbea050d-3ab3-49ba-8ff3-91dbe69c9320", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.61.117.237']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--064f1a31-b850-41fe-a560-835a35fd13d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.61.229.217']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a1963a5-ab2a-419f-8ee1-686654a9dc74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.209.10']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c59f79e-172f-489d-8415-9447b36f12c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.209.13']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--648ab9cc-d9c5-4def-b614-76a7f5c3fe75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.209.15']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cb3d341-4f52-4b94-bfae-a1eb154bf0e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.209.2']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5384016-3a83-4339-8000-e0ba1f0594d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.209.5']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87c1a0a0-62b3-424a-8713-89669978c2e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.100']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8861f21-fc2c-4490-97fb-9c3ec5f71992", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.102']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a729db50-aa80-4e0f-a6c3-0d4c5fafed53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.104']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48498eb7-c8f7-4442-8f95-ad4731acca1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.105']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b203a17-aa16-485f-9072-55e3ac6ec6fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.54']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--050e6f1b-ee3a-43ce-adb2-7e942017c93a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.67']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38e576e9-6e57-49d1-a7de-f2b770655274", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.68']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--052437be-98ab-4a52-b883-817dc17bd7ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.69']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7171942-2ca0-4770-b798-278c5d28f1d7", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.74']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--859317a2-d10b-4a97-bfeb-31c591e2b0e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.83']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0645e6c4-37be-48fa-9a91-fe2c517dcd65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.88']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--980b906d-7822-4523-97b0-2d9efecc74e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.97']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9507405-ec1c-413f-a0a2-11bf9e5d8625", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.99']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8548d14-e755-48ec-a060-d0a936ea3ab1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.199.106.34']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5902374b-f87d-444d-9a46-bc025f3c77a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.205.180.231']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3e5cd79-ea1b-45cb-87c5-7718380d0489", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.205.211.117']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5baa4ec-fd70-495f-9170-51ffcaa1e14a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.206.247.77']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3713a088-a430-48c2-914b-c599e8634bf2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.207.174.234']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73bdf590-1df3-45bf-be08-466f4b2ed467", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.236.50.3']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--257831f9-d74a-42b5-aa3c-ee51a767f413", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.237.96.109']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a964b760-e26f-4de0-8d0c-32b641c83f92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.63.134.29']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fdc1c11-3df0-4fae-813e-ac7744042b6d", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.91.4.177']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74748e41-e7bb-4042-9388-4a51dbe27ab4", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.10.176.51']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3ac61ad-0877-40b4-b149-75e4f57b5a7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.136.9.232']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef0b7fbe-27f9-4749-8bfd-7a344785fbb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.227.223.210']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59d3c82c-c3f0-4d66-bb72-4ad02c77af58", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.249.201.56']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--916fc4ec-900b-4247-bfe7-620bb2dc4339", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.35.80.116']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fffdce9-baea-45be-a178-5150ad150283", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.39.237.185']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--363ac680-ca2f-43e5-99eb-863952053954", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.40.200.115']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88f71e2c-0b9a-44d0-a03a-4726269696c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.46.12.3']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09f43bdd-ccbd-48ad-820c-aef7a144ff54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.82.167.19']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2bc8a4f-7ddf-452b-ac20-694b6fa0fd25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.93.230.37']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--567b8480-100f-4e3a-a0fe-20bc1336f350", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.93.236.163']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bdd0dd9-0ad5-4f2a-801a-00efc01545ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.113.88.129']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f76229d7-ecbb-4977-b692-0c9ec509a63f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.113.88.61']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95d7b570-0aec-4e20-9ef8-470c63e34eb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.113.89.142']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51a72fbe-1689-4c6e-8ce2-18776075d004", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.122.68.113']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad01005b-9f7b-49e9-9568-9c7b9d01a0ab", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.161.115.89']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9dc3579-dc25-49f8-a4f7-c82f134c3a6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.162.151.212']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--869a40a4-3307-43b4-ac73-c81c90991d28", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.176.97.52']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a745a43-04bd-45ed-a937-4932a24f5b2c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.225.148.200']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a6d082b-aff9-4c7e-b415-d5ce564db182", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.225.148.244']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bf84d1f-9dc3-4e69-81aa-6d0d36dfd8a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.229.171.5']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b43d2e78-6399-4372-859c-1d8bcc5f4af0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.241.87.223']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--119445d1-3e0b-403c-9a2c-427721ab6a1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.26.6.111']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e43731dc-b783-476e-bc14-5a68843d5018", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.53.0.169']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b61fadce-51e0-464b-89a5-9906a0a41c49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.70.1.128']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc7374bf-337e-48c0-8191-d1c505a7db95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.70.48.48']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba60b1cc-774d-4e26-bb9e-3611b91a7cbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.92.151.98']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1fd3481-b31a-43ee-8cab-0e8f67db9c59", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.102.221.187']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6f8d0e6-7ff5-4168-9c60-990772801c1f", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.119.21.245']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be3e8c1b-d926-4ca6-a70b-540e013ffe15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.120.171.95']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1daa625-f658-4e59-9f08-9a9d30a0fea1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.134.212.189']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b40ced8e-5232-4277-a622-408ae9660e3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.140.191.54']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c1ec230-35b7-44a5-9507-6edc80acb172", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.158.200.53']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--404dc626-dd87-4bda-83ca-109a30a9073a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.164.37.123']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3da913d-5f38-4be7-820a-d5ffb8bb70c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.184.169.169']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87e162c3-65ff-4fa8-902c-3d08325ebd9e", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.198.135.172']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4d237a9-8e11-4834-bc7e-f76cba7078a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.213.120.167']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f02c4d2b-f2a0-4390-8fa1-28594008e9ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.239.114.73']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec87362e-23ae-4535-b585-490255433285", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.248.155.247']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e3897c1-3809-4c61-b4f5-739b05784f73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.29.109.79']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a33eae45-dd65-4d29-8c87-ad277ae5b09a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.74.189.236']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1a4002d-7b03-47b0-a73d-7e0867a3111f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.74.38.239']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c682887-9211-45bd-9d67-9c4aa877413b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.93.138.165']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38a64e3e-9769-494d-aaa6-19c2d0d6730b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.94.252.76']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--934c891e-2520-40a4-9b48-d81683e30053", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.94.97.194']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06d469c7-5909-42d2-b0b0-8a79d3254325", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.94.98.181']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8537181-48d2-4df1-a6f6-5c941533b6df", "name": "Malicious Host", "description": "Observed: MYSQL activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.161.145.195']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mysql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18c3b4bd-3a43-4d14-bb93-efe6db920015", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.161.177.33']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6aaea74b-0da7-48bd-95a1-0a68156a03ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.169.148.231']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0f2fc0a-42d1-4d3b-ba18-decb91e5eefe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.183.200.209']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4c2eb68-34f9-4bf0-8b67-1f46d3b7f1c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.185.6.163']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ae448c9-8670-4fc7-b7ab-a28f405db4f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.187.23.22']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7445ea7f-1e72-43ed-98bf-2d0f9eb49a38", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.187.248.100']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f42eaae-152a-472e-a423-2cca3b235e86", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.187.249.34']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbe510e1-5f53-48ff-abf7-0fc1831e2c94", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.187.249.46']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05d7d959-1fb8-4878-a04b-ac8659c17d15", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.200.76.11']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d658c397-3f3b-4155-a144-e0cc4babcad3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.211.214.200']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--febd8706-96ff-4059-b825-ab97e3148611", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.214.18.234']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71c3576c-bb67-4d3a-af42-ca113c081c08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.219.125.215']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1676897-032f-49bc-87c3-cd6e9aa478c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.249.19.208']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a42a26fc-549a-42f1-a9d8-3d6fe78cdaf1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.251.71.141']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5eeb1991-4024-4ef6-9a63-534783e7c7cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.9.111.101']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56777d42-89ee-4f0a-a00b-155977d206ba", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.107.182.80']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--892dc476-1153-436d-9145-e0a4bf342f2c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.131.90']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24563d1e-fa57-4869-a834-cd8ead7ed40a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.137.7']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b0ffdcb-3557-4024-b3bf-5e153b5fc246", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.139.133']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc466231-f0e2-45e3-8014-66456fcc7849", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.140.250']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2affa9b-5499-4a44-a64e-4394bb0e80d4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.142.84']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16a4c7c4-0111-4a98-9443-1ebe0ef3be3a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.151.219']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bbf2e1d-a6c0-4381-bf8b-a2a8088d5ee9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.134.184.68']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36bc3fe7-75cd-4ad3-b2ad-c2f3f5d5bb42", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.138.101.112']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--366b3d05-277e-43f6-b6f7-b5fb15b14136", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.226.237.113']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8bb268d-6252-4747-9ff8-2f56a794368c", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.35.55.111']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbcaedec-6a42-462a-949c-13d76530f4db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.35.92.198']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d16d2b8-d5ce-45e9-bb25-ce619c41ae88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.37.108.249']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--beeed883-705e-4881-8078-3693c92d6210", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.37.154.93']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8eeea2bf-0e67-4b8b-8948-059bc49e9acc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.66.38.145']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d90f2c9-fd12-418a-8d32-4c0428e92312", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.67.252.10']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4200d17b-9485-4e00-b09d-bfa0ed67b070", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.67.70.222']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98ab5311-1d9b-4e61-8ff1-38db76ac3afe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.79.151.113']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f0c9f5a-a5d2-49f2-a6ed-2b32c1eb5e2b", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.98.230.202']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--114e630d-68e4-4801-9f9c-db0d503ef16d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.127.39.19']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c075a356-4ee2-4e2e-a214-cc25dae7d6d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.140.161.61']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d67c2554-ebb0-48a5-8a2f-73a4970f7019", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.179.102.180']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b2afabd-2000-4a3e-987e-586e0b7098f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.190.139.65']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e8505ad-44ca-4560-ab7f-846e581e94c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.190.143.11']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76fac808-e9fc-4600-8ac1-1008efa5bf67", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.190.172.63']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9aaa1242-c4d1-4f88-aa35-951206f9d331", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.190.244.156']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cad7a47-2c2d-4c71-8b89-5ae9ddf5c3b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.190.36.97']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--848b1b3e-e440-4280-804f-57459b30b1ae", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.210.233.238']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a5c402b-ee9f-470c-8f2d-3f0eff9820b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.226.117.134']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fa67b4a-c06b-461c-a01d-8afc6991c4f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.227.26.85']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd7ae577-738d-4f40-926e-6e376de8245a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.230.124.67']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1fd3616-5c89-41d3-918c-32fcae55c2cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.231.78.11']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8088732a-555e-4977-a981-694b997a9391", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.51.99.146']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef5b83a2-6124-4b8b-9006-23ea30c7168f", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.74.224.189']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98d76245-8585-4ed3-bdf3-de7ce3e1c665", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.108.6.183']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--914a3fe8-3738-4709-b183-c8e7a8396d6d", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.169.249.128']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7becd405-4a9f-4e27-b678-0827c09dacf6", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.171.245.228']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2c03622-0a48-469e-a963-515aeac96e14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.172.248.27']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56d9b36d-cc8d-43d5-b2a1-15358ff8c054", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.177.172.111']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0143a209-f2f6-44ab-b72c-bf84e2180857", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.178.154.13']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88a5d84e-ae39-47bb-b315-e54183a1e1c6", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.178.217.103']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddfcaa0b-f3a3-4570-8bf0-69c2e9c3d6f7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.179.32.147']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0da0a16-982c-4990-8efd-0f2060cb5adc", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.179.32.170']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ed8d49b-6cfe-4c0b-8f3f-2a52787505fb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.179.32.209']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cca5533-1167-48b4-b9e3-8fafd2fc6db2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.179.32.223']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1203653b-f774-4025-ade8-ea1672060add", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.179.32.34']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f92838c8-8679-44af-bc0e-1268526a76a1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.179.32.49']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--375c4356-2995-4a9f-a982-f48a79b3555b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.198.232.100']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fabf988-63e8-47ca-a4b9-530064d976fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.204.175.230']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88b788d8-f59f-418b-8a4f-b492e3598b61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.206.125.11']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a94260e1-f232-47cd-a29d-3f257eada804", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.99.172.90']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be25906a-632d-4c95-b5bc-5b802d25184b", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.132.5.139']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9eb49675-da1a-473f-9875-0a84b10873cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.149.196.215']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d963cb8f-6ce8-4e3b-a9ef-ce79f2e3c3f8", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.211.213.219']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c0f4eeb-7b5c-408b-abbb-9675b9edbac6", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.216.44.174']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ccbf480-f9ca-47f7-a4ae-a41aa924d42e", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.218.75.251']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a29d385-85de-4873-acb1-898561178fea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.245.138.49']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4408daf0-8e7e-409b-934f-0c2184ef9271", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.245.143.125']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37ec3bc9-9e1b-497e-aee3-d167c5e16be1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.34.66.245']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8389c23d-d08e-45a7-afdf-e563de3fd0d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.40.114.25']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a44649c-77d0-46a7-9691-5e2060e6e30d", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.50.175.237']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--659f72b1-df7e-4549-9de2-42ac4ca69365", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.50.218.37']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e891bef4-4661-4f27-ad4a-83acd1bba620", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.72.215.29']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59e76f65-be6b-4bbb-b166-16d8839c7be2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.72.216.1']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ff9b6c1-011f-4674-802a-c09352102482", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.80.234.157']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78a28ae8-676b-452a-88d5-401095ebc250", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.86.99.90']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea4e4bcb-93d6-4812-ab47-70f8193aaf26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.139.166.153']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dce7b0bd-24b0-4b34-b5dc-28d9ebeb6000", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.145.144.95']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e89829bb-8c6d-41b7-85d8-664d39c65b29", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.145.238.60']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a8f0adc-a1cc-4fb1-8ae3-a02bbf29c442", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.163.132.211']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab4287f1-6816-4638-8922-5817ae6e2eba", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.163.132.212']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf47f45e-3f2c-43a2-b050-6c8096e2b3f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.174.209.160']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ded86f7b-686b-4d06-a094-2557e9c37e6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.186.7.9']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8ce94ca-e6e4-44a6-98dc-4065163c0a3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.32.119']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d251f18c-597a-45bc-a44f-6a08a072bb1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.32.92']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--183ee8b6-6f11-41af-a35f-6c2d580392da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.33.130']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11d0c00c-59ce-42cf-b2b6-084cf79dbd95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.35.202']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dec884bb-1871-4d8a-97a6-75f5bf898999", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.36.107']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f79a0f8d-cf16-478f-8014-c4e69bd18746", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.36.149']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3667abd1-e9ba-4e84-a805-bcd19f9590f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.36.63']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--503e37b6-ab29-4c32-b493-181bba31ff91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.38.134']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd30b0bb-1e0b-455e-b19a-98be50f66d6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.39.117']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8050bb88-7b4a-40e0-8ab3-0c9fec591918", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.40.88']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7d03808-df27-4ec3-9073-08406527b7e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.43.141']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54896786-c0c8-4d54-8eba-1db3e2c03157", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.43.158']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc9abf08-a6da-4303-976c-1b598e058e36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.44.112']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93436f62-0287-481f-b11e-f5a4ca07b701", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.44.169']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a72200f-70ca-4b2c-99e0-118b95b215c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.45.235']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0045f65f-068e-4e1f-86e1-7f118c77d9b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.47.114']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9995649f-092c-4767-b1e0-2baf09b5ab3e", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.47.155']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2f91465-3ff8-46da-8da8-6db1833759d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.47.223']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d50f7de2-86a4-44b9-97d2-6545be89d2ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.56.171']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fbaa366-ea11-490b-9239-fcc8289d7d37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.56.184']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf255e88-08e1-486e-a1b9-03316da50af9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.56.229']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--188a6c8f-b0dd-4c14-91ad-2f479b3ae9fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.56.235']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c16fde00-24c3-41db-89d8-41efebbd2d5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.56.246']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c69e1bb9-a73e-44d0-b24a-13193d612f9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.57.121']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4578c1f-1f28-44fb-b2a1-1819b9da576a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.57.185']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2e846ff-7cc8-4363-927d-2c32ca794775", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.57.59']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9701819c-ee1b-4333-865a-acd267d2439c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.57.62']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e77d785-4d44-4f02-bc98-6b913c3e5bed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.58.120']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c5b4584-fe25-46e0-b826-e4b271f3ca83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.59.10']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b0d53ae-1371-4eeb-bbbb-853730b765ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.59.15']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--664a0ef1-cec8-49a3-b455-cf3036aabc2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.59.4']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8423fa82-c9d0-4d9f-b4ea-6013b701cde0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.59.41']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--084a711b-ed7a-4717-8d4c-59208757819f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.61.14']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--018d83d9-12f7-4416-967c-9bceed800c97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.61.179']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4518e76-905e-42ef-bcfe-f4ae244598e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.61.87']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe9cfb00-0172-4d2a-9568-50697d6e5cff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.64.15']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61548227-2041-4c8d-81b3-9dcb8ed0e33e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.64.235']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--466ff925-3e08-48bb-9346-192190dcea05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.65.175']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1944d45-1e9a-493a-9400-bf331ce08933", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.65.209']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5fcd9ba-b229-4252-a7c0-e4734058512c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.65.212']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0477ac87-7521-44ac-8cbd-71d253e673c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.65.234']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68ae6f42-1801-4e86-b4a0-c41ea776fb9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.68.150']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d16aee17-5a2f-4b2e-8873-c6923852f524", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.69.177']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc49c30e-7863-47ef-8bc6-c430864b9c54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.69.67']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9531100c-a04b-4363-bc6c-6fbd8ee955be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.72.187']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3f7e8d4-a902-487b-87ec-f78794f5bc1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.73.8']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--faae5a17-0bae-47b6-85c2-bb74d6d05ecd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.77.161']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78c0c6f2-2e14-4ed3-a3e5-b9c8cd0f2528", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.77.210']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71ddbd22-5023-4222-bc63-a9e4addb62b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.77.50']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bc52da8-dc61-47ec-aad2-e82b5cf312b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.228.167']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77579c37-8952-4110-aca8-a03e3d9d8e8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.228.239']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3521d435-ded5-4587-81bf-3fa01af8f0db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.233.182']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--812a06cc-e558-41b1-9e42-7c20f4c9b00e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.233.253']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--899fd7d0-7c7a-4c70-a7e3-76005c0dede8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.234.14']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7963b08-dfff-4b0d-9a37-f7251827419e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.234.189']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d32d9b53-3ae2-4a16-b828-5678186a65ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.235.16']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11860a85-6a91-4468-bdcd-204e8080eef9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.236.126']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1af6428b-a56c-41ec-afca-851d4a32a2df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.238.196']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b7ab6fd-3667-4357-87dd-55ce7d6ea39d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.248.142']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c32bb710-b63b-47fe-8956-fd56614ce374", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.249.72']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--520d3cc0-bda3-4767-aefb-c939662e2336", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.249.8']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eec4e86f-6a21-4281-ad6c-1c7580f0ffd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.250.2']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9659125-00c6-4576-b0b7-cacca466709f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.250.22']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bc68bbe-faf7-420b-8278-8932802ceea7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.250.232']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bf4041f-84f3-429d-9ad8-8606259c8251", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.250.245']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f396885-533e-4415-b8d9-22ee95687be3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.250.31']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2405c083-a13f-425b-880c-ba6cc6ea381a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.251.144']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--482096f3-a136-4e63-9d4b-34ebe6fa2b49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.251.145']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b20650d-2040-489a-a675-86b4841a2075", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.251.17']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86fa390e-0fa4-473f-896f-608122810cc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.251.37']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27f812a1-41e6-47b6-9d58-f06827804198", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.251.58']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88b30a28-fa2d-418b-89e6-bf0366c125bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.251.75']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d9aecd5-7373-4f06-bb36-ba453f315ce1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.196.78.123']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd232045-1f39-46ba-803f-065b91d11bf0", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.196.87.226']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--264dccef-9cec-4558-a768-0c2115a7728d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.196.9.245']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a55e3d5-b7a9-4438-b50d-c84d4b6f716b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.212.120.163']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bc9c3bd-0702-458b-a552-b4a3d86495da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.212.120.75']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--235d321d-10cb-47f8-88dd-bffa6e46d056", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.212.121.18']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5bd4418-3eb1-4fb1-8fe0-bbc5160d1e6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.212.121.82']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b617eb4a-157d-4712-9d54-b358d29f38b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.212.122.220']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8953c386-ade0-49bd-b148-0be547c2cb6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.212.123.121']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3f75330-8dea-45a0-bba0-4a775edd17b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.216.88.229']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e15f3e2-84e8-4b4b-8bc3-09604ed5bdb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.25.100.84']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d1e51cc-2c3c-4587-9a06-e1ce80ef4c41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.25.194.60']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10198ce0-049b-4796-9e61-0b420b00ec17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.250.3.92']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2ed3883-d979-4923-bba2-5e2da0c6bc0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.250.51.69']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6df80489-95a9-47a7-b378-5654f3025419", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.104.179']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84797e8e-7e22-4812-87f5-ed6aca7f018c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.104.212']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07ed8f62-936d-4dec-b4f6-66f061eea7fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.105.116']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2f68693-2214-46ae-a2bc-45fd986e960f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.105.144']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af50aacc-7b47-4711-a0e3-20a1a7a58d04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.105.52']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04912255-4745-4eb9-9920-34aa131e1f50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.109.7']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5eff8521-9f25-438b-bdf8-c10c9ec36d3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.110.171']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--384670aa-2fe6-4d5f-a724-4788f09d0eab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.111.63']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30d463fb-bb1b-468a-b3d8-cf8de0441c75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.37.105']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b9cb483-ae03-441f-bbda-add63e94d480", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.39.231']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1942e4eb-13ab-4377-8d7b-38166b0fb099", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.31.227.29']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e73bec2-d161-47c8-96d6-f5b5dd04c98c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.32.101.175']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cebeafb-7812-4215-822e-cdc010d5bea2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.41.137.223']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d663c023-f9d3-4b62-b4c1-2990a7a3d08d", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.70.180.226']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56864321-1398-456e-bb24-34e92377c423", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.81.204.20']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a636380-dc9e-416e-a53c-da93a183d7a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.120.225.223']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c33365a0-638f-4559-a0ee-3c2272df2fe2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.249.100.243']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1fe4ef5-5378-490d-abcb-bf2cd1b02e8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.28.100.147']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--563141ed-63e5-4310-8007-81d487bdf7f8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.28.122.202']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46979046-91ae-4084-97bd-5d2ada02571e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.28.140.106']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0142994c-0d08-4f6d-b5b2-936745b7fe0e", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.28.72.111']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55f63b01-c297-4e43-a6b9-0bccca8cd9d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.29.243.47']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cff971a9-b4d9-4815-9b7c-6ecc92b6a6ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.51.198.75']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e520c6f-2caf-4512-beef-7165f7433911", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.98.152.36']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8da70745-5438-4fbf-bdf5-d90a97222d17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '12.68.228.244']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--464d7fa2-9abc-4e89-8b44-9e87e4fde2e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.157.80.44']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3a5fbb6-0253-463f-b664-dacabf62ea72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.193.225.198']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73a8140c-6e02-4c60-8864-4e5cd0939506", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.202.181.161']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--768e42ce-d003-4b27-8baa-4c0a2e0a93e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.229.159.21']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b05ca5e-2e4b-41a3-ac1f-c78cf88369b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.239.12.140']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ec22bf9-347f-4c83-ad84-e60a852e20d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.240.155.198']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e16f73b2-cd8a-4f59-a5fe-d79fc34e70c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.25.235.212']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6688fea5-99f6-4459-a603-a16a92deacd9", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.26.147.209']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71387ad4-6fba-4a5f-9d0e-6f70072cf434", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.26.147.237']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bc5935a-8fe4-4b9f-89d9-eeb06e1ecc6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.26.231.240']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f5e77bc-9a77-43e7-a252-951e105a359e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.26.32.101']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13cb9f91-a114-43cf-b53e-3bf4c861c7ff", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.48.122.43']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4466f0f3-56c3-44cd-b9d7-d3f49ebc744c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.48.123.76']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf4db7c5-c0ef-42df-93f1-dadfee0b3c6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.48.171.40']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--799c273b-b99a-4a73-b372-1898b0da76d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.48.175.69']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13e9fb15-4d99-46a3-8ded-fbf0fc4f8502", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.48.22.219']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9277b9e7-48c6-4a38-8eff-f3a03bd199d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.48.26.113']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--956ab404-33d1-4c68-814b-265aebf105c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.48.4.164']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00d8ff06-7021-4d85-8289-4a34abd64410", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.48.97.237']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a66e042-91f1-4367-a51d-be4053c4dc8e", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.53.15.79']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95ccd6fe-f909-4e99-86cc-c0bc15f0c48e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.76.158.232']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03fe2572-34f2-47db-89eb-62b94d0465d1", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.79.231.105']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f121a6b-3b4a-450e-9738-89f1661dbfcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.79.99.135']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d326deba-a56f-4ef4-85c4-9603c84f0322", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.11.116.73']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e31f432-22e2-470f-8428-e7173a0ab64d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.131.238.25']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f38ab8d3-2938-4ff1-8fa1-b9c2e53eb1d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.165.84.80']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1566bd1-0980-4d43-837f-966da266e446", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.173.173.48']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--216e4dd6-a7b4-444c-ae9f-13dc5d8f1e29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.197.0.121']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d33cf1c-3552-4457-8e70-eccb43be29e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.199.160.176']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c4eca40-ffdf-489a-9452-604265faa9fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.199.34.107']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01e21f6d-6698-45ed-a68a-cf87f980bb64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.204.147.24']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7f4624f-0fe5-41c4-b5ee-cf6f054fcf0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.239.140.201']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e3351ce-0fdb-45d1-9ca8-ad89e20cbf39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.29.149.22']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9dc46848-6cf3-4546-a00e-4ef049409fca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.40.175.200']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cc8091a-39eb-4d11-afee-30d94a2ae792", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.41.116.31']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f3ce12f-cf56-4c1d-9d04-348bd5702c67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.41.165.223']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90370f9d-a8b3-4483-8d17-a7e87d7bcd81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.41.165.233']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e72be471-ed33-436f-909f-886b68c39f08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.41.225.206']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57e115ae-127f-4e25-a4d5-ba020a0aa5ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.43.239.80']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51b254e9-dcf7-4b96-b02f-0bb6d5503912", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.61.130.50']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c4863e3-e3c5-4f8c-9d84-cb5d71ee4e76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.117.61.161']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bddf30bd-84f2-4a08-91d2-9a559f2cf36b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.165.207.7']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78023b5e-c073-4882-af05-845917f51a95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.176.162.110']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2de6dc78-4e7c-49f5-91f1-e7e73ba0f283", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.180.240.117']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f32a08cd-cbc1-4716-abb4-597ee87f7b7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.183.37.21']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4027212-d451-4546-8b83-636b16b71316", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.191.115.237']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c3a5dda-a469-42ac-85e2-8ac4417c70eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.194.13.190']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d36ea88f-e475-4620-a26f-c175b8669867", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.225.92.130']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fba78ca-a8a5-4be1-bdfe-0db86d509485", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.227.108.94']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac3c5573-2d1e-48b4-90e3-8e026b4f88e0", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.5.126.8']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44d8558e-07f4-4cfc-8572-e685b09c021f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.51.196.162']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--842a7e2d-3cc4-46fc-be36-42cd0ff3877d", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.52.195.3']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58d2484e-7cca-43e4-b9ac-2b27ab7c2618", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.54.173.172']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87acb9ab-ba6e-4cfd-a3cf-291628c51a56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.96.28.123']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52ef1dc9-723e-4630-b51f-0fb410a6836d", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.96.31.13']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7010a5a-d6da-4535-9647-7aed041fe80e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.96.31.238']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5abfc15-11c1-4e96-8569-0fe059dc4dfa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.97.209.61']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--808e96ee-965d-457e-afcc-71880ea7781b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.14.123.64']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--518ba04a-952f-4ca3-b743-f1a7df4e6a23", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.14.228.206']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a486dfc-a7e1-43a8-944d-ad523705d260", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.146.42.235']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1a8fcd3-5ef8-4627-8316-d175c7b42cc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.158.50.213']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9795dda7-8d9b-4b40-bf08-4be04372d994", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.16.178.214']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61730939-b21d-488f-9dcc-01c5f77872c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.160.175.216']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe7d291e-c661-41f7-849a-566e5bb9d245", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.160.233.64']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d703b33-bccb-4121-8745-e73927a61999", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.160.235.227']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98759f96-a5c9-4f50-b135-3f30ad217882", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.165.155.152']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d468407-6d96-40eb-83b6-f136c284d0d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.165.155.61']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7ea2cbc-67cb-4b57-bd9e-639a85cc85e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.179.230.1']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--909b7f2a-490b-4520-9bb0-6929d6f7bfec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.191.132.116']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b592d269-2ab0-47dd-9a4b-f7e3288377f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.232.129.62']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88c176e9-a62f-4eb5-b838-c03e9f86207f", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.244.62.87']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d1e8359-214f-4f73-bd40-48e6d4dd770f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.245.84.208']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f1e7b43-e808-4ceb-aaf3-779878258a14", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.253.162.254']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--caeb2426-d397-434f-b91e-8428320a1ad5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.253.61.230']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ac56a2c-8a09-400e-8777-1c6090a6e6c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.30.106.64']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--490875b8-0f29-40c9-9f78-86de4ea9d2ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.31.20.71']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5900b573-2d13-4edc-a479-6b88f0279001", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.4.240.147']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb322bc0-6025-46af-af28-e80bc5275687", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.5.158.187']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a71654a8-0451-4aa0-bdac-7dd255756caf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.52.26.111']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f89fef59-5047-4ced-9976-2beadd7e4a30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.56.110.252']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0457f8a1-9920-47e6-923e-c9d37d53734d", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.57.76.92']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3973e96-fb98-4f8a-8f8c-4a9313fb6b23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.192.229']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a50c86a-1ff2-4fd3-a7b8-6db6e0a14dad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.196.49']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4441beb-9832-490c-83a4-0c3e72311fe1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.200.120']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f6a1c4c-9c6a-45fe-899e-05df4e058768", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.200.21']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--038d528d-c399-4c70-ad4a-95737fc2c8ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.205.100']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49669c1d-201d-402f-82c7-bdf03496e09c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.207.140']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb2f4933-a8c8-4f6e-86c5-fba05d9a3fae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.207.151']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--087fb005-5f76-4985-a82f-c43dbbb89b6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.207.155']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79899239-db72-472d-b343-d17cf80f6ffc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.207.81']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70932f78-bbc0-49d1-b4a8-ff53d9fe6462", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.210.106']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c229e986-4b01-4b21-aab6-22814700bc7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.213.117']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e6947af-26e3-4b71-b794-b8de127a33fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.213.20']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67b94ca3-aa46-45c9-8b57-872ba11a17f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.215.102']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02250828-7c50-4e94-9ffb-aea0dc56c826", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.97.51.247']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f06ad3b-8146-4a33-95be-1e276353c12e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.106.67.118']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fdef3dd-e3cd-4c07-9bdd-81f7227d2c74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.129.74.126']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--392ad526-1ddd-4613-a910-32c0b1a7e6c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.156.179.141']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b08c677-378d-4f93-903d-55f937ff233d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.198.131.39']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d86abaa-4a77-4aeb-84ca-b8fcdf3311b8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.221.163.189']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d528f38d-a578-42bb-a0cc-31a07f785f79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.221.204.253']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9d1f338-3269-4e4a-bf1f-73d1c70d9c74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.227.31.102']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3cbe0c6-e87d-4462-8f69-36ffd91d2a03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.31.106.18']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb6cab8d-71e5-448e-a5ff-88139399e203", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.31.107.115']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df2ff629-a372-4ef2-9dc0-faa53ad64cf5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.31.107.129']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acd6a37c-dba1-4673-a7fa-d23a0343c35b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.31.107.250']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88b90443-cab6-46dc-83dd-b45eb2839d27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.43.10.224']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1910e29-5aea-4671-9399-a29906d9ff80", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.43.27.66']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc4af55e-322f-40ec-96b0-a4631e58b2b5", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.43.6.160']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be8ca97f-6629-4c86-be6d-329cea0381e2", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.43.79.205']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08e88893-6aa5-4a52-be7b-7881f02f9760", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.71.175.215']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6db2ecc7-afb7-4067-bfff-126efe0338c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.72.224.155']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58504c36-bc16-4ee6-8676-bd73d7002c42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.88.113.251']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--517c4786-a6a5-439e-8911-baa10bfb993a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.88.113.26']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fc6c201-e4d7-4578-bf3d-680d7fb5665b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.89.89.150']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19d07883-a4bb-4577-9adf-6ca0931308ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.142.80.46']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--353309ad-c848-4ce5-965d-d7e4a411c5cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.23.89.138']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80a85199-fab7-4609-b6a9-e013729d6c06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.25.227.239']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4f1ed59-b391-47db-ad1b-f3782931e4e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.26.248.136']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8aa067d-2bee-4163-aeba-f20e8bcf44be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.26.99.189']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--261086df-dd9f-4207-82a7-390e7d4c0451", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.47.95.178']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa27a925-c47c-4e7a-92b9-05b50b022633", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.73.187.233']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bba31d5-5f68-4258-9a9d-ddc12457f768", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '127.0.0.1']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14c56cdc-558a-43d1-b1db-b2bd4ccfadbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.0.104.39']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffeaf2dc-9412-42a6-bc1e-568d9b10b7ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.0.104.44']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50cd559d-9078-4b8b-a10d-9f87324d9cb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.1.34.69']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96122006-be61-407f-bda4-ce63317b73af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.1.38.130']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61427bad-773a-4f91-9534-e5600535bce5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.1.43.230']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f0417e7-82e5-4522-8baa-4bed63b5f5ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.1.43.245']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e655b36e-e524-437f-ba31-b5acd2d4b1f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.1.43.38']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3266b255-94e2-41c4-b74f-7e61dfc99cbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.1.44.38']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a26121f2-9bc3-4551-9883-3c1723dcc0ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.1.46.183']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73c5f557-1c29-41e7-8fbb-2ba49b26a7b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.226.125']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30e9e481-1a09-4589-95d6-a1a090e2972e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.226.191']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--241d6d3c-468b-4ca1-920a-b133ef6e0313", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.227.52']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--134f2294-2a5b-4c12-8576-b7f124f832a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.229.76']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc6e7196-68d9-4fdb-90d2-c32c4708cc66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.231.118']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91ff06da-f182-4741-8286-bc333f082ef6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.231.72']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc1f6f2a-c8da-473c-a236-f0be202b2501", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.232.254']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec22654e-dfce-47f0-8437-06e3b49192af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.233.253']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4176b9dd-5d3c-4fc3-a23a-9a1dcaf16401", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.236.128']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c5c551e-2369-46aa-ac96-9d0b2cd14b3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.236.224']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99091fc8-cfe4-4f48-a0ca-64ac26647e45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.236.41']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b11307f5-d653-4227-8b4a-cc20cb18733e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.237.120']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--966f0a1f-a6ce-4a4c-9833-54f173a16529", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.239.38']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4075485-61b0-4fa8-b203-0faf492a05d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.239.39']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fad1a79-7aee-4ed9-be6a-c8aec5af8310", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.173.237.5']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a5bd03c-0422-4642-8245-08646827ba3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.199.158.135']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c005b27-c1dc-43da-ae79-0688cb5d4443", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.199.225.7']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--297740b6-d222-49eb-ab2e-87bbc116cf99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.199.255.160']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27766d95-27a6-48fa-9305-72c84509386f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.203.200.175']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--297e603d-0886-4dbd-869c-01f86138cc41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.203.200.182']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62fd7b8e-6160-464f-afdf-95d264334f0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.203.200.216']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ba93277-6039-4e32-804e-cf9ddcbe0c73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.203.200.49']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec2c680d-7b9a-4a5a-9954-c835106dcfb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.203.201.204']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ffb2d06-6fa9-48dc-aa99-1e5840dba814", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.203.201.208']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--779c7c92-59e5-4627-adff-f4d57efb6ab8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.203.203.4']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21cce790-6f66-471e-a03f-bfb4f2bd45b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.203.204.165']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8429e8b3-b127-4662-806f-5fbb87d113b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.203.204.195']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfc97f62-ae96-4424-a71b-411d181a8f0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.203.204.215']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebcc1e86-5218-4248-ab32-ee6d30d4aab1", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.27.79.230']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ee80998-e290-46a7-85ca-ff8ba7a06573", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.121.102.3']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--680d7170-5ab6-4dee-9af9-f2b0049e99a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.152.24.244']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08799733-9a84-4985-b771-adc0fca73fb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.159.128.144']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--558c439f-fdb7-4f8e-884c-8038abacc260", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.159.129.74']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3267b23-d386-485d-ba85-231e5bff360c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.213.106.214']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01e05774-a92b-4d28-ab8e-7f096d7fd3b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.222.172.38']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a29d90be-525a-43b7-b23b-a210cb4ed011", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.226.174.80']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d736c018-2261-45c1-b54a-f0053bc59e95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.232.165.250']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fc364e3-b8cf-4873-bebe-d9501de9f68a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.80.76.43']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ceeca1cd-5258-46b4-a5e8-50ff54157ead", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.140.146.138']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb8fd134-db31-4799-94d6-88e3b9f47cd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.217.95.0']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--946cd8df-fc05-4452-bd4e-df3688c2241f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.250.241.209']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--100e0b06-ab7c-4bc8-9b65-3cf37fac2cb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.58.46.254']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c44beaef-1ab6-4bc8-8eb6-d2ba8dcda6d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.83.166.227']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8e2e14d-6120-4998-acd3-aac43bc7b5e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.86.104.14']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6afc956d-9111-4167-bfda-ce6073aaf542", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.86.104.46']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--626a47d8-ef1a-40ba-b3fb-b458cf03226b", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.86.106.3']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae37eafe-15bb-4c6e-91cc-b295c957d85e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.86.113.121']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--056e2700-6a15-480e-baa1-adae4f1b2c48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.86.116.162']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12cfb7d5-f5e6-4779-8083-d8f3573b010e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.86.116.180']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcfadc5a-7b88-4652-b10c-5e84e3f30900", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.124.208']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7317f4e-05ad-486b-bf21-e4bd79845952", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.124.211']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad8df646-a5ea-4928-9587-959de970374a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.124.217']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f2eda0e-d76a-462d-9e07-7a436ea7aada", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.125.17']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5ad1f99-5756-422a-82fd-17b04decabed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.125.224']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1351db2-5c35-453d-ac8b-116f68f84ba8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.125.225']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a31c636-cbcd-4a67-bcbd-5bee219926fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.125.226']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd3bd607-9493-4f07-9dd3-29d725b34dc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.125.229']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c4d8c94-050b-4896-b594-591b89493a38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.125.253']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--faabf62e-b30f-4e36-b3f6-2ec90109663d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.125.255']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2152156-02fa-4c71-a70a-2b6935890ffc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.125.27']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8af20ec-2987-4d40-bfd7-c5b7de96f2c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.125.30']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a40f41b3-0f1f-4e17-a40f-02499a99e054", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.125.31']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f548598-07f8-4b16-8eea-42d5ddb1ce2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.12.180.34']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7303ad1d-82ed-4c49-b24e-c7d66a5c0024", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.12.180.65']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d933612-17a6-4a60-9b8b-e73cb15ac932", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.131.161.148']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc739008-c7be-46d4-bbfc-3f8054c83592", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.131.161.17']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c653620d-2f68-4d6d-bb29-436394d2b9df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.131.162.184']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b0d0cf4-fc07-4fb9-9905-92bf23bb0ea2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.131.162.246']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--162c568f-e906-4926-8436-659ab0e59350", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.131.162.82']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7866b7b-9285-4359-b737-3cb9a75ec8fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.131.163.217']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--daea16dd-77f8-40ab-a4b0-2d1ed2c8b4ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.131.195.131']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e97603f8-cb26-4362-8d83-95a841589217", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.211.209.5']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ba09c32-9f73-4fe2-a46f-7700b112e0bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.211.68.11']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f8b3580-c7f9-4b2c-b9be-892c5ab125f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.49.181.239']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbddb2eb-c1ff-441f-a43b-1b59a0068878", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.61.152.179']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e225c2b-0a8f-430b-adcb-4fc074d47a64", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '131.221.236.23']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d5c5421-fca0-4b73-8430-87f767251264", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '131.222.211.41']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a60de4c-e0cb-4120-aedf-ca3d319f8087", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.255.40.249']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d3bdcd0-b0cb-4561-ba17-685cefede9f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '133.18.211.180']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25a044cd-c63f-43c7-8d5c-2063591287e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.122.113.215']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f01fb8c-e564-44a3-846f-2240de46e19f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.122.125.153']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fe80bba-d761-4319-93bc-91c00d4a5042", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.122.17.236']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5924435-eb30-4d2b-be55-03c2ca42f6e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.122.93.157']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c1d8c28-f44e-4f68-8b60-38b1ab450e42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.185.118.218']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d303b2e5-b2d3-40bf-b768-dd64335b3a8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.199.161.87']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89d9665b-3ee8-41cd-a9de-e4d0c66893d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.199.209.55']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fe7c14f-0036-4834-820e-7902f8fe5f5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.199.215.120']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--718606d7-fcda-42da-9163-1e0a0126c776", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.199.216.204']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c15fee04-911d-477f-ad46-0bd8bc9d8089", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.199.228.58']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28fed2f7-b516-443a-938a-8dbb025ab4dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.209.210.252']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd701408-1a91-46f7-a905-d2ce0e55dd50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.209.212.184']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dce1297d-85a9-4667-869e-8cbfe9d70c97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.209.214.123']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c75a90d-4762-4525-916a-5545466d21f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.209.214.186']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcd25cd6-a779-4bf8-8799-eb2fe9a1583c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.209.238.243']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2c91eb4-2ee7-40ae-8bbb-be64cc38a2ed", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.209.64.147']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08167c90-e05a-484c-b1f0-783da50b4762", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.33.73.107']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f233908-5c13-4241-ac5f-6860f39dc651", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.33.73.66']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8ec18fc-4774-451d-a08a-9cf975f4a5e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.112.115']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b51121b9-6ea0-419e-a72e-506a71e2bbb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.112.121']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--337793ca-b8aa-4a85-a5a1-58539ea324a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.112.132']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34a6a8bc-aca3-4abc-bd81-ad6a09ff9233", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.112.69']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4b3b82e-e37c-4e6c-a89a-061422862b89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.112.84']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--febbef9e-959c-4c80-b395-39b8be80a51b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.16.163']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fdc1c66-a030-4457-803b-dacc42b60f2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.16.170']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72aa4b30-32bb-4d4a-bca2-e54399fc4d49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.16.173']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35806cb5-794d-4313-b352-ab774b39e8eb", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.89.57']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b2ed417-2cce-4ac0-a498-373213d72688", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.96.21']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0799c980-536b-4766-aa90-f5cfde27aadb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.96.220']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38fb15a4-50a4-45ee-8620-df3a5b62e53a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.97.34']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e98a3f2a-2bd5-4bb3-aa39-2f983d8fdb8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.97.71']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69cd838d-6d4c-4298-86e5-e90dcb9cb66a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.181.47.238']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10256a8c-0424-424e-9e52-8cd148dc6b7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.222.40.117']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b53b0762-fae7-4fa5-8b23-fcd8c503d847", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.222.40.118']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e67da9ca-06fb-46bf-97a2-8421d55be849", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.222.40.18']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe701690-10d2-4adf-b257-fb03f4ee48e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.232.232.66']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df47be1d-c25d-4435-976e-e92771a776dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.233.112.102']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37d37519-9997-49fb-86d9-ccdba8a1a12c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.233.112.103']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9c9ce19-2a58-4e09-a6d1-a646e272ff3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.233.112.109']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8eb1e8c-7a49-474f-8a4d-01c2ab673007", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.233.112.24']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dda83e8-c518-4dbd-af91-84204d0b60f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.233.112.26']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8ec0526-08c9-459f-b11b-dcc148bf0029", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.233.96.197']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fddfb770-8a0f-4518-b888-a1c7c3c0bd65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.123.168']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2262766a-3007-4d46-aeec-48981c747bfb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.124.103']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99912d51-70b7-4bc6-b125-230a020e8bb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.124.11']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--168b503b-c9d3-4484-93b0-73a83ff6750c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.124.223']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f52d6d0e-5182-4be5-986c-2f82d2523a0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.124.26']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbacdee2-46ed-4aeb-8ca6-b2f57a0ab1a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.124.78']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87e394f2-fbcb-4032-9b52-c2e2ab80648a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.124.95']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f98ecc46-fe1e-4936-8f1b-533c96eccf8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.109']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e18b12c-7793-4937-9803-1c7cdbd3cc0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.135']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80a457ad-f181-4a75-bfae-2fbc265269e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.137']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fe84b91-357e-4f5d-875d-41de26b8c4a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.143']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0cd5b78-4805-4671-a3ac-d5cb271aaf22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.155']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7aa096b-3aee-4edb-9f43-ad47433d900b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.158']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12e69ae8-68f1-4caf-8463-51353d1e6eb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.196']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af76326c-6357-479a-971f-5799b27e5cd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.201']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9aa03ff-20eb-4aac-a012-25f4b3062920", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.23']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--791761b0-2a18-4d52-bb7f-22f65cefbd2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.27']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e1df27c-5360-4f8f-bd31-133ed4dd7a5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.92']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62a334f0-df90-4375-ac7f-96781344d465", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.100']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1b54f87-2edb-4be9-84a2-36ae6f7de9fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.127']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e0c477d-f9ea-4bf5-b4aa-2bd3cfd5b79e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.135']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18bb4853-4d10-435b-b28a-452b26d02890", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.149']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d675cf6a-e6af-4a1a-acb2-a327342fb560", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.154']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54d661ad-80ff-4091-a2ed-19434278d7dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.160']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0640ef13-f606-4a4c-910b-a4dff5d91dbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.194']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f946bbbd-2416-4e83-8096-66e2e3f70b10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.199']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d36178b5-6332-4c9b-88ac-a9bff22109c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.202']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94f6fbb7-c078-41b9-bef1-56300b89de06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.203']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aabf5d62-d87a-4341-8691-14e89ee36375", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.205']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb89d638-b036-4424-b250-467903ce6170", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.210']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53c398f2-6bd1-481e-a521-5a44a1e85ae2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.211']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45610b72-3b0c-46f3-92b3-60bed43abe1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.217']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--730eccd0-ca76-40b5-afec-512ab6af300c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.218']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26005e0e-cddb-4e1d-a8ec-8c982fad142c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.219']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d4ff83b-72ae-4bf2-89a4-8b3b12eeb0cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.220']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4f9a53f-728e-4a96-b853-cb55c4663c37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.223']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18608e05-d51e-49e8-bb7d-97f8ebef39d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.230']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ec72e71-a2d3-4a64-8ae0-d379dbb7181e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.245']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3a9ee67-e18a-438c-86d3-1e7315e2c92b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.251']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1a2e014-6b88-4b29-b24b-92903aaf2574", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.36']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94a9d774-ec98-49ad-a9ff-1071208303b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.37']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--460e5a7a-727c-40e4-a402-89a3fd845e7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.41']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3c09ee4-49da-43fb-bd1c-631df49715fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.57']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9d72cb7-f31a-4734-a46d-cc5f9750d8cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.72']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0853259-0eb9-4da8-94c1-7e942825262c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.73']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bb32900-37c2-4c25-b400-b618962ca21a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.83']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e69ba3d7-0eb4-41fa-9911-6503d5cfe454", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.88']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5886a890-cf3f-44c6-b658-15f898fedcd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.99']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5233b7c8-acd1-441e-a159-37ae5cac623f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.127.161']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a70dd5a-2e98-453a-922c-9d0313bc8dec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.127.177']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b72c3e65-c4b4-405b-9938-a218bc769475", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.127.45']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48d79b02-df96-407f-87d3-47b49eb8c7ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.127.54']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc68a7d0-94ae-4d35-b70a-5c736f8b9bea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.127.94']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5dcfd407-02e5-4ad8-97a1-29a9364a9778", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '136.110.26.168']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3e888b1-7d3d-4e68-a001-449df1c6f5e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '136.116.210.248']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b8d8782-a84c-4813-a80a-d6943574bf47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '136.143.176.31']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--807b39b3-1cf6-4f7a-b068-389cadc88cd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '136.143.177.31']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6eb19f1a-350c-432b-97f5-2f36d6acec04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '136.144.35.224']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e32d8b0-8ca7-4727-8ffd-5927747cf7c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '136.144.42.165']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62d02558-42bc-4a93-a3f7-76acaca42a5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '136.144.42.166']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7384fa91-7454-41b2-acf6-7510626c57a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '136.144.42.171']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06f440dc-a3aa-401a-972e-e310582a6ac6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '136.144.42.172']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45ac8280-cc4b-477c-a935-a228b637255f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '136.144.42.174']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--311c98ab-6b5d-4c0f-83bc-cda2ec13eb69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '136.55.160.10']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8129a5d1-d015-46cb-a435-8a9ffc310990", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.105.192']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aae9827f-9e30-4002-b3a4-58823aacda0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.108.150']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce50ccbf-9cef-494f-a23b-a1dc47612dac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.108.76']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--204f3da8-13c3-4179-9a2d-100e4c8425b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.149.253']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cd733da-d3e4-4359-8663-3c83b42c84b1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.153.146']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0423f28-450d-4b52-9202-f4a1b134c4a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.154.37']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b103942b-d7f7-48c5-ba6c-ce0b57253d86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.159.11']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dcd5a9f-970e-4352-8b8f-e116b5b40337", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.159.26']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6e06c30-a911-409c-b882-80a742b48450", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.199.63']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--252aad4e-af6f-4b8d-9291-d26c6eff44d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.201.126']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aee15814-0353-49cf-97d2-d3c58929e66e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.202.173']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df85ff4f-56b0-4757-930d-bf58bd0890d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.204.237']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ef1b95a-8a88-486f-8867-a5a511173601", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.23.31']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a65abcb5-7f04-4871-9501-a34835837952", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.24.56']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60ad8d17-30e9-4c47-a454-f0359b62fee0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.27.190']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ca39f80-55b5-4792-9da8-37212488d20f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.36.28']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b81770db-30af-4b71-9957-3979fb40e7fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.55.119']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb33a070-2bb3-4c6d-8255-340cd3912459", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.66.127']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcd088e3-bd3b-4587-9757-bb5421cadc77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.77.130']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--806679fb-0990-43e3-aa6c-e52ea7128d77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.77.137']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91f2eacb-4f41-4e03-848d-3890bb61fef3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.85.24']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e023e66-431d-4223-94b3-d26cf3ef9dc2", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.124.242.51']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eeed18c4-8ae3-4afd-aaf1-0b0995e0e37f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.185.145.78']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9575b20f-953b-4487-adf9-3cf29651a9a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.197.125.49']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfd61488-8fd8-4afc-9d2d-0d8e30957591", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.197.24.249']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ad24410-45d9-4c1a-9ee2-f5c1d9d5530c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.201.32.25']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52ab0b28-fde4-4312-9939-585dad78f0c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.226.239.10']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11ecd42a-8bb3-4d32-831b-88dea2bf6eb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.226.239.11']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ae39f68-611a-4c73-b9d8-a20cc406dc02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.226.239.12']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--071ec3ec-5dbb-44e6-b6b7-540cc0f99385", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. CVEs: CVE-2019-5418, CVE-2021-41773, CVE-2021-42013. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.252.100.29']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5418", "external_id": "CVE-2019-5418"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-41773", "external_id": "CVE-2021-41773"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-42013", "external_id": "CVE-2021-42013"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--db914718-59ad-499b-94d3-29c00fcde47c", "relationship_type": "indicates", "source_ref": "indicator--071ec3ec-5dbb-44e6-b6b7-540cc0f99385", "target_ref": "vulnerability--959e92a4-5c87-49c7-84e9-05987dd9a656", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--842fac0e-81eb-4cdf-ac62-b4dae130d847", "relationship_type": "indicates", "source_ref": "indicator--071ec3ec-5dbb-44e6-b6b7-540cc0f99385", "target_ref": "vulnerability--cee9e8b2-8a5f-4336-8e8e-05d53f967e71", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8e3bbedf-a1b2-4d6a-a833-8a56d0834bc4", "relationship_type": "indicates", "source_ref": "indicator--071ec3ec-5dbb-44e6-b6b7-540cc0f99385", "target_ref": "vulnerability--73f12446-306f-430a-b214-3d2bbefbc8fb", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b94e8c27-2cc4-4a68-a26b-b02116b404e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.68.11.155']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--444a0a87-0d4c-417c-83c9-2641f141d246", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.68.131.123']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--528f4801-47a1-4ab8-80b6-98365bb74372", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.68.153.47']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e7e7800-db83-4dac-93c1-a14abf9385dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.68.225.68']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--361adfd9-762a-4195-a597-b04faf34000a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.68.65.59']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3076384b-c64c-4620-9eb4-6ee806dfd33a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.68.93.37']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c9b882e-ddeb-413a-8d49-b8546f592aa7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.68.97.132']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b884aeb3-2687-46f9-a393-dedbb7d293d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.91.109.125']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82e13786-9be4-4581-93e7-2920192f2c4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.94.187.148']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--529bd8e3-bf4f-4cdf-8dfe-ccca1ebf8b68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.94.216.109']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a0c86f3-335b-42ba-9d93-c529023d62e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.144.235.132']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c70df7b1-9538-4339-b7b3-505df493b9ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.144.239.72']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eaee5c14-a1f2-4ab8-914b-56dd40d9a3f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.144.239.98']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d87e408-2c4c-4d27-926b-b1b1c7142b5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.162.113.212']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe677f09-9d56-4a83-84bb-506f4f880871", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.180.213.30']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30209d76-feb1-4acd-95c8-8009d3a23c52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.19.117.129']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c00396e-4843-4c3a-acf1-47a8bbb9a59e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.19.117.130']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b658fd1-fb9f-4e5c-af74-4ff260b05ce5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.198.30.179']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c5275c8-e3be-4938-a171-f8d1e4eff0e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.212.68.126']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--310111e4-d4ac-42b7-b496-4c6050eb2bb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.212.70.145']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db8cec5d-49e5-4714-bb72-3f9be00e1365", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.104.66']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec762704-d927-4f91-9f9a-e45691f20a99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.11.181']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--add900f3-cbef-44e5-a3be-78d5cfaf9918", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.130.75']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c6a2f31-f80e-4a3e-b725-9cb4ac1c7369", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.131.241']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40736c60-3c44-4369-b3dd-4184e389762f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.156.64']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0ee5113-5699-4e48-aaf8-7074b431e267", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.160.23']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--961db625-39b0-4dd4-a844-205437385dec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.173.98']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7f31bbf-ebf8-45ec-883f-a8104b83e003", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.42.255']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--139a3658-8e49-483f-8e4b-5d901088fa5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.58.140']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ab31201-73db-49be-9c04-8bb68144e851", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.115.141']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d505d833-43ad-4c93-8b19-4a4e8e11ef46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.116.192']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4324f960-0b1b-4d06-91d0-1d0f0d0d89a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.117.81']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af11a67f-e2fb-4840-96f4-900445e2aec8", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.120.70']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5cb73c9-1fd4-497c-a6cf-fd064487ebac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.143.8.238']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ece709fc-11d0-4e26-bdc3-37d7d0f49b82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.145.177.81']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bea38052-5515-4b5e-8630-07679b2c02e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.167.35.145']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd902a5c-8206-48b8-bd21-bfe68ed86b17", "name": "Malicious Host", "description": "Observed: FTP, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.170.154.13']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ftp", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94aed6d1-a382-4707-8450-8209caf6ddcc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.191.25.80']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3c633b4-325e-44c9-bf46-5ccad3ecfafe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.224.238.73']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98e36f77-d061-4f4a-a757-62bc818dfa84", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.225.173.146']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--785ad1a7-8d2a-4df6-826b-6bb4e7ea1b0f", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.225.206.171']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d84977b3-308d-41a9-93f0-1d82e7dd2d80", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.233.203.167']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10453024-c8e2-4d41-a71a-7b79f0367c70", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.29.176.8']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36f4a759-4462-4319-93ec-2a76f27e6db1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.52.46.79']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df92c2e7-7090-4995-a015-3762b979f9bf", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.96.237.189']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7f0d5cc-f8b9-412c-a417-88423722f5a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.97.117.34']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6af6509b-0df3-4a3d-904c-cd8f38350a41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.99.193.94']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c846180-b8bb-4641-806c-e3211b83223b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '140.112.30.182']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66be6180-5b6a-4c2a-9ab6-dd026712a05f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '140.143.159.80']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d5f1279-f5a1-4809-9656-7677244e55cc", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '140.206.236.99']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d85336a-97d6-4719-8fc0-f7d7cd35f712", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '140.233.190.89']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ae9946b-8bb4-48e8-bc39-64de5632de86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '140.246.124.160']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5336d149-602b-492d-a3f2-59cac10b5530", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '140.255.191.149']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbd4dafc-6846-42b9-a230-f12c5ec00a0c", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.11.187.142']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99100345-84db-45c8-92c0-1d4060a846d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.22.28.227']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccf1fe3b-212a-47ab-b035-3be264d3ea5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.98.11.41']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1cdc627-8284-4d9b-86ed-31ecd6dffc40", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.98.83.240']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b703e1b-b97f-4fbd-95b5-058f75dd7c0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.98.83.48']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1642bd62-4a15-4005-aeb2-e1fb95f49195", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.11.214.31']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36e0debf-226a-461e-b5f8-e47fdf92fae7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.111.43.61']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df8efbd3-a00a-444f-8880-ffc294e663f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.248.151.237']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d42cd7c1-9aa1-4a48-9c79-069d4bc51427", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.44.247.134']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--628b50f5-1ed4-4ff3-8521-96a700fc5c9f", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.67.249.79']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31c61681-90fd-490a-a560-d1dc8f65f168", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.123.105']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bd15375-6b41-49d9-8896-53cc753acf3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.19.233']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48fdf4a1-8419-4079-9646-4e2e448f56ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.199.163']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e34cb59-df0c-402f-b9ca-473a29197665", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.206.94']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d9698ad-0c70-405d-a3aa-0fd2ce802702", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.224.178']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6373ef12-531a-4ab4-bc61-67d2adc75d24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.240.213']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--356b9e26-3178-4d02-ae59-694cd344969e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.250.79']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86259bad-4a48-45ca-b488-e29a5d5f8c87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.253.54']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4c95ef3-41b1-4916-97a6-ce0b90872f19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.255.73']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bb1bb04-55a9-4c9e-be0a-e4237c066b53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.255.83']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dfc59be-825d-478b-8871-65e1e0616d77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.4.185']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c35b3e99-7d49-4dba-986f-5e865251ef9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.48.156']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--198b6f43-d3fa-49e0-9339-c07d82a8730a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.49.67']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e396742a-5389-47b0-adc0-2dd79fdaf56d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.63.171']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0364cb0b-2fa5-4186-b824-6f48962b1d1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.110.182.33']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebba5bd3-d211-4a44-96e5-9f66ba458383", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.110.213.52']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a500a59-7e6c-4a10-9795-f4e861d2a633", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.116.47']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9c5acf8-e510-4976-94d5-b3a6f5368f20", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.119.253']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d683da46-d2e6-44bc-ab49-00e5063109c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.121.186']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf689e7e-515c-47fe-9e49-b8f3c159de75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.127.97']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f7a6bf5-2825-40f6-af51-10ea71aa37c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.153.185']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d757479-e854-45d1-993f-e952eecd2bdd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.171.39']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbf7afa8-c09c-4ef4-bec0-8d59a35e4b04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.177.71']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32374d74-127b-494f-b76c-dc6107b5d16e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.186.121']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4878efd9-95a9-41d7-ac0f-e3b3bd184bff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.186.234']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6343d7a3-a61f-424a-a16e-a2214a2e75cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.36.169']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c5f779d-1561-4bf1-b85c-469d65ea7972", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.73.73']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d35ce39a-c1bf-4aaf-a6c1-c83262856fae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.20.49.38']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1e7a815-f7e1-4ce0-bdc2-934979102ca8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.244.151.135']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--044062e3-bc0d-4a7c-a459-e55a2f316e24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.244.164.153']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70313915-4e77-46a5-a5c7-41c56c76d2e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.244.164.76']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d8dcc01-ec6f-4925-aa2f-f766b2145791", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.244.169.201']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9dcd0436-4fb4-477d-bf26-b64e79b4ea04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.244.173.236']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f262376b-611c-46d7-8845-f203b453c48d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.0.20']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19c8656a-c880-47c9-a250-f0c73d32a8cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.0.97']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01956912-8232-4283-842a-6275ab39cd43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.123']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99a2116a-af7b-4f75-b1e1-78dce07facb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.128']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--815c8a1a-d6ae-41f9-ab71-4edba463ac18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.185']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbd3442d-968a-4543-8ff3-7f61d3811101", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.189']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5043720-d5c4-41e6-991d-56c363339fd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.191']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9546a681-6256-430d-9234-2ac9828a5bf9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.213']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f995934-fce3-4db9-b2e4-bbe3c89bbf7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.34']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4b50ec5-ebd0-4b53-ad60-9012c8a58462", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.44']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed891643-5b15-48a1-bd60-1144cf331a74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.52']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1d76766-a649-43ba-9297-f573c6f69645", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.53']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccca33dc-7154-4e83-9d63-d282b2b0b791", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.71']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62187c1a-74c1-4d82-81b2-39cd7668bb55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.84']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13b5651d-9f24-4ede-b0db-15caf567423b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.164.127']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b88fdaa9-01d4-414d-902b-e5c500ac7d50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.164.182']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a92fc00-3dc8-493f-a9ce-205a1f63448a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.164.204']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d640c8f-043a-4ecb-8766-7e338321682e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.164.34']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb5a47cb-7374-42d8-9681-da009d3df8e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.164.97']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe85b7e9-59bc-4f22-bd6f-557ec41ee186", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.173.101']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4d71757-d3d4-46ce-9667-f146531c8a51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.173.60']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d9ac5d0-3f9d-45b4-9de5-9cd62684cc76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.123.76.129']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bc4b493-f71a-4dfb-bf7e-8954266dd80a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.123.76.92']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae43e164-73db-43b8-baaa-cf3ac5b83d67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.123.77.16']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e9d45b8-d793-468c-87f3-8218e89f0b01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.123.77.27']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17e154f5-d16a-4a0a-bc1a-5292a2a08bff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.202.82.88']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcd42a7b-790f-48d6-a6da-f34dd5a2a2f6", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.217.13.134']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f075762-0b01-4d9c-a61f-d5457061b41f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.217.74.127']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9586046-5180-44a0-b4cb-a5948c59d203", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.31.196.42']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe4438e8-43a7-4339-8d1f-755e179c9a4e", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.48.241.162']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f2ff18b-9273-4549-9323-f3284bbec933", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. CVEs: CVE-2021-31207, CVE-2022-22274, CVE-2023-0656. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.6.131.198']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-31207", "external_id": "CVE-2021-31207"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-22274", "external_id": "CVE-2022-22274"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-0656", "external_id": "CVE-2023-0656"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9a23503e-4fef-48bf-918b-797479addb4d", "relationship_type": "indicates", "source_ref": "indicator--5f2ff18b-9273-4549-9323-f3284bbec933", "target_ref": "vulnerability--dcd22dff-dcfe-4953-a717-d5f7995ab85d", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ba550571-30e1-41ed-a18e-81611e64d62b", "relationship_type": "indicates", "source_ref": "indicator--5f2ff18b-9273-4549-9323-f3284bbec933", "target_ref": "vulnerability--fb5c13fe-ad37-4059-80d4-95aa86895d35", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--30dafb22-5dee-454b-a490-af6e97eb7f28", "relationship_type": "indicates", "source_ref": "indicator--5f2ff18b-9273-4549-9323-f3284bbec933", "target_ref": "vulnerability--a1f6f84f-041b-4d7a-a59a-e7bf0952776c", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29884931-c840-4bf8-abd0-de69be84b645", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.91.121.253']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbc419cf-7e06-4056-87c8-9868578c712a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.19.125.102']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2b5e54c-cf46-4134-8711-5f81e961ad5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.19.125.127']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32bbc33a-f874-4cff-aac4-47b777a62569", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.119.189']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3703135c-0088-4405-83d0-a5cf0db8ddf0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.134.221']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02148c02-73c3-4d4a-bf4b-f4e5f755e258", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.208.190']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58fa609a-23c4-4889-b0a6-d3259c3f5e48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.209.46']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--313d5001-1c93-47c0-820c-0bb83dde3f87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.209.5']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14347a4e-17a4-44d3-b0bc-c054a0ff1289", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.217.132']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e7ad8fb-7584-4bf2-84c9-8c67074d3727", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.245.199']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0336ce97-f66d-4cb0-b456-619ec97bcc12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.254.246']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62f9b657-830c-4856-8996-1aac327fbd5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.48.144']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99053499-87fd-4b1d-b9fe-d35e95e3ae4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.57.24']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ecf74d9-c4ca-4b1b-8abd-5541ae43d176", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.64.108']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa4b5b92-eb9a-4842-a52b-73064d296418", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.73.134']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a0018f5-abd3-4ec0-8047-c9cd96c39536", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.79.155']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fadb7a5b-6de1-442d-b64c-e958a8bc84f7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.70.194.244']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31a2c8db-68d5-441c-870d-b6ebd446b92b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.88.240.110']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1e5ac9e-6617-445b-939f-f7ec365fb615", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.88.240.154']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8341ceda-0bd1-44b7-9bdc-617c9571e00a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.88.240.180']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bb1e43e-ae9d-4db0-9607-596c2d5056d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.88.240.70']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a830ada7-fde2-4400-a89c-db540a30b30c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.129.17']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c5e8285-20ea-4710-a75c-822766dd486f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.132.158']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d07a2467-542c-4278-b1ee-2aca865e218e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.165.236']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cbb4a3c-4aae-46a4-968b-d1ee46ad7c64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.170.185']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc8c6ec6-1b5f-401f-ba07-26a4f5d1a695", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.173.21']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef1d00bb-93de-4364-93a5-3305623579ef", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.178.36']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce2a8a71-b6fc-4577-9012-eb32fcb5e7ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.180.119']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22e9188f-06d3-4acc-a0bb-ac38ed64467b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.187.65']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f699712f-69e0-4b6f-860d-52c7ceba1dba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.187.7']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97021770-bbbd-494f-af69-0918725cb6b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.189.248']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67be3117-55b2-4097-b1e4-0534c12ffbe1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.212.254']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0dc4f3fe-39f3-4524-81e9-4b9bc71dbd65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.213.181']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b03834ae-e4f5-4667-8a57-585c566dc395", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.217.10']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99cbbfb1-9933-457c-b9fa-e23c8298f330", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.218.213']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc162adc-6f7b-4a35-944f-73edc2d166df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.100']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--657621a0-30c8-439a-be99-f4bcb5c73deb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.103']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9f50de5-08cc-4b4b-a6d3-217d126dcc2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.105']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b2d3f35-f4b2-4b6d-807a-8b3b52b859a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.106']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--039c6fdf-7b37-4566-8754-9966420fdeb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.108']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99d2cbde-cf55-4ea9-9dd3-4fda3d1713d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.109']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3df14a67-8b43-4a5d-81bf-9f686c046b0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.111']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f0cb3aa-75cb-47e6-894f-8b67e30c4b4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.112']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--366be674-6e6f-47d6-a9a0-833c3fd4901b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.114']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a3205f0-00f9-4b84-9379-a3edd7b16c33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.115']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89f83df3-2564-44d6-bcd7-157de9631640", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.116']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5013f213-034e-4916-929b-2614d930b1d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.118']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b26d682b-3fe7-48bb-8640-82326fc019b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.119']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96fe53c0-db59-4cff-b323-ec889e39f9c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.12']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96f1085a-1f48-45ab-8dd9-e32360f8a2df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.120']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e4d45bb-f007-4232-868b-2c4e6be2a7a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.122']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93822f48-7335-4e28-9f2a-4990d2c27073", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.123']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e33f2329-6fbf-436a-8577-7b3de3746b26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.126']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1927dcd-e876-4875-a386-4a692ae3c0eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.129']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c9e52b6-61a8-4c84-aa9e-94e21cd1c7c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.13']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13404ab8-ad4c-401e-b6d1-f9c295915d1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.131']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a763a449-6903-40dc-97a6-92408a5258b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.132']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--954bd56e-ced1-42ca-91fc-68a24fc734eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.135']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ee56ff8-f297-4baf-82a5-368757f4cd92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.138']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--630c56b5-eae8-4f54-86a6-13a3d49854d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.139']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ca51073-3c83-4706-9132-a219656500ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.141']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e9483ba-fded-48f3-ac0f-11772a88d26b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.142']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0227685-5a1f-41e3-a06d-60402c63e236", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.143']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0a6fd0c-b19d-4285-becb-f0accdbb82df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.147']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--633dd3ba-fe8a-47a6-9720-13a97e6c9a22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.15']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b190e452-64da-4eae-a622-7946c784926a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.150']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb893bdf-7cc0-4ec7-a97d-ee257550345b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.153']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57e97f66-a56b-4839-8192-7aaa679030ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.156']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--231106ba-6ad3-491d-ac44-48a71c4934fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.157']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61eaf168-c192-4be0-963e-f88e0d78cb19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.159']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d874791-497f-4109-a7d3-99fc9995b2aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.16']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e2bcaad-910d-49b0-85c5-edf0aec5bf83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.162']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--746f5d10-96d2-4a20-ad54-8220ddddf805", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.163']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c88d51bc-7c24-4c3b-9526-59c91794b578", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.165']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61c2297e-91ca-4552-931b-6e73d494dd02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.167']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0eac3a44-2c71-4b41-91e1-3e129757afbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.168']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcc15fe6-87f1-4379-8a87-6df41656f33f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.171']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0c1f6bc-667e-43d6-91ce-f707fe118164", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.173']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06638bf2-8563-4c0b-9278-da607f82803b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.174']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28342e81-30f1-4a6e-87ff-ccefa554ee05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.176']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21bcdb56-b45c-4a77-a0e6-b7a831ac3b82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.177']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80560d80-fc22-4e32-9753-52e5dc620ab1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.18']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--983716c3-80c9-4515-b69e-84ee1a5e02dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.180']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f41b88c8-a23a-4855-bd7d-f1752d93065c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.181']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e2ff780-8017-44b1-a49a-a3b78d686433", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.183']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf4e8252-cec9-4edd-9a6a-8521917acb42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.188']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d7aef16-2e00-4b05-9666-40d4cfc58da0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.189']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d513696-9049-4c58-9599-b35e6da312a8", "name": "Malicious Host", "description": "Observed: PORTSCAN, SIP activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.19']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8974457e-b156-4c1d-8ac3-3058c12e8b6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.191']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe6a9cc9-1c28-4502-b1b9-a7f3f9838067", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.192']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19bacd76-7236-4fc7-98b6-f1c9e12f94f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.195']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58d64d65-c06d-4ea4-b80a-f0b85d961d46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.197']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be65e4f2-adc1-4838-8710-e027f87be9d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.198']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--002c0f0b-660a-475a-a489-2986b57c0401", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.200']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--667cdf96-750f-4005-8fb7-0e46ec2feada", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.201']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62c350a4-04fd-4850-8628-b1da60f3d39d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.202']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e3a4002-58ed-4ab3-8613-a7edd5ad9f0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.204']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb205340-3633-4af1-bf87-f07897a9e7c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.207']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6881233a-8e06-495c-ac6a-804cbc96ac75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.208']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dea9c0ec-8df0-400d-878f-00b9f6711e60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.210']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d995d413-6451-49b8-ba53-4ea7a65f4023", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.211']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e8d3caf-3c20-4ca0-9f70-d3625b4a1095", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.213']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a61b5bb6-20a8-4b36-9f0d-c126401528c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.216']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6df93f7-5743-46f5-a24c-e44b921d9ff9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.217']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--575705d4-cea5-448a-9f8c-4bf44a35810b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.219']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b3ab5b6-45ce-4f61-9655-975ef03ece26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.22']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a0000c0-cd09-4923-bae7-8fc608ef7ef5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.222']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42b03596-a37f-4636-8c84-6b35ac2e6155", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.224']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c63dd3ac-0a55-4486-bfab-46049b96478a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.225']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84c60aa3-83ff-4189-a63c-fc6992c6a9e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.231']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bcdb37b-f000-4cb6-8d03-012bdc7fda5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.234']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bed0fa45-aa64-4ddb-b111-3643363502b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.236']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4319d32f-a263-41ac-acc6-07ee26afc4e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.24']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26f3cd4b-e248-479f-9cc3-b32d9e145596", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.240']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc3126c7-4264-465f-a243-bac924468cb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.243']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02c79fcb-1279-47b8-8e51-d68a079c9eef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.246']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb5d3e1a-721d-4b29-b0d3-a823b8390d65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.249']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b85b98c-2ef2-476e-addf-63596894e502", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.252']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--752167ca-f80c-4425-aef5-2ec783bcf551", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.255']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1893f1c-a643-449a-8565-af77f9f908c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.26']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--913faab6-b671-407a-92da-5a0fb7649e38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.27']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb0685ed-bbfb-4115-a22e-e8beca2d15eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.28']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5819c8d-1620-468c-b609-4f5732646b16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.30']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d27f1ac3-08ba-4166-a250-c6ae2556fb63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.31']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--586f2cdd-f60c-4759-9bca-b58aa0909cc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.32']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a21c4b2-e12d-47da-b6d9-9048fcee468e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.33']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51f979c0-3fef-4334-bfaf-ea728f875b09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.35']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d811aa4-75c9-41a6-a635-2b05b8f77550", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.36']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e91e404-c88c-4925-b6dc-8eb000311fc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.37']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--915f2c8f-5350-4394-b898-eaf4a7e95104", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.40']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5392a9fb-c613-4d64-a413-1f3792ed5e4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.42']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec7a46d9-17b1-4140-a54a-734c626fc4cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.43']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d398a81-0cb7-451d-8702-bc54cfa4935e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.45']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8abd879a-a144-4bd6-8878-5c00b41b9ae8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.46']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b15856d9-00c9-4b4d-8161-3e8e613de135", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.48']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f9aca74-f249-4d5c-b341-ef7d79677b8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.49']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d8db6c2-6652-4f32-9e24-ff10ffdda3cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.52']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a13a177f-ece8-4d2c-89dc-1ee5ef71cbf5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.54']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2732f4cb-3eda-4b83-96e6-8fbccd297efa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.55']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--513520c6-3da7-42e7-bf15-4496b402d534", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.57']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1d83707-4a4a-48fe-a8b9-51f4cabc2db7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.58']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e616a013-c1f9-402f-968b-7641f6c93ba3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.61']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e894344-f30c-47a0-8f47-413ee6c16f48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.62']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--618dd797-3acc-4507-82ce-065f3c25a387", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.63']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9a03833-1c4d-4395-a4c7-b57f3d2b66b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.64']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e3efcd4-f7be-4730-9126-a241342f8fb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.66']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe0b9c9a-1447-469a-bdd9-cfe60ba13b46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.67']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c0ec55e-9cb5-40b8-bd83-45f09fece394", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.69']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b7619c1-cf82-49f7-b014-1bacf9934286", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.70']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f28082cc-664e-4114-ab84-2ca721c1c4e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.71']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--088b0922-9fcf-41d2-a370-448923c3e952", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.72']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44182137-7c1f-487b-af68-ab942da56933", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.73']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--972e607f-6a1d-4331-aea6-fc407c344654", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.76']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4930ac0d-7cb8-4ae7-9616-fcaef04b956a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.78']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d242ba1e-8d3e-4591-922f-17fd049e5523", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.79']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b59768a6-a182-4dfd-9020-bc82ebdf3544", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.81']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--347926ee-dc3f-4af7-a8f9-fdbac35c7a2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.82']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0dbd7111-8ea4-4608-a720-b0a7c052d6ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.84']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--996f4717-1b20-4828-bd4e-a26ef19709b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.85']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17964f36-6cee-4cbe-8486-00f3c913afbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.87']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--effd7aa0-281b-4b96-9185-9926fe318542", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.88']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c6f8303-11c8-4e91-b55c-0d0a9e37b262", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.89']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc72433c-c082-4eb5-83cf-9e48d651c37c", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.9']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8d8394a-9e7b-4ce8-ad45-e5a07bb5c133", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.93']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56c11ad6-ce22-4106-b924-04b5a2f0a782", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.94']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--555f7b48-b250-4424-89e2-476658bc2f31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.95']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c58a2e0d-2cc3-4c11-b399-f342ff79383f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.96']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f27eca7-69f2-42f6-b279-a4507a9e95ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.97']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26edc1a6-1944-4a91-80cc-742f9b90b1f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.1']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cc388e2-ab1a-4b4e-9bdc-1af96ec24782", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.103']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b8c0fca-baab-4be3-8c28-c710ff7bda6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.11']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--739440b1-26ad-4499-b9df-eafdee3450be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.112']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3742da97-3933-41b5-8613-25425e188ad7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.115']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9da82a5-c8bd-428f-b086-a35bc36ec55e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.126']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6e65af5-d891-4445-af93-3322e946ea35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.128']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d18eff8d-b979-4f5d-aedc-294fddca06f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.129']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b00068c-2657-4276-8601-973fb80f1b90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.132']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60f982f3-7b47-458b-957b-c0393d87e726", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.136']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b057a04f-aa65-4cf2-aebe-bdf7563c239e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.137']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a04c145-9a69-416f-96b7-96a14ea1bf40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.14']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0dbcdd39-0c25-4d30-baf5-59fc632c13b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.140']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33125a8f-2ee0-457d-827f-587765811d1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.157']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2584eade-e174-4a6e-80e3-d566829c1ffa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.158']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--214ec7ec-89dc-4e50-ab3d-2e5dddbb1660", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.16']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b8ca41e-294a-4e15-b473-f0e2e813f2c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.162']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d9a25e2-0894-4eb7-839d-cc1652040ff6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.163']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--132dc66f-2431-4b88-96fc-33f776dd3ec4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.164']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cffd9dde-d3dd-4cbe-97bf-9b5fa30ceb30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.17']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51958640-2aec-40b5-a9d5-11f6414e2a29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.183']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9995a9a-f497-44bd-bd63-8f5b3a4b12d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.19']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d978b5ef-8196-4bf4-8315-6ba68d288e05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.191']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8068aeb1-e606-4ef1-8bfe-5b5ef1685836", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.193']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45967273-b8b2-4a8d-b550-df7014cb6365", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.194']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f61b7208-86bc-4242-976b-d52e8c1bec01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.2']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2b8ecc6-e592-4b8d-a7ec-90f8b09763a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.202']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef9efdf9-7681-48a6-a1f7-ff5ab7253900", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.204']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8134056-b9ba-4e3e-b247-37c440e30b92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.208']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81e27f7c-d641-4283-a395-3bbaca99ecf7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.225']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d311d960-da3f-4b9f-95df-4cde77d4ecdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.227']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8385d6fd-2e95-4046-8140-d05b5a24c0f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.232']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cb9f572-ba17-45bb-bb26-fac3d4d37df0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.233']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b266917-b1e3-4edf-a0a4-c655482bc34d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.235']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09822f8d-6ad3-4d29-a3ad-f89ee6130bf2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.243']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff04d79a-d305-4e53-83b0-b8397d8b3915", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.247']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7363f8b7-9884-4e16-bb2f-c972bf8b845d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.252']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5dc6ba87-01f5-473d-aad6-4cb5621fb2fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.253']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--069a6127-0ec7-4e84-a2f1-bd920d0baafe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.31']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f39be09-737c-4967-b71e-1c41c704b808", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.35']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9acd7f8-fc67-48ac-b4eb-f1c0c8a9c6de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.44']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96d57ae1-03ac-4f95-aa5a-a5b607343ef0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.46']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f4a0181-b5d4-4123-a4dc-c72b23dfd7c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.47']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e648738-5270-45e3-b5f6-8061ba9f9df0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.52']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2340be34-d34b-47e9-bb4a-11aac16763ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.67']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d207f260-07bb-4e9b-a159-8464358be7c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.75']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--588eb7aa-3e4d-41c5-af94-1d5a348bac04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.78']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef50ee6b-5854-4563-b633-a81548746ccc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.80']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--196ba061-fe13-459f-acf0-7ac4002dfe5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.83']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24e24c37-ad22-46dc-bc55-54b8ff661120", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.85']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36a87803-ad08-47f9-816f-5a06f9236b38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.86']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e5750ec-31c2-4e96-9544-95278590e8b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.87']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13a61b3d-f1b0-46a9-8ac1-89215760f05e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.97']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--571c4b30-370e-4772-9191-bedbe9824301", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.98']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75bfa908-f5ce-4ef9-be4a-edefeda4bf3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.45.199.80']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c6ae41a-127a-46e3-bca5-6b12cf838ff0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.45.211.215']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4819af1b-b3ff-437b-b01b-f1ed1194619d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.93.144.116']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e281cca-9aba-49e5-8cd8-0d6c3a915329", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.93.183.252']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39740ce1-0f40-4239-8fb1-bdb99654e553", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.113.221.241']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--316e1ee8-8bd6-459e-8a1a-6efb8a890c73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.153.121.146']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5838b2b4-83b6-40d5-8af5-ebba443751fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.153.121.223']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2cfcbcf-abf2-4a45-8032-a3ac2b2e63c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.153.121.224']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--582bbe60-6755-4c50-be59-59d77d13d502", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.153.188.246']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d03dce27-e6dc-4218-b8d0-7744a70d3119", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.153.188.254']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4aae07c8-abb8-4269-8da5-72b09ad17714", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.153.245.161']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0def64d0-8b24-46f2-aa62-c27b78667417", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.153.56.170']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1479f3e8-47ac-4887-b3a4-2b182a81e885", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.153.56.174']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eded5cb2-f5d4-458f-b863-fe3c055f8ddc", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.66.142.9']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff63a3bb-7331-463b-b94e-63f68cb92b1b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '149.71.36.173']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3834749d-bd3a-442e-ab52-b522f9ab2180", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '149.86.142.72']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a6a1ee5-8f98-416f-987b-45ab6c673d29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '149.88.80.79']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fbb240b-b997-4a55-a58e-f00c7c3354b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '15.156.234.60']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b2ec929-75fd-489f-8dd6-6cfa7a66fbc9", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '15.204.165.54']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74e128fc-6dcf-47bd-80bb-118560cdcfa2", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '15.204.184.105']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f34ff2f-08bf-40f5-bd86-28cce886f7bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '15.204.244.83']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26fcac20-d9a8-4b4c-b8e8-e36d4d0a9013", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '15.204.89.174']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea407b79-9741-4f23-8665-89b791482bf0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '15.235.162.23']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--035ce2b5-c482-433e-bb71-4a828150342f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '15.235.169.200']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e44dc48-db3e-4069-aea8-6be10e6740c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.105']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc07dcc4-6fbe-4ec8-9ee6-574f75f2084f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.119']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e5df142-f14c-4c05-83e4-f8f012c08550", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.120']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d54046b-53be-4824-ac9a-84ead50cefc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.126']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad1e45d7-9c50-41fb-ab71-95b172ea0dd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.186']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a387ca0-6aba-45c5-81da-1198e849f60e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.208']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8da85945-8c49-4f1f-9f71-f718d8297c95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.212']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10b1fef9-b762-4090-8c28-39c5871f7bac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.214']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d185e457-4d20-4e2e-bfea-eac391be075f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.219']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30bb98e7-6da9-4168-8b3c-b3a9a0b4cfa4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.223']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcea57be-6d2f-4dbc-9ab7-1a202f14054b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.236']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71432531-ffc2-42ba-b601-42f51cd8cfa6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.243']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d1f066c-8014-4ab8-b8b8-3957e45d640d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.244']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b50675fb-38f7-40f0-a221-86a203b4d46b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.249']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac6fb212-e667-4c05-87c5-b701a2563237", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.66']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81875b2b-1aea-487e-af74-997a6b3008a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.74']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37500266-8052-4ace-9d12-83bd4179d9ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.98']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--faf94c5d-4e36-49a3-96f4-6fa1e6484abf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.102']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7bd9d54-9258-4a37-a969-fea46b93f8a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.111']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9902771b-fa6f-4fb1-8593-66db6d3cad84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.112']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1822f5b-7343-4332-b944-de40ab10536d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.116']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1b3806b-4600-4c0d-b98d-354065284467", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.128']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4347049e-12ad-4e54-951f-adfbafee583d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.132']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee6398f3-6968-4f71-b875-d4b5d047c050", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.133']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00d7d009-146c-4c81-ae85-9bf16d914a9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.137']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c677ad4-a49c-4ce1-809a-1bec8f803f4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.138']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3eeaecb1-345b-4a06-8208-580a5438d650", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.140']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b422d5c1-b241-4a4a-8de2-10b5be282302", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.141']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dda55a02-3499-45b5-b7d9-e244a620915d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.143']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fb172fc-9a64-48bd-9983-ee12ac341afb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.147']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32ecf690-68b7-45b5-8f92-f6e3d3068864", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.156']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dd36156-32d5-4d4c-b7c6-a92df4ec4d4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.16']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7be817c4-675f-4299-8153-c623fe5d7b66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.160']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--022d046e-0c3e-4413-9194-5f5dab15feca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.161']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1dc796cd-3334-43fa-b495-855a7f7fef4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.162']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ca85ccc-6156-4f80-8c78-53233512f4d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.163']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e1a46bc-5468-4f7f-b29d-525eae897ce1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.173']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d644e04b-cb4f-4cb3-92c2-55257dffacec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.174']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58fca2ff-f687-4383-8f23-360c31a3d5bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.176']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f54d8218-361d-45e4-865b-831c7656a2fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.181']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e71589a-ede1-4cec-989b-0411e1cbd5b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.184']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9058212e-8eba-4b94-9d1c-effebea8d9ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.186']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7c00916-9fd2-4284-ae2b-0d35de24594f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.188']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb79cd07-a7cc-4ece-901d-38479665cddf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.191']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--134a313a-fe48-4d58-b551-bdf5b0004caf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.192']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1dc4e61-3d19-409f-8b13-b32ff6db41c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.194']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9838eb0-0ce4-4b12-9751-1bffd0269328", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.196']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9d3ce99-561f-4a27-90c9-0474cb01c1bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.197']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bfd85bc-1041-4199-82d3-77403f448342", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.200']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edbcede3-07ac-459a-bc74-65297a20b411", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.201']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ff4d6c4-1898-45fc-a125-41c3aac4b162", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.203']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--024403d7-a216-43d1-a641-026515cd620f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.21']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63fd43c4-0606-4ad2-b0cb-a1fd356d7fe6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.217']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2619c235-8eb8-44d7-8f71-a1a1c95d613a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.218']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d361d397-cf4d-4c6f-a854-e2acf082c87d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.220']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8cc71d5-e945-451d-9719-34358dac7c31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.221']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3c8086a-029a-4133-85f6-2e5f85e8b6a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.225']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c80d658-7120-4f2d-b963-95fb87919a42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.229']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27696aff-1f31-4cb8-af34-81f3e8536924", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.236']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d20ee372-6ae7-4d23-b421-83c97a6402b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.240']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46e2dc3d-a626-40a9-87f8-00dbf8f73e1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.245']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05e03a52-025d-4ebd-954d-6024cdf25059", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.247']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55335e4e-232c-4c85-9d92-03dc64ba0cf9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.248']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce4303b9-5646-4c95-bfb8-1504f3fd0505", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.249']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd6a5780-eabe-4b5c-a2c8-9f3388eff868", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.251']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a661be81-12ff-40c4-80f2-fda278a10ddf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.254']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a72a26e1-0667-4e9c-be98-df0ab6e3ff53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.3']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--649ff0a0-2294-4dc7-b34d-0d562fbf6242", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.37']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1480fffd-223b-4f04-81cb-fe8d241fc687", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.38']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cc2d7c4-8ad5-409c-b921-9dcffd915d09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.40']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43210ff9-6f8b-4869-b65e-acc09f309fdb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.5']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18d6c0c2-fe64-4a36-8db9-daf52ead1598", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.56']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb347dac-bf3d-41fc-88e0-cab001f2b643", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.60']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67b1f3f1-5eb4-411e-8eb5-a3cf82f4a9db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.61']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7f33ad4-ddab-47c1-8c26-59b011ec4ec2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.67']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bb2bbe6-842c-4447-8be4-760ae8ef96d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.75']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9272478-4bd4-4a19-baa7-c47a19d20411", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.85']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0579f89f-2468-42a4-8f20-59db5715467c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.98']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9b19e74-94b3-4fb5-844c-81a008d13136", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.99']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10b81bc1-dfda-4d4c-bb9c-fd5c95e44506", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.109.197.180']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25a3e2d8-e6c8-4be7-b464-f282e85b62bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.109.198.102']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83d39a27-b4cb-4289-bd09-b9d8d9e56c2c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.136.214.177']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0551bbc1-4492-4669-a814-be5928c48e07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.139.194.15']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c875713-4c01-4804-a694-dd4b5f56f8b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.221.166.220']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d33e91b3-51cf-432c-bf3d-7e8cb4301435", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.255.178.203']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--570b8c02-97d8-43a2-b01b-9b6a2755cfa5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.9.67.162']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15f955df-1b4b-4c44-97b1-5bc7d78a604c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.95.82.21']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2de9662c-17f0-4dd9-8aab-43b0e35c7e6c", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.0.208.41']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43551a55-b06e-4268-b9d0-dd915f506d16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.237.79.243']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64f29309-50ba-411d-8a87-a59ba910d96a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.238.96.181']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f2b4415-f4d2-42fa-8df0-eac13288a8b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.241.122.63']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc2ec6aa-f289-4106-8b87-b8db15f56b47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.136.188.221']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c06e8be5-a6cb-4a38-96a8-83d5321dab7f", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.128.149']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ce03d52-c0ef-4f24-88e8-e1439da144fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.128.204']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3cf6d80-c7bc-4440-ac63-0552c59743d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.128.214']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bac7fe7a-9039-4131-bad4-c0dbba70e000", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.129.136']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e60ce254-06bf-4629-a57e-081f79170a06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.129.154']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7498641c-39a4-4b93-94b1-2e111fed2c7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.130.155']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1ccc037-98ae-48a1-9941-24652507b98e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.130.191']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb9eac48-d102-42fd-8563-7f83d9fa57ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.131.245']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--753c8a22-e29c-402c-8f88-29bd4cc727e8", "name": "Malicious Host", "description": "Observed: PORTSCAN, SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.132.203']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75ee7857-95fd-4f03-8d12-9c5b5d6120f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.133.103']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--058f5b54-7127-49c4-81e6-2e5c209a0528", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.134.166']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81a5b85e-feac-4be7-a334-4240b537a4cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.135.214']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efe29767-73a1-4563-b884-8ddc7c3e0e9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.135.48']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c001e361-fe82-4596-b0c7-92a31b9adf56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.135.81']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9b0acd5-08c7-4bca-8884-3af909741898", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.138.230']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0936c10-285b-4378-a90b-542b6c417d64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.140.12']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5293822d-4b51-44c7-a577-2b550011a55b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.140.206']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8d9ed24-8fde-43b2-842f-4678802a370c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.140.22']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab24dec3-3918-45d8-ac5d-e35f29b09f2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.140.39']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92b97ef9-7bec-4626-91fd-bef01ba975bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.172']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--294574d5-8d34-46e8-bdc9-e960f76a5e88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.176']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b6b9e95-ba16-4fe5-9395-63eda311c644", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.2']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4f8c5c2-941e-4cd0-95d0-c2b3f3297389", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.217']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f66b6bcf-92e2-44c4-af80-937933226872", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.40']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22f1a52d-96b8-443e-8252-912744b066b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.86']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1902d378-8fe6-4d88-a8ab-f66d7d08f9b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.9']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ac57ace-fe50-417b-8022-10d807718b94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.98']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1eb51fc-7eca-4c54-8470-a5e74c3bbfcc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.142.165']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53dfeb9e-b5c4-4b15-b8a1-506e033d9320", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.142.188']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee1efa45-6e46-460b-aa1b-29828c8659d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.142.86']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ce1d033-70c3-4e8e-8c87-df098cdc90f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.143.189']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30344869-6a22-408d-bbdd-772abb0a144a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.143.6']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b8553d7-0a7a-4597-9207-3a0113548846", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.145.49']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f54fe83-412d-4c12-8b87-c4c629e7778a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.146.235']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1d53d5c-76c0-43d6-9eba-defca02130ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.147.106']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a04969e7-0cfc-405d-9daf-a1525d8721ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.148.140']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76534f99-a1a3-4c05-88e3-82860f68d522", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.148.250']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c191cc8-7dd9-4e3c-8a0c-c824304a55b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.149.118']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbe37a75-b211-4def-a46e-c736cc6321f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.149.206']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a0791d2-87c8-45cf-94ce-2ebad7e4f061", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.149.246']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46a49c7a-7cb9-4033-ae0c-39fa17eac451", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.149.35']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20608f46-c769-42e6-a980-bd0422cafaaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.149.47']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1faddf9-b324-41a3-b876-7f43d563afd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.150.117']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f25c1804-2260-4811-907d-fb46566eb978", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.150.215']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31c20a2e-3c0b-43a2-9e79-816eeda2ae49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.150.29']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ee70acf-56bb-4d73-9dd0-54e392943ca0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.150.7']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27c5b75b-b019-444d-8734-dad9f23e3e70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.151.121']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1221ffa1-d0d2-4cff-a741-7110972d862f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.151.128']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a235232e-17dc-4a61-8079-4c6c9193cfbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.151.39']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e224dab-5d71-42f6-815c-a88009d7bbeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.153.228']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fee9c95e-ef8d-4c90-a897-52c96744cf63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.156.117']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ad12f08-3504-40f8-ac89-abd60e42bf35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.156.138']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fe5637e-d8d1-413f-beef-4d81779c2c2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.156.158']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--663ccf84-2962-4da5-81a4-95027c4830af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.156.50']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a9a1186-ad63-42b2-9f00-9ef938afb90b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.157.173']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5478bf11-9eb6-4d05-a924-ff4652075600", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.158.219']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--651f3f27-67b0-42c6-8243-848c5d17dbed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.158.69']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e5118f2-289c-4960-9808-8f72b5b5ab37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.158.74']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01e1ad23-0c47-492b-9e78-f25879d6a59c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.159.177']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8222d42f-358c-455f-b616-bb0232082496", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.159.79']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f40e75be-285e-4391-9e44-b98463ece00b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.160.252']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bdd5061-5b28-4488-bc72-1dae39c45597", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.168.34']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3577df0c-434d-47df-9258-5ee425b4d6f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.169.155']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3fed5cc-782f-42f4-ba8d-e5c98449c702", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.169.7']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d009f3f-8d91-4aa4-959e-d9386575ad62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.170.230']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e528f127-110e-4f72-afd0-b84babbefde1", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.171.213']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--662ddb8e-b4ac-416f-b86b-82ff6a58f7d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.171.73']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41b9868f-74c1-4b61-bf3c-bb5ffb20f0af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.172.179']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef4307df-755b-4b3c-b2bd-1d39ae7b3853", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.174.186']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b96c4341-760c-4d64-bfdc-27e7fa2d8807", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.175.230']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ea34555-f862-48ee-a840-c7fcbfe8694d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.176.68']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b69609d5-b186-4d58-a214-648173961d9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.180.138']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6db8175-bf52-4e85-8aae-99e77eb9114a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.180.86']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--952edb7d-1586-49b5-a27f-8bc344aa2360", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.181.162']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33b8e94b-13c3-48d2-a096-93caad1c4157", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.182.41']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64649661-56fd-49be-b018-2a3e0b4284c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.183.163']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff47eb4f-5ca6-4e9d-acba-0c5f903ab80a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.183.209']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcff903a-fe58-423e-a651-5a006e3db666", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.183.22']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbcfdd44-7e10-460a-98c0-48701b332995", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.183.231']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af62b6df-d208-46cb-a3aa-8298e0fbce10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.183.236']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68da790e-c497-4e73-aefd-1fdb966791e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.183.27']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1397c96-fa17-449f-baa6-235933fda8d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.185.141']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--971c4df1-d301-4c06-bc87-321b4ad0bf1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.185.41']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a519a47e-be84-4f37-a92e-208e15308690", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.186.240']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1dda5355-a31a-4c48-ab78-667a65d15c0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.188.207']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45ea4d9c-6557-4dfd-ba0d-c54ec61cbdb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.189.121']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc380f86-2b7c-4c56-8f80-d9942655bb16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.189.128']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25a58ecd-1893-45be-b969-02c50c6d1053", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.191.20']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65c69f83-6295-432d-be59-1861ee4a01a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.197.12']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6b8df29-f8d6-4376-b6c2-4fca9a43a031", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.197.121']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a52ee9f2-ceae-4384-b6d9-bb1e08baef22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.197.159']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--853b7b72-ea70-4c62-a8f5-99ddb62f95d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.197.166']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0653ce48-0e8f-45cf-ab94-f1ec8f331e30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.198.168']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--caf73be8-51af-4312-9b09-a26c017ad1b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.198.210']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b4ce264-15f2-4d8c-8e8a-7c3c5b60a991", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.198.93']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7654a92-f87c-4f44-b3ed-7783c2eecf4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.199.20']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4746ea07-85c8-42b7-8b8b-814b586d91f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.199.33']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f94f0625-f7df-4a37-9f6d-0a5337f5d43a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.200.117']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d59d4bf-c8de-4bb6-89a8-cf632b2fea15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.200.213']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23a97bc2-b536-4f2f-99bd-1cfcf6fcef0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.200.22']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f611d331-1942-4937-a8bb-7c7fefac1796", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.200.243']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18482516-2fc8-4fe1-b7dd-117b15a44c52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.201.119']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89061fa0-9a45-4cf5-ad59-ac3b2c2c28ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.201.217']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86005c94-00b5-4269-8f0e-8d7c8996dd37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.201.247']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e25526c-6fd9-4344-b061-d8fcf72b3056", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.201.80']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7985b8b1-de79-42fd-86dc-c46eda4358de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.202.151']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6baafd9-2a8a-442a-975d-ab4befd0301b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.202.244']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ee88f4f-30a3-4064-a8c0-929c6c766fde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.202.250']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--339daaaf-2670-489c-a8e7-87d4225d2735", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.203.18']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a10a28f-cc1c-476f-9d7d-0d02bc190e67", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.205.153']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a00523e-38e5-4b7e-a606-50d3c8152e94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.205.184']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--482b5132-a9bc-4ae8-a5e5-5bbeb459d5cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.205.193']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffad12e6-d8a5-4851-86df-f66329b67d27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.205.206']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a21e50e3-777c-4987-b17a-4dea01199a8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.205.228']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--282800c2-ad19-4263-a759-713a16df7b74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.205.7']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4638fff6-d419-4d0a-a11d-c1090c57ed2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.206.246']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48d59ec5-155b-4067-bca3-da1ca2773f4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.206.247']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a21ee14-85d1-478f-abae-7a5e18e914fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.206.35']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec84ddfe-1739-4be1-bdca-52505878a957", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.206.38']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e35579c1-6a73-4533-a213-c2d071904f25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.206.51']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65c6b78e-28c1-450b-90eb-1671dfb1142c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.206.64']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de64feb9-3093-44c1-a619-4a279d13ec39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.206.83']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77364422-5160-4774-9b24-cfe4b6d80e6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.206.87']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edd2ec40-a577-48d7-870d-864439105ff2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.207.124']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92884599-efe7-4a6b-9709-58fe892b2cec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.207.150']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--396b0a18-b02a-49a2-a454-1f91e4c8a932", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.207.172']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2fdb9e8-6df9-4f62-9bbf-fcf794e4a88b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.207.179']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3e5ed27-f62f-43a2-b815-b09db4b32630", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.207.197']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc68043b-cd5b-4126-953e-572ed06e869b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.207.21']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0324118-0a0e-4ad5-95e7-f9b52d8900ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.207.229']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43931a4e-3303-46a2-8fa0-5e9a2ac7aa37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.207.234']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--357ee7b0-84e5-4e37-8ec5-510277f3a1f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.207.88']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7099014f-58bd-4447-823b-72866af92827", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.208.116']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0d97896-d589-4e9c-9b04-9fc861e26f9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.208.7']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f95db260-1db5-431a-a0bc-7fb27fb64f83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.208.73']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67acff7b-3ed9-4408-a250-9e781aa7125c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.209.62']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2478b67-0efe-4e4d-9e2e-532f2556ae42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.211.69']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28d2365c-a7f4-4160-989e-55e161f01667", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.212.224']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b333955-e2cb-4f88-b0a6-c7f7519c31be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.212.41']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--830f80ff-e6d6-46a3-9e1c-5020d48863de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.213.68']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b429034d-4154-4056-8943-473ad2005794", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.213.86']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cac0dd54-abf9-4a5d-8062-bf15c105af9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.215.224']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3ace1a7-286c-40cc-a8f1-5ee5d9b612b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.215.226']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4bd2576-d4e3-4237-bc68-d2afe8603162", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.215.244']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--160c67b5-2da7-4b95-82b6-369a018fba51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.216.28']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7a6a071-fe06-45ec-a886-e103b6d263bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.217.163']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--201990d4-58dd-42f8-bcdb-36091993d3b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.217.179']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd8af4a2-7e0d-4bcc-8be4-94e4cd78278c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.218.30']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d04da712-3cbd-43ad-ae1c-8770e1145b08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.219.77']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--297506eb-92e6-4523-bd23-b58960fd9b9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.223.215']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--521714eb-c46d-4416-82c6-3a3ffb1618ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.225.108']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d64a9ed-e400-43d1-af16-fce062403a69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.225.11']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3f6b589-e781-4705-ba77-dd00dfaaa059", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.225.99']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c81458ca-a5b2-4e75-be91-892262dc238c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.226.102']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e112d7b4-1ac2-40d3-9190-1bc694ea22a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.226.8']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a11a7d7-d1ec-4f63-93ad-5754e5170f59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.227.23']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f90fb5c-2394-4c88-8ef2-11aa2af1e659", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.227.252']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--919a925d-4ccb-479b-b10a-f692159d1230", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.233.100']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bab0b58-e2cd-4bcd-b61c-ae6f9178565b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.233.124']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a809a98-d4c5-4070-b501-4efb78f9009e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.233.2']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c25224a-2a19-40af-bcbc-aed01990d1c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.233.36']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aee5b5b5-d6ca-4846-86f0-05b455909108", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.234.120']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a0f7f42-d9bf-42d2-becf-2db5cd25e55b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.234.17']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b85b0cfc-b7e8-4ed9-8c5e-328f2d87ef17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.234.184']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc7a492c-893c-4e4d-9052-7df8e037d30a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.234.39']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--529c437e-d15b-4a9f-9a86-9f890c377505", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.234.97']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ef49c03-0c56-4c6a-94be-5f3e0028aead", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.235.107']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b72e5049-3c67-4122-8812-3c460b6deb44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.235.160']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a40798fc-7f8a-4143-bcbc-7ccffa772d08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.235.206']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11f3fece-05bb-46c3-a339-4bcb31e83ff6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.235.227']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cadb6da-7f9c-4295-b1ed-0f69d366e000", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.235.36']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c4ff9d5-f029-4984-9edb-a43a07d72b1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.235.78']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ba8ace6-dafc-4ba7-a362-cd80a7513590", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.235.90']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cab20d90-3170-488a-8be3-f8d984f65fdc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.236.116']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78e1c046-c0bf-4e00-b2e5-4a0a2f09c144", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.236.147']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc2c9b06-801f-4f71-bc56-1b9ceb4a26c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.236.167']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d22c2ee1-d366-4e82-9280-524344dcba17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.236.207']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8860cb8-fe5f-4661-977a-83183ae93513", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.236.67']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b43d679a-335c-45bd-8ef9-f47e1b8cd437", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.239.15']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--318be8d8-bb32-436e-aaa8-d056ff1121c1", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.239.90']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87affd6c-e0b3-48ed-a43a-dc2377bbc8d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.243.245']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38ac0695-4ef0-45e7-bf93-b66503d7744f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.243.98']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a29d3fb2-6bfc-40e8-8882-9919719379cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.245.170']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--733955fc-bd9f-4fcc-81a8-b46009f947a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.245.196']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1538293c-1fc8-4a96-9696-7294ee2d2478", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.245.27']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51755924-a2e0-4ef6-b90e-0ddd43666c56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.245.44']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55c5f284-d486-48ea-a3d8-1ae0d9ca3a8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.247.23']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--664de9cd-46ce-4a31-92e7-b621b78c7192", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.249.95']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f16bbe33-5565-4c91-b46d-cb23a3161c04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.250.21']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbd61edb-b67c-43fc-8230-09fb230b9392", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.250.36']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce4b82db-5cb1-4de7-beb9-222c297f925d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.252.233']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9993a0af-1664-46c2-b88c-1599baa8174f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.255.94']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29fb4bca-377c-4681-9b85-b07edd367203", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.42.212.128']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3839d4ac-6a5c-4483-b21c-b32d2194d4e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.53.140.132']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b593125-4257-4ccc-9d32-4ed8099cc8c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.53.141.28']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbb3f415-76a8-417e-87e7-fb49d5dd3e9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.53.143.216']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--473a7853-ccff-4bf3-a65e-520c4a69d317", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.53.191.99']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb75f0a0-a478-480f-9ca1-f0e432628c62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.53.22.30']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a558a42-d59b-4e93-aeb3-b3448c6fb17a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.53.228.36']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--445810e6-f5de-4550-8f48-8f4671387a00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.53.3.237']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--373d2bab-d791-4b77-ab6f-bfe061ae2f46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.53.83.101']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--088e00df-c64a-4ff9-b541-3d7d788b6eb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.0.86.122']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55e22ba7-e922-4f7d-8fe2-345cdad7247b", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.117.1.153']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66599b5c-a803-446d-a48d-7d11b872a9a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.117.51.55']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c627764-fec4-4e3b-9338-a246d9a7a083", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.117.52.138']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--003101e8-22d1-4dd2-b7ca-604e3d8477ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.75.91.100']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4bdbd28-826b-49ef-9743-80d7c9c25a7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.0.30.137']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a86cd4f-0e1d-4b30-9808-a511ce74a7e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.14.23.208']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa58e80e-6c09-4e47-8097-a921c3303dbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.16.115.17']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a11beeca-4df0-46bf-9cb9-32d64e7febcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.16.119.22']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acaeff38-3a15-4b42-9505-ba96247fbd14", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.16.146.191']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b32e740-ccb9-42da-a9e2-29aacc20987f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.17.2.103']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7e5a023-66cc-4729-a0e4-065ce0b2c67c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.182.52.73']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf314525-f8fb-47fc-9267-f5c37936dff7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.56.163']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7df133e6-29d8-48bc-a1f8-a7e21c57a84d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.135']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f04fc79-a085-4553-81fb-229c72bb64fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.136']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6328932-88fb-4d76-a54f-203a175b6f15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.149']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8abaeabd-fb91-4859-bc1f-71d21f989044", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.161']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b05895f-cffe-4fcd-b2ea-6afde404f648", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.175']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8f46cb8-ec0b-4a62-88c0-915fd5644a52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.177']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ca7d05e-99b6-4f23-8ac6-ab406ae8ff09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.205']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73e96728-9f45-44b1-ad50-df025f12f4d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.214']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3cdc167-95fe-4e13-a02d-4663bda33732", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.219']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86463d6b-cc6a-4e69-8244-4ad71b69d6e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.247']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a611c7ab-76c0-4e60-8a62-79a2567efd03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.41']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9695e6b8-fa77-483a-b5e1-da359bed4a09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.56']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33080c7d-98ef-4b7f-8703-3b53581b289a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.71']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bab183c8-e0fb-4a1b-80b8-6f24077de517", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.69.31']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da6c1a28-914f-4830-9269-13286351a81a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.209.137.50']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b326dafa-b67b-49b9-b9c2-a65147d3e1d0", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.217.253.190']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d3a9982-d2bc-4aab-b2b9-797d6c47bc7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.221.19.138']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21c18641-f717-41cb-b9fe-fe70115e2134", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.221.35.72']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ac10d18-bb21-4ce5-8aa8-ca1e66689de3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.241.4.83']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11b7bed0-33e6-4242-b9d5-6364c94a3bf9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.242.79.49']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f63026e-429d-4c97-9772-d906b51d1a82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.37.220.206']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b835b743-d428-4538-b63b-ed7693ddba15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.43.52.73']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41784abf-c6b9-4fd3-b7b7-51147fa1b450", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.70.207.29']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a8ded13-5f31-4261-8c04-1d45a57b9bee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.10']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0be593b-a012-4d26-9a88-3d1b7a71be1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.107']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0ce9f45-e9bb-44fd-a36c-44f2f58285de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.108']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5012160-2949-4357-b27e-e1df90c11bff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.124']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c576299b-c359-4fb6-9874-ecebd6ea9c88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.125']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--252853aa-7271-412a-8f44-caaa79ca8600", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.126']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e060253b-6685-4f64-b562-02e6ff24651f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.127']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b32c50d-a8d5-45e0-ba0f-63b74745c10f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.128']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--300d1559-1e23-4c62-8d85-b2a7d36d4cae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.130']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e916bfa-f719-4009-b6e7-3a04ca1e4d36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.139']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--646e49a7-ac2b-422a-8693-4e7bd79c5a0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.14']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09a5155b-146e-457f-a1cd-16d49f34abce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.140']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edc485ee-9918-4306-a347-b55e4ac89935", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.142']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ca62517-9cf2-4583-9f4a-3adfa4902338", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.15']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c284ff9-1eca-4a9f-b1d3-ac93b8248bac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.151']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05f2ea4a-2bb3-447a-9c86-f74f73f15751", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.157']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8638a1b-edf1-4341-8e6d-059d2bba4224", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.158']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4323cb63-d4ce-490a-848d-c20ac7616da8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.164']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68f24d2b-c523-4470-9e7e-d4c933932417", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.167']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a9d9a15-e510-4462-900f-8df22fc21bc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.185']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d4bc432-6b37-43b1-a70a-5be91d840621", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.200']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25f0f942-6e80-4b70-8307-0f10b04bcc01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.203']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7326c957-0d93-4e18-ad40-261edfdb3055", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.21']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bbb7bc3-26f2-473a-aeaa-43d2e4e4c893", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.210']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--266c9a08-f5f4-44d1-a8f0-da8dd6b4f25c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.212']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c29cfdb-8cb6-49aa-a237-fdc82f197ea5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.22']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e0f10d3-c695-4e65-bd4c-130f4964b82d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.225']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6331cb33-023a-48af-b54a-d334f8b3afb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.30']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d47f3e8-a28c-4a4b-bc0e-e514b825d1ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.33']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b2d543a-a197-4895-8bf0-2ce3d65409c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.35']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdb3204b-5690-430d-9562-317ebd1d54e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.36']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--220c12ea-1bf3-4cb1-9b96-1a15008b9b6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.4']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbf88d72-52bd-4b94-bddd-7d1e0d8e5172", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.42']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1eeb6c27-d892-4380-b70a-76f2f33dfca8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.49']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--312ca1c8-1d6c-4385-9f32-c04231b59bd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.54']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0222b9e-1a4e-43a6-8664-3e2f98ac2d61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.56']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b172c2a7-17f7-4df2-b6b7-8b9ce4039c64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.60']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6c8a94c-7ed6-4de8-ad57-9c659963da9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.64']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a37a1b6d-7b4a-42ec-b2f5-35c333fb9246", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.69']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39acf386-db9c-41ca-a853-1a73047b9bc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.7']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f2cc872-007e-4271-a016-04324d555267", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.8']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--493782ea-3367-4ead-a5a7-b277720c5f7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.81']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d9400bc-6175-48dd-a2fa-8b2e0e2af8a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.82']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9b85269-ece6-45fa-bf43-3f0933d67d33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.83']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c2040f5-ac9a-488c-9e73-19fd272941fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.85']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69891323-fc0a-4019-ada0-bee8dacec532", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.88']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ce76cbb-3c60-4c30-8468-a31f5bb32ff3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.9']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2129f8a3-16b4-4e8c-adcc-a7df425136cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.90']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83e0a48c-45b2-4049-81c4-135bdc1dc37b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.93']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7aa16bf-3a32-4d49-8d19-b298e470bbb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.94']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--296b039a-0465-4052-aacd-d0865282fab7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.84.254.194']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--761581e7-ce8b-40bf-9c90-0f236f4066df", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '155.4.244.169']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80c7ad68-6828-4c25-b63e-f6e66257a311", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '155.94.236.91']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a1f2cad-a86c-4efc-91e6-dd6f8322498f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.227.235.164']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5d2a4d1-4e4a-4d76-bc05-596bbbbe170d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.227.235.87']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c34d976-d096-4a55-9f2e-c1228dcc69dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.227.237.30']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93b4fe93-6eec-4e1c-83c2-77a3ff928332", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.239.41.77']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a5e050f-9b06-4b42-97c1-987d87342778", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.0.0.10']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e95424e4-0f1c-4aba-be10-ed479afe1ad0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.10.45.192']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7f19dd4-9c8b-43c5-bc3f-054b903d7a49", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.15.93.78']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a7e4321-744c-418c-a7a7-87ffd391f555", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.173.100.92']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b90d89f5-0dd8-4cf8-a542-9b08453187ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.20.211.83']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa6c99e2-d641-48a5-8706-157590078c25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.108.224']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a859054a-2920-485d-8ece-b4bb13da3200", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.116.14']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f196a0a-6e9d-4e56-910f-04dee93255e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.189.32']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d459426-fb28-44c1-8786-6c051da87f0a", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.205.105']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3a6ff57-ee0b-4772-a110-34158df251bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.215.112']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d8812b3-6c56-47ff-8c67-2e404bbceb13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.220.147']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d26afb1-75b2-4c85-bf14-130e31fd032c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.223.33']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--938c2a3f-dea4-48f8-8acd-75bd602e6a1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.224.175']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bdcb9eb-9e1a-456b-9871-3f5de023b6d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.226.31']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b9b12d8-56f4-4d5e-9f6c-47eaddca8085", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.227.145']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--147c4e5b-70b4-4b6f-8ff1-4e43186ce3be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.233.212']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d963748-9a2a-4f01-b4f8-d5e43d5fd721", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.236.116']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--feabbb3d-dd99-4bb0-81c2-bf10794ef85a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.55.34']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccc62de6-9d03-4fc0-a3b7-1309d28dda27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.57.88']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93c61565-95b0-4448-8a9b-fd0a71cf6858", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.8.54']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adcbf623-bacd-42ff-9546-ec932fa7d88f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.8.75']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--026541ae-b624-45c7-8a80-972e7aba4957", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.81.55']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--249d3b0d-f1ae-4daa-b52d-710157310d77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.87.221']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0afcba22-023e-4218-9183-3c3cc1132792", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.94.153']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a73f089-6aa8-4b9d-80f3-0fa4cc8c2438", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.118.61']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5f93389-7e8a-407c-b7fd-7c9b74aff577", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.129.33']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68b9e14e-4765-4492-8a71-c5bb27a71c0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.220.50']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e0d706b-8809-4f18-8794-bce370adb278", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.69.67']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ac24b00-95b7-45b9-ba34-b2fda0ede299", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.85.63']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a00d7dd5-0fb5-4210-972a-2644835a952a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.220.86.73']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--015b332f-f5eb-4ecf-baaa-1de873dd5c08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.69.227.40']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b4de648-fb99-4597-b5cb-c46977616614", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.94.208.182']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df544356-8ae6-4523-89d1-43f0f4255577", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.94.210.201']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09c690de-c338-4988-9d22-11ea8b0b4255", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.195.12.131']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9b88669-69ac-4054-9582-78b2bb732242", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.195.151.194']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a957aba-33f4-4650-9e94-f5967751bb42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.203.189.4']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9990042-5a27-4388-ba27-0cb69d829188", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.203.44.185']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0a8bc35-af4a-40ad-b66c-bc9962fb11b5", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.203.83.195']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa5c2f0f-150a-474c-8c69-8e2518dfafc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.0.20']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3abd843f-d78d-427b-b2c6-6892ce1b9c4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.105.18']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5150ca22-deac-4596-aef8-c37cc8415c66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.106.169']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a0d933d-4865-4442-87f1-f0fcb32ab56d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.118.175']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3aa7642-cafb-4bb7-83c0-1b8c4b3b1496", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.127.215']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d886b09-e9b7-465e-b925-38ddf5b84e5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.128.124']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--036d35d2-5a6b-4b6d-8efa-321eba50c1b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.130.58']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36efc57e-fa64-4e3e-844b-8c928c17a41a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.147.69']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba835bd2-31b8-4f07-ad51-dba779da8d1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.149.148']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5535a70c-c36d-4004-921e-9a9ffc998a9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.155.122']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5040c58c-1247-4339-ae92-b50020ec87d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.155.178']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b81b0760-f607-4b33-8810-a376382ba8e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.189.15']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96f20927-8022-41c0-9728-cab2fcd5c20b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.20.8']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f98e8f5-b307-47c5-8a19-bd563a9ebe60", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.213.49']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0544602e-5e7f-46e6-b53c-4290416135c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.238.255']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97f41dcc-eca4-481a-8746-1f2f725e5176", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.33.252']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b311ce16-9025-4aa9-a505-5116a05038c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.45.109']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d2c57ef-8cb1-42a9-b5b4-452d7ccab96c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.253.120.161']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c388f504-8a03-472a-940f-94aee0d96fab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.120.213']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87f56625-bb2f-4fdc-8876-8c5d36113590", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.168.103']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac87a48f-4776-40c1-a5df-4220fcfafcc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.191.190']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d05adc3-7373-4956-aa54-f110ddc8aa5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.221.214']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0750d162-3408-45ad-9809-07961b4cf62a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.229.141']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3039646f-5d2d-45b4-b65c-f8d455f8e915", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.237.221']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--971b9ff0-5241-42c1-af98-06829d5a002e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.238.57']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72ba4603-1f6b-4b2b-8787-048d629ac163", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.239.158']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26808f61-69e1-4dc0-8212-f30ba1b05dc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.239.36']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--379327f4-b240-4fd1-b8fe-4da359e22936", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.36.245']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b42205f-fd27-4a84-950b-342a7824e55e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.89.111.189']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67f5c8e5-a075-4476-b5f9-801a98a26eef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.89.130.123']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f804fb5-0828-4342-abc8-61a5d081454a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.89.132.71']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f94f659-6aac-4366-81c1-ef2b693460db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.89.135.205']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebe36bd5-8289-43b0-ad15-7d555deeddbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.89.226.231']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--156e5481-25c2-4c11-ac1d-a456c0e1df1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.89.229.119']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc1d9e25-fbdf-4091-bb51-717b92bc5627", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.89.232.54']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea9be8a7-e289-41c2-b5f1-5ddc9634bdbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.89.236.206']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24f8403b-5116-4198-b2ad-c69a56cae5c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.89.82.250']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5d1d0fa-aa21-4c5f-bdcd-a437b9de6c57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.89.90.188']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5855c87e-d604-4142-bbe1-703b0fa0e7f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.89.91.71']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1fa7b40-2852-4b68-9ac8-6ce00668a0de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '16.176.125.169']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5dca760a-1e8b-402e-a98d-1523a76d9868", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.119.69.16']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bec4faa-da0b-4fcd-a63e-fe91accc60c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.119.71.12']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef1faf65-e1e9-4e40-89d4-e95b33472ef2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.119.76.42']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5320fdb8-279b-433f-9832-939817a04b2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.119.76.53']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0dc1d2a7-3ca9-48f9-8e80-5e35f0c1c778", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.187.240.90']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--545019b4-30e0-4058-badc-cbafe3573c74", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.191.165.249']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe896045-81b5-4b3c-a015-654c07f5c598", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.191.224.52']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0529d4db-6e80-403c-893f-b9ba70009708", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.191.29.170']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c732fdd-bc91-4287-9514-d25c3459b08d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.238.24.130']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79a7c91e-cbb1-4056-ab4a-46a505238348", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.250.129.213']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e512ee4a-9225-428f-bfa0-f11cdf89e460", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.30.160.181']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ee96823-4ed3-4caa-9d8f-59df8b400ab4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.30.160.182']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4edd8ff7-6f8a-416e-a7f6-95e303a90944", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.30.160.183']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff9a3230-cd49-4200-add4-39c16b222640", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.30.160.194']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--680bdde0-45d2-462a-9185-8fe2bd46bdc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.30.160.195']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a316ef52-71c7-4a61-bb26-ca5a3bbb3d74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.30.160.196']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b8c489b-adb4-434c-ab5f-2429acc65ec5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.30.160.197']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77371b21-7a9f-4a13-90ff-825fcd419f82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.30.160.204']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bcbb90c-d41d-4188-8c34-56628947e979", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.30.160.205']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae0f7c8d-096d-4d7e-9555-aad3ec95e7ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.30.160.208']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbd3cfc7-708a-4410-a7d1-d7c8740a975f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.30.160.209']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50ab0d8e-7361-4d2d-a69e-11e8598d51dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.30.160.210']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03133773-a595-4ee1-979a-0e925b3f637c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.30.160.232']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fe8c0de-2a0e-4953-bfa2-71fb1600d0da", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.118.230.210']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--842f263c-a2a4-4d34-86c9-a9b933f58653", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.132.52.57']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bca88ceb-b334-4a05-9817-52ded793a8b7", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.230.217.176']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71a00f72-f779-4843-bea4-cb5ae1956fae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.248.239.112']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc524948-2515-46a0-902c-aa8b6b4c2fe7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.105.229']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11b66287-0f41-4b2e-8cf5-5ee39de2309a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.108.63']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e18f6af6-c54c-44e4-baad-f48f8ee1b2ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.110.162']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56b8b6cc-e6d9-43ef-8eef-9b81a5e2c6f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.112.108']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9a5453a-6411-426e-b3cd-3f60c90e54e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.145.35']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3c2870a-d3d0-4440-957e-0a726fe17744", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.15.34']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cd74310-37ac-4fdb-9396-6da799bc5aab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.2.225']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--182a3271-10ec-44f4-b051-6c66538211a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.28.29']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4a747fd-f981-496a-9334-14e7c0514dda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.53.189']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78c42679-8935-439d-a2bd-d6f4f9b18f0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.8.170']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff72e911-26d0-4e30-8a15-91ebb87b13e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.19.153.82']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72d60272-3bfd-4c4c-834e-f8c171ce7253", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.214.98.181']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe7bbe83-5d3d-4e63-82bd-e4a498b5cf12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.214.99.34']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffac7b1d-0148-4908-af7f-3ecd6afc35d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.104']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67ab1614-7718-48bf-a63c-2e9cfe1774a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.108']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06ebac7a-8b00-4118-af2c-f0171b13a4c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.109']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bb8dad1-0f9f-40f1-88e5-3f13afd83de4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.112']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c62c3cac-9db6-4642-9202-96a9021115e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.118']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6c797e8-f89d-42a2-9d41-b1772030c995", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.120']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a55819f-c27f-4382-a87d-960a57b8aee5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.122']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d4a4e0c-d964-4ac9-8644-dea259e26261", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.129']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c961a6cb-99a1-43b9-b91d-7be16d64118d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.131']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1f2250f-6dd9-4d22-9d54-5e05b4ce93c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.138']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dea94dd-d9e6-4cc4-9a2d-5f138e5505c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.141']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27d2d23e-3363-4239-b7b2-daaccb3d489a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.143']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dbd2f5b-c827-4f6a-93f8-eae25219678b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.144']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33892c6d-b9fa-4582-a903-2814dba93044", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.15']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e29ef5b3-7246-45b6-9b07-b496a0eafc47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.153']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10238c98-dc37-474e-8432-207fcecb1aef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.155']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a70be611-858a-4d83-bbcb-0e65e9bc4454", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.158']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f4f3443-b18a-4cc4-b329-e9c41da15709", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.160']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e7986a7-64e4-4cc4-bfe0-bcae50105108", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.164']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11aeb3ec-7038-4c98-beed-668c9f0c1972", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.166']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70d31986-d4d6-4d12-82a3-82ee76eb2d99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.17']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4482a00b-9b8f-4934-8231-b87fc21dbe94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.172']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46a222bb-b1de-47a3-9788-8f20dc1b21e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.177']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a862b6e-1199-4f39-b835-30945d0f1e52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.180']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f238681e-b548-4bf6-acfe-94b16eb82ce0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.181']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--004a1367-bbb3-4021-a205-3f9114e1988c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.183']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c65264c2-9ec9-420f-a2a5-4884862e248a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.191']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06682adb-22e1-4e45-96f4-f41761f8c5c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.194']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f550fd0-1496-4a06-91ed-b227959e73b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.206']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74775abc-5005-4c61-b708-357989f3aaf2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.210']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5c0068c-c790-49ee-8432-93c13a0bb251", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.216']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5891e5d-b69d-446a-a60a-82110035a5f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.217']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb932356-26a2-4523-ab81-be7db76b11d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.225']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6e5764e-8f61-41cb-a47b-dc24f20753b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.228']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70e04ee9-8b4c-4925-89f2-9433c0bf1d6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.229']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91153919-54d1-436f-a86f-13ce7341cc4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.23']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b384f96-e163-4be1-a3f4-b464d037dbec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.231']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66c1c6c5-9122-41e0-b5aa-641b73d40026", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.24']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6c27593-1784-4490-8a96-ec16ae0e5b8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.246']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5c243e5-805f-4444-b465-ef7d7dfa2644", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.25']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07e54501-501b-4740-a33b-24c0c960d711", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.251']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b83d0e90-61fd-4139-8d3d-b4075748c93b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.28']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7018df25-6357-496a-b5dd-619909bfc0bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.3']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--541facd4-ade0-4a92-92c6-597519c75a12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.35']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff2c7cfb-fde4-44c4-b8e3-719fe786ff19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.38']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7e4c9af-5f20-4ef6-ba46-d5926564bdd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.40']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d473d36-15d2-411e-8b72-e27e7e27ae0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.44']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a73a49e-4b58-4a00-973f-bfee55cd51ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.45']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80f9d3d3-0593-4dc1-b9d5-2a5111b9d7e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.57']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--111221b3-197a-4b50-b36d-cc486f34544d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.6']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d64f1e4-e5ca-47b1-a9fa-31a313e55704", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.73']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5266d8c1-e68d-40cc-8082-eddda9880287", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.75']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b32e9acc-6428-47b6-b273-ecfe6a9ef331", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.77']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88762892-6e5c-4e35-9d1e-124a1ddf7060", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.78']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1c1df6b-c043-4270-b637-5934bf44e4be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.87']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3685a1c-849d-4070-99dd-e0be7241af8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.92']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27220df7-9e0e-41c6-a3ee-19fea5e8ee23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.98']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--892b6742-6218-4ef7-a53d-f378149543cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.99']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--889c9a9c-888a-4c9a-931e-6bb6caaa93a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.10']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e29e33c1-a1ef-4715-9dfd-7557d1fd82fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.101']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f8d5ee6-687d-4908-aa2a-d8af7fa5b9be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.107']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecb3a4fb-5e77-4ff6-baed-5e5ce05c73da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.116']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c06db5a-147b-4b9f-802c-58932787d197", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.118']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6b03a9f-4951-4b9a-90a5-5d45f1976508", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.12']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5963fcb0-5126-4fa0-a120-73918355fa70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.120']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f92568e5-7634-436b-b382-64067c3c1b9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.121']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c805ed6-0738-444d-ab80-0ddc1896854c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.125']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53a5a5c3-3df0-423e-a3d8-f674ad92675b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.128']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c0baf3e-f0b4-478f-8fcf-7de010427bec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.129']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51fa608e-7348-4106-b821-5b7c9f858d42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.140']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cadf921-856c-48d7-b964-b17caf35f15c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.142']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7a5c69c-6409-4b53-9e53-a4d44dbcde9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.145']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3210e73d-1521-4e91-b455-72b9761df169", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.146']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23fde0ae-bcb7-4ab2-ac0c-e3a2ae914e8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.147']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--469cdf5a-5339-47f8-92ef-0e168a2d26ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.148']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6237b6f5-49ee-4ba6-b374-0008167fb399", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.152']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0884884-26d3-4110-8ef7-27db1450932d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.162']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--790f2b91-be27-4f19-baab-8fd202fbc8de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.166']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3ae2f28-6f05-4e18-ab5b-38f0f57fbbc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.170']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5954490b-dfe9-4cd4-bf8c-ba839e0c9b09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.171']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0641e828-1370-4da7-af00-7d9590f8dc53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.175']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba65419e-d188-4cd7-9f9d-80bfcbc0681d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.177']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ea06f93-c9f5-47a2-ad91-6e5f157105e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.178']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b94b4633-0ef1-4308-9719-f1d33a76a4d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.183']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31e320c6-9789-4c56-9b8c-3b5fc2957f24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.189']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--640c9fcf-78b0-4d90-8418-db7021aa4b21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.190']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d7b5dd9-a83c-4973-8662-01f281d04d4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.191']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--450ca267-77cf-4135-ae9b-0d4365949d22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.192']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d26c81f5-fd4a-4857-a347-4faf37482c56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.193']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9801baac-c0eb-4d25-9798-968f937632a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.194']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f8682fb-4524-4fd7-8077-cd6405f022a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.196']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--431564d4-c038-4cb4-99e2-53bbd6260084", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.198']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ce1a179-7382-4c0a-892c-cff3c6e3513d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.203']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3277e17-1678-4096-8542-9b89739f0980", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.206']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--055b0968-24ab-42d4-93eb-651d294b9dec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.207']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cadb22c9-5cbd-42b0-8a98-778b484cdef5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.210']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f50234f-c15b-45d1-8f49-cc91c934d0e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.212']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d35906c4-e2e9-4c85-924f-e57e1a1357b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.213']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83f6904a-7614-44b7-9bfd-4bff96b71f4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.214']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b8622f6-4291-484f-ae9f-4edaf30a018e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.225']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1e1b5dc-665b-4713-a3e9-771e4652af72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.226']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff4764ff-6058-40f8-b4c8-1c665d8bc4af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.230']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5f8e228-6b12-498d-9456-25324080bb8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.231']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aed57ae2-8985-4dcf-833a-42951e40ad41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.232']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43a8c626-8377-4f3d-9ff8-ae7e7c3b5b4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.235']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51c8f1f2-7ae6-4fec-a0db-46ad5b35c094", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.24']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc423c7f-fd25-4382-9cce-8c29d59c1c1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.241']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f90da525-f338-4fd7-9374-6a4e47207751", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.243']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8beb82ec-60ab-4c1c-b09b-7179c5705747", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.252']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3944c074-0c92-47ad-8908-382effdc2fa7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.253']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fbaa86a-c90a-439c-ac33-e9fdc2df1d81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.27']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9824bd04-97cd-4614-9017-5a5bcd5fcb91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.35']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecf4efa9-9c4c-4a44-bc2b-c429cf9aa7cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.45']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--516c6a23-4a74-452f-bb6b-29935c0c5743", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.49']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d5c74a1-8b45-4a0c-b9cb-e068b0a036e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.54']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47997d26-974e-46bf-be2b-35fe215cfe43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.57']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32b17adb-22a6-43e4-a21c-4452067d06fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.6']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4618aa89-2278-44c1-9ff0-2fda09b07920", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.63']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84ecf088-0859-4eda-9d7f-26351168c93d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.73']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8eca05b8-a01b-4ee6-bdb2-ab7c6d0378c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.74']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83981fc6-fc5b-4033-b5fd-51003db44f9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.76']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce881c67-2335-4f0e-9dfc-0cfd8534edeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.77']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2bb1d58-5619-4969-8f67-5ac77d905323", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.78']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--404752a6-f67d-4455-8057-a880eed4f4d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.79']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86334749-d2b7-461f-9d64-b3662070169b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.83']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4781fde-215a-436b-98e8-bfef6f470315", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.89']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39a4893b-f5ea-4cc2-a0b4-69062fd5309c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.90']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc1de712-0e45-4d2e-963c-983411aab45c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.91']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c96f685a-e8c5-417e-8dca-f8e3421cdcb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.95']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3818e985-3897-4f38-8f99-058a06539da9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.96']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e69a3491-2163-4117-ac19-95c7b9c40c0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.97']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--040bb94f-5c49-4993-b540-2f1e5068aecf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.98']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4169901c-3edd-4552-96ba-a21abb7cb78c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.18.113']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17638cf9-283b-4836-afc7-a183cda7e667", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.18.241']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24bdc1dc-b0ac-4acf-9230-3378a1c0e74a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.84.85']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--317cbb86-6112-4bb6-80ad-b9990968b125", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.243.114.171']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--517332d0-24dd-49cf-b3cf-c37adb194d1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.243.162.251']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85c05dd0-a8b0-4c5a-958c-4d8d25bda9ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.243.165.192']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09b1d469-5957-4b41-8e2b-ddc76f737481", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.243.169.182']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c75336a3-8b41-45e7-af51-679d329c81b2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.252.52.51']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9284df3-bc3a-44bb-b15b-80ce9570b07e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.5.210.203']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54520923-09ea-43c2-882c-a554370cf9fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.61.182.17']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db22a7c3-003c-41b9-a032-8a341fc49e38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.132.235.188']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f39f3b58-4122-4ce2-88bb-c294f2b3dd43", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.152.250.192']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebe7b682-2736-46cd-8e5c-bbfc9748b6bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.68.100.153']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40145d45-9a98-4848-b4a9-56db930eaf5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.90.216.88']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b0deb14-df77-47d6-a4ce-6e9dc0b9a511", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.90.238.31']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f3cb481-2a50-48b0-a664-6c5647a4d9b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.117.160']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f72b3a3-6a4b-4281-82e3-7adcc2de072f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.117.229']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59cf2b32-9b0b-467a-89a4-75f0d10e9ba3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.138.14']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbf05d4a-0314-4438-9505-d5cfcc3217fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.161.148']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--522ae093-5016-43fa-bfc8-1cee6814db0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.182.221']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eafbd67c-fdde-44a6-8fdf-80e5dc0206a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.232.89']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f0a1857-4203-4ae9-8ca8-78f5baa7806b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.67.240']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd690b08-2c72-4566-8621-a5184832c614", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.101.126.88']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba657614-1863-4c79-bc99-3d1bfcbec31c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.10.165']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57fa8a99-e4fe-41b7-b2a8-277c7594be23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.10.187']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71052906-aafb-466f-b549-58c61d5fe8b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.10.201']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d8773d4-14ec-4b0d-87b1-3cbcb4119b44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.10.250']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa9d4c7a-b268-43d9-a5bf-1b0592cb4c4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.100.42']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aafeadc8-11f3-4a85-ac6c-f8c6de9b3343", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.100.56']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ead26e93-d160-479d-a24a-9b5641b8bc53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.104.235']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e0562fe-60f3-4e6e-be77-e65acfdb69f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.104.88']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca181057-2f0a-4080-b80b-8f3d692b5dc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.170']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c801fddc-195d-4eb9-84cd-5093d6ad5aa9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.172']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f2bb23a-1fda-4b8a-83d3-ab0758901daa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.202']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7472785-d6ee-453f-8947-7c5a51d49f33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.206']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a72a0010-d043-4f4c-9fc9-ec30eacb8f34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.210']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b9da328-be95-4f4f-9299-5a55582d82d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.225']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5eac4463-0c10-4b85-bea7-e19aad3caec2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.247']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18f98ca4-c8b6-41a2-86d7-6f42d212bfa4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.37']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd5e33e1-59bb-46c2-a571-f5fdb36a009f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.48']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70d70f98-3a0a-4254-b23d-9a23bc3d51f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.118.215']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d024b93b-d1dc-4753-9ca7-d9cefadb853e", "name": "Malicious Host", "description": "Observed: FTP, PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.119.20']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:ftp", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5a43ccf-785b-4498-9ec6-8f856d823151", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.12.127']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61ae91d2-dacf-41c4-9330-59411527999e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.12.38']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ff23d73-1c05-425d-874e-a5939836397a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.120.13']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14da5c2d-3381-496f-98fc-f4a11e7bcf79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.120.211']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b71747b-57b2-4120-aa85-07910c618f56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.120.223']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abeb1ccd-7a96-4d23-b711-66c54857afa4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.120.226']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd32d9e0-78f3-46b2-a368-23a768f29346", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.120.29']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f7528c5-61ae-46eb-a53c-da5829c67b7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.120.30']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--536337e3-0acd-42ea-9b85-69aa75dee700", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.120.89']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d778e8b9-13b2-4a28-9b72-df20f37efbf8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.128.17']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04c540c6-7d84-46a1-a7ed-acde2f7f0f29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.128.199']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5706eba8-06b0-4b70-a8de-bb1a6ad82d3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.129.130']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1834dde9-f665-465c-adfd-598f4ea90119", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.129.151']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--377b1e71-41d3-4855-b63e-cf1afabd75d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.129.220']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2306e3d8-68d2-4e48-b682-cdb44160c318", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.129.43']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--107dac8a-102c-4e05-941e-9bbb16e7733c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.129.74']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17f3f0b9-01e4-47be-b852-0712aeebfba4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.117']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f50ef41c-38b1-4287-92cb-d7e31fc60cee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.130']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc62cfa7-344b-4092-95ba-0495a11d8fc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.152']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0e72ff4-57a3-4d9c-afb5-42370312b40b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.156']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a16bbe3-9836-44ae-9952-7fd96a5553b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.166']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d4bd099-474c-42e2-a34c-e0c217e561f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.19']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51b20a47-fe3c-4f19-adc8-ab30548af5e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.190']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdf4e9d2-910f-4a5c-8ef5-ed97d86ccd3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.203']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6854d4ed-432b-4e75-81c4-1a70a57ac90a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.80']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f380547-9c93-4151-886b-07d385829e09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.84']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebcc20f6-736a-4a14-b314-4e9f2bdc1ca6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.135.161']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--877a3d15-9d8d-45ac-a5df-d14e90a6b57f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.135.210']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ed36fb4-9fbc-4de8-96e8-e15cbbf98c9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.135.215']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6af9f5c-ae68-4f8b-91a6-4e307fe2ff68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.135.222']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcea42da-09e6-4a28-a6e6-2344505d1a2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.135.73']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65b8f95f-5b75-41ab-8dd6-b2235fadab6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.136.52']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f826c16-10b0-4402-bb3b-2dbfafe04e20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.138.107']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94342cd0-9a05-41fb-ab0f-04844f7a1f93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.138.3']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e01a446-9ef7-4762-84ca-8a952f3fead9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.138.33']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--907b4c14-9628-4755-b03a-0fc6a8d8eb0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.138.34']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b1db6da-5450-4c7f-a663-74cab2d24ede", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.138.57']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37535129-f9f8-4e7b-9c6a-5109c87614f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.138.79']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d29a863-a276-4e4b-aae3-40def432cad8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.150.65']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a407f8e0-3649-4771-aa51-3366d25b2591", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.151.176']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbbcf036-1ea9-41cf-b5d5-48397a937ed0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.151.207']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47554c22-17bd-4f34-b445-256b8d5448eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.152.18']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d709d045-7e67-4b7e-a518-3f0f384883a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.102']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8debc81-8259-4000-ab31-273348ac3db6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.202']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73197d79-f3da-44bd-b726-a524e9f40a33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.204']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1e36eee-95d2-4e3b-b8ea-4e658c3c649c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.212']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61c48f6f-be3e-4585-95d5-5f00d988e321", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.227']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf8fb6c7-fb37-4823-b469-bc1e4f6e176d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.237']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1018f93-a35a-4517-be55-e6ec3010628e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.250']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d4e42ee-2261-41df-b813-78331fe589fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.254']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80fc5065-ab06-411a-b983-4f2a079a2712", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.54']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09bd5d50-2674-4577-b211-946d33ab4128", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.57']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f72d9a0d-12a3-47fa-a739-7dea8a849a97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.71']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa279eac-36f1-42e4-a205-24b97361feec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.98']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73f1b6ae-5bfa-4cfb-9ae7-78d01f7bf8cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.10']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f06d0831-f57b-4f7e-aa17-364112b47c6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.107']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--954ef32a-ebe2-4938-abcb-591f8f19bfef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.110']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--185abd9b-40ee-4aea-87d4-22d636d4e35c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.112']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fb372a9-22fd-47a1-ba8f-98ca5184fe2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.113']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83207f9d-6728-4208-b174-d4efdb65c44f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.128']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a54c9c5-8752-42b4-81a5-f9887ebbbd8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.133']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cd5b5c9-9c2e-4030-a72e-7d31b9859beb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.138']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b7ac1ac-fb59-4d0d-bded-6241432c7a1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.139']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b85b3414-846e-44c8-bd7a-402a7b409b55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.148']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2f339e7-c000-45f6-b1ee-3e9e9b4c48d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.172']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4092920e-9410-4e28-9757-e7377e38ae78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.173']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1006570-7d45-438d-bd79-c33b6c31ae04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.178']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b72990f-e2f6-45b4-943c-a82231645ba6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.182']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c687746c-6910-4d6a-bd7c-c1b0d976517c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.215']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25ac29c8-78e2-4892-904c-1f3372f16acf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.219']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59279396-ebdb-477a-8e63-29fcc4b665ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.29']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56feab40-db7c-4b9f-ae05-a9ae428809fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.33']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ad61a6c-2c6f-4b68-8c26-e576cbe09ed6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.34']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3f8e1a9-106d-44a8-befd-41e36c828dca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.39']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8106d03b-e42d-452f-a2d2-80ee7afe1d79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.44']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77afbbe2-144d-474b-b39e-706347b6fe87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.52']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5337715-41ee-4b20-8a1c-f8635c47bb4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.53']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--317e679c-f148-4d18-ae07-4c6670f426db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.67']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34f0fefa-c57b-45f8-99d6-135b937a1efc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.99']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91fc10d0-c20f-4381-b0e5-64694614d4c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.164.112']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--610505d9-8ceb-4a53-8209-35ec0ceb1f61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.164.79']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7f0d34d-af52-4e84-9018-7cfe1f861e01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.10']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b628772-1bae-4b8e-a7a7-638380e8c77f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.111']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc589368-2511-4eae-90a1-f4432c60869f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.115']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddd64080-4dab-41ce-b584-e102ea6cb15b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.116']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--534adba9-b76e-4583-90a8-d47b91968bbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.146']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e43c67c6-94c1-4394-8d88-bd7a55412008", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.152']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e515e052-3a87-4477-b2ce-f1e4d4791148", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.179']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca3525a2-f62d-4c4d-a7fb-2ea838b9da6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.190']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d55ef9a7-bcaf-4b88-b694-a62366dd3749", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.191']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebd285b8-6b66-4e41-81f2-154d65376f45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.200']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d75c16d5-0836-44f1-bf04-f2fa8bab3676", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.204']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b99fc310-bdac-4c3b-9e60-e6416913e98c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.218']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cab282f8-d96a-4bf0-a451-fa8d47f2268f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.223']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98c59dc2-03ac-46d1-ad7b-0c78c936e4a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.224']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2669b54f-e9ea-47e9-844b-002d07013640", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.234']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28df8ef0-efda-4eda-95c6-f164ab185b4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.239']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0dbfcd1-f368-47fc-84b0-7fd39cb83386", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.249']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d96c717e-a4d4-4427-a081-9a6d5349bb86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.37']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9d0dfd9-e332-401b-9ecb-0933cde0f060", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.39']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11a9cc7a-87f9-46ac-a03a-22fc8e174069", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.53']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--349a8365-d121-4157-a098-c9e6fbd102a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.57']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a65e5f98-e265-4f65-9520-3e3b9cefed4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.60']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fa92ed7-8ad9-4393-bc04-7e947769f896", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.65']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d40f69bd-5763-40d5-8940-f34bb2ad305b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.68']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93efcd3f-1ad7-48ff-96e8-0f2d67198285", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.72']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ad470c7-7003-4fc6-9f65-5be629075494", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.73']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3fec520-e0a1-41fc-93d2-a24d27024e91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.8']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2474bf29-7d65-4de4-b3e8-583a92cb1d46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.87']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a1a188f-cf45-46d2-8bd3-cf6cc634df7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.88']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0419f02-e008-4ba9-ab4f-ef260eee1f61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.92']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff9de8a2-dd17-45b1-9726-2f613cfd0cc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.94']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b2c7845-eca6-4516-99d1-9c545e12f960", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.97']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03077877-9363-4f82-9a28-65599cb56076", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.115']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13e29c2d-4b7b-44ec-8026-c7c6453f5127", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.120']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f775253-59cc-42fd-b296-0fb03725d830", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.141']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01d979de-6034-4525-9b11-2635a429af72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.148']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--290f1e66-0025-4586-9353-db939016898e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.157']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf2e92b9-ae36-4444-aa5f-eea80826c0bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.169']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed065016-33df-40f2-90f7-145a9196fdd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.17']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e3782b5-5985-49fe-9591-fd7a70327689", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.182']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d2b9937-405b-47c0-8eba-7603e083ed93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.196']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3ec6e04-f91e-46e9-bbad-9b8ed1a54de1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.20']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28f70ea0-c12e-48fa-88f8-f59b2af06b45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.204']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46cffb20-4f55-48be-a057-e440ccb00f79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.21']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bf56f7d-902c-49ed-b21e-d81608af8d25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.211']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e64fa299-58ac-41ba-974b-92155f113047", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.215']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9dfe9296-bb8d-411f-9386-8fd6c4797264", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.218']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--053209df-2775-4316-9b32-19ca46598ee8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.226']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d73a27d-e152-4ad0-9eae-940985721392", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.35']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4abe877-80d5-4d47-9af0-ae74ab499aa4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.74']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab1366ad-9577-44a7-9a0e-84f9f7fab1a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.83']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65a8e5f1-bf84-4578-8565-b482ddceda75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.9']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--518ad1b2-31c6-46d5-bc00-fef7f39c41b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.174.206']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f05cb26-dec7-455e-a6be-29371d34535a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.174.27']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d08539c-cf17-4ffa-b006-687e0907e5cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.176.251']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fc825e0-76fb-4e39-8dbe-81165f49e152", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.179.62']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efa8158d-3f68-4cad-a5e7-5f20c33debb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.10']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03e17917-2841-4a38-8a92-bf3a0a036b01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.12']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0defbadb-167e-4810-b074-3e490dc43283", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.124']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95104d5d-f230-48b8-9643-25b04ee76eed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.148']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4de84cd-0e61-4883-86a8-5956ef4db170", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.152']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8adf705-ee92-45f9-8307-5c1d9c5106e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.168']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--273afd9b-3fcf-4b87-9f86-065d74fa62a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.174']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f2998b1-d7ff-4f42-9374-2315ad5bee82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.182']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aad3ddfe-2494-47fc-b8f0-3b482764c155", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.187']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d1b60dd-f5bd-45bd-ad79-6231ebdfb63b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.204']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e372599-6f6e-450c-9945-e4cfba1da18f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.207']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--975ec3f8-7231-4db8-80ab-757fb5597c86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.209']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62eedb7f-76da-4794-9883-daf1fae77724", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.212']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0f3a28e-cdc1-436c-8070-7002f1198a86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.213']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87d71b1a-78a0-42b5-89a9-27923e203e56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.223']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e20fa5e5-e9fd-4993-a156-91391b7897e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.230']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb431ec2-81dc-4ad1-aeff-1fbc651642ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.30']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c6c2eb5-2cf8-4604-aa79-99e84f2a0b5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.6']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6f73e1d-7d61-4685-afba-7aa916b665f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.72']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abacc21a-0381-4eff-9e71-22eb0ecb7e1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.187.159']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bebcee76-8a7a-4d1e-8bf4-3ebaffd4413a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.202.142']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6273f20c-6178-4ca5-86c2-c8d8bc48994d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.202.145']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2ecbd90-4398-4146-aa8e-dd6fb7ae32ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.202.174']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb6aaead-32d5-4eca-a7a5-83afb86bd7bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.202.189']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf6b1ae4-b3be-4667-9eda-720c75c2edca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.202.23']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d63b4d05-9671-4d12-ae35-ce34fc729760", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.202.251']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--635a6a66-4e63-4b37-84b3-a7fac20d46f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.202.95']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06bcf366-3961-4ea7-b99e-13bff6dfe56b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.124']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bd65bac-e9e5-4ffc-a0ba-0f87612f2ac0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.139']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16c2d5e5-db90-4668-a4a2-797e2eab28b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.151']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98c89e2e-d5f6-4dc2-a6c9-4572f36a076c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.157']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cbc403f-d6b8-4827-8045-44346f02c123", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.174']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fbede46-03bf-4c0a-abea-1c65cc05e7ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.180']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f61b1636-4153-45fd-9b3b-4138cb260fdd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.222']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b308521-90ac-42df-a087-aa8b0d784a8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.223']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c04a5fe-3b43-4147-8cb0-8f2eeee4f8c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.242']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--835394c5-fd6d-4139-b70b-60e45e9e379d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.250']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--043a3b2f-4dda-4e4e-80a9-ed34f8c9f676", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.30']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30a90339-86bd-48fa-a4e3-562c70e79606", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.33']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc686cff-35a2-4b30-8e04-7ea5514258f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.40']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63d8dc28-68a6-4ea9-a884-e74e409e2df8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.71']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b60f57ab-5922-4297-9060-055606d7b5ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.218.137']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--752dff6a-c77e-43f6-9f9b-4604cdd5f1bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.218.153']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ac44984-cd8b-484b-ba54-cf1601c180fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.218.158']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87bf317a-98a0-4694-b37e-879ac6891164", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.218.169']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a93f282a-32db-4f23-924f-f4e41b6104e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.218.184']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fcd40bb-f4bb-4f2a-9285-ba283a253b96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.218.201']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd877dea-618c-493b-bb36-a1579b1e3fd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.23.177']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8327557f-371c-4525-b625-a51442dc9123", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.231.236']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--256a086c-24f7-432d-ac0c-ab2c4ba486dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.29.144']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68496eef-ae01-4a4c-9ac2-a1932b68931c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.29.93']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f63c7c4-1758-4bc6-bf36-b8da1b42beae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.33.91']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8068f2d-6756-442c-8f41-52f8069b5943", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.102']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c6e31f8-79b4-440d-9d68-4c052d9c36d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.107']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c748c035-48e4-4c13-8eaa-866312cfb75f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.113']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--537c7f71-61b4-40d8-9784-5033a20317e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.150']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--243f8352-e76e-4fd7-bad8-41d3eb2ab7bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.177']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8260f62-1e70-45e7-837b-a5092e0247b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.225']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0d8a6df-5be1-4e03-ba14-2f1de8ee2652", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.229']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a04a8598-3ac7-4550-bd64-99657d5fe09f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.243']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a65b599-a785-431c-988f-742280e6606b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.43']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--035cd731-c71f-4d1a-820b-d7c41ae4b118", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.62']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf34826a-5514-4be1-9fce-51cff61fd7f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.79']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--895081ec-5f22-4562-9246-dd4483763c9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.89']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d4294bf-0e82-4ca3-ba58-4b7ed8cc9783", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.40.205']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--769fa130-2751-40b5-a8d0-a39a8c6cdeb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.40.244']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a73d4c65-166a-417e-b617-f179f9667c4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.40.42']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f565da7-b270-4ccf-a054-5211f38f0c68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.115']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2115f424-0462-4f56-a528-c901224e94d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.13']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3a33c2b-d6c7-4f0a-9442-5ed687ed8cf9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.152']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76edffe0-8e78-4264-91e6-6fb94aa3e935", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.182']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c72d7716-2cdf-4c76-8087-3a0b31f15e44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.201']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66ad4cc5-1282-45d3-ad04-a89f106fc4a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.205']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46b8dc94-333b-4ae8-90f2-5e0976277d80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.213']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--883af3ab-7631-44e4-abf2-6540b16a271b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.50']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--507b699c-363b-40e6-b8bc-9eb947544862", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.56']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b50257ad-3949-44c1-9cb0-abe43f348e27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.6']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bafb9a4-912c-4622-a5a5-07ebdd014330", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.97']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f47a2a1-5f48-427d-b4bf-0f2c0838464c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.42.209']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d01f8d4f-c04d-41d2-ad11-60580ce75a6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.43.179']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--596f7434-941a-48f3-b040-3eb377f14e25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.48.160']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ed67a39-0741-43c3-8cc1-cbf745f359dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.51.193']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19535d82-0242-416f-b5ff-c97cf7ed8b0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.51.221']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2846c195-cf7c-4203-97d2-fd7186eb821a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.51.225']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--033aae8f-2e0f-4eca-8617-a97be03bc7ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.51.243']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--851db56c-eb3c-4f20-ba92-0ea09c5144f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.51.90']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23bfce54-c8eb-4e2b-8a1a-1de08fcd6fe3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.58.108']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4c707c7-7aa2-49c3-9148-616eb8c27d50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.59.168']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f892da00-423a-40df-a8ec-a73f93137837", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.59.90']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--224098e0-8741-4575-9b32-0c2ebcc96a79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.6.224']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21f14ba4-0c0b-4ab4-a59c-88bbdbf40e86", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.60.76']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d17001c9-6ad4-45ea-84be-23f88c59acc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.113.175']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7804a70a-57d2-4d8c-a3e6-a66d2139aebe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.199.144']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6278cc69-9f0c-4222-ac28-de3252be1265", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.4.171']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c02ca1c1-8107-4db4-9081-dee231ff1526", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.57.22']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e9d12a8-427c-40ce-8a86-e16bee311a25", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.73.155']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a098dbf8-e8d1-428b-816c-74910ff1aefb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.75.8']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--107543a8-d1d9-4b75-85e3-478edada666c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.76.0']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74fba084-b508-4070-b671-e5ef51520367", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.8.158']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b4b438a-2eab-4dd9-a6bf-1ad4392f4298", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.93.238']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6866bfb1-d82b-436c-baea-7a270d725f6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.158.112']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cffcf6eb-83ed-4424-ae15-0b4031968ede", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.19.139']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb167f97-ff05-497d-9d7c-2a1966e01cc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.197.185']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35151728-fb9c-4068-9335-b7325104f834", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.20.212']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d854c43-8099-4b2e-ae79-b61ecea4f364", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.201.160']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cfc9b18-7b2b-4174-b657-8c2027cfecd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.209.27']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06db7a7e-3d03-45ec-9ff1-b6b829c0ea2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.21.160']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2f53dd3-e58e-4055-a8e1-09502c294966", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.29.244']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b05703c-dcc5-47e9-936b-d11c8e9bcf85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.42.49']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca3dbc45-7936-4bbe-bcaf-b0504c052407", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.42.54']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2d47eed-bd2c-414d-a99e-5c4af537fdd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.45.189']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b12a14f6-f0cc-48d9-a67a-34703e0f77a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.47.218']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e7c1682-252d-446e-b46d-0c70f0b20856", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.81.208']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a4926bf-7cc8-40e1-945b-e27c3f1605e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.87.66']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f82b0347-1478-4763-ae9a-010ef143f23c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.91.221']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--368fb969-01ef-4db6-9d9e-a1a68d1f8ed0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.232.141.144']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e290bd4-7d38-43de-a45c-850fa5b535d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.232.149.140']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4acad0a0-f51a-41c8-867a-d0169f52bbdb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.232.33.216']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48de57e2-2610-49bf-8df4-59a16570e0c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.232.73.237']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f2bd483-6918-4732-afd0-f8408ad42fe5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.245.176.51']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46332803-52fe-4462-95d4-b697c88ceb62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.104.91']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b798db4-b722-4aaf-8858-51960491a52a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.108.197']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c814808f-0217-48ba-933c-ecf071a1b873", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.130.210']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d502fbc-018f-44b7-a6db-f404593177ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.142.129']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57d6f3cf-0376-40fc-8688-399d6ea97381", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.152.219']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ffaca34-71ca-404c-b995-ae60d958c13a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.184.252']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc6c7d43-c436-4c4e-ad4d-138817baffd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.214.17']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4dd3a28a-43d9-4378-9faa-7295acbe08c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.245.142']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--014c1141-62d3-44ae-ab43-04ef4caaa1f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.40.9']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4beff35-4e85-4165-93bc-a8990c072052", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.63.2']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ced8ce6-439a-40cc-8c6f-b5c4b03343e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.89.248']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--521883fb-c5f5-4118-87ff-1a4640c0c3f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.179.114.135']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--803c9e98-3f9f-45f6-8093-fcbb377b5d8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.233.91.12']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e63bbc4-b166-4f42-8663-1b0d13d6a5f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.71.102.95']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7dd70ad-1069-4614-ab22-eec0c05a73ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.71.156.63']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5f73b06-a841-4392-b7bc-8d423ada9bb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.71.238.157']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a8c5c1e-0086-497e-9bb3-1df4537871c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.71.239.213']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3750993b-3054-4697-a3ed-208712e8de84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.71.24.166']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--730bc91b-cfb1-4ba8-9a9f-0501d3e19fd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.71.24.181']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c8bf1a9-8e90-4a88-afa0-79d6ddcdafdc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.71.24.250']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd69a7d8-f442-4400-8c6d-b94c7f4afbf6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.71.30.61']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04a17bd1-777c-45be-b84e-7a91e18e6f08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. CVEs: CVE-2019-0193. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.71.57.188']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-0193", "external_id": "CVE-2019-0193"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2a27da0b-7ec2-49d8-a430-a4a0bd23369e", "relationship_type": "indicates", "source_ref": "indicator--04a17bd1-777c-45be-b84e-7a91e18e6f08", "target_ref": "vulnerability--cfd202b8-23f2-4da0-8b91-8dfc20bfa257", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6341df8-d612-4705-bb22-495fddd5d2c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.71.87.20']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a14e23b-92fe-4279-bcfd-e8bb6604722a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.86.111.179']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ef991f8-80bd-43a5-a04c-1499223b3e36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.86.70.97']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c296b1d-c5bb-4ef4-b775-489e43105e8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.86.89.248']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6caf3a9c-2e1b-4547-807a-be5a243706fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.16']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f609737e-e027-477c-a622-2287251df3b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.17']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d9a3340-3f85-4a45-b4df-fcac3bd1fb9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.18']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ba6666f-4f8f-42a7-bf8c-b247f28cf8a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.19']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e152ee48-b882-43bb-a3d3-75bf01a9da9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.20']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a3b1756-a4ec-410e-bf24-735c586bdd5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.21']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6589402-570c-4372-a013-6fbe1ff946ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.22']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--868c266a-659c-422e-a340-98c5fc37e35f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.23']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bdba5e7-ee8b-4fdd-b28c-927f226f252e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.24']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a988dcfd-c2ed-458c-a3b8-444f4fc82815", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.25']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54d63812-262d-4137-b5bd-d544fe36bda4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.26']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39cbc3df-a25b-44f9-a714-b261c3e8cb74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.27']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4c32112-e4c0-49c8-8b5f-b5e668e7a48f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.28']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0c6b756-06b5-4a4d-b261-2a17cabbdefc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.29']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54657a30-89f1-4f8f-bc6f-06716c2118ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.30']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ab4bd4a-bee1-46a3-bd66-fcb3defca66b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.31']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fb802b4-fdf0-47f7-8be8-3fe383952b19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.32']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c80dbc2-923d-418a-bd4c-dcc80b499efd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.33']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52c8410a-5fdf-4cad-a941-5427dc6e0ba8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.34']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be5b72d1-19b8-4dc8-b958-2946f4fec874", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.35']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c44cb218-75b3-42e7-8ef2-27f45c69fcb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.36']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19386b6c-47e8-4df4-a887-9d51eb0a288b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.37']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--733e73ac-68e1-4850-aed4-96d56c0c64f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.38']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e102b1e4-3c65-4a0a-93ce-ba464584e181", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.39']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96d4cb6d-0ece-42ba-a1b6-04a2b2196ce0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.40']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae15b4f3-32ef-4e5d-9dee-23842f636b2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.41']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49a48a48-9bdd-4bbd-a145-f6b3139067a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.42']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88042c5a-61c8-4a6e-9264-b1b19e1b932f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.43']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--786436d6-86a2-42b9-ab04-b46ac3a2032d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.44']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad77d9a6-a2d6-461b-b5bc-04d0190a3ff6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.45']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75051c6a-2586-44b3-aa40-d32d63df08a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.46']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd6c6f1a-824b-42bb-980d-9c9190d20199", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.47']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9ca5b2c-8807-4172-b907-af2385c9aa36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.49']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--751c87e9-f533-47af-b3b5-58d308ef86e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.50']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d2db520-0e80-4653-85bc-f6e7049abdbf", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.51']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4eb4c98-1812-4520-b97c-c6ecf7e32aae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.52']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b36c56d-c964-4e3b-a12f-50ad65c479f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.53']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16625def-26b2-4987-bd14-3dc23b8063bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.54']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1061cad-58a2-403d-9ebb-ba3a6c1dc156", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.56']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ea480e3-a479-41ab-bdec-0d977b13aea3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.58']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e194cb74-9f16-40aa-81f7-73c76fbd035f", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.60']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15080a3a-2591-4c12-88dc-9576cd8ce2a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.61']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fa0ef96-9634-4f0e-9bdd-f3e16efbe7cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.63']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0dfa76e1-7716-4180-b292-69a89117ecc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.64']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f8b451d-8908-486d-ab5a-21490d69fc8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.65']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61b90f8f-32f3-40b5-8934-fd415a65a577", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.66']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3de77e64-37c8-4b02-a581-aefb87a2e4a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.67']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dba2513f-257a-4233-b74b-cddaf2f77f3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.68']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0b65fab-af3c-4602-a14c-e91a5f43ef33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.69']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37f722e5-74c9-4f97-9241-14bc879ad2f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.70']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42895850-0aa9-4dbc-ad24-5e0577cfd59a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.71']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc3d56be-82b3-438e-b812-b30087c9bfee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.72']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e2ade49-1af3-4ed9-8ef1-e9e6404e480b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.73']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43a725f7-a5ba-423c-9f7a-ace9a6de7761", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.74']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--920e864a-29ff-479e-879c-6bdca3233847", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.75']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35249323-0633-4237-ab28-204d8988ee4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.76']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50ea6a00-80d5-42aa-b926-2db851215b7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.77']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--397b7f87-6deb-4314-9fee-69ec79a41904", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.78']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--808fa9df-f630-4db2-811b-65f1ff2a9628", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.79']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a50101d5-f78f-47b8-b936-6c79190dfe43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.13.19']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b96db7a-6ca9-4d7d-a859-2b577978d2f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.14.176']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3f130e7-24ab-42a3-88de-dee3c09f719f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.14.235']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5667e082-65fd-4a64-9a4a-9b47abbe06c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.145.214']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--183d2f19-3eec-4eb8-91dc-410ebc2bafbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.145.88']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1944867-4834-4e35-b333-7865d846b88a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.151.164']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34ca3271-4f78-4a78-bacc-ce31dd807d72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.159.150']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7b22600-6bd9-4749-8f5f-225ffb948002", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.225.143']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ab6edee-6739-4f81-96e3-37ba322aba22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.3.197']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c458539-2f09-476b-aed7-e306fb01148f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.8.126']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88240bab-baa9-4867-a6ac-30b7d81b1465", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.93.168']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ced4ed18-f708-451e-82b7-b4ea05e8f09f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.110.195.99']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--387f1962-ad39-4647-9dae-1036a3c404a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.138.177.40']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2e264f0-3608-4895-afae-25965b3a1633", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.138.232.38']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b0fca4d-179b-4abc-9f10-55a8fcb9e0fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.144.121.231']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9c1b1e3-ce43-4f0b-b769-bcaa51d6eab1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.144.121.238']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9b0d5e3-d5a6-4e2a-a33d-6bfdc025dc30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.144.146.39']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--752fc558-3c9b-47be-9640-a552766029b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.144.153.103']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36657fa0-0f65-47e3-8ee9-41f91aa6dcb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.144.177.94']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--432e1559-a507-4f62-8534-daa9b6accfad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.144.95.207']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1341d918-ff74-43bf-b581-2a699d6b7f40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.196.206.14']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f0524de-8463-4c8f-bc76-390229fe0a2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.197.250.14']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d1eb47b-0875-408b-bde0-7d9e22f2f6bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.76.20.229']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a28b3be-1f67-4963-9496-e686318921e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '169.255.161.243']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8956da3-3c4f-45b7-a10d-f2e0390d8116", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '169.255.236.74']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df3870e7-f845-43be-8763-470800cfe529", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.106.103.20']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a750cf8-61c5-4e88-a7fe-7ac4ad02df86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.106.143.6']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a899de81-5c1c-48c3-afda-857e206f4fb5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.106.161.78']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e967de34-f2cc-49da-8c1e-426d0d81c621", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.163.117']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d33551c-eb54-4278-8754-3fb12fb4e3f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.163.133']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--408ef3b9-248b-4ba0-b1c8-54b380278d02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.130']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--802d3d4e-c60c-43ca-adeb-be13e677fbc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.134']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8c0a9da-62dd-4cc5-96cd-a704be1a4af8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.139']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e275e58-603d-400d-bd4c-c594766dd731", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.218']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99c26e61-c4cb-4661-9e94-fad09dde5360", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.219']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8e578d5-6c28-4b1e-8555-9961216e50aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.242']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1239c49-cd3a-4665-8a7a-7e2e63a0b09e", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.231.25.47']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a13f7179-9738-486f-969e-0c13fad09231", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.134.120']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6a45373-bea2-47c0-a7cd-1cc0d3d7626f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.134.89']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffdadc35-3ba7-4550-a08d-7c3ea148ae7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.137.175']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95213b07-5962-4676-9033-e2a3c284b25b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.154.53']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b29d4325-ae4b-42f2-b600-a103171afd92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.163.202']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a50cc6d-8426-4612-aeb7-38afded4c114", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.166.144']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--110a42f4-9c73-4fda-896d-1ac88231a167", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.167.72']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdf1fdb1-2673-41dc-808a-63d70e97a4f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.168.251']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--572ff05d-9b89-4b15-9f63-aa80c87a1e58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.177.57']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd476197-09d0-4134-a43c-49d2ffdf80cf", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.114.226.195']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35d972c2-8d5e-4f85-80f2-f2f47733f624", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.120.37.246']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbe45a71-f0d6-4096-afb9-e6286f32c26d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.120.37.249']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d761712f-3f34-4209-ae5b-b9c214b5cff8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.221.207.57']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00b74baf-9941-4796-a047-76f0284439fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.225.249.105']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bea70d89-5ccc-4210-9526-524117fd96eb", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.231.179.119']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52073f57-a8f9-4a26-87aa-e539928dd6cd", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.231.181.15']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b58cfe21-8348-47af-9846-c502de6d25f8", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.231.181.252']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa3778a0-8138-4d14-b4a4-ee7f94e56ecb", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.231.184.87']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09df3303-6857-4e42-8bec-a620289e70fb", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.231.186.156']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7197b1b3-ef35-4ffc-b0fd-11782990fb96", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.231.196.229']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb0ee93d-2fe2-4cfb-a561-9a73df8be478", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.35.134.243']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da9398df-d695-438b-aa75-7650e41475d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.37.191.42']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fe7f601-ccca-4dfb-948a-da9dbfaa14c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.37.92.126']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dba52d2f-ebfe-47bd-8193-febd50fc3fc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.6.28.112']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42bfb355-acb2-4830-92fa-c9179686fb33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.8.138.2']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd5919b1-8ddf-4fe6-9b05-ad38b6c28ce8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.83.125.245']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bf10b5e-0392-44e4-9582-441d30b74e19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.10.109']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7f0a0eb-31ee-45b5-8b3d-e62bc290dc40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.10.140']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c44419d9-70df-459b-a773-a458743ba425", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.10.192']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff89192a-d707-4880-99ef-d68085653538", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.10.236']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4192f26a-a089-4009-9066-7cc38ddcc028", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.10.239']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e4e8c8a-918b-4c7e-91e2-4a060503b26c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.10.254']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea8530e0-a539-4eb0-9885-941adb85f7d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.10.55']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8d998aa-8ca5-4280-9394-973f57905b8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.105.194']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28636c26-909d-45ed-977c-408b5b57b6ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.11.34']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c60d4d8-deab-443a-b959-6be138cd7596", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.11.46']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef4e60ce-a6eb-40d9-be9b-54cf534cd880", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.19.160']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--335f712b-6534-4976-b5cf-9b660e3e715e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.20.219']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c51b6d66-39ca-4ccd-b7ea-aab296dddfa6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.20.228']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f3ac662-5e9a-4439-a5bc-bd798adf920d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.209.192']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ceb4c42-a89f-49ab-9e3a-75080bbf3a2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.210.105']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36db337e-375a-44e5-9b91-f34db6d40cd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.210.184']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f80800f2-9288-4790-87e0-2f83a34cce62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.215.38']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50d91ce1-47a2-435a-9a07-4675bbe250c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.27.123']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34b9f95a-109a-4dcd-afd9-fbcd89b510fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.27.25']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edd20b87-f804-4105-aade-deae27da6126", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.27.92']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce8e809c-b7e8-4ca5-8927-195372470f77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.30.101']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--baf0074c-336a-42b0-b64f-391d0846e5a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.30.140']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d363554c-2df8-4e8d-8d77-ff1adc93fc0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.30.15']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ce10087-50db-44db-bcc1-2c834ba99636", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.30.20']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--557a06a1-b223-4ebb-8a42-34ed289089c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.30.32']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1daa002-b854-4131-b04d-192678cf7a64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.30.85']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6148a02-4d18-4bf1-9643-ee34f8785f2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.31.132']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34099d9a-aca0-46f5-b06b-700071324417", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.46.73']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f0f985e-723e-4281-bff6-572c494d1838", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.5.239']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8334886f-7881-4815-a34d-af4ba5e0e85d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.93.159']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdb9e700-0780-4f1d-9587-da1e6cf8eaac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.105.128.13']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd787588-c7db-41a0-ae1d-925876d71e3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.105.197.151']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5341b1f-07bf-4e7b-80a1-3f95e9925ebd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.105.218.179']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e65c40d3-d3af-49e3-a969-e6ba6780b828", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.105.52.84']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7e30118-d716-4bef-a16a-8baa3632a2a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.105.98.49']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7055e487-28c2-4233-8394-cd2fdac3bd00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.221.82']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4eda4cf-8700-47f4-80ca-05485c45316f", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.223.135']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf22003c-a678-4638-8a7f-f83bc9ee375e", "name": "Malicious Host", "description": "Observed: PORTSCAN, SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.223.179']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1dfb6ab7-d9c9-4b49-b38d-b8896794d5dd", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.223.183']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7f031ad-fe02-482c-b1bc-d45015074927", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.223.185']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c582b61-bcd8-43ec-9c3a-89d318acc763", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.223.195']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a56e5e7-0ff4-46cc-acab-8b749750b1be", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.223.59']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1eeb0a6a-1f71-4e89-a8be-8bd9854c75d0", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.172.214.224']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3015cc19-dd7d-447f-a15d-8d82e82c4da3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.172.30.22']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--163a80b8-d048-4154-81b4-615fbdd3d3f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.172.30.79']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a44e2d9f-13c7-4d48-8cdb-3d8bae5dcf97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.174.234.168']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64d1ba09-8579-4c74-acaa-ec978b5286eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.174.236.56']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17bfab63-baf0-46a3-ae41-d2b1dfce9924", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.174.236.9']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e5cf638-eaa6-4f99-8a9b-a2a0b62bd478", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.174.244.189']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--650c02c3-9a05-4cd3-a1d7-5c428a1030ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.174.244.235']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97516759-cd3b-4e36-b5f9-911e44ff3a00", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.174.72.225']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5b24f81-b32a-4d4f-b0f5-886a0a16a9da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.178.115.138']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9db5e79f-87d4-4481-b0d3-2431c71a17ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.178.115.16']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7aa597e6-e504-48cc-b92f-128d4d093a0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.178.83.199']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f1f473a-e1a2-40e7-b59c-93820a2691a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.190.85.18']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acd25767-d5e9-400f-969c-e8e11cf6d570", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.104.157']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46e61047-9a51-4bc4-b08f-18cc4c521394", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.104.202']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--099bf13f-908c-4dbd-9932-db3bbffff59b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.105.96']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13523dce-8c49-4eef-954c-e3af1f21332c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.117.125']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb9bc144-9870-42b2-8195-0a0e5e5d7908", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.117.177']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7a234a6-5c35-40ce-b958-5d4b1bd00d9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.117.178']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a520caa-ae95-498d-9528-d985179d1c05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.117.179']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c74595b1-df24-4e86-8342-c695ae6b0a21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.117.221']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--272faba4-fd89-4c5f-9cc9-cafe1057f9cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.18']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--509ed927-f4a9-44d8-9a0b-f46159c7a299", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.38']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c6fec37-9ff6-469c-981d-f99bc71d91ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.39']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3da1defd-604b-4c31-bdc6-c600ad894235", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.82']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf09ff59-5c57-4001-94b5-3be06f528345", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.49.190']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2e1db33-76e4-47f9-9577-3f68a150650f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.203.224.88']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9568404-07c2-4f5e-9501-2d7b0a8e192f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.203.225.221']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1ee90cc-0976-421c-839e-069b32170811", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.203.242.24']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0724b425-3307-43db-93ff-1ff8767a782c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.203.244.252']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92b48e24-0f59-4f18-a6ac-df1ac9af4e2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.203.245.49']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a47b6c0-9d97-4dcb-974c-5c41bf2f1a49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.208.154.2']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00b40f03-372f-49ca-a325-6d21ac441439", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.208.49.78']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--672986a4-f837-4dcc-a3df-592e14190f49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.210.68.2']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee858e40-9d29-4311-90eb-e26789ad17ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.210.9.131']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a3cc602-00bb-48ad-af17-160d70854f91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.212.106.157']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--133a8927-b531-425e-8c0d-5503f9e055d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.212.169.145']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71326abe-0f2d-4b91-be80-6dd794ae4003", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.212.200.96']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a6064dc-4284-4a78-9516-aed134bb58e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.212.224.40']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--946bd3cb-e5f2-4d82-a36d-9c0a7f0c3640", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.214.156.83']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db84c93b-7ee1-46e5-8d0f-f8d275d0a2d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.214.44.228']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f41d9c9-838a-48db-9dff-b3a4e346a120", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.214.46.99']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae7eec20-dc6f-4f5a-a15b-bbdeef25fdc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.215.145.162']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b3ea81f-8adc-4181-a6ac-4b952cc4d7a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.232.108.36']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1f64851-0602-4db8-8e26-48882dcbea0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.232.15.250']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a37fc7a0-ea48-4835-aeee-a979eab7a939", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.232.27.232']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80fe6685-691a-4e0a-b580-ffa9484b2f0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.232.3.17']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94311b0e-e98c-4d9d-af1f-d920628300ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.232.8.247']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec1b0332-09d8-4090-a247-1dda392e0121", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.233.219.44']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d7d5b81-2091-4fa0-8f20-4cc8b034005e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.233.221.115']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7bfc705-cfdf-4853-b03d-8eb05bfa9d6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.192.12']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f127708-a62c-475e-b2f7-fabdb41c33e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.192.95']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91f32836-38ba-49b7-b35f-073408a46557", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.199.190']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--965d73c9-bdda-4855-b449-c06aa2796e2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.199.75']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da6fef11-e16d-4682-9955-ffc57a8e83aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.199.8']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fcae807-b29c-4a37-9a44-d0954495d112", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.199.93']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--508aed0c-7852-4f87-9f2f-5facbe08d2d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.21.101']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bd30538-9b6f-444b-a69a-b2a87ff97b24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.217.129']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65c08657-c1ce-4ee1-bd87-39b848d2145a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.217.192']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a7fb7b4-cc45-4176-be5f-17b9050fd414", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.218.210']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--142abe9d-db67-405a-ba1d-45df925716e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.218.22']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b789d99-56b8-43b1-8ab1-93c96fe035ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.218.245']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b901530e-f3df-40b7-9db0-2a8671d3a462", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.218.34']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36c996da-f1a6-483b-92ef-402b90b58cfc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.218.87']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52ab78d8-31cf-4546-8b74-746b80b2e1a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.221.84']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d68cff25-99a3-467d-b25e-834e3347c924", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.25.150']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25283619-f913-4cbc-b089-c9c0546d67bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.25.187']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87042834-8e5c-490b-b1d7-122e2f46e53d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.25.243']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f690a57d-a11f-4fc0-91ec-04ddcc48bf4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.25.61']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3645747c-382b-4513-b1d3-cc65e8ade14d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.235.40.131']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b561492-0784-45fd-b2e1-9e98aad8da9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.235.41.245']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d44677d-bb88-4454-96eb-099864e3d1e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.235.41.44']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b32c5aa-a761-4909-a4e8-59d445024e95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.106.113']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29329fca-804f-4176-8365-a1be2c078914", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.111.128']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67a26b4c-6034-4794-a02e-ecb88bb42d07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.111.197']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f2fa1cf-9f2d-4657-9f4d-837bb6e4c7b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.111.98']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6639173-686b-4849-b18a-f0adee1b4f9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.117.243']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9254e276-77cd-4139-a907-aa616571c516", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.123.208']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26e1b93e-0102-4637-979b-46cfcdbad135", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.126.127']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c493ffd-ae34-4c0e-aed9-7312cac606b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.126.175']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0f3307a-bb41-4b0d-93e3-ea8adc334bfb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.228.115']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6a23aff-3c08-4804-b201-448d2a2342f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.228.208']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--244422de-21d3-4508-a53d-16b5e79feffd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.228.218']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06785703-c9b4-4183-819d-cae49f2b1e10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.228.220']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee7239b0-d114-40a2-a6bc-04bc752aead9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.228.222']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2beab76-1b3d-4a72-9439-c465254a45c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.228.227']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--183b221d-f38a-4cce-b110-4970643304c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.228.39']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecf4e3db-017f-436b-b0f3-4634785562fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.239.55']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60857d42-b12c-488f-97b9-d738ef16480d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.96.130']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1054628c-cd3b-4b87-a85a-a818570ac426", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.96.75']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23e4faf7-34a1-43b4-8816-3d2874da1b9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.136.213']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--916511ea-f82e-42ec-a2dc-f3fef977f050", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.136.85']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06f49f4b-5e52-4a57-9b14-1ba7804a15e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.150.127']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8081cf5-2abf-49a9-83d7-338962cfa88f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.150.22']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdaba6f0-de52-412f-9392-e3829543eb20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.155.240']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fa214de-f384-4bd6-88a9-4e48b6af1190", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.155.29']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e06e6c5-366a-4d71-b27d-e6240a42fd33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.156.201']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d952733-de28-4d23-ba0a-6d2cd2b12f09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.156.206']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f12309c8-342f-4724-ab33-e48b0ff1e03b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.80.19']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b850854-5718-490d-9968-b75cbfc369dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.238.160.104']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--627e4abd-73a0-41f8-811b-7d49628a9852", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.238.171.10']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39ec7510-787e-4b15-8331-965498cb45d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.238.188.122']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9fa2ca3-b587-40bf-8397-a068783bbff7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.238.232.7']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7f3da54-8fa0-4a37-ae59-97bca6277627", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.239.51.109']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--238d0283-aa68-4245-9014-a0d43d429018", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.239.51.96']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7cc7fa4-f3ca-49a0-ad0a-600d7b6244a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.239.62.109']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef011688-544c-4c81-ae14-594891018e9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.239.64.84']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9661ce3f-b8b0-429f-a263-89068d8491d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.239.64.86']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b1c7cfa-f99f-4ece-87ec-29c3100f546f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.239.71.244']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25075324-3eba-42cc-acc1-2091deb3fde0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.239.71.245']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a013b89-29ea-477f-a299-02fbfe55a111", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.245.112.205']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9a41fed-e8c0-4932-846e-24650af01c58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.245.18.243']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5214d61-2097-42d0-915f-1e1aab10bb4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.245.209.159']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7783cac6-4362-4821-a0e4-bad643a9430d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.245.21.30']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49956216-d8f7-46d3-ab8e-8f311bd7df44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.245.225.106']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e3ad258-8885-4c2d-841c-cf532062b543", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.245.89.104']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--694f330c-7960-4b2a-9693-e84a96f420c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.68.229.45']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6a166dc-001d-4e76-bb41-f881b5bea851", "name": "Malicious Host", "description": "Observed: OPENCLAW activity. Sensors: openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.70.15.199']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:openclawglobal", "protocol:openclaw"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1643ae18-b3c0-4f78-996b-f3411bf17cb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.93.102.236']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ec6b234-5917-4658-9e1b-51e08230f4f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.93.103.2']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91444d35-f4aa-402e-aa74-14d3d95fc129", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.93.106.153']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8c58c3b-2cc0-4f3c-afee-8fb291e800df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.94.9.113']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04d3d41e-b654-4a2f-b1ec-0d15c47ed1fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.94.9.120']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1086464a-1e07-4535-8a6d-7ac22bd0ee2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.96.172.91']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--147de3ec-fc66-45c3-88b0-2349da593588", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.197.14.231']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b75fbfa-d82b-4daf-a2a0-ca1107324cae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.199.117.55']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3590c3b3-7a6b-47f2-b6b2-b622c53c228d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.212.217.75']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--048a3688-1ae1-4c80-80af-cff1331ad4df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.230.130.107']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2911f73-62c8-4162-8843-6d3a97215852", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.230.145.182']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd69c799-2bae-4dcf-b5ce-004851940efb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.230.150.73']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f58c1b0-d39e-4a68-a76a-d9f20bd22e31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.230.155.151']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fd48778-4241-4cd1-9708-a4cede617e53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.239.211.113']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--253cdceb-c519-4600-aa2b-02f57e1b6be8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.239.240.221']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5eef5c65-842e-4cc1-9b60-091fb1d7400b", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.244.60.155']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afd2f1fe-f553-42e5-9f8f-3d47192ed584", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.249.53.212']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--051f0b7e-9b73-4757-bd32-5a92b6068d81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.204.129']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c672cf9b-a8f4-4fb5-a75f-80ef5178479f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.210.89']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85f47b6b-7c55-4b79-9247-ffd88ed940ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.212.137']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac0d6fbb-969a-4f81-89a5-01713cf22409", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.221.189']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e954ac9-b720-4eaa-aed3-5eea7d40c95a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.221.22']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68b2e02d-c4f1-4974-8b2c-21320111d89a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.221.6']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76bd0018-3aff-4587-84c7-7ed55cf19b46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.103']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1646566c-c5c4-4edf-8910-d2f0735eb064", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.115']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe64dde0-0a7e-4310-b65e-3e22d26589ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.124']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c63d813-6857-4482-9c03-95438d7bcbce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.143']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcc502df-ddab-44bb-8e96-ba3bbb3cbbb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.149']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f79e10e4-ee1c-4769-b5af-fa8135afc46e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.32']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea4fc658-133d-4732-94c2-9360b0b06f0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.49']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65c382b1-6460-4fea-a81f-54c35d88870e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.62']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e68bfd4-a892-4a00-ada0-186204781cb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.73']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f9f44ae-fed5-40d8-8cef-9382149f9e86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.89']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d07b852b-7ba8-4116-aa9e-5adb2105ef37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.225.111']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b4f1ccd-e425-49a1-9b09-7310b9a9c3b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.225.25']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29ea7762-95b6-4317-b5d2-6eb7f2583b05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.225.99']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdd77851-01af-4d70-8716-cc8ccca73e23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.226.8']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--223535e2-09e6-4617-91b6-dcec9fc2cf69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.227.210']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28e192c7-bd7e-42c0-8e5d-e6d3466f4cdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.235.200']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26a458b1-a09a-4fe8-8927-7000d5954422", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.236.84']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c668e9a1-1a77-419e-ad84-46ba87b45d06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.236.86']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b48d356d-a10e-4e78-80af-80b8d8df0838", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.236.93']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc5406c3-bd4b-40de-a60a-133244fb1089", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.237.29']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5a4b079-7095-4c09-8481-565fb09e01ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.237.48']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4001e5b-5481-4cf4-9d25-db3c84baa274", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.242.196']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d8c2037-dada-479a-9dd9-bea2f766515c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.243.63']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef52d4ca-2281-4ac5-a769-11a0d3bda93b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '174.138.35.17']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50576f05-8c5e-4767-9e34-6c1680c6ffa2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '174.138.87.36']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40706065-43e8-4111-bd05-5db297ad5f8d", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '174.5.36.70']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94da7264-8ba6-4707-967e-7b8a8e7f2ddd", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.10.24.18']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--593ecb2b-1dbd-40f8-ad34-fbbf87846ca5", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.101.131.169']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08a29e21-32c1-4f9a-8153-b0c2a21cd1dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.107.205.62']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe9c1526-74a7-431e-90ab-f1e0070b0e0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.19.74.163']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bedf68e-ffaf-43a2-85a2-ae596db900b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.19.74.176']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c39ccb5-d738-4e69-95c1-a5a49784962f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.192.243.185']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff68c584-74e0-4048-9571-e61e7c698ebe", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.203.168.102']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--337a24a7-8f94-4853-a64d-ff5c32cd4f63", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.204.181.248']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d99bc3f-7c12-4315-8c8d-58623696fafa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.206.113.91']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8ecd21c-79ea-4b5c-ae53-d1c949ea3dca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.207.189.218']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a38e7f34-30de-4560-b974-66dcf3f04b40", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.27.163.171']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--996d6508-e980-44d9-8d0d-cdb45dfcec10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.30.48.221']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0557b780-ca4c-4338-bb06-690cea1b4fe3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.30.48.99']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f9dfeac-6d97-45d0-a3c8-51935a0b69fc", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.8.113.160']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a56ae0e-dc7d-4442-b512-c3a20553b627", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.112.128.143']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21705370-6d70-41f2-ba7f-5458c76b9e52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.120.22.113']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f593cb82-eb6a-4e4d-aee9-df21ccfc8970", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.120.22.240']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92ae13ab-de56-4a6d-ab3a-a5d53dfa2a53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.123.2.115']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b3cd582-2939-45d9-a5ad-6794336c7728", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.125.229.14']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7d65b0a-9529-4ab4-b50e-260abfccad90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.125.230.13']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28b5f401-7067-436e-8b79-b85ebe76b645", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.125.252.215']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7eb27d5-6dd9-40f1-aff3-594896da3bab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.195.163.40']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfc4ba67-c50f-41d7-a102-9610be78abbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.211.16.233']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a15c54f-28b1-4cd5-bfb8-b6f37a09e075", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.239.143.89']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c14ace0b-e67a-4f2a-ad54-69bd1a54e31d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.32.193.16']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efad835a-6c6a-4993-a2d4-244df76118ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.32.39.21']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d76de0a-25c4-41a6-b11a-3370e2d8f653", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.41.30.76']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--858648ee-81c2-4158-a626-59b6088465e4", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.44.123.223']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7f2915d-17a7-4f3c-bfc5-cbafe4e8d5e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.131.188']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0c7943d-7452-4f4e-8fda-da37f469a984", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.131.215']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86177532-686d-4aed-a85b-5a8023ed9faf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.132.162']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b34cbde9-4410-41e3-a18b-f149e14cbc40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.132.210']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a715dd8d-1b6f-43dd-8e83-c8b5537c9671", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.132.23']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb12fb1b-9651-4646-84bd-6e000a5ac09e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.132.33']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40122db4-4a69-43b1-ac5f-251c748b7c4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.132.37']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ad76f6b-6edf-4882-ad08-183b1cb53716", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.132.5']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bf72015-568d-40c0-9a3a-f6aaae386947", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.132.50']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39bcfbe4-2fe7-4a2a-9c61-307ea797c308", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.134.3']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c57fc54-acd1-4b86-8a69-1a6190e52545", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.136.31']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--533d1dd2-6dac-48f6-b164-55d45fef193f", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.130']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--268a012b-b718-4da3-b1b4-037c9fc7cd66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.140']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99362844-4e16-4103-9fc4-0bd4949415ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.183']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b800334d-6011-40bb-b2a7-24df3c5a3248", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.195']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0895f0f1-6acd-49fc-b347-8c1841bcd1b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.205']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8984b5dc-afc2-4df6-8c81-fb9acb909af4", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.22']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d31757b-6c38-410b-8796-fe0b6cfe78fe", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.233']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5c05315-71da-477e-8ee8-dd2845484f78", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.239']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56e6d513-834a-434b-8f4a-f086e3ebe554", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.242']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8b9cf13-7ade-49de-9054-9c60f4ce27bc", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.254']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6574e53b-0a01-4b9d-9abb-d20196f8a310", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.31']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00060c49-d514-4a50-841a-a531f94eb605", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.36']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b8e5398-56ce-4272-8c94-b0ddd7e81190", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.42']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27f31012-3202-4742-883d-744b4adb1979", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.43']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25d90138-aea2-4be9-b10a-81f7f7d29ea3", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.56']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7531533f-efbb-4370-9095-b8e3736d5dcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.66']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ff305cf-584f-4073-9993-0be2ee21c3e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.99']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e446ccf1-b2a6-49d7-9dfb-41edde5cbb22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.120']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e946f62-0d71-446f-ae3a-d9e17211a762", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.132']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9bc9f5b-93b8-42be-87ca-bf412dfa03ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.142']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18bece71-b4d7-45fb-a88b-5d3d86f7aa46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.147']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30d4d850-9655-410e-8e86-a04f643fe7f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.197']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07ffcc9e-38e6-4ccf-b327-1185348e7de2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.2']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e44d557-e87d-4762-aaf2-f4bfb150bb88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.216']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e077b450-05d7-426e-a2ac-148b243f508d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.24']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53a1a6b1-4f21-4d45-98ff-18db55eab09a", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.251']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d77fe96-b15a-46ba-9818-bb4e8c98ab6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.253']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd837583-bdf2-4076-b7ef-1bbcc8354892", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.29']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcfc03b6-916c-4469-9e45-ea3ea1cc1576", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.4']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4786f7e4-a785-4fe3-a0fa-ddb8c054358e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.99']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28260f0a-5e54-4817-9264-534014cfa0ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.180']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5305ebb5-ffa0-475d-b3fc-4cc5df261f1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.182']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5d59987-ad80-4169-b077-115b601dbfdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.194']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d32a65f6-eb85-4474-9a5d-4565e764c7c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.201']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f93f4927-05db-48b8-8d15-16990693cdad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.236']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a78743b-b81e-4a2c-a670-f62693ff9455", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.45']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa257a28-5fc7-4552-9556-27f167a5c2d0", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.240.242']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aaabfc0c-ba69-4b84-8912-48572a8a2671", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.82.205.135']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf20cd90-512a-4f7b-91a4-d5d773d6ac3f", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.104.171.149']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79a77e21-4987-457d-ab18-766c5a07446b", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.104.199.201']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--944da20f-ea7c-410d-9910-0a051cdb5c32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.134.91.52']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91d32c7f-0fc7-40f3-b24d-1a9aa243a818", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.136.32.81']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5352f860-9335-489d-a936-48bfd4938a15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.136.32.86']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32c58256-ead6-4813-9ac0-0bea9b7b057e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.185.93.67']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19ca7020-1e4b-4591-87b7-323f90b3ddc9", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.55.231.189']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed869123-6ab2-404e-9d9f-e53372927f83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.69.176.217']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45bc35f6-6c1f-4871-9f67-c174ba2ae76d", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.71.35.116']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb73d6ef-ae0a-4aff-8889-90ad613e4607", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.85.247.230']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bdd308b-817e-409f-84ce-cb351a141ad3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.91.77.10']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67fdabd8-37d8-438d-a0de-c0a4893e0be6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.105.200.202']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a72e1d1-ce30-4425-87fc-71d749366077", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.128.14.220']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3aa4d73-dc47-4c42-aa29-16a6046ecd9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.128.152.44']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57e8c210-f9ac-4073-bb75-5c34c71749a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.128.203.68']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54c5078c-1b5a-4724-98a1-5d66923ccfeb", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.128.214.243']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5493c4f3-c4b9-4223-86b4-8e6ea9ea9ae8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.128.250.218']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cbdb2fb-4862-46b0-a530-7e576b837dd9", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.128.51.84']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cf0b461-a422-43dc-8015-ad3de1054b59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.128.84.112']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d3adae1-d784-4d05-93c2-76c906bf3d1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.128.84.187']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e433377-3ebc-4aaa-9c04-8011ea011c9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.130.47.195']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0d010c4-e5c7-49e7-abb5-68c6f28993d0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.150.14.250']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1b7caf2-4b99-4558-b715-abde6f0b0697", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.16.52.67']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb3547de-1141-44fa-a9ca-a7bb87a4b786", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.16.53.108']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4ba55a1-08ff-43fb-aa68-22f7e39c44d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.16.53.69']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd19cde2-787f-4094-8ba5-df757da2e380", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.16.54.237']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--474f7127-3cf4-4a3d-bfd1-716e304b7428", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.16.54.88']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7ddf468-4145-417e-ab88-6b035b9148cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.16.55.50']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--882b2151-a699-48d0-aa83-87ea740ff32c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.177.40.170']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1acdded3-4e7f-4d54-ae26-8f60e3eeb7b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.20.210.151']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94d15200-10df-4d1d-99c5-65e6d9389706", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.20.210.152']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b33cac8-0ed1-421e-9810-ae0602678485", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.20.210.208']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22546d35-befb-4f12-a53b-de3ca3dca21b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.33.62.93']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f470ce7b-47b2-48b7-8f9a-14d67b34043a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.62.25.251']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcd1dda5-fa1b-439f-beea-da6ebaed5838", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.79.176.58']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a974056e-b3f7-4f31-96bb-fe600f87332b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.79.182.237']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50019530-1aa2-41f4-86bc-819f4a71fa75", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.105.131.98']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b56c168f-a3fb-4b08-b56c-6a17cd0aaad7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.126.58.110']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02ac5aa9-dd18-4d07-9e99-74331ed3fe4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.191.237.122']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2075d50d-6702-4771-902d-2227dc4fb676", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.43.146.227']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd6f9ed6-3e4a-4277-9690-846b4e854f43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.43.163.26']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64e87afd-a453-4926-a031-fd29998453f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.43.168.58']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08876b23-f8d7-43eb-a108-2044c8a3d2fc", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.51.114.243']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30058d36-f527-4fd9-9e0a-9cb54376a3d9", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.137.26']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fb458bd-a033-4dc8-ae4c-08d968e0281d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.232.244']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15aabad4-3edf-4d0c-ad00-cbe3fd0aaeb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.232.245']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85114a1a-291f-44ed-9e18-20aacf3197ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.116.242.148']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--180f3ddd-4644-49d9-9a22-e9903437a666", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.117.128.38']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c75ba35a-c976-4815-8e1b-591645368181", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.118.146.174']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0680dd0a-2026-4176-9449-4cd75d14be37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.118.148.117']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11b868f7-bc1c-43bf-851b-2ad6fd2c9b1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.119.209.50']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94050ffb-525f-49eb-b136-a91ac0595001", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.133.199.181']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fd8fcef-aabe-4c20-a9a1-e783e260389b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.189.74.1']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--594bd2cd-de34-424b-9f37-f72459def372", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.190.15.50']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eaa1a26b-e16a-413e-9f97-6641b61fc198", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.201.140.248']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c30716d-6021-4ebf-9a90-9000e2584782", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.215.234.114']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09466300-7cf4-49b0-8d45-79df4b265a56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.216.246.57']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07c5499c-83ed-4090-96ac-7937b6562c40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.217.208.51']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8050388c-2335-4652-92b8-6cd0aa4001f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.218.41.106']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba448cfb-c143-4120-b6b8-94fc70fb261c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.219.251.223']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97c45d21-0274-4dd5-bfbc-9128fd1723ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.220.199.71']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06d16203-2e76-4db3-b8d2-bdb444129947", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.220.92.255']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52f26c07-25fa-445d-9983-7e6dc40d9f1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.221.179.104']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6cff2a5-0a14-45ce-9a53-639eade697a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.222.106.88']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31fa1f2e-2140-4270-a9f4-6b81c2f8a7dc", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.224.252.93']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49e41e06-6e41-4aff-ba8c-d6a24944e7b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.224.52.0']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b8e8109-f74a-488f-903f-b14f6bf4c689", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.97.5.115']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3777bce9-0227-4701-a2ce-ed80a5eab7f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.110.149.157']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd02c37b-be71-4f1d-8407-62ffae2f0c5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.111.30.40']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bc2d5b8-25f9-4eec-a49c-c06ab014fd3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.149.125.164']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18a776c7-fbc5-4c2b-a34b-51db89fd83d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.149.125.166']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab9ab292-1c25-4fda-bdaa-9db8564d389c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.149.125.167']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ff76b83-93b2-4a4b-826a-49b0dc328d32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.149.125.168']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dd1a327-7362-495f-9813-da73675bfa30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.149.125.171']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3659e4df-205a-4efa-8892-c8ee8dd6e107", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.149.125.213']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b81f8c8e-5c77-4adf-b929-0c9afb4b9656", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.149.125.232']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--534fe173-23e5-4bd6-9d35-2464c88df35f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.167.128.202']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85dceee9-35db-4246-bcc9-ed61a176284a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.167.128.203']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--340112f4-5f37-464e-af5f-908919396f32", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.184.86.82']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--163149bb-a25b-4a4a-9e06-99aa4fc60aa3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.2.135.90']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a269817f-8a5a-4e13-9c50-08f896d6c9f1", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.211.126.222']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47722395-0e4c-4f80-aca4-171e44e7b8ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.211.96.58']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f80ebc1-d4e4-4fda-a6be-1e48032b421f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.211.96.6']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1341ec7e-f26d-4768-92bf-bcdb0ffcdfd3", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.243.191.155']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b55f0d61-d500-48ca-8662-ff5d0d154a7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.69.40.147']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0f839ec-f013-4883-ae86-b30086eb4410", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.71.100.131']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44f41adb-5fcd-4330-8923-317bd2d71c3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.76.176.49']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a14a21a-296d-48c4-988d-38c8e0fa83dc", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.76.57.208']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1c91e77-3227-40ba-b903-20b379255871", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.93.0.54']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a7a18b3-c25e-4262-9984-2dd1d7a201b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.95.231.120']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7afe196f-f89e-4250-ad12-4180ad60a4fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.95.231.98']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f06ab502-119a-4426-a5c2-975f565a00c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.95.238.19']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b88193c-f3e6-471e-a5de-c518df7eb6ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.124.48.64']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--516bb287-2c0d-4143-a79a-ac0065ff96cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.215.65.159']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3856af39-a380-4e40-b572-cc0ff27e784b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.215.65.73']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de400372-ebd7-40ef-ae82-c84fbc8b77d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.233.91.137']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc4b6417-a503-4dc5-90e3-487f8bb4542f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.78.45.98']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84871ea4-d393-4c22-8f56-cb2e50de17c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.88.176.153']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dce375c-6b3f-439c-800b-759ccc5b5fe1", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.116.90.247']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88e0eaf3-b68d-49e5-b4a8-d217c1cd8b33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.138.158.13']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--855cc534-b9eb-44f6-8ac7-78b48cb695f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.138.158.171']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9dce1de2-e468-4fcd-a4e7-bfca3a1dd41b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.138.158.246']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a70b2068-2cfe-404f-a803-f2e16add82a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.138.158.83']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--350e105c-fb24-428b-b58d-3c91fb637b16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.151.215.11']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bedf0b5d-b62e-4668-9ca7-fe6ad1be363f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.16.3.122']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2639ddc7-f873-499a-b27a-00d35206b433", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.180.91.158']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f99b254d-1fb7-4545-86e9-fddb61a3abea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.242.168.196']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6dcb7ef-cfc7-4d6a-8aef-06205e8cdf65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.242.169.2']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23ae98c1-14aa-41e2-9152-fb9592f4d3a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.242.169.24']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--856ab5ee-d2ba-45f5-97df-70f51f2f610a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.242.169.7']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4e3b0e7-d68e-49d2-96a5-82981e532680", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.43.235.218']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a28227c-6455-4970-a56d-77be62cbe10b", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.53.176.249']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a47ea70-10ce-4db2-907e-82c974536b10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.54.23.83']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0811dd15-61d2-4ea8-b050-22fa1e04a8ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.68.167.104']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--547b2a87-5781-42ba-a7ca-a77cbca69a99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.73.186.139']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ee896a7-13c1-4988-87cb-bb3c699b7f14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.74.4.122']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fa6c6d6-828e-4a63-9b28-3a5c008e9e6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.8.225.118']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6918579-deab-4faf-bb0e-fffb7f3ed2f1", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.93.50.90']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90cd404e-8d53-4cc0-9a55-b897f9468edd", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.93.7.194']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2fa6bf2-8075-4558-84ce-bff4fea80046", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.154.169.75']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40844b1f-0e8f-4dbf-ae24-127b0e98c107", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.165.236.12']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccd3f77b-a205-42db-ab67-cc36afbca600", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.191.225.31']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff233016-dfe3-40d8-80fd-ba0df2780f03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.201.208.25']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8971c61-4dd2-49f3-a92c-a4bdf6e83e2d", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.212.239.214']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5c23a70-5910-4044-8af6-064897b755be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.213.61.114']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17838c43-9f36-467d-b154-c5b477f17ae5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.221.0.223']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4da37f4-0f73-4057-8da6-f776b60f471d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.222.14.237']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01c34b1f-fd50-41ea-88fd-02b7f4b402f7", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.224.219.194']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f642c94-700c-43f4-9d72-cbfe3bad75a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.241.54.157']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f6c12cb-cd9d-4a80-b7b9-655150355e72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.36.35.207']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0fda99a-b45f-4387-8b54-d4ef38a95cc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.81.169.76']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2d9eb1a-d235-41f6-bc80-5fddc782954e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.81.35.16']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--878f02e2-d81e-469c-a661-4f4918d9c39e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.92.115.150']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cfe161d-e516-482e-8209-9bc06353c8f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.101']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0b6ecd2-9c7e-4a7e-a144-e46a6f155e7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.102']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab135367-db21-487c-bccc-2a66d255fb50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.103']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2957bc6-75cf-42b8-8975-5b9644503db1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.108']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--630f7095-2424-42c4-830c-b5cf94d93466", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.110']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b0cb574-d681-4a28-8c87-8e79ef73f1fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.112']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98850d3b-c7ed-4a9f-b585-d14638003426", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.113']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47b99493-707b-4ddb-80eb-74c11d29c7df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.114']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2757c8a-968a-44ea-9369-35f231a20b4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.116']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74352dae-17e0-4eb2-9e04-e725dc52ff79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.117']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e86ec83e-df9e-489c-a4f6-cefdd9faa0b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.118']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--680d8b25-894a-4955-a3e2-bba989f3c530", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.119']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40fbefe9-7faf-419c-b140-89de734202b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.121']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76848ebb-2a7a-45bf-8f0b-6f3ba08f9eac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.122']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4710542c-e264-48cc-89fb-68e4d6a542ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.126']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d4f5d06-5504-4f0c-9517-f066df425eff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.67']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4fbab1d-37de-49e8-a3ff-d3754e980ee5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.71']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a4e8bb7-f78e-4736-8b67-b1091a705f0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.72']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cd62c8f-ebf4-46c9-ae38-5d917acb144b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.75']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44932e8d-fdfd-4409-9fd8-7b8d915221e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.77']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d71d365-5161-47e0-96f8-e63ca23a17ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.79']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7616c1a-c0e6-41ae-a2c1-1c2f60e10c03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.81']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eee6331d-48bb-4acb-bf83-803c9ba4fd0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.85']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f88ab8e4-7e76-488f-9297-9477c02f0c45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.86']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbf25cf0-adeb-4394-9489-3214df1de6cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.87']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb222606-f361-4115-91f3-7ef56b215f61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.91']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44d8f221-9568-4374-aef3-a8f6f6af5dc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.94']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd5208bf-27da-40e0-b95a-34dfd633c076", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.95']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa6dcf62-7d2f-4a3e-a6ab-9540621b963f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.96']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17076f3b-e224-40d7-b29c-ad28d81b4279", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.198']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0dc2b1ce-7b53-4ab7-a687-267076a316a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.202']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b9e3529-8b76-4475-b8cb-a5d5eb05f2af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.204']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8a7f17f-c074-4e16-a511-74e32063c0b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.206']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--300c2b8b-2660-4a37-8b0c-86105f132738", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.208']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dbcf9f6-008b-4569-99ab-9259a9fc937c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.210']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55e3adb8-87fe-4416-a659-7d3f84599acd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.211']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f08bffb2-b3a9-4baf-93f0-b5e5549edd75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.215']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4719367a-1272-43bd-9513-ae79f75f92fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.216']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b2fb556-05f2-45fd-80ee-b5a469c3bee8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.218']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47676c0f-c72f-41d8-a578-e6ba3a6f08b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.219']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f8a6eff-25fc-4d6e-91cd-1dad459bafcf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.220']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c83287f-307f-4917-992d-0452873c662f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.223']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07d14c1d-4aa7-47de-a6b7-e4793a9a606c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.226']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c45bd3f-36d1-4b0c-9171-fafbeff225f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.227']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51a2c83f-665e-4a06-bc3c-83f991efad64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.228']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ba26ae2-eddd-4c6c-8eaa-7e92c395b0d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.231']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7b96b81-3bbb-43a9-bbaa-fbbde3073222", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.235']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24ef57ab-e0a2-4b4f-b204-1adb59e92f23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.236']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbf89cd0-dd87-45ee-bd0c-1dffd657dc47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.238']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f165950a-d49c-423e-995d-a287fd664975", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.240']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3110fffc-ec43-4c6a-ade3-2d141346c720", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.243']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2970e1a-1dd9-47de-9826-8e7f7ef08085", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.244']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99b5d4b3-7444-45be-baf3-c94aaa063d71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.246']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fecd433d-dc9d-4124-b226-bbb488e1d77e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.247']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66286be4-1e89-48d6-87ac-f13092f9f963", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.248']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4428a268-f8de-44f8-89f7-00336f7f1d1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.251']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--311c3746-6ce3-42d4-8fd9-61d888302027", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.252']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fd3a886-385f-4dd9-9e60-f4c404d61729", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.254']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d6096cd-8b51-43ea-947e-ebbe30a8b5f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.107.106.72']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5134ab6-3fe1-4bdf-b580-51927200eb5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.107.106.73']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1036d389-61cd-4189-b8d5-0153ae7b5dc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.107.108.117']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03c7ec29-b316-4c69-b213-321e76451786", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.154.156.13']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80ed5d2d-70a6-4bda-b373-acdd25888e00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.154.157.176']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e55b9a1-7ed4-48dc-83ca-2ff97f32aa52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.168.122.87']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--061534f1-aa4b-4347-9362-489a142315ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.104.248.143']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5e48579-dbd9-4c3c-bb5a-d9d747e113f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.107.80.93']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e470133c-aa47-4410-9c5d-2ff0e41e53eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.112.59.29']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c58ce97-81b6-432c-a503-6982ee5d7006", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.117.225.212']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb408e7d-0d7f-443a-b753-120f1af90d3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.12.59.117']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f65860fb-9bec-4052-8254-4a9ffc40ac0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.12.59.118']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--795e6ea0-046c-46da-b862-f93449722ea6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.126.239.8']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b6171ef-47c6-4597-b6e6-6108443afa0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.135.137.194']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81f5320c-88e1-4603-a587-739339c9b8e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.15.10']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8049fa8-9f82-4d72-bede-26dc5ace883c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.15.11']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d075a46f-4cfd-4a46-ab96-8bcce1d8c91e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.15.12']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d4b0fa1-eb44-416c-8090-6c0f7f1d21b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.15.13']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f80f3ca9-8af0-49de-a178-f8382a9903e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.150.191.236']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--545ddf11-f1ba-4fdb-83e2-2ef6b5a59ea5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.16.39.100']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7c78c00-3957-4571-bd60-fb826b2748a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.169.4.119']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef10f1ff-0220-42ef-83f8-c589bcba28ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.169.4.177']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--588734ce-0507-455e-9bd6-aca6d3ec73a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.215.173']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81db130a-ecf3-4dba-9383-33fe633bd6c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.177.238.75']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9dbc9f3-154a-4423-9c7f-fba082525337", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.177.72.31']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13f838a3-58ac-496d-892c-7d74fe3a60c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.13']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0f998bb-1dc2-482f-998a-a18ea6f89598", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.32']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d581631c-cbd1-40be-8a3a-a055819b3af7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.34']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e07ee02f-d295-43aa-bf9a-0d132ce5bda6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.44']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c563e8ca-367f-4f68-9421-c75156997399", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.48']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55dcd8ce-037e-46ec-8204-16d808f46f96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.5']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c14fa075-af26-4298-8948-9ce59bcf5997", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.67']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78985848-ac72-4d00-96e1-75d75928a5b4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.230.193']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8226763b-8f0b-47d2-8436-46e5f246dec5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.181.8.131']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf066ab7-7007-4136-bb35-807a39a1dbf8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.187.169.232']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf132169-5b6a-41e5-b015-d3183fd71134", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.188.249.30']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24ada8f6-7dae-466c-9131-ae31e9d08fbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.189.14.223']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42a7c04f-bd55-43f9-ab85-234731a84358", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.189.182.234']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a620953-92c9-4734-b129-06b2c48a7532", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.1']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4405a5ea-0f27-4820-a66e-a52096069795", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.10']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a52a9a29-b3a9-49f4-a8aa-6d1ba9e3344d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.11']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd5d769f-7a4e-4ae5-889e-5ccac4b08a32", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.12']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf9feabf-7975-46dc-a8e0-de91d77a1417", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.13']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6eba44e-fc73-472d-ac55-f2e80bf4e2cf", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.14']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--080e675e-f951-4f9f-b812-0178f37c3818", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.15']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adf61c53-3437-41a0-b8d7-cbbac222ddb8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.16']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a4add65-a5c5-41cf-8389-20d086af001e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.17']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cfa999f-34cb-457e-a2d5-9fe7955edba3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.18']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--604f252f-b671-43ad-b9d4-97779b862bb1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.19']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--589baf0f-8d98-4f1b-8d6b-8a0318cc2898", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.2']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a42c450e-00a7-45e5-a3a0-bb4dffa24410", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.3']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2087738e-5efa-4d23-aaf5-669061d8ebfa", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.4']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--913c9e21-7a42-49c4-b134-9816c088078a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.5']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7db1c594-02cd-4600-a63b-eb3965ce9baf", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.6']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba13ee41-3725-412a-94ff-461fa71a8160", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.7']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--079cb4d6-c535-4ae5-b88d-141cc250a1cb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.8']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c5dd53a-2092-408d-82ce-bedd3427756f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.9']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e945768a-3f25-412c-aeae-c7ab514e126c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.41']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d37386d-34e9-450c-9c24-ac5f0344d86a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.42']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4acf21d-1623-4e9c-8691-6793f42f0e05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.52']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8312ad87-bc50-4890-a94a-1fec0297f038", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.71']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96602d1f-7e48-4547-ace0-0c884f2be821", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.76']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1c25c5e-4fbc-42b7-b43b-c55b68752b11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.79']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6058f67f-d59b-4c5c-b768-7d56da04dfc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.213.156.149']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f469dbdb-2097-4a61-a0cd-8f9dd698e48d", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.213.164.167']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c964e58-f638-46d4-98ee-3f7ce2a5dbce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.213.174.141']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b84ff19b-ee93-4716-95d4-810e49745a1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.215.164.112']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--736ec95d-40b3-4237-974f-f375e6f7b945", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.215.244.143']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd39fb25-d2d2-4077-ba5c-983865f0b2d4", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.214.42']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63a85175-d01e-4bd6-b08e-b6fe4c7decc1", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.217.188.132']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c2dde80-38e8-4622-b8b5-b1b565071a97", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.220.101.181']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41c77743-fda7-45f2-a11f-f2d98f8ee1a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.221.237.98']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7d855da-6d3c-4175-a57e-0adc95adcc0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.222.138.237']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d655e92-7d65-47ec-b261-0846b4699038", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.224.128.16']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aeed394b-8755-427a-8159-bc66ccd04fbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.196.12']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb80f207-fcaf-40b6-abf7-fd01ceb2e0c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.196.13']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8408318-349a-489c-901f-8e536e32d311", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.196.14']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef30d927-aa75-45c6-b398-21c1dde7ffa2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.196.15']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--693d9b62-a721-4d8e-ab79-6f9e06a377c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.196.28']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e7f9ab0-f587-4966-96c8-22cf5c74e3cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.10']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5eb52355-8b88-4116-9619-dc1b500fa563", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.27']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b67b907e-d7ac-4b80-b1cb-6302eca15abe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.35']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8c35363-de77-42fe-83a4-6af956771c37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.37']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8bd2d3c-d625-4e15-960b-06bff9a0b550", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.39']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5484042-f245-40dd-97e6-cc806266adc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.72']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec90c37e-ce82-4744-ba9c-aa5636198da1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.73']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e764bc3-e884-42ef-b09b-ecd80f11dfde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.74']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41fe564f-36ff-4976-80ab-fe970da54cb2", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.236.162.228']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe122e6a-f4fb-47b1-889d-d0db00d6fc16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.236.20.195']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f803eb32-51a9-43b1-b9e6-abca26b3c390", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.231.234']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22db5cd8-d5e1-449b-8ec9-eaed10ea798b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.241.208.74']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81a626bb-ca1d-4e6d-ade7-c37d53b1f0be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.104']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67355daa-1af9-4a2c-9255-8f41956b9484", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.112']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ccc9557-f54e-41f2-acaa-08bf3ff51ffe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.114']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ad1a092-af9e-402e-9f2b-c51599745db2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.126']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b66b6c48-6849-487c-ac0e-7e6eaa1b6a2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.17']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b4ab91e-9c2f-4214-9a11-abee39ceab8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.18']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ddd33ae-53ba-42f4-8b9c-a060400bc19f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.19']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72e1d73a-4d89-47fe-b297-e12fd25fab46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.33']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb07d65d-ff2b-48bd-99ee-88630d8f8f84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.58']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c058b993-b4b2-4e98-b387-aa96737fbd19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.60']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a2f6c1d-e78b-4dc3-b84b-58be9703a42a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.70']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fb995f2-aabc-456c-9809-4dc5a6944eaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.71']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d8e0068-e9af-47a4-83b2-8c55075d2a65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.72']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d35268c-5e83-4432-a288-2ed12651fd4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.73']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--774a3569-e745-4447-a913-e33dcb4b271a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.74']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--963951d1-8e50-40e0-b6cd-c455a1323016", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.8']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ad3b4d1-ed74-4551-86cc-c0d35a8eed67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.81']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--545e0b86-782c-4a90-a20e-13a1ea95ef69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.85']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--215bfef1-d0d8-42cd-befc-05d9859fd9b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.87']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--487fd32d-d269-4642-91bf-9f527ce2ec1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.9']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--942d2a79-1927-44e2-a15a-27a1d8114023", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.91']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f489aa6-25ae-462b-ab94-b16216d2ab35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.92']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5ba7409-2946-4c36-8681-677e9dc4830c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.93']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c0c21c9-1698-4d1d-9401-f8d72a823557", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.95']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0a511be-16b5-4d54-a0d4-9ecfba96944a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.3.111']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4d6147a-fcf1-4c90-a564-c380166c0e43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.3.173']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcedb9b2-cf23-4e66-b590-0af880e16415", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.3.195']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47a7e4c2-9d72-4141-a175-9cbc83b9c176", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.3.226']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d896489-7293-408a-922d-c957edb1ba0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.3.230']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0a53841-5f4a-4a60-bed1-8f72e8aa1ff0", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.243.5.205']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d787a33f-e4b6-4b67-a08b-ee78c624beef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.243.5.246']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4051e124-fe46-4118-b2d9-2e292ecf3296", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.243.5.70']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b59a52c-3b46-4ca9-a8d7-6729ae7300c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.247.137.202']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--511d1ec4-32c2-4c66-ae11-10678c03b2ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.247.137.221']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--265ebdd7-ef97-4e49-947f-00a8a569ba5f", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.247.137.92']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdcf9c02-5536-43d1-bbca-0692fdaccaa6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.251.19.47']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc4d16dc-51b8-4c4c-971a-40bbfb791085", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.251.19.48']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d26262cc-45d6-4e96-aec6-74eec223d8b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.251.19.49']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44c400b6-6fa2-4206-8f1c-74578f204912", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.251.19.52']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6257bd7-b7bd-47a2-9ffe-81192d359165", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.251.19.54']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e21e2fe2-7d7e-4361-bc87-2e1e7b9300bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.253.160.19']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40993e06-134a-4fc1-971c-7ce9495623c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.36.81.23']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cb109c1-7674-40d0-9d83-7e6f489cd02a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.38.148.2']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1254fcb1-5533-4fcf-b4ce-17027e507ff3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.53.209.226']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa7b4fd2-f6cf-4dad-8f83-5f3b494df354", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.53.211.215']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09054836-ed7f-4143-8583-e772c9794893", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.65.107.14']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7c22ff1-9979-4616-96ad-0e4399b1e841", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.74.221.30']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d14e72ff-1f36-48ba-a702-ce58c206762a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.89.249.3']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12c302cb-ec37-4e20-b354-b848d809eeb1", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.93.89.154']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0560ce2a-3439-48e0-b654-86e1aed0ad26", "name": "Malicious Host", "description": "Observed: OPENCLAW, WEB activity. Sensors: cfglobal, openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.93.89.167']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:openclawglobal", "protocol:openclaw", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--952ea046-e050-4047-a260-34f55b2d2893", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.93.89.37']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6929212-0bf3-4f3d-837b-518b4492835d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.93.89.39']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9a184ca-6ae3-4ddd-8cdf-39a81d9eda7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.93.89.73']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83210c5e-11df-4d83-ac2b-1492dfb7a1bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.93.89.79']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7e973a9-db58-481c-8287-339eb8f35fb6", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.99.199.60']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b33d4554-7a46-4c6e-a096-873bdc5924a1", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.10.86.130']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a106401-2cb9-43ad-849b-448cae96575a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.121.212.147']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8eb1f8a-7496-4293-bbed-d2dfff7891f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.18.28.28']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0977e491-7ebc-427f-80dc-8fac66e41bc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.233.184.67']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bb3efcd-bba5-45e4-919e-c535fd3e4422", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.31.95.163']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78fb5fa3-dc9b-48e4-98ba-cc4589621501", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.64.212.45']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b0b3b4c-522e-45d4-929b-f56ad60528ae", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.120.189.6']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29ba6fcc-49b3-4430-8ff6-4e413b59237a", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.136.12.186']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2679a4c7-4e92-4e71-8e87-c6ca4a218329", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.17.228.218']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4196d6be-739b-4f76-ba80-70ccb197b8b9", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.174.238.116']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e0f2cb7-3f1d-4ef4-aa58-6e2e28db8eaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.191.2.214']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--421017e8-7111-458e-831c-c48356091d64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.191.20.114']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e84414c0-5724-4228-b03b-c4e683a69c48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.217.145.140']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87c75b8a-cd7f-4532-b045-d821bb55099e", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.228.239.97']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc738cb3-5997-4e00-b087-888594cc6d9b", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.230.190.69']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0410f7d9-ed7f-415f-aaf5-3e87dc8fdbce", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.243.251.250']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ded0ee24-50bd-4dce-b630-b4a18518c5b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.251.197.11']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d7384fe-648d-4fb8-90e0-88920704ec69", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.49.39.246']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de9c6711-76a1-4598-b986-6180827335ee", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.62.87.27']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--502a05a9-6f44-4993-925c-d30b46c7f649", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.94.121.234']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba651d3c-4706-4db9-b621-bacc8363b251", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.157.143.122']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--245660b2-fe10-4b26-990d-8133fcd0c20c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.161.101.131']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22af6eb3-192f-4b0d-9cae-53f0be530e90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.166.123.63']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aea8d6b3-dfd4-47ab-95a8-395e7a8c5a54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.166.161.16']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b62274c-e862-4f20-a972-a1997f9d63bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.166.181.17']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--690c9572-ce98-48ee-b3f3-a66d336a4938", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.166.246.68']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07a35dc3-dd3e-48d8-b3d0-ee99b82dc394", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.166.25.251']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bee6dbda-017c-4429-9967-be99b58589bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.166.55.54']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b18c8351-519a-4656-9964-591a1fbf7d3d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.213.202.62']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e94b44f0-31b0-4cf6-800e-3fb9e7e51da4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.44.20.24']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--283bfe64-79a0-4894-9f04-6fc67f911e0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.44.20.30']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92a81db5-947c-4e55-8ebe-2723145111eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.44.20.31']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46ba5f3b-d331-40fa-b14d-8bb5de593e80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.44.20.33']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c0478aa-77f6-467d-9c53-8187326a1c9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.44.20.34']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa8e813a-7d35-4508-854e-e878016357b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.54.13.187']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b201b12-24a3-4238-ad9a-87b9e430f5bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.163.70.216']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a23e05d-5d9b-4acb-a69c-eacacce3166d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.172.154.222']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62c43558-c528-45b6-b181-ccc35a55da6b", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.174.156.28']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dce9af7b-5cec-4894-81e8-9d8683334cfb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.18.72.126']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d65b2a34-124e-4162-96ce-8bc56ac45a0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.236.15.223']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1605b628-3e80-4c67-a922-93de3127eb51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.236.96.237']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f9d5514-0df4-4261-83bf-03fb232ef361", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.111.226.20']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25597d06-76d9-4ccd-8ecb-9a89e7bb0cd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.119.187.6']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79db21ef-24c6-4fcc-ac64-51528ae31697", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.128.241.2']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d214eb3-83df-4025-ae70-a7795a968dc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.153.120.192']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c24d62e-ff54-4fc6-8ce8-aefbc8434b63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.153.21.124']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d736c63b-0b23-4986-bc6a-91da2529dfaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.2.135.111']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e15cb4ba-46a7-466e-bf04-881c7e5d3e7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.211.125.254']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ecbe773-a992-476c-8c0f-f28c6480db5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.6.54.12']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf24182e-3a38-4322-be9e-0a224425b09d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.60.216.206']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cca5fdfa-f51d-4687-9dbb-5e096fb931b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.101.33.110']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--969e9142-5c1b-49cc-bc51-ae65b8884768", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.101.33.114']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5525ace-72dc-47e7-893c-d08c7b8834c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.101.33.115']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb716a31-dba6-4b24-89af-00a60452a13d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.241.76.128']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a13a8cf-e569-48d7-9425-5c4d45cad272", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.31.165.82']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4af970b2-3661-4997-af97-12c66a6cb6cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.98.151.58']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8497b981-4ae7-433c-b291-2af12d9a505e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.109.200.175']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1134de7b-5900-4038-8006-d41e1f44b8cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.109.200.220']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0dc73200-4119-4ea4-9823-c537a0d9abf6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.109.200.9']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5686fb4d-dc52-434b-b6b4-89a12ee7a25a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.142.28.77']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da8b18d4-7450-4080-b1c3-97817f50bea4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.145.119.163']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0c6e6ff-b77d-42fd-8f37-af1efb23c833", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.155.81.124']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--189db552-fffc-42b5-92d1-31c9554dfe2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.155.84.147']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b00e9a3a-73a1-4bf8-833a-a187831b97ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.155.84.194']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fee5f1f-c8e9-412e-92ae-c5ad411d58fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.155.88.75']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e74d4e2-0dc6-4573-973b-1e8bced249bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.155.89.41']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69dda2d2-af02-4a3b-8f20-bc1e779e2936", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.155.89.51']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9f81228-4101-4ef2-bee7-a5110fa801f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.155.89.58']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bad9173-fffc-49ca-a421-867c6aef3e32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.155.89.67']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--792d8f81-da1b-436a-8c3d-2b6e001f59d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.155.89.77']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3384993a-3bac-4320-9a4e-b3e6eb8acb5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.155.89.80']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5bd781f-3ef2-4d29-8d0e-cb23bd767c05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.155.89.93']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5756e0c9-6d54-426e-aec3-7717c94be94f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.155.90.225']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e34019f2-8ce7-450b-a5ac-9b0429e88884", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.168.192.22']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51e97fd6-2a43-4b70-a6f3-93833cb4d620", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.171.104.57']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f40bb5e7-95d3-4211-abce-0ee3269c9a2c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.178.6.68']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--299439e4-90fb-4af7-ba71-1ddb2d087181", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.178.6.70']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b86dc349-093c-4efd-8f16-1e72c592211f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.178.6.72']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17690c90-0ec1-44fc-9f52-9a2a034dabf7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.210.194.2']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--438e3bb6-c258-4aef-be22-4df126d3ebda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.220.50.199']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c803eea8-e364-42ff-bf8e-9090707717da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.227.210.218']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--972fa0e0-cab9-486f-99e5-6f58245d2cda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.241.134.97']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77803758-f884-4e9c-9849-fb8b758830b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.241.136.95']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eed65e81-4fa5-4452-901c-e50649c1e8f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.241.150.176']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64d939d7-17a1-44b5-9336-64675b364b37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.241.151.161']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3b02223-36bc-4d14-b127-a91635035718", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.241.151.75']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b9709d8-a8b9-48d8-8b6c-c894cb4f84a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.241.179.235']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cc3ea83-1219-4083-bc0e-9f1fce104e07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. CVEs: CVE-2022-22274, CVE-2023-0656. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.253.248.169']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-22274", "external_id": "CVE-2022-22274"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-0656", "external_id": "CVE-2023-0656"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a2c82f53-4a92-470f-a848-0ac29a9b6f67", "relationship_type": "indicates", "source_ref": "indicator--1cc3ea83-1219-4083-bc0e-9f1fce104e07", "target_ref": "vulnerability--fb5c13fe-ad37-4059-80d4-95aa86895d35", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8b834787-4d9b-4ad2-b1c4-3fd87abc15bf", "relationship_type": "indicates", "source_ref": "indicator--1cc3ea83-1219-4083-bc0e-9f1fce104e07", "target_ref": "vulnerability--a1f6f84f-041b-4d7a-a59a-e7bf0952776c", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f9d2a7b-f75b-46e9-96e0-5533d6faf401", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.253.248.180']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0713663a-40da-4d18-b59d-eccac818b232", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.3.114.209']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5901df0-0256-4c55-a7e9-6e728a5ba3ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.3.127.40']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a390589-35cc-4a1d-932e-0a7c455ffceb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.3.145.26']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31b1766b-26cd-4c4e-a77c-c52f32d9578d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.3.199.159']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef3acfd1-718a-44bf-8f69-b268d39ea1d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.3.206.66']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3faa60d-a8c1-444e-9c6a-2d513932de0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.3.52.21']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a5eaee0-b892-4d57-89bd-3a7d83d13194", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.53.120.157']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20866f89-f27d-4677-bdae-f61636222ac9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.81.217.50']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69ac1a91-20fe-4ec2-a876-3eac15b75907", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.122.144.138']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a589be4-c986-41f8-abb6-e1f4d1b52598", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.142.201.163']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adae16ec-6de2-429b-83b5-8ebabcb62a5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.142.43.122']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--187faa3b-6947-48e4-88e2-3ed79d2f7cc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.143.1.66']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9cea321-3124-4695-98fd-0451de2ebf49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.148.63.132']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab4b18b3-4b67-4e56-882e-d9b505d84efb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.10']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3caf7c10-a696-4811-8d7b-c23ecc8a47e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.11']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2dad67e3-d235-4707-85b5-2aaac53e66b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.12']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e0c5abf-086a-490e-b959-16b91b5d8601", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.13']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--086f03ca-aaa6-4d20-b4af-3e4bfc393282", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.14']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b67eb59-43f7-46ab-8cca-d5ce8228709d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.15']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2be8d50-0b04-432e-a6e5-f9813c343e7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.16']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edebd7d1-19f6-4fd2-b1ea-fadce07a4ec6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.17']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fa24804-4de7-4976-88aa-1280eafad13e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.18']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dedce3f9-32de-49d2-9d82-6b176f878e2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.19']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52625be9-80cc-4fa1-9431-d0e236b7df69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.2']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85150f38-3885-4b8c-a3d1-7c9646cb05a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.20']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--505aec14-1825-42cb-9bcb-555e967c6282", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.21']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cac2e826-a757-4d77-bc52-bfe726916f08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.22']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37cd694a-f0df-4a9d-b783-3183d43ff7f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.23']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e834d95-22de-4477-a12e-824557ff8e35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.24']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d763328-8235-4131-a985-3afc56e132cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.25']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93dfe422-0f26-4b71-82fe-b08421b9463b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.254']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e5543e0-473d-4144-8c85-602cf3445d30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.26']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17fdbbb7-e555-486a-91f4-ac834ea3b129", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.27']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63fc5a55-1257-433c-890c-63891f35d481", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.28']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ea8eb4e-8a84-4669-977a-9dc9c5652a33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.29']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e5321f6-a6fb-459f-aef8-0f218b58eb2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.3']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a792c74-af85-473f-9f44-07630f92a5e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.30']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65b2e2a9-728b-4f01-b1ea-b25390e2421a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.31']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85f67930-219c-4ecc-905f-ae09567653bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.32']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c3b0258-6e57-4890-8739-1297501bafd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.33']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8116aae-ea1d-48a3-b86a-022e44ec482a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.34']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39a92321-4d0a-4218-b912-37c314e2f05b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.35']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--052f496b-bc88-42f1-bf6a-e20bdfc04986", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.36']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c14f0a4-4667-42d7-b20b-e0005773a76d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.37']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1aaab4be-b68a-4a5c-9b51-5cee57b2e531", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.38']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d4fbfab-4e53-4d71-93fb-e46b86277c6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.39']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01a2b9fc-4095-4429-9290-5f50998aeadc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.4']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb32ccd4-c607-496c-86d8-bef04a26ec00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.40']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--711defb3-4a57-46e6-82d2-c0f993a0fc14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.41']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a7448ce-9065-40ed-a7c2-db874b635d08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.42']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b134b550-97e3-4813-9fe2-1d0f41aa45a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.43']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--616b1f4f-90e5-41a8-9e7b-c919b62d5f2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.44']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b4dd19e-8d29-4e1e-b1e3-a61d2c8bd6a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.45']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39c26f54-412a-4d46-b84b-d80efe668e29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.46']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ddceab2-474d-421d-bb3a-390603b3efd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.47']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbbfd727-75b0-48af-bd4a-b04a0389fa19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.48']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45e932fb-3e05-425f-8fa4-931a51fe798c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.49']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34c772b5-ef12-484b-9295-875424607785", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.5']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d3dfb68-63d2-4a65-b41f-a6a384df001f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.50']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f7636d2-fdba-4a84-b1c5-85d652642015", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.51']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--813d51be-248c-4f8b-85e6-19b913b882d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.52']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--604fd02c-1999-4b6d-946e-a1c980535c03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.53']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--473c3bc7-f7b3-4fc1-92ee-f4ecab4d98a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.54']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f01be780-d9c6-4e59-908f-f262a6b9e1a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.55']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c93cdc22-b485-4aa4-bef9-55a33b90000c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.56']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ca6ecc8-98d1-4ea4-a6b2-091d57adabe1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.57']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f5c69b6-850a-417b-8161-66228dd8517f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.58']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e68a8d5c-9436-4e93-be3b-a379712804fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.59']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9948d77-3290-4114-8d10-e10049a0620b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.6']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f8470fd-71af-442d-97eb-7b2619c75ced", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.60']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--790f22f2-2097-4b03-8dbe-561baa21ed0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.61']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dea09a5c-c081-4280-b324-8a32c4538c13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.62']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7d80531-efe8-4f56-8061-4f7ba261ac58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.63']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--add5b87a-21d3-433c-b88f-a71bf0ee5305", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.64']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34bf89ea-5157-41fc-b95f-0a10b2d31747", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.65']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b25f0a29-0c00-41a1-b4c2-0d872d68ec04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.66']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69fc1354-7ed2-478b-88d3-6e86c8a32eea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.67']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25b9401f-dead-40e3-b2d1-6bcbdcdc3f61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.68']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df7fb63b-3355-4bb3-8d6c-b5ab230be302", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.69']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--611a9e06-75ab-4406-97ed-e158bb0beeac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.7']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--014a5c6f-703b-43ad-8e28-5116d4dd334c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.70']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5586ef4-5e31-4f56-a663-bc17b9c42207", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.71']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57d9ded9-a570-46f4-b5b0-c4c6d3aafc93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.72']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ad99f1c-a713-4a2a-94be-98b393743d38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.73']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8c14330-b3fe-4d4a-93b5-65c9df76817e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.8']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6d896ea-236e-4e1f-bd3b-00fa8a4710ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.9']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50a9bf61-4769-4ffb-989f-24051d72457f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.169.194.14']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b7eae51-22d5-4e51-be71-cbdeb99bbc20", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.19.109.67']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--686941b6-acbb-461d-9598-4cfcdda620b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.205.129.197']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2024976-9ee0-45d9-9b3d-176262d30556", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.22.147.89']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a3bcec6-67f9-4e3a-acfa-f5aefdb38d96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.221.201.137']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48317e97-0b39-4586-9e1a-e22a1461fef0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.228.139.227']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0239709b-f4b3-4771-b0cd-f7888d5c5629", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.228.168.69']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9eee2ee-7e9d-4394-9d47-195745c5a73a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.233.48.169']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14360b99-7494-47fb-a475-c15e23a99afa", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.24.123.22']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab3cea99-a333-4411-8be5-c3db0b364ec2", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.24.211.107']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d297e717-20d1-42da-8dd5-a254dfbeefd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.24.211.247']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9ce3dca-4f15-440a-b9e9-c2a0393dfdb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.25.217.247']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46fa7484-45cc-4f35-8289-ee8fd44e443e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.25.217.68']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0af6276d-51f2-4f81-bfe7-71ff13f52a21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.11']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f66f10b-b5b3-4855-b74e-5bacf546e23a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.3']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00b7360a-410d-42f4-ace8-aa7fd667c61a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.4']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--455c346d-7697-4f81-ba2e-9e121cb3d29d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.5']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50fa60bf-c0a6-4d15-ad4a-c1995ee73b26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.6']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ff1a7bd-b26e-4a61-a0fa-86ad0a6fb3e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.7']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db8611a3-311a-407d-adea-f9759dd08c02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.34.73.188']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99a4e454-73ab-41e5-8c4b-1da34253474a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.37.70.224']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--623a3a79-2696-4d23-89ca-7126a600ddcd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.43.145.120']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3fa7a72-76bb-4f0a-9970-eca154fa191b", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.255.86']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5e30539-8ffc-4a70-9e2a-ac8d2a9732f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.8.186.31']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03027e8d-3bc6-406c-8b31-bce28a55c2c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.113.233.25']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0d4f9c3-b2a2-4e37-9bd7-2578506ee0c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.113.37.130']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f078549-aead-4f76-bf6d-95c745599eef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.120.230.72']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e1b8105-32f0-4d96-a098-762aa85093fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.15.52.36']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9bcea94-5cd7-496c-b9b3-3b82af5e1ce7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.164.107.4']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc03201f-46c5-46e0-8183-cf99d7af4d89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.164.107.5']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83d755ec-b09a-4dd9-8a40-99cba81a590c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.164.107.6']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b043dad-5acb-4f55-8074-5a6cbae9673a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.164.203.46']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99dd5a7e-0fa7-4fec-ae6e-9d236c3ef84c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.165.16.163']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae74ae0b-ce6e-47df-85e9-80383b84ef5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.165.16.164']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c0427a3-7fa9-40e5-bce8-85b5713d9500", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.165.16.165']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca5edb2d-abfb-4670-8dfd-5a14c2098e68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.165.16.166']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--772e06e0-423f-4c16-a2ad-19b2c98767a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.165.16.167']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73d529ba-cb81-4b0a-9f71-b0feefa179d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.176.108.4']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85ae83b7-0cb3-4d25-80a8-082809be2b13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.180.48.33']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46e92e2b-8ea4-4347-aeff-b7f0f6e76f36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.180.49.104']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9fcc137-2f1b-4557-882c-7222294ff5ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.180.49.145']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--466f6c50-a04a-4167-afb2-eb7e580d61c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.131']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a501658-84b1-48de-a08c-8b3a822bb8de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.161']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2038023d-8de1-4e9b-830d-f20cc460cbfc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.17']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edbc9ffa-5602-408d-9298-854135809496", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.244']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f964c9f-57e0-49dc-bf7c-bf70efe69203", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.26']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1479c62f-a37f-483c-8359-df45bdf00162", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.46']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ef53699-938a-41cf-8aaa-28c8f681cca6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.55']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--190a7cb6-136f-4c97-b2c8-135287164f11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.70']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9c6dfb6-ce46-47f1-9be9-5ea4e784dacc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.90']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4291c37-704f-42b4-9700-930cce6ec585", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.96']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9a4ffb2-f0d1-4a03-887e-497f84a40366", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.178.103']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--642c67d2-b48a-46df-bb3c-363fa61d5763", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.178.106']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa7c2ffd-9b39-431c-bebc-505a043b4546", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.178.178']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3089dd6d-9fb0-4bea-8db2-90017828c933", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.178.223']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e75b86cb-55b1-4b0d-b09d-7e039edc5a74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.178.56']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7635bb75-a9ae-418e-9eec-0c3444154a15", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.233.65.249']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d963cf8e-76d7-49f6-ba0f-d407427e65f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.233.85.106']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c8149c3-3eec-407b-bd2f-2bf7017ced98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.48.251.51']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd32cf4b-f439-4cd7-bc60-2e23223007c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.50.16.36']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a00416fd-3db0-4e5c-9459-8a4c2ecd1c12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.59.206.2']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e87b969-9332-4d14-a178-f134b8ec0869", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.87.250.213']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abc13635-d580-49ff-ada0-795cdab03467", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.9.6.40']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edbb2370-e9ed-448e-b7d8-ecfeafde52ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.154.52.92']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49407007-83da-426c-bc64-5784497b846c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.170.172.215']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdea645b-1c47-4004-98dd-d6c6f92b4c8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.188']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3251e084-9405-44c0-bf70-565b8c30bfc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.204']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8de9cdc0-cffd-401c-8dd2-4655968ca268", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.239']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--164af2d1-0fb1-4d0d-a9df-de54ddee7eaf", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.241']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7acb8378-5fe3-4752-baec-1eb792d15d75", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.26']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--869b47eb-28fa-4ab8-8087-7f18271542e0", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.42']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8264f28-48f2-4c94-b190-27b6255ed2b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.106']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17e11063-159b-4cf8-9dbc-20879ea6c58c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.109']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b985b5bb-5e17-4196-afd7-80eb75786d46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.11']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d30f8ce-5e05-4166-9a31-63e3320b0a4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.113']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcdb8c85-aee0-4a81-9137-0a77a02e457c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.115']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97f8e0cb-59d7-40e9-964d-447b0d0ada99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.117']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c4451e7-14ec-4425-b9c1-250a0e8db6ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.119']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a154a057-a134-44a0-8b81-2f5a244443a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.122']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f494aae5-1a45-456d-b3ad-44b4e8eab9b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.125']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e9feb3f-32f9-498a-a22b-fa608e742f46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.129']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f88b3d97-95a5-456d-847d-9de011210154", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.131']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a142d2b-dd47-4e83-bf4d-e1ef15e8a3d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.133']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e58ea59a-c9ff-4f09-946c-46ddb376c7ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.135']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d83b93f4-d63d-4a21-901b-af308ae0749b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.137']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d061d22-c3ed-4d86-8fc8-9b2c0b4ce68d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.139']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b1d0762-256f-4d03-8fc8-d17be63d4c8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.141']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3aeff90-1109-4411-a973-b0af643e087f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.143']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76611325-32ea-4bdc-8ab4-2fe555990e1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.147']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6790d46-efc4-4249-9c51-04a833e1fecf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.155']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9712dfa3-9cf7-494a-84bd-9f47cdcb91f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.161']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c84f2b9-15ea-4c11-9855-1627881a5310", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.163']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24426209-b7f8-4c81-8660-aaddbc9c2082", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.165']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2dcdc1ed-b780-4b14-aa62-7956b8959228", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.167']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--677ffa43-bc1c-4b49-b1b0-4c91b9315506", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.169']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f67e25fa-a76a-4854-aef4-ed63749baf18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.17']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4274857f-f0ae-45b6-a172-089b971d6d70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.171']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b5a640e-cb06-4f22-b1f3-e48c4aa0591e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.173']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f21784c-0ad8-41c8-871d-ac5eaacc1820", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.175']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b218931-143f-4eb8-acc2-d6b711551592", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.177']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--391d95ad-dcb1-4d57-ab74-e1ca9d9786d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.179']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03b23204-09f9-409e-93d5-87d676432335", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.181']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34437fe0-1d07-4489-b182-f0000c02d120", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.183']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6af7c7b7-96d4-43a9-9390-299caca93329", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.19']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb21a33e-3268-4ecf-b498-f21b32b6d78d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.200']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f7a0f39-8146-4fe4-9c65-dc6905cdf355", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.201']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--718b5053-2692-4b25-bd3c-10439724e49b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.203']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a08fa628-8236-4ac7-b92e-9d4c36812e65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.205']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59f188e7-25a6-4877-ae76-69b176952f93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.207']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99867ac2-3057-4e81-beb0-7a7d8eaa765e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.209']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0192e06b-922f-4223-83ae-06b69043c9d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.21']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e2cb2f4-6857-4cb7-8ed7-76ef26ae31e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.211']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9da6b802-b15f-462a-bb53-f3e5acef253f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.213']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b3af449-99a2-4c3e-942c-93d968390316", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.215']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a423b228-872d-4185-96f2-eb6b9b563378", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.217']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c013951-4ab3-4d29-9d4f-33eaa8611684", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.219']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84734d78-a872-4e24-a338-70d1bf04204a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.221']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd4c05ea-1b9c-42b1-99d2-826157830f0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.223']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7de3272a-c525-41af-813b-d92f2a28fb6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.226']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fd5bd11-98e5-4c5b-9c68-f9161cf1cad5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.229']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c52d6e2-b1bf-4d9d-9214-ca6db422d7b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.23']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38f8a341-4e30-4a3c-a2a1-914d3846716e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.234']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--133e1498-a23e-4b75-a8b4-169230fbe37f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.237']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57941f8d-0a9c-4b7f-b2df-2d58bce8b517", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.241']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6147d9b2-4ff4-43d2-a8e5-a9b73a6997e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.243']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a55873f-acb2-48dd-94ed-9858c11d663a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.245']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75c25be5-a834-4ef6-8f69-4961b3da48d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.247']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ca8bb31-3772-4533-b195-6ebd79421384", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.27']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60609131-b99a-4f7d-8254-e9e448b89099", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.3']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee2c18cf-5f5c-4fd1-a733-525e57cd08ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.33']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a592fdd-75d2-4054-a7ec-0e7f969e748a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.35']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ade115da-6ccb-4e8a-bd3f-c8c219c2ea17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.37']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd4cf98a-f285-4218-82c1-726839b6735b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.39']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0073d47c-a0eb-4863-9a59-c32aef1b53cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.65']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e0b30e3-84e6-499b-bf9a-1a49e04ad0c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.67']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6da08f0a-5f42-484e-b7c1-200be5658f79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.69']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64f92cc2-08e8-4011-9cad-2a86f200ec54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.71']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6659af48-d172-4992-a637-2505fd790945", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.74']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fbd0a1f-c017-4980-8846-1d12979dfa22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.77']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a59dac2a-5590-4c27-aa99-a2f93d581b10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.82']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecc5828a-7718-4470-8979-8bbde9e40a15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.85']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c81808a2-5aa5-4416-8c06-8ef533f3c1da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.89']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d281417-304b-44db-b7bf-f6c031dd56a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.91']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17c862e6-5469-422a-b53a-d92622c48472", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.93']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff386db4-6061-48c8-aa0c-0ed937d4159f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.95']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa783f38-f79d-4fbd-a660-51bcc7c22689", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.99']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d001e27f-5b0c-4f09-afbb-65519400bc93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.201.140.251']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31e31f1f-d704-4b63-a325-deb5d1dbd749", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.243']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b21b0591-86ec-4cbe-8465-9fbc63fc286b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.244']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--945a0afb-989d-481e-8730-6bbffeb9b246", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.245']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f55567d-0231-4c45-a411-2eacc23d71d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.246']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4da73b94-1f68-4c7e-802c-9285ce5f5841", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.247']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cecb039-521f-4eb7-acff-2447ca43329b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.248']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93ee4c6d-c8e3-4eb4-b36d-62bf256f3c8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.249']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5f8cb1e-a89d-40c0-be9b-e2355d030afd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.250']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e96b3266-8e06-4f53-88ac-fe9e1cf44afd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.250.79.2']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ebefcc5-b1fa-4301-a641-09455839dae2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.26.18.82']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b390e853-ae14-40b2-9e0d-55968d856d14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.26.87.217']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6a37795-5f77-480f-bade-3aa658bd4eff", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.3.220.7']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d4b3012-f304-4d11-8a36-42e7ff9b87e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.33.236.157']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71efdeea-f159-464d-87d1-fa75c5f2da45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.54.179.244']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--823090b5-5aab-4a18-91fe-05f4b8f417af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.62.32.180']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--328fb780-11b9-4695-bcf2-b779781ac5b0", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.96.139.29']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28c29418-2307-4dfd-bd14-24e69213e304", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.96.139.47']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--421b56a6-77c5-4ed5-bee2-e6f5f6124fb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.96.139.50']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8737e95-1714-44c8-8553-794070cfb897", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.96.139.93']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a84a5a5c-93e8-4a4d-b7f1-763381b1a002", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.189.101.82']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20b90949-6a20-4da9-990e-73df5a3407e5", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.189.237.172']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3521f9a3-2617-4eeb-b2b3-060dcb58aa6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.204.71.215']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bea9ac91-385f-4e12-b01f-0fd25da4e590", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.221.164.156']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--553ba862-de24-4fb7-9448-b52410d450a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.240.181.130']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd8e6e0f-17ab-4eeb-9e5c-5742d89f5cfa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.245.54.140']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6201c77-92c4-4610-8552-d9f0b0fc6e36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.64.6.73']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf8656db-958c-4ec7-b118-c2ff56ba79d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '197.158.38.235']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9991a692-b012-442e-8534-bc821ff5bf76", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '197.199.224.52']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec9fda0d-4bd1-431f-9f35-d7954038b4f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '197.235.16.100']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1469f619-a7a3-47af-b679-5cc55486acf0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '197.35.41.210']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ae4bd5a-9076-442e-a52a-0316a7214995", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.11.178.150']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--539e9e16-83a9-4570-b089-d6cf17e6fc5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.199.122.86']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a542f012-c025-4e35-bac7-75c80b21b084", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.199.64.229']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f211626-fb2f-4a0b-99be-4611cbd2a238", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.199.65.234']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abf4f111-1451-400f-bdb1-6e8c6bad0519", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.199.71.5']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0963ef74-988d-4a9a-b295-6d2cf5a1bf7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.199.75.112']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb40b11f-077e-46b7-938f-199a3a736162", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.199.76.156']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6338617d-5a27-4ca9-a704-1c47f874566a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.199.79.190']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17f44e01-1c85-41ff-af55-83355afe18a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.199.80.20']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb13bf32-daf0-4e4f-9262-a7fd64f4f517", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.211.105.247']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79d85e37-4a58-4f70-bb0a-bc862c63452d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.211.114.158']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23c1b5ab-5926-453c-b768-2d795c672212", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.23.233.174']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d767bec-61db-4565-a187-e8123bfcf5ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.100']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--764f12f8-74ce-4083-81ac-cccf3944f4a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.103']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c1cfd77-5142-4aaa-afcf-07c1ced3e4ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.104']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d12b743-34d8-47b5-b590-d25af4ea44d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.105']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--791bad32-3e28-4357-9d98-a9d12db0513d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.106']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fd78fe3-3549-46b2-89f0-09c0eff0f5b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.107']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53414d0e-e786-470b-8f2b-3d07248fcb0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.108']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55991586-b04e-4887-b04e-4ee481579659", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.11']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1e93158-c382-4393-b2b3-c174cf950c9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.110']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13db6c14-162f-4c87-8f4d-3e29aadf2017", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.112']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ff72aa1-1d1c-4c54-869b-3a0f39e49dc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.113']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6844a91-ded3-4fbf-8942-fe818513e217", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.114']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51369254-6052-4930-be06-ee9a150b6f06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.115']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bf27382-824f-4bd1-956d-25cbcaf79e06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.117']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b259635d-f7e5-404f-b104-63113098d588", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.118']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c298c075-6945-4189-a5b5-575a7fa4fff9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.120']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8316fed1-3f74-4500-9c4e-9a2d4f00a152", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.121']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d179c69-e02f-4f01-9437-e28671edb5b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.122']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72c03199-fada-4c0f-9069-57f8250e0d9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.123']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8e2578b-c93f-4718-abd2-305068273f80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.124']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34db08b7-ac38-49e0-b6a0-ba6231a71ed9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.125']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f5603b6-38d3-4553-92bb-73dfa57a20af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.126']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--802fa0b3-283a-4973-91e4-9412a7615154", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.127']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9e899d5-d462-4f9d-85c2-84cac154a755", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.131']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf7f008c-61db-4bbb-989c-cb61d80c22ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.14']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c8bbd8a-0ae7-4fc2-b831-98e352e428cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.140']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8325da1a-502b-4d84-b872-83802c67772c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.145']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--242e86df-0569-4dff-a24b-fd3ae9fb9ecb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.148']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91143128-ff7d-463d-b063-4a59d5424076", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.149']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05a848e3-277d-4248-828a-a6c071f225bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.15']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc4b820a-4fb4-43d8-9f6d-d700d67dbaae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.151']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26e56ff5-fe51-4a9a-aefa-efdc1a904c98", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.152']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--357cf6bd-50b4-4d36-8fa7-f3f9e7a53530", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.153']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1a41d41-e0aa-4e31-a0b9-760cb60cae76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.154']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8770449-782f-4bc7-b637-87c746e73d78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.158']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af5f65b2-f782-4a58-a9ec-94140f07e80d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.16']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77b3b209-58bf-4ae7-af92-753348cef191", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.162']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--117b7f4d-7cb1-4d5d-bd69-b0300eb61f6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.163']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b4b99de-dc85-4ee7-99b4-5371a85d91fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.165']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f213928-3921-4719-beed-e83ffda5d59b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.166']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc2147c5-6821-4533-9e0f-4b52c261e366", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.167']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a62666e-52e8-4b5a-bc29-048757efcb13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.168']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1f3d872-be06-48e3-836a-8557539df75f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.169']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d384d14-8584-412e-a189-1d1821265fbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.170']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ea94d00-5fbe-4d0e-ac67-ed67af92ddb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.171']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53f4a722-6c57-48c2-b60e-79b63fdd92a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.172']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6af0183-6903-48a2-b96b-a6eb11cce7b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.174']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e551c6d1-5fbb-4867-b71a-d0b86048b8e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.175']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efc3b2f7-543d-4afd-af05-18fdd45fc102", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.176']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69d51311-405f-4cbc-a99f-d89fe4138c29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.177']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d2444b6-a6da-46ec-a2dc-7199e56d4558", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.178']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50bee4ca-b5d9-4ee9-b1aa-e89a9e5c67ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.180']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96f4af01-688a-4a94-b0ac-d4be75758e02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.181']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad5bead2-eb40-4473-838c-7e34b158effa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.182']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d0264ee-15e9-4a4e-bdb8-bd681b6504c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.183']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--355d6833-fb13-4572-867b-f040758c74d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.184']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be305629-a00e-424a-91b0-c672b8373f1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.185']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a169bf1-edcd-457a-b304-ebbed9418141", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.186']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b29ecf14-30d0-4d55-869b-fc9bef348fb9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.19']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b699bc0f-314e-43dc-8a9b-d12fd5caaed0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.192']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e07dd997-6bb9-4754-b5e8-1c0cdbfb3838", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.193']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41829d8f-02bc-4daf-8a9f-11d5ced96087", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.194']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--384e9356-8be8-4255-b236-ae655e91b15c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.195']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f092b644-a276-4aff-b58c-2c1ba8c8c8ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.196']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad4a31ff-dea3-4af7-a51e-196fd9d0c04c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.199']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b40db2e7-56bf-4e45-b99a-683ac2456c9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.2']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad09d785-0fa4-40db-90ab-fd35565414bf", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.20']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9620b1ca-2bfe-494e-9fa4-9f07a89ba376", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.201']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d83e9d4f-b4c3-4fd3-b646-6199e4aaf80b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.202']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--521b3cfd-2f5f-4f7c-b7a2-3db827478297", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.203']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f78aba8-d1e8-4158-864a-37b5e1ebb836", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.207']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c772b76a-dca6-436b-b64e-69001795ae30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.208']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5ebb103-4d8c-47ac-9639-d4af0951eea6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.212']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--414e0fc3-f95d-4951-a352-ec0262f2820c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.213']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb590ffd-d17b-438d-bf14-2f047308101f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.214']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--416d079d-ea0a-4a4d-9c59-b4ceacb0effe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.216']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f04f6c3d-b7fd-4cda-9e0f-edecdab6d199", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.217']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca4250f3-8070-4a09-b9f9-ae3223eb12b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.218']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--576e954e-1ada-408b-a385-927c663a7938", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.219']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aef3d133-9d46-47e7-9846-18b77bb5b774", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.220']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa37150c-af97-413b-8865-a319954f2261", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.221']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29e01686-2e6b-4f65-b5de-ad5df799c6e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.222']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ad96865-180b-4d20-804a-424056576148", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.223']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3254ddbc-d72f-4fcd-a1e0-66e1faf7ddab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.224']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c943284-3077-4dd1-8110-016ba45c1069", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.225']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b22b5c8e-53f3-4e53-a4c5-cebe27bad0c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.226']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aba9cd2f-7b6c-4c59-9138-91a9f2aeba24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.227']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33505c2b-9fe7-41b3-9184-bfb430544da1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.228']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--240a958f-7b42-4913-a916-55d7a3f2146a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.229']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8645b42-e920-4557-b6b2-a70f58af70cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.230']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77adb569-f9fb-4d55-93a4-b267376f8d2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.231']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53f17234-78ce-4730-ae5b-04fde10c2663", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.232']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--458f308a-6e50-439d-85db-45f08dde8137", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.234']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3c1c158-1a1a-4151-bd52-49aecce7bd3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.235']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--910760fe-9e77-4345-9686-1f78ba00108b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.236']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c1d350d-ecf5-492b-98e8-25c2c2ae5449", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.237']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68b555a1-6459-462f-8856-01a116ece873", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.238']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d1a336a-2f72-43df-8106-a9c60841be7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.239']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d94fd6c9-757b-494f-a6e9-bcd5bc9cbefb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.240']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0cefb29-facb-46af-b93c-b20b51cd52bd", "name": "Malicious Host", "description": "Observed: PORTSCAN, SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.241']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76f926ff-fb83-438c-bbf7-5ae8ee129f47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.242']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73689580-d984-452e-adb1-5490067db43b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.245']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6806d635-2d3b-47f1-b9e6-964d4bb62203", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.246']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa17d302-a855-411b-b8b2-c35dcd240fde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.247']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c004b562-f76d-483f-8b84-a223e5dec5ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.248']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a34f8e07-b679-49ba-a322-6996e0bea13d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.249']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c443667-6840-43d0-8a7b-17784a6e645b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.25']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a55fed76-357b-4267-bb12-562e38a7f0b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.251']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c4a1fcf-5f67-4db8-807d-d6f02f909f6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.252']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff8fbbde-31d1-4997-862f-47375a3be13c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.253']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2138d3c0-2ee4-4337-8cf1-ab69452ad35c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.254']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10461c35-aac1-426b-8d67-47149659a6c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.34']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ceca06ec-56da-4aa5-b4ff-33c4bfa4b9f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.35']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f957c63-2a9a-4ba3-8ffb-b0f12a875dfd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.36']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d435ec6-cb0b-4da3-ac8f-9e2c165cd938", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.37']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9338e41-f685-4598-aead-402e5245019f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.39']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7328d58-c82d-4083-a8d9-e34a90ec673b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.40']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0a6bd93-f192-4ab6-8d6f-6264df434028", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.41']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a13e2168-186b-4e6c-a3d7-4b9c37e826bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.42']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f02807d-48e2-4689-be45-09e93487ec6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.43']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3657f825-35c0-45d0-bba3-5cafead026b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.45']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e33d49fb-d3bf-4a6d-ba72-a87d599e625f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.46']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d2a1bdd-c7be-4654-8c74-40cf10b1fa87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.47']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1febba40-500b-45e9-a1b5-56d023d0a19b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.48']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d99b4a0c-9f13-4738-b7d4-0c3407c6c246", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.49']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c66301f-480e-407f-8574-a836232b4df3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.5']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a3905f1-f527-4c16-9959-0e3c33fda1b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.50']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6f4f7ad-32dd-4029-af6f-93d51b1c1384", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.51']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d8f9c24-4c88-42e9-9dda-93feef92ed4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.52']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31a9bc93-1ec9-4b1b-ba12-58e84a25fa1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.54']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62a37c8e-addc-4400-bd73-90f23e7172cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.55']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07e45f26-71dc-4078-842a-90fa9d08e746", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.56']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cf7a473-6734-4c00-b189-e076d6344e70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.57']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--744149fd-45a3-4c5b-a24c-d246fb3caefe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.58']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--666ce5f5-8f91-4537-b7c0-960db1ff1601", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.59']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36a4219b-06b0-4739-9e46-57e77e3dc983", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.60']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87440ba1-0005-4c14-ae60-5cb00b6b96be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.64']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f98836fa-ac22-43e7-b8ee-9f7e72a2b17a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SIP activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.65']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a09dc3d6-4b15-4e4d-a4b6-f94dabc4eb1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.66']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f56038e-446e-433b-842a-100070473fdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.69']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--697de3af-80f8-4928-a55d-94dfd26346c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.70']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9066963f-2eb5-4d7d-9ebd-a85a8a8400f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.71']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--267444b8-afaa-4f89-8779-8a8699b0878b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.72']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f384a65d-9f1b-43df-9cb5-7b1537bf8224", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.73']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78c441c0-dd90-44a1-8592-f51d5a7a341b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.74']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4212cebb-5e43-4724-bbda-7c9365be37f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.75']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9494325-2a8b-47dc-95be-e98b94effcde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.77']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e60b9dd7-9f83-4d29-b0ef-cc565ffa6928", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.78']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--801cb08a-02b3-4a76-99ea-f372e1c1e620", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.79']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d723b4a1-38aa-4441-86c8-50baec50e9c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.81']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f670cdf-ed42-4a1a-9e03-90a18f64a35e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.82']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd3f7b6e-37ae-41af-ae2d-2137292766ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.85']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09a31db6-5056-453a-8977-235f5ad2b293", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.86']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b4be0bc-fb0d-4b38-9e39-78a3836d4446", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.87']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--324b1aea-40d1-46dc-b144-731ff52abb48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.89']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69a42711-4565-4b63-8b64-cc488ae91ca6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.9']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9f483bc-be97-4cbf-a0c4-c9100c0da0e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.90']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2a0bcfa-cf44-4ea5-b92d-0264e47053ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.91']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd323617-87ee-413b-b39f-b1cde4231b04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.92']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d48f04fd-ef40-445b-bbdf-12c4c4073cf6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.93']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9862389-97b6-4298-a1e7-b84cadc4752a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.94']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27aa2c6e-7e2d-44f1-9eba-403f578dc97c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.95']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69bfab8a-6eeb-4d81-b7fe-9fbd25d197b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.96']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35433a9d-bebf-4931-a263-f71ddd61a085", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.97']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de1bcbd2-3e6d-4956-9661-3bfc8a7865a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.98']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b732b6e-13ae-4e57-b5d3-d48095c91d0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.99']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2abdfc0-979e-4a53-b05c-0f4c7f9553bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.38.85.149']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1eb36d70-d40e-43a8-996e-6e5e3dae2ecc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.38.89.100']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b598b0a5-40bd-486c-902c-19edd508de64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.46.134.148']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c99f6161-8a42-40e3-adb2-ef41299d0309", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.46.199.116']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eda22a82-abb5-4c78-8049-cd2b1ea922a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.50.114']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ac885b6-3055-45cf-930e-a8fdb4056397", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.56.135']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df3ce6d5-3e96-4db1-a88f-6aafe688020d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.56.46']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e103371-3d47-43fe-b1a5-ab4e57f40299", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.56.6']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e0669d3-1705-4784-bfd1-c50c1456c80e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.56.95']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f11c1000-d669-4a16-98e3-faf1c7389516", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.58.112']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdd36aeb-0ca3-4c64-a894-b9e5ea574466", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.58.119']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15260cd7-1930-4b3f-b36c-dfb1e67144f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.58.130']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a78afabc-b965-488d-9977-7f08024d75ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.58.148']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96a238b0-e5ac-4309-a0fd-20c7ab2186f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.58.157']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--590478dc-376d-4370-ad22-bec0ffbbdfbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.58.161']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c85a492-a8ac-4e1d-b70c-fbf43bdc38f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.58.17']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d223dbf5-b1f2-4ab0-b049-be56a5d10cfe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.58.216']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--341d125c-ed96-4bb3-9057-03c53622e98a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.58.227']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7896370-84a3-4b1d-a314-ca652b8cfd64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.58.232']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b18fdb6b-6b66-4c81-94ce-cd6df7fc80db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.58.234']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--397d8415-cd22-42e3-8364-1e88e30b4494", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.58.60']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9523398c-b050-41b2-a4b9-34181cafa9f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.58.62']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca6f0efa-4a9a-4f1a-8f8c-26eabf7ea7e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.58.68']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6491880d-e5ec-4265-9b40-d954c2059221", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.58.7']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b5ab18c-e0cf-4031-bec7-dce06daac1bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.59.230']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--491b6570-0c35-4d46-9f80-9bf631443f71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.62.59']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fdf26b0-3322-4b7e-924a-2524697b6c40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.98.53.130']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ad2dbc6-bd33-4a01-abb3-ed607753df53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.98.55.60']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9aa41c76-2f85-4f05-a276-863b4479364a", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.101.83.197']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da346cfb-14e0-4a18-846e-4685912f05f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.127.62.250']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1a95385-1ce0-4203-9cfa-fb885f8c9269", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.127.63.58']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82ba9ba6-aced-4c03-9891-363e0dbb5218", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.192.23.120']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c8085a2-7fd9-4246-82c8-6f6543d49a29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.195.249.83']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01d05300-c010-4cf9-be75-e5771b7bb48c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.245.176.54']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4a1ca11-bd74-417d-9267-5ca01b95b1cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.30.231.6']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dab6ec8-a73e-45c7-8e7f-75814a61b386", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.115']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0711572-58df-4d67-b717-79b4f32a6240", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.118']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64be8ecd-1884-436b-804b-1fdd754a7987", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.119']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--425e0711-e130-4091-a141-369551eaa8fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.123']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2ea1448-269b-42f7-bfd0-d7ac1beba324", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.124']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6021d2ee-10b4-47e4-8712-789b9b2d028e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.126']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86db3d95-b080-43ad-ac45-0a529caf8597", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.130']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24d4c28b-56c4-45b5-8395-68438dc68c94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.135']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37a0c33a-4328-40d8-90b4-77711a37ee55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.136']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--226eaca0-dcca-459a-b54d-ef5a4806b953", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.137']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3423f41-1ca5-4cce-9f5f-b0e7c22f80f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.138']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3587b796-6724-4f79-ab4e-d020b282b4a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.140']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61b3ff2d-a4eb-4651-b91d-575b9271a2d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.145']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2af98123-f9e4-4dad-925f-6f1442be3a96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.151']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09826c90-5cda-4a4e-992d-c0f6b92efaca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.155']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dc7390e-a93c-4eaf-95b1-442634ee170f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.157']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae61c757-7a58-4e67-bf7c-7c3a46cb13cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.176']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a9425e5-35e5-441e-8e95-cb4fe8d7080c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.177']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5d1db40-556a-4515-9e2d-9cd4e96e6536", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.178']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2633e6c-77c5-477c-b79f-9176109ad247", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.179']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57751f55-358d-4a4e-99e2-c9c7b5368400", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.180']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01063629-a950-4b74-a721-1e30d3a15782", "name": "Malicious Host", "description": "Observed: PORTSCAN, SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.181']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69050783-a2cc-4880-be62-e410d3dfd156", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.182']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fae31ea-f69f-420d-9e18-239eb66d66c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.183']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--950ba4d3-0022-4444-9d24-0f1dc2ad4636", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.184']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7aa9374-a691-4558-b71e-5fe2da1ef0be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.185']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--691d705d-16f8-43fd-b536-5ffb8d8c153e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.186']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--358166c8-39e2-4be5-acb3-a7eeb47a2e03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.187']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6b21110-ff23-4a8f-b118-97a290d5af54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.188']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33024420-8e97-4813-9709-88c0db019081", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.189']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bd2f1b6-29db-48cd-966d-076a28348d55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.190']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4dbc1d0-3d7b-4465-b4ad-b1287a1c3112", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.191']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1303376-aa0e-439b-9de3-c8ba0bdad685", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.32']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7389900a-1fc5-48f9-9b52-7483ed7d85fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.101']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffbcc70c-126f-40d4-83e6-06569ff8ee57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.102']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d50d26a0-dbb5-4d49-b134-f4adfd5f61e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.107']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18859306-5805-4e0e-bf06-b2717cedffe4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.109']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec1357ae-2b74-4803-ace6-277d87f3ef8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.110']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b7bb9be-a138-4eeb-a0a9-7d65a9d9898d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.65']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05bbb2e2-3fbb-4434-a2c4-3587ec95a249", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.66']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2adc81b-5296-43a5-a555-81ecd04a042a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.70']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d888cbc0-8a3a-4f92-b4da-bbbf1c3ad39b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.72']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--040885e7-0eca-4790-91b2-dfb7c622157c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.73']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f31b9c86-bb7d-46cc-8814-6d667ec49274", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.74']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d15ae98a-70b8-42d0-8572-568d97cd1472", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.76']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c2bce40-8a92-4f18-8d22-3eafd7f27047", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.79']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b5f80db-53c9-4ad0-a578-857a0725c1f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.82']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66744c78-51b1-4182-a07f-f2c3ee6354b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.87']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24de57f7-1e18-42a3-9377-5d1b3d8873a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.89']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8538fab3-99fd-4a10-a8f6-9e626f2673ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.90']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da6f91a1-9988-4ed9-b353-acd171c9b1ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.92']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--baacb0ea-1bc6-4e73-9c28-d252bbbc263b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.93']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5307bbd-6008-4caf-9e10-64d1fdbd41e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.97']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dedc153-1915-4c5c-b6c3-d7325dcc8f37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.99']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd292d33-608f-4462-9749-f902694ca9c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.47.242.83']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dff7c93e-6c08-4fa3-9442-12fa9b0dde13", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.135.146.53']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--084fe078-8c10-4670-a673-64f637774caa", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.180.146.58']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06c7a643-781c-440d-88e5-2b90bf404f58", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.180.222.85']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84340e12-1881-43b7-b226-4f21fd50474e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.189.173.86']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02821cf6-c82f-4c69-ad41-e9425471ed2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.26.72.20']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcf79244-08f7-42cc-99c8-835705df68fc", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.57.121.112']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9db7eb6-948a-4705-8e30-b772469827a7", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.57.121.25']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6777b6a-44ef-4ad4-b2e2-c6631edcf2ce", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.57.122.238']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fe35ab7-c1e6-466d-9dec-8fd63c846536", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.58.203.107']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb372e13-fd6d-49ea-88a3-a634bc32af15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.59.183.60']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7899060e-ee6f-491e-9e18-c0c174dabd73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.63.211.145']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ab235b3-4989-42cd-8226-a7794f482301", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.102.105.170']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5946c699-26c0-4597-8141-97737c9ecd0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.102.108.84']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc534ddf-4514-4f0a-9064-ddca286a00bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.102.116.167']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f177f2d-9699-4131-94f3-bd6f8eaa80d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.102.117.55']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d74a866-7e56-4a91-9fd2-d0191ff3aa06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.102.223.197']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19dc0d35-413b-46d5-bc2e-ceac371305d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.102.43.161']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--761160da-5dc7-431e-93d5-ba51cb0af7e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.102.89.79']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48ccf56c-3de3-4c43-a47a-0b0a710a9d85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.102.92.213']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80d08285-d630-43ec-92aa-c7ea859f150d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.102.92.72']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--561a6bc3-2f2d-4e14-9d47-529b6f740ba7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.102.98.235']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35b7bf1d-eb9a-4d92-999a-1922c486a46f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.17.55']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f37cd34-151a-4182-8413-a2d4385d351b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.186.90']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7551251-5176-49f0-a05e-f1cc520360fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.195.185']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d98235a9-6471-49f5-b1b1-716df5df513b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.197.7']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--222f14aa-efa6-44c7-8eb6-215f2c3303a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.205.254']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--454249b1-7509-4f20-b45a-b73b472600b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.206.76']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03f89d1f-477c-4bbd-b7ef-d2b1a71945f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.32.153']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba521ae4-215a-4ee3-96af-cf91ac786a4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.33.119']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--770d633d-51ce-465d-a6ae-97946e881b40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.48.199']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a4448ee-724c-4bef-be12-eeced57372ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.48.26']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2a700ac-aa41-4f1e-976f-c4f8e389ada3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.56.125']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa08f964-3c13-4652-abd5-47c7284f8284", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.56.86']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5924874-c356-41f3-8020-336e5a048721", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.115.45.115']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb1ea002-ac99-494b-8e99-11275573f48f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.115.90.159']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--596dfa1c-c859-4338-9045-feb81568490a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.115.90.214']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe7fe2e5-14d8-4504-8fae-d1f33f992fec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.200.9']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c0c584d-fee3-4f78-bd31-0f9f8866a37d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.201.169']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18067c54-f3f1-4a1e-886f-4024f0f32502", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.202.145']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8da1837e-4351-4a32-8f52-e0e35eaf9221", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.202.209']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b474ca2-796c-48ef-a881-45a219ddeabb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.209.129']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eaf77641-30d3-4f51-9de1-de0b49bc225c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.209.70']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ede05421-d3fe-4a2f-a479-0246cd55e0de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.216.125']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37021722-267b-4045-995e-34372f034a3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.216.147']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6be479ac-c65c-48f9-863e-247821ba92a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.217.162']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fec4cefb-e3f7-437e-8793-e8bd19c2664c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.24.61']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b87d584-1922-4e5a-8a0f-24b7e6420140", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.240.192']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e46f348a-7f4a-4317-b9fd-8c3289237947", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.248.174']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56ed92f8-7b30-4d36-943f-12a32f5da4d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.32.39']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22d64e27-6c8b-480d-8662-2b83154ba4b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.32.47']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb712cbf-c4af-4e55-a13b-8905eb68f2ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.32.59']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81a139ac-be3e-4fba-a32d-2c914da113bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.119.86.71']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca410952-7ed7-4721-b50f-9d9f70dd73da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.119.99.184']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cc18feb-1fc7-4ddf-afcf-db5ed64fe341", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.12.240.188']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fd33fa4-cf1b-4003-9585-bd97eadbafb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.12.240.9']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9eb03170-0cd5-4026-8033-d45f5778c714", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.121.46.221']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cecbba9-7e4a-46f8-90db-b6e1212c24ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.124.87.12']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--375aa802-bea3-423c-9cf6-6f1568fa3d03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.124.87.13']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a68c641-1f69-49c2-baf5-2dda18bc3c21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.153.188']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3de13aa6-67c5-4c77-8596-f882c4518271", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.155.221']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--026c35a0-4e57-4f52-958f-1c02014ddcf8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.157.56']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0da2b727-dbfa-4935-8153-800499aa379e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.170.152']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b76ddb8-5fb0-44b2-afd0-f976851723f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.170.172']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02510e66-5698-4688-ad3a-2c68064f8aec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.187.30']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bbfb5b8-ef87-4c86-a8ec-41ed8ab79dc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.195.188']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9095aefb-3c6c-41c1-b8a6-52038ffbf6e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.202.110']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46de057a-561a-42a8-abe1-1a1795078efb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.202.120']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd98e201-556c-4d53-9bbc-0c848a4dba15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.202.251']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d6f01e8-3c0d-46a1-8390-e1b7b74d8cfa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.203.209']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f768066-9111-43aa-8204-3f630537d49f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.204.214']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f0f4317-755f-4419-8d73-605dd383b21c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.217.70']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--679c49ea-96b9-4d44-a664-7d46faeca573", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.220.195']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97081127-724f-4530-84fc-0b6b04adf923", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.220.21']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a2f205f-4213-4a39-948d-5525a8e9611b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.224.63']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--687b775d-450b-451c-ad55-9aff9eb7cc61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.244.253']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3da905f-6fa0-4191-b5bb-ed21cb17bc0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.73.198']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37f9b3bf-931e-4374-b9f0-464d5c68b893", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.73.62']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70d76b8b-c92b-449c-af7a-9eba7e817dac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.73.63']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--245b6505-eaaf-4a57-b65c-5ee4cab74dc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.74.210']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61c5d39d-b3a6-4a1a-8f09-1f0116ac703b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.74.238']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbbf01f9-cc94-43b6-9dfe-154ae017297b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.74.80']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a44fbfa1-00ff-4fdb-93fb-db71e249f6cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.79.76']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03096ed9-0344-420b-86e2-e33b70192162", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.83.88']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79d5c973-3c37-413a-aeb6-4cebf70aae96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.87.238']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--677d3f08-b8cc-4e95-b370-c70440384b18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.89.71']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99507975-1f49-4aa2-a1a5-015a329e11b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.93.87']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71f6660b-9b50-4a07-99b6-e0ac4da7c2a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.94.72']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--668e0447-1026-4957-b416-ca889eaad7df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.160.31']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8f22d6c-4deb-4c64-9502-8d40df4b98e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.162.180']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab0651e2-409d-4b0c-9d0a-e1dbbdbbb92a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.162.238']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fc7a598-9d22-4b1d-aafd-b02113ebc2cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.163.139']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1dde8e41-f0e1-4f53-9393-7c5e95e5ef70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.163.169']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94bc81d5-5bab-45a5-aa8c-6913f6a1be0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.163.245']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62539910-e3e9-48ae-8885-4d73f5c91f4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.163.51']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eff6310a-3600-4f62-aca1-d359dd95b9e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.164.68']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4b83844-cc08-49c3-bcd0-1fa2767682f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.200.45']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2efd2d2e-e2bc-4fce-a67d-188e4bbe0da6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.201.64']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93acaffa-4119-4b23-93e4-35e618a47ace", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.201.69']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f89e54de-5eaf-41e4-963e-39356ad324f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.224.207']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa1830a3-98d0-4e36-a25b-7224c4e5b401", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.224.64']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8acf84a-a54f-4efb-8a2b-546b600af179", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.225.33']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f645d96c-ab49-4fe1-a4ae-b31e3f9619aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.150.192.96']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40b54abb-ea6f-455b-b53d-8fd676d94bc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.150.193.52']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f60ce58-758d-4a06-8b41-3b437baa67cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.150.194.49']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b5a612e-85f9-41f9-87f3-0a2a28ff7659", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.10.186']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8db986e1-e90f-4112-a3cf-da9c4b5f166f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.13.196']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4259f2c-28f6-4d27-af71-cfa645ff106b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.14.102']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cd59615-b87c-4b97-a23d-1217486fe879", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.14.130']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--629850cb-2b44-40af-8b00-9225d240c21e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.14.140']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd9ed553-d480-4000-9af2-f1be6fde3d29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.14.19']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8ac5d63-6f28-4f76-a45d-e38dff29aa7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.14.227']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42124fb3-37c2-4d96-b20e-d17f1760904f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.14.5']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f96985a4-5ff9-49fd-9490-fb042a95ba56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.14.51']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c818fc3f-57db-4b32-80c8-2424079975f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.124']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57c21adb-e9d5-4772-9436-7ca941614041", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.130']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1d0a15a-3fd3-4d5e-a489-9ae7df2f99d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.166']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a21ed39-15f4-4f4b-bef4-47b5761ef0c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.167']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f34242f-fc31-4558-a82a-7652ef5ca082", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.174']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a19fa10-1325-475b-934b-a02cfd6efc70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.177']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d6363e2-3b84-487d-8802-83861e3708c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.178']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2454982f-b9ef-4539-b97f-b511cd7e0c97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.206']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--711d4a71-e03a-4e54-b0d4-fb36b491994e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.207']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fb725d2-d7da-40b8-9aa3-128a6baf81ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.16.165']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4642aa1b-fe7f-4935-85cb-cef8cd0a7058", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.16.228']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fed9fcbd-6ddb-4226-b869-e40228338b90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.27.102']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a47b7e3e-c283-492f-8562-7ae6a679d8f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.3.80']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07a7d4ab-56a1-49cc-bd63-bb817596e2e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.30.209']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e59d1f7a-f33a-4710-ab59-742240a400bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.32.78']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d1c95bc-f983-41d3-8a28-1b4edda36d30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.32.79']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7b975b0-4857-424a-bbb4-c777bf1f7c5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.33.220']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee0050ce-4418-47ab-80e0-d87bc1b32403", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.33.23']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f28ba83-2a39-420b-9ce7-9d3325100191", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.34.47']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad996d32-ebbf-45b7-ba3e-cb01afae9c34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.34.74']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--345e9f1f-0705-4a08-bbe2-7e0125011c95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.37.97']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db580ba0-bcac-4399-925e-20ae45725b90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.6.253']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ff4216c-27d0-4f06-89eb-fd7475107280", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.60.170']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f210ded9-f707-479c-ac8b-c6a4f1c0e3fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.60.206']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b3f5243-bd73-4d1c-a042-fd70fc22bfbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.61.13']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--019255d4-d57f-49a9-91e6-990a3c8c978d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.61.136']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22b2ba41-5ad4-477f-83d1-a17f4667c3e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.63.192']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8349b59-1856-4211-881e-53107398f4d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.74.182']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6119da6d-4dba-49e9-975a-d08e104bc66d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.74.20']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10099feb-a821-4c99-b9ea-c6dfd7890424", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.74.93']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eaac7081-2f87-42b2-9e6b-5f77be8242c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.8.222']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--501033a0-ebae-4fb7-9109-85bc153187eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.0.133']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca716313-7f36-490d-a306-4c68da77ec81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.0.72']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ece259f-9195-4ce6-90bc-05f80b46d69c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.0.75']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ec98932-2a61-4f6d-8866-8bafa98c21d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.1.102']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd5186fe-8838-4682-9a15-5cb78c62e60d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.114.245']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--573952ea-0b13-4ae7-9ff3-97bdc8bf8c72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.12.169']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8de91caa-5f7e-40f8-bfb2-6c2465e5c06f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.12.63']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d303f406-a829-477c-a1ac-47e8e0518683", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.120.148']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d62d7d0-b9be-4026-8fef-f1a1eece7c27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.120.149']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a0061df-1ec3-4957-9d09-f3f5c77db7f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.120.173']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b18a137e-861d-4ddc-9774-41bd5b8fd3bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.120.210']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e668d0f-f040-448b-a1db-b2ccdd6b1138", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.120.227']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e40fade-2f68-4208-a1d5-1766ed85014b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.120.248']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b123a6e-c41b-48e3-bbb7-cbb1771f585e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.120.8']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e7160a5-bfd5-420d-9020-8ac59389210c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.121.101']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf914a3a-19fc-4ca0-9cae-e03f6479346c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.121.236']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89e4739e-d277-400b-85cc-85137987db2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.121.238']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0e8bb73-771d-4bb6-83ab-b8991224c1dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.121.239']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7b9d36b-1b8a-4f44-b760-eb74372d9fc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.121.46']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f190f7ab-e088-42df-9a31-64ed42d9cc60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.121.92']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1921e44c-2c2f-442c-96d2-9c4297895469", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.121.93']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6b0a7e3-98b2-4c74-9018-ec88c50178bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.122.16']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--401933ec-e89e-4bf5-8015-91eb63207c33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.122.52']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cd59ab9-843e-42a6-b3e7-7d46ca051fe7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.122.83']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5723dcb-3cef-4b66-8c3e-f7c1f7be630c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.124.105']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c22ea168-f76c-4d34-a177-ef3c4e3bc63e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.125.82']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70f3f94d-4524-4f2b-92b7-52fb9f02e4ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.127.155']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f831e28-115d-4bf2-9f23-9fc7739bcfca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.127.99']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db2031fb-811b-435d-88f6-805d180eac9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.5.220']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf23532a-9f74-4bf0-8e11-85f521cb55c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.6.210']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7f73b2c-970a-4f21-a1a0-8f626ab5f821", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.6.227']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fec2b1a-5516-4e17-9c5f-e9096fd4cbb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.6.240']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d90fe722-15b9-4cbf-bd03-263822646c4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.7.136']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6be0b23d-5c61-4555-9e5b-56a43988c09a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.7.137']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c375e9a5-cb0c-4ef7-802a-cdf9f8c9e5ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.7.149']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8a99952-9b84-4d27-bb29-3e14da158546", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.7.168']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebb5b083-dfe0-43c0-bfa3-c17b7b4a17b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.7.20']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--450da03f-c459-471f-b19e-2dd74344253d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.7.214']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88d3194a-ebf9-4da1-b0c9-70e297a45f5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.7.25']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8449063-4a44-40d0-bc60-70fd416f4220", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.7.56']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7f56630-8b5b-4452-9ca4-c35c358bf522", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.8.243']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10095c9b-7a14-4f66-9447-6f5fd090b4fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.104.255']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80e2ae1e-5380-4437-aeb2-c80d839d01cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.105.105']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c6fe148-fb61-4e67-b176-fe5ca6d85c08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.105.13']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3f1a1b5-6b6d-42f9-98db-70148cbcfa89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.105.164']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1146a0c6-16ed-4804-9570-6b5443dfe67d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.105.52']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa91ba57-49c8-4912-b053-b24ba0853be9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.106.110']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--757bf77c-3c73-4a50-9490-ab6eda218f2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.106.171']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d81f149e-29aa-4cc8-8ea7-826873e54c69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.106.193']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb8e4afd-8465-4a06-bced-524629ff7cf3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.106.209']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d59e5619-a02a-4bc7-a06c-1df98a66e565", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.106.61']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1dcf433-4722-426b-a69e-c01a83938735", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.107.10']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17974040-2cda-4572-9088-90865f740a25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.107.109']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9599cd80-146e-4746-b3c5-7c2dea53bc6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.107.174']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab9fffbe-590a-4130-b2ec-3365ecc3afe4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.107.206']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9f25d2f-e360-480c-974a-746fa5c51e55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.107.214']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb7dee4e-2104-4344-9764-d73fcc6d2ee4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.107.229']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8686cd72-fa7e-4077-b1f7-75859d32dac9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.107.26']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--308cfbb0-396d-4a50-80dc-f3810381c240", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.107.45']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c2ca4b5-e87f-42eb-8298-3422871852f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.107.54']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a36a4e1-7ed2-4807-8766-9aac89e51169", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.107.71']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f14d5c4-03e2-46f4-a4a1-92f865127cca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.108.15']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5572d90-5530-46ce-94ec-c2d17f936d8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.48.134']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--627370a0-39da-41bd-a09f-784fa9910a94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.49.156']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88e1fb93-99b0-47df-9883-5bc966cb3c45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.49.41']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f370352-948e-4735-901c-be4a9c39b462", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.50.188']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80d41f93-5ec6-45d8-a7cb-ea96e8dcbc20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.50.74']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e58c7a2-3f53-4c62-9857-f974e2386e78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.53.185']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--607a2809-a1de-43eb-957a-ca4e5f05ed94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.53.8']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e33b28d-7f7f-4439-a459-254ca18dfb26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.81.90']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51a3b7d5-b698-48ce-ba6d-e4ab27a92b53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.83.101']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--484d554d-b564-499e-b921-7ec7d24a5972", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.83.157']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2f0aaff-3d93-4a3a-8f58-8c58dba1271a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.83.190']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--370e7d7a-c224-443b-b4a8-eedbd05d8eb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.91.42']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ba171be-76f2-462d-8f13-043de728580d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.91.53']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49367c6f-bec7-43fe-b7fe-245840ef1ddf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.25.42']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5454ba0-dc8e-4929-9d76-812562a6d7ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.32.24']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcff88f8-0dfb-49f9-b0d5-83ddc03c5726", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.8.150']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--364f96e3-f0e1-4e98-b25e-12f2bcbad204", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.8.156']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbf5bb5b-f303-4e8e-85b1-14c4b1eb2733", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.8.182']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5e1ac35-ccb3-4967-9a86-39407f011b5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.8.42']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8574d1f-3e8b-494e-8047-8bf183daea83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.8.62']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1204510-3f52-41c7-8a99-124024ffb393", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.8.87']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07d9c8e1-03cb-42fe-9f92-176caca7d88e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.186.232.151']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e942ef6a-5d35-47e5-87db-3784c976a48e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.193.155.251']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad2fba7b-19fb-43b7-bdd6-620447feb69a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.203.102.60']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4e6c5ff-8399-497e-b400-e1f641027275", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.204.58.20']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80522e63-da3e-4482-b4e9-be1c2f83fe90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.206.185.109']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c97cacf-4062-4c38-9bc8-2930b102bd04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.206.64.115']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef9f8276-cd3e-4b30-8daa-d5dd1f40a9bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.221.56.85']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da87db39-8cf1-4d98-b24b-cc9c0140162a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.221.57.26']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a57f8a9-3758-4476-b7ea-abe2ee60a289", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.221.58.108']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10e25937-7bca-4349-8db7-d84bcf76b5c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.221.58.154']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cc52216-5d9d-4b79-b985-09ca8a9ed152", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.221.66.246']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5077282a-e595-4348-b89f-62b502c826d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.221.66.74']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c7177a8-cf6e-4844-9edf-ff77c1267427", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.221.68.74']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--def57ec5-8912-46d6-87ce-fb059a3aa35a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.221.72.174']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a1f8b38-701b-417a-9687-92ba1f2537f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.226.106.38']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5d41800-0dd0-43aa-86bb-9a5a66616651", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.244.95.134']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5acaf12c-b600-4116-9dba-e1c660c7e755", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.25.54.58']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79a22022-2af0-4e3c-a587-7897eca3ecee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.21.208']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b235ebe6-f649-45e2-9f08-82eb0f27b648", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.22.156']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97654d7c-ebce-4de9-94ca-6f76a578a082", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.23.140']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c6258dd-d5f5-4165-b503-d42e008fc7e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.23.77']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8876594-8fbc-4bcd-9eb3-91db5ae77ec7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.24.90']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96199f40-a05d-4123-b02d-6a3caf355de6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.49.244']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ca7ccf2-37aa-4022-a2ac-501fb949512c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.57.104']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25030934-58bf-45ac-a17c-dca48336aed0", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.38.35.154']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20e52b3e-9d1c-41c2-b151-2d10cc5f2f94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.38.35.209']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c54a55fd-2a45-40c1-9f3c-896ac04ab4de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.38.37.110']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95e0e9f9-70a4-4068-af56-daa2b6aee0d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.38.37.44']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2efc6f57-fef5-4672-800e-52c6a1930e59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.40.209.173']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fb96218-7f6b-4021-9460-cb1f720cbd38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.40.216.95']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d77ace6-1768-4544-b494-b273cd4e8225", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.40.218.197']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f04903a-1bfd-45fd-8b54-2f839696219a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.40.250.17']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c93f4c7-a0b2-4738-8ec0-def8f99c629c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.42.92.153']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f09f07bc-a4cc-407b-b947-4111b8cc1493", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.46.226.81']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcabdcec-9b89-4bf2-9bd7-d73387dcf38a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.46.228.199']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b22da19-1a97-4767-b1d0-8436dd303e22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.46.231.161']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a1388f2-9661-442d-aa53-46770a2fe5c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.46.235.137']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f96a8f7-2bb0-4b67-bfcf-a3b5a1ef1fb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.46.235.164']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8267014-a90d-4150-a81b-621218a58620", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.46.245.69']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50368b61-2299-4092-871d-bbfeaa48b93b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.46.246.132']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e639f023-731c-4552-8634-a27f2cd80098", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.46.251.132']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79a7be44-f61d-4d4e-bfe6-0ab98b58cf1f", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.5.130.110']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9adaaf56-2e94-417b-a416-18917c9c6a44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.51.234.233']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ca2d123-a848-42fa-805d-08bde4d8e1d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.51.245.17']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e69363a8-8ea1-4abf-a4db-96b9a24db10e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.2.194']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f0dd1fa-4c5a-426a-98a1-abb3aa1028c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.36.63']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71da62da-b9df-47be-bbd6-c51c9622dff0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.88.105']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9aa6e578-905f-4745-8dc7-65acc4d334e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.98.221']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47cc89c8-607c-4d4d-884d-13d4cb6a3e56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.99.64']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee898851-dd7f-4158-b8eb-38b77ffd686d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.62.193.105']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--430c95c6-aa3a-4d18-bf57-4e848867a193", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.62.194.227']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--417e5097-96a3-4013-9b84-36a4bbf82ef4", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.63.33.52']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:digitaloceanlondon", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d4272d0-8791-4b7f-9b13-66d746aef3e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.177']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2162ce3f-878d-4194-bafb-9baed1ae191c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.195']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d487954-d336-4283-a636-f11474934307", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.235']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--788abc9e-72d0-48a9-b0e8-9af596a36f62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.53']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48771ec1-06a0-48e8-a650-13acd8dfcb46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.78']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ade1d4fe-8978-4ee1-8901-34044a3a10e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.82']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48ca7077-b114-4cec-a915-a39253ee4a39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.121']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c04f053c-0b5f-46a9-87ae-48138d5f7262", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.126']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fad9de56-5f09-4286-a691-417369c1b539", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.127']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcf6166d-e19f-4d07-b6c1-64f03d305b1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.133']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b59815d-d233-4fad-8abf-728f885beef5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.145']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2211439b-1235-49b7-802b-e05e6d2771b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.156']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--729f4e4d-722b-4daa-a9f5-0676fc5ce130", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.194']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecc36207-1456-4df3-983e-2f31eb91d2db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.206']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--714f7e60-4356-4aeb-9cc2-531e23024a44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.235']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0087be82-6167-4be3-ac24-07bc152f484a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.238']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--983e44c1-0476-44d4-9a49-ff557c2af21c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.242']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77ce82c6-0813-44e7-9153-31d7415c6a81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.251']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56d41971-98e5-4d9b-b2fc-2d6beebdc933", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.252']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3af4dbc2-0112-464a-a700-ad5c550a8e22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.32']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01303aae-3861-46f7-861c-b19ea07273db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.41']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f201a360-f659-45d4-8171-a2bc2a04cc20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.6']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3af87560-5c6d-4dab-be20-e0b5822e8f39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.68']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0320a99a-ac91-424d-8c4b-6e6d4a98ad6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.77']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23f7f615-cb53-41c6-b34e-de47cc632c7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.81']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ef06bcd-b6d3-4934-a89b-f6e3aac62f76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.82']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--275b06e2-ba17-421f-a09a-32357c9831fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.106.155']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f25dd8ed-6908-4714-a00c-49d9ee67e11f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.106.222']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14201e72-55b7-45f3-8af4-63e30b5c3626", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.106.28']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c406633-b6ea-4ee8-a669-0eb5d16cc908", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.106.29']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c918907-c343-452e-8249-0fb0f2991f3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.106.38']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5bb5d47-029b-4e3c-9d0b-19fe8046a3b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.106.41']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e45af65-32fd-4c59-ae15-fe13ca460d0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.106.71']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0dc5a24f-6e02-48f7-8371-37cd98b55879", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.106.77']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26fd5338-5fd4-48a7-9f28-5c986e4b14b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.96.40']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbe26e7a-1138-4a0b-aeb3-0372cff40212", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.137.167']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87e854d3-a981-43bf-bccf-f04bbb062209", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.137.218']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea4cb1de-c8df-41db-a62d-0dd0372833a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.138.86']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e8dd941-7ff5-4f4a-83e5-afc92d80a8e5", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.138.97']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c08e69f-930e-4a9f-971c-1602c38979f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.144.62']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cd2250d-709b-4b93-ae9f-d3910fd0556c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.152.190']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3f939a7-fd7c-4a14-9d05-4adc50d10d17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.154.109']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37a83493-1c54-4a16-8292-a7dd48f9a625", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.154.130']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9f13b35-6de5-49a3-aaeb-58a3498c67bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.154.228']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2474d64-81ee-498c-8e65-a8a6d4292d3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.154.83']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--401ef317-1007-4a10-a76f-d1d84275aa5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.177.158']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d8db28e-896c-4053-a96d-f8baa557cf7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.178.1']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f6ed70e-ec80-426e-8a76-e568ee3a5b88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.185.115']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5247ab31-1259-4b32-85af-2ee3150db3df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.185.21']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0104336d-8627-448b-80cb-4a12e4394c55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.192.67']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d100c23e-7dcd-43cd-9b8d-ba0d9432d86f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.104']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40452792-0672-4337-bbc4-70199b72a9ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.108']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae1adc4d-fe56-42a3-bd73-8c2146fc16c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.130']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c32c8b79-d6e4-47c3-82d0-5556950ac93d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.136']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c2c2018-1dec-4546-9408-f2eabb018032", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.137']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b4d8056-532d-4be6-a555-90c8178f86e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.159']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba958b84-feae-4005-b973-87a0e7ce8772", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.163']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5eef7500-534b-4ebc-85fc-399c7d0797f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.176']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23906d15-645c-44d0-9d14-4433ce7a5461", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.190']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dab048d-768e-4d4e-b26e-46e864b5891c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.204']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee55c0e5-391d-403e-bb1b-213632a90024", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.230']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45f991c3-60ab-45a5-891a-92c84e99638b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.234']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc1e2205-6e2a-46a2-981e-4d1230994138", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.242']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--932143e5-51ae-46a0-b938-ce77d679d747", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.254']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--544485da-605f-473d-9cbe-b05bcf8b01c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.28']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5886b334-eb20-473e-b93a-99885ef4a82f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.54']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a23f5e0-265d-4b27-bd37-ea6a53fa5e1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.79']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f02165d5-9694-4ec8-ba48-092a68475d11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.82']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--289947f9-5b86-47a5-ad10-d859db478348", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.83']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--159d3981-5ed5-48ec-a8ae-959e3efd87a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.102']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52ac8136-a7d5-4257-ae1b-7438fae5f351", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.104']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1558f7d5-8bc4-43b5-aad4-ab4784bf80bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.113']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--644ff65f-76c7-4c82-8743-008acf1de38a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.121']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbe290e1-86b0-41ce-9155-cbf681478638", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.129']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09f47533-6f72-417d-ae9d-3e879b15c28c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.130']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be0f3e00-ae17-4cd8-863c-6833ddd397b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.143']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--353e8d56-9c91-4743-a456-9c8aeee33043", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.16']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81939c9d-df70-4fcc-838d-fdd46dcd3446", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.167']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60053f05-67ba-464d-96a6-b8f1dc2941e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.174']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3db46b95-f12d-4948-8bdc-6db463901f91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.2']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b021497-6bb4-4338-adc9-ed1a0f43fa12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.43']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0509a0e-3bfe-4f8e-821a-c9c1ccae85de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.48']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2b7959a-24db-406a-8c64-b8a6986cd162", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.56']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35b75d98-76b6-434e-957a-2a9d98a49963", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.58']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14e1012a-e84f-4026-9922-a9a53497269e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.6']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdbb2975-f423-47b1-b80c-55cc94b7fa6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.60']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa37c945-1b9c-4e54-8b55-37a085e466e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.61']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27f3eeec-ca45-4985-b650-03ff1e51dab4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.76']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea3e5dc0-b1a3-49ed-83cb-5599b33470af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.77']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c919b56-7d24-4edd-8e67-c32e85faec6a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SIP activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.80']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26689fd7-cfc8-4633-97ff-cb10b65d6c72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.87']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa53a4d3-5272-4665-a701-bacb34482879", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.90']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff3447dc-ffb3-4fc6-9339-e862843c8bc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.96']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16a47de2-e3ab-4830-8598-66e38c77b67c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.109']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4da403a3-5398-4273-ab23-cd3e81cfbfcf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.113']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f239f08-00c0-4620-984a-81c2a77048e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.117']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12fce7f2-c388-400e-be4c-d495afad7bb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.16']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f70281a-dd8e-48c6-91b0-b21a307ee076", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.25']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42906343-15e9-4ed8-b309-8beb127ed1b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.30']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3195d07-2826-4362-bd35-36d95e35a28e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.38']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63753562-f6c1-4f52-8779-d46cf8c60130", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.47']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c67ba6b-60cd-4828-91e3-84791434e81e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.49']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a2d81c6-6972-47ad-877d-34cf6849d63f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.51']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bbf1345-d254-4a86-b2f3-528aaa00b7e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.58']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac49257d-7b23-48d1-9b72-e9b525345451", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.59']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0ad9183-b02d-4f55-8a1c-7d56881558dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.60']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f54fd80-ed88-4314-b08d-f8a9a18a31be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.63']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0b539e6-40bf-4125-8388-f77f9cb1b835", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.96']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6723a331-093e-49d4-91a6-11ddae77b898", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.201.12']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76c7f10f-8703-4460-815e-3486e2205ada", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.216.44']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82a074bd-ac0d-4294-92cf-8305e7f8ff89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.217.120']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43ce281c-bbb7-430f-910f-d19d192504f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.217.81']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bae8b0d-3c29-4976-b07e-61c5229e607a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.219.43']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29b8f8ea-253d-4892-8d4f-5d06e68105ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.219.49']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12f22a47-b684-4001-a7f8-84a52dbba8f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.80.105.157']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b74a16d2-a5d2-4787-babf-a2c9bacd3dfd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.80.105.17']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13133b06-d317-4346-9a3e-8b6120c8a2d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.80.105.50']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cd4e451-e57c-4b92-9d86-1044c52cc94d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.80.105.83']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7f51e65-9d3f-4b52-8d73-c5e91fe4e734", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.80.72.203']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30cdcf09-614a-475c-b824-a7e668a8ecd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.80.80.29']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc19e153-34cc-46db-a6c0-5298a6141565", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.80.82.220']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0a03964-2df4-4c62-85d5-14bc5b26e5d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.80.88.160']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d349636a-d368-4a5d-b7d7-9f9cdec44aec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.80.88.197']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81b1dcc5-c243-4bb3-bc2a-83d4543f45aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.80.88.247']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abb2b4d9-0457-4f78-b1f5-aca78b89892e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.81.46.129']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a570247b-f028-4c8e-8e08-ce64b92071c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.81.46.136']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--436cdc14-cac0-4c66-8fa2-dbc80918d3a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.81.46.143']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--319833f6-f0b1-4869-8c2a-6bb228d9c62f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.81.47.184']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e632195a-a745-4df2-98d9-6d8e6db1e7b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.150.53']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d012e290-34f9-4dc2-889e-39b519495e71", "name": "Malicious Host", "description": "Observed: PORTSCAN, SIP activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.150.79']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--729550e0-9537-4188-b246-92d6d5910780", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.151.102']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0e32b9a-d963-495b-8517-17b9c85cfdfd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.167.30']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68a14719-ab8f-4262-889b-57f057cf67c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.27.184']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46a20894-e914-477c-bccc-b3ac7c79b027", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.27.50']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62530a95-5072-4503-bc7c-5aaf54e8c321", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.32.170']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74e2c7c4-cdc7-475c-8c32-6cd27f9cc404", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.32.182']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b278bf8-c632-40dd-b37f-f0286e765081", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.40.172']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f923ff62-d07d-48d5-8522-ef06ac4fd5b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.49.34']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--404b4b7a-ea65-4c42-940e-0310bb4aa6eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.117.55']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92c0d42e-3692-4c4e-84da-1114f9a9a24d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.118.60']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad266b6f-17c1-4a9c-adfb-0fadd22806fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.144.113']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e461df3-3f2c-4327-bd05-c0acbe76aad8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.145.58']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fe7da9d-95ee-4bb4-87bb-980fcbc17a64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.153.185']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83916a02-696b-413c-9296-4adb6850412e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.153.199']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec5d4be0-4840-42af-8ba8-477e8711619b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.153.206']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93cb514c-fee2-4c9d-92d1-23c86cd41c70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.166.43']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d115c70f-3d65-484e-a662-c0776a069672", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.78.51']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--824f2602-e849-41ae-a983-b257070dc712", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.98.136.63']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a42a3fbe-feed-4ed3-8474-13d01e2a3e80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.98.152.33']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52c4414c-79c8-47b1-b44d-bed3e9462108", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.98.153.37']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70766df1-be82-46d6-8033-0fc9a43bd3e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.98.165.154']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71fd52d4-ef2a-498d-b5c9-666753211434", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.98.166.209']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53b1d3b4-5ead-4807-822f-e6104067e70f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.11.138.181']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80fe34b7-4631-4205-ba03-2cef4e4aac95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.112.129.58']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57841475-fb01-41e1-861f-fcff5b325c0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.126.105.149']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81a34ec0-9cdd-4ae7-9e1e-bf80b66c6cda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.194.190.124']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c123de48-0fc2-46fd-bf42-4a825e11cff7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.216.1.146']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa8e21ba-4fba-4b2e-a723-c6b50953d6e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.26.188.219']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f247362-4274-441e-a0a0-7ecd206547d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.56.131.207']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5dc3bce3-60a7-4293-b20e-915964640541", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.57.190.209']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cadc445d-ebbc-48a5-ac8a-62a4e8a9fa2a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.77.172.159']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20ab5a4b-ecd4-47c1-90a0-f0279a1208a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.140.123.130']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62f757b3-3c3b-42ca-8fc1-5bb97816d72e", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.16.238.49']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a865a3f-61c3-4754-b8a6-765cfaa2a1e3", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.186.40.250']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1072a2a0-845b-4f92-b5e2-b1841888336e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.215.98.39']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6ff451f-276a-4070-9b6c-2e56145dad56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.93.161.154']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2683ec25-f9cb-4c45-b6d2-ba9f513bf3ae", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.106.54.126']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff91e558-0e9c-4a22-aa18-74673bdcf605", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.112.47.208']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--581935ed-d95c-4d81-ad70-1fea5bdf8c82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.112.47.54']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e511201f-e520-4bbd-baf2-c5f33a515ed0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.141.35.20']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c0fa3f8-6a97-45dc-8ced-91167673abf5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.143.110.221']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92540127-f052-4479-9bba-5cd30d497a35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.152.204.159']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f4fb3e2-b498-4e68-8a50-d1285ce8d6d6", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.155.157.145']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd67602d-be13-4a8f-8a6a-3cc0f24aa08d", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.163.113.150']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da816432-5c99-4704-84f6-9a88ce0d1777", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.164.134.245']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be2259d3-bbf2-41d7-b4d1-d3f06cac1cf9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.168.163.132']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb9553bf-a486-4b10-b906-b1aabfd13c45", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.63.202.81']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fea459f3-115f-4c9c-952c-e4c1f088ad7f", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.65.233.219']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21930742-799e-4856-83e0-3e9f2d0bb502", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.65.34.14']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87bea29d-6354-4bf0-bd4b-3d229477aa9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.71.141.170']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73838b3a-4508-49b6-bace-bbaf0dc54586", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.73.4.156']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e627ab16-bcbf-4dec-9521-e16659475a9a", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.78.160.175']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f45acfcc-751d-4c02-bb0c-542b94575f05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.101.186.213']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1781add1-5229-4328-a67b-fd7bcfbdc9ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.163.247.74']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed789cf4-ad32-4f55-bdbb-a69bd01bd629", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.172.40.209']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c049c522-e000-46c2-9414-945c6d8c2f01", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.175.125.130']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--839ebc6d-964e-471b-9529-734da218536c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.189.159.235']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a7ccd3f-bc7b-4a47-bcf0-80ddd89d41e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.194.110.30']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7873a8bb-f4e0-46cd-8d3f-668833e1f7da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.55.131.4']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69e653d5-76f1-490d-beca-418beefec4e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.83.11.160']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f412581-c455-44ad-9fb2-5badb92e0b9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.83.11.212']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--135c8a35-3a57-4b7f-b437-c07c4b4bef7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.99.53.94']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2fe7b24-526c-4edf-bf44-6b4b6a1bc8ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '204.168.230.96']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cfb88db-0c81-4473-944c-d045291ed184", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '204.48.17.249']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e3f5c33-6fe7-40ed-9d3f-e7a2d0ae8566", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '204.76.203.206']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31fa83a7-3043-43b9-8b07-8fd914f49af5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '204.76.203.219']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c568bd6b-ba80-4c94-9824-d7c0a898a431", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.186.137.75']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b7550b6-1e2c-4a2e-a3b6-5e09751d6678", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.100']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6300338c-23ac-435d-b45d-ed01f134f4a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.101']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd2f52af-907f-4ff9-9f7f-14dfbf26d45f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.102']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dd97d19-b91d-448d-a6bb-39eea51f4d9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.103']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c279d7c6-6137-4c2d-beb0-80513893dc15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.104']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e388898e-0fde-4ab8-a0d5-56abe5adb760", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.106']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cae9193-a712-40eb-a3b1-8cc8f0fc71b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.107']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad760a86-bea2-4d09-b3e8-199fa0305913", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.108']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25bc01c9-cbd2-4e58-aa1f-8d5ed5181d66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.109']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08b86047-1bfd-4a12-b27c-eddbfda585cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.110']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77754e8e-7ecd-47d2-a342-53a2a5f9f494", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.111']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a49d579-e6b8-4eab-b033-99ba239c5d04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.12']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8aa91101-5779-448e-996f-a7ed28efd325", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.128']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f66d00b4-2500-4baf-9229-9d68ca07dff6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.129']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9eaad1da-ca46-4924-8ef9-74e5351d947e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.132']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--259dbf62-3fbd-4576-9e50-248863c7557c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.133']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e94192f-0325-42d2-9570-2913aec437e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.134']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d731b954-24a0-4fac-9249-a588e1c2fd50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.135']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e19baf0-642b-40c1-a79a-d8bbd2c1d7d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.136']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f8a0092-4067-4d00-b1c3-8b6ce55a8d5a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.137']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--052206e9-d7f0-4f31-a0e7-f530b373db79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.140']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb07cdd2-087b-4c64-9778-3caa58687755", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.141']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fccf7946-6110-471e-936f-8bba80825afb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.146']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4194b68-899e-4ca3-9d36-c2a5c448e4ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.147']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--810205d3-862e-47e1-aabb-9bd01ca752a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.148']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6778d4ab-9f8b-4e21-be00-cbada45fbd99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.149']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78338f4a-7538-4e45-bd55-e5ab7399c0ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.15']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f80376c-1d65-42c8-be1a-13ff67d010dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.154']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c236edf-4198-4aec-be85-4e59360accba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.155']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b33a875d-9670-4fe3-a51f-5e035a4169b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.158']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e2656b1-9406-4899-81c5-411bbc4ebbf6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.159']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eccbe9dd-1aa6-4ca1-b9f6-dbcf21378eaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.16']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9986b1d-14ed-47d9-9ed4-14530575cc03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.162']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63214148-5abb-4cfe-82dd-aecb86aefd32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.163']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f56a444-04d0-4919-b9db-168b546595f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.164']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cab424b-da22-4550-be8a-b4ad81d1d321", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.165']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bb769f5-4b56-476f-9196-633613274095", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.167']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7128548-3b3d-40cb-a2b9-cbd7510e5c67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.168']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecc49362-ab1c-4519-926e-ae6b94266db5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.169']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22a33b49-91c6-45e5-989d-bdf07465fb01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.17']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00045083-6576-4aca-92d0-fe7155b87dce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.171']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f28d3268-41ee-4310-a644-7116202a667e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.172']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f340500b-b68c-4abe-9fc0-888643c6617d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.173']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--300c889d-9c38-4abf-a487-564db53d08f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.175']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--083bbbc3-3b55-4a2c-a650-bb227479fe5d", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.176']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42833a72-206c-4801-b3c3-c8efd04ac943", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.177']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf7d4cf7-39c0-402d-8152-28759bcd0c12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.178']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69ceaadd-923b-4303-b4df-63e40fc358a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.18']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8ca3d15-e21c-436f-ba92-20543807b8c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.180']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bf7b59c-9122-433e-88a4-a34d1ff0857d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.181']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fa59841-e0bc-45e6-a10c-4fad5c9ebca3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.182']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90d3f329-e57c-4503-b9a6-cba128c4ad4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.183']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df9f6aa8-5e62-40e1-9d0b-b3b1313fc804", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.185']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d25a1648-b883-4fff-a839-39a8fc723221", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.186']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3795c28-50a7-4c7a-a265-a229b299bffd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.19']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24d094bb-763e-4a82-87ce-3aeca7937d54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.192']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb37e5fd-5674-468b-bac4-1dc8447e8a41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.193']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16a4ac41-c0ba-4109-8461-2148ce26774a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.194']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4febb6d7-c0e3-498d-83e9-72c10dd489b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.195']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9aef03c-542e-4510-af7d-87d2e4b3ee9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.196']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f71be61b-cbc5-4319-b9f7-46517c39ed2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.197']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f358a2f5-b448-484a-bfd5-553a554f7fb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.198']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37ad6e3f-3d1b-47ed-ae0c-25f66f21302f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.200']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e096b779-ed0c-463a-8da2-422e0181b54b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.201']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d08913b-5c3e-4313-a076-a4618bc90868", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.202']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--807b3060-aa25-4c39-a513-7c67974f3a65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.203']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4c9f8ec-9f12-4a51-a0f3-a8ffa2886dba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.204']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47595069-6db6-425b-8b3a-10f6e7405ee2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.205']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2b335cb-4e84-4d4a-abf1-5fc18c9a716b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.206']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3a84330-fbb5-41f1-a2dc-be755d158a1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.207']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae8477d9-f9d3-482c-9187-472a4dc2b084", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.208']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26b42210-baad-43d9-be49-aac36efe8fb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.209']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9156742e-9198-49e0-beea-10ae3de9e0b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.21']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--076dc089-5021-413c-90c8-354c0bec9606", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.210']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f5c832a-62de-42bb-8896-39f71bca70e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.211']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afbdbaf6-f630-4aa6-8135-17720607a869", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.212']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36d47ff8-fbe0-4353-9d9d-5e503660f16b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.213']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c82f7384-6cd0-4a7a-b105-645e802a96bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.214']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca777df3-3859-4b24-ba89-d38dcb30f497", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.215']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--768f4c62-f736-4759-bf05-b3264b58d444", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.216']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60a66edc-8902-4317-914f-b3f203036d9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.217']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc74c914-0d60-48e7-9af0-b1935b249ada", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.218']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c275054-2fa0-4196-a57a-10b29039eb21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.221']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--661f0585-a141-4517-9116-d669ce12fbda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.222']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ecdadbd-4120-49d1-a607-b0441834fb92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.223']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--861054c2-8827-4a44-aca9-d13495ac7bcd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.225']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6f58a5f-10b8-4c88-9f51-56e565e068ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.226']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3842c7f7-95d8-470b-af02-2f7cc31c67b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.227']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b76a8579-f53b-4a05-ad42-227949d827ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.228']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c407e6a4-617a-4f64-9869-fbe10a81daeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.229']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--994bc037-2a4a-4188-9028-a28e9d628615", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.230']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7062e4f6-88d2-4c2b-aaef-f3a56ec40ba0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.231']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74b080e5-7c30-4ac1-9225-5dfc6875c6ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.232']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86d1e466-eb0c-4e0a-b6ad-6e974a7490b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.233']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b31e34f-c583-4334-8915-c36951cd85a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.235']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72874249-e389-411c-b7f6-d9e796aa2a30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.236']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29f1c50a-f3f2-4b85-bb06-56a039830189", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.237']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5759449-bb64-4993-9514-3d6bd292fd93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.238']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06d92cfb-a092-4e83-adb4-ee6c5e173c78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.239']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d70baaa3-303c-4a40-8243-43fe487d4069", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.24']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48b9278b-6a28-4c44-9b47-77e08e116230", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.240']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ff6a647-9d0a-4da9-9d92-cb85b455eae3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.241']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ad74ce8-8431-43ae-a1ab-561891476de9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.244']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0a80fcd-6765-4119-972c-9b3d4b724e0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.248']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f3f2a19-0fd5-434f-827c-dcf75db2c93a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.249']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0076220-4ab2-4050-ab84-87703e610680", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.25']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cae2920-cff6-415f-88c1-f05446af43a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.250']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3424005-0a03-4561-a29a-cf65d2671b1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.251']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f73d47df-b2dd-4083-823f-3d8227dcd62c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.253']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--132c9155-d227-4413-b1c3-53e17b3249bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.254']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb84fac4-b3fb-4861-bfbf-6050e9ff1b09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.255']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6da1d558-5908-435b-b550-3bb0ac25b10c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.26']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9f77d03-a30b-45f2-9560-bcde78aaa268", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.27']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59cb030d-2a84-447a-ae0e-fcae45c5f81f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.29']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb2fcd9c-8c84-441d-be75-200c867f2b21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.32']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e95e056-bc33-48d9-aa7f-9272bd388d65", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.36']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67ec1df2-8f36-4021-b69b-0d331b7122dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.38']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6af537b-258a-46b6-8da1-039624f751db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.39']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfd0561b-2189-4f06-889a-1b1d6b22bafd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.40']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37c0c0a2-8e78-493f-9c73-861af7cd8031", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.41']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b637044c-a1bb-467f-acef-422e48d6503a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.42']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c419dbc0-6f53-45d3-84d6-ed0e618e02b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.43']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44e55faf-b0be-4e36-9e59-8cee9a974cf2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.44']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--835f364c-3e61-4fcc-9c59-ab1324d5f995", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.45']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b7b3b25-b0e3-4b2e-8037-d9618cd5aca2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.46']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eba2092a-bfc3-49d0-94da-41f41152f06d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.47']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1b052fd-1c3e-4b97-8cef-784c1d0ba4f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.48']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e1e50b0-5130-4b51-8aac-1df596e20a10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.49']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f14c53b5-6149-4ab1-beff-b1fb080322b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.50']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ff2e586-0465-4220-8691-704a2c080df3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.51']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--036e88b6-b515-4ac5-ac89-b1b14d708ad8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.52']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c792deb-0f04-4a0d-9ee7-a983b228af7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.54']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d678207b-d2bd-4314-a60b-01953a584902", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.55']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12b69bd6-cc88-4087-b5c7-af7f70008675", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.57']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29451fb0-fab8-46ca-9909-70e1f8c16014", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.58']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8d8b873-fcd4-4651-a31e-1889b4321c08", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.59']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--920958d9-20d8-4f29-89cb-76939e9342ab", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.6']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aaaac6dc-6d30-4b96-a698-202f2cb54140", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.60']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--079bc513-0def-42cd-84a2-3d5567d8647e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.64']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc117c9b-a5d7-4fef-a721-98b265da4e26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.65']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00fab018-00d9-477d-89ae-5655655cd6aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.66']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f3b8ef8-fe3a-4ff0-9484-eaa5359f2f7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.68']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--deaf09fd-831f-4730-85df-7f35c93c5410", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.69']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40a80829-060d-4cc5-be40-90f4b4e050b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.70']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--841af67c-f4b2-44a6-a416-685e6ef93334", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.71']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b623f451-e42d-4e96-ba7f-da1075aed0b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.72']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce12af97-3429-45e9-ab6a-e48930db88c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.73']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9f08688-2d76-4e8a-b597-da5d958d734b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.74']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0242bed-404c-4fb0-be1b-672b43292bfb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.75']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13f08684-a86d-4a6e-9ba5-26ce56543b38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.76']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0bf0f89-532c-4b05-8c9d-74cb55c853cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.77']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0eae4486-3637-4010-afdd-5521f805314c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.78']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc3476f3-ecd3-4ef5-ae63-7bcd23c834e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.79']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9684cef0-d1d5-4472-9264-8bf502b07e7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.80']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cc7d383-109f-4d49-a84a-2afb3353ed20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.81']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fab45dc4-b7b1-4c44-b205-e107ad2a177f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.82']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59ee3333-6e98-4fdd-b7a6-98420bd525f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.83']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e829fec-ee7c-4291-b662-4dc7ffe38cbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.84']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47b1cbb7-3f4e-45ad-b0cc-73b81440b6d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.85']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4104e804-91fc-41d3-9e95-294ddde17b55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.86']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3715f3e0-a7e2-434b-bd84-eb208e9632a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.88']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e655dd31-1909-41ba-ac98-aed02d950a34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.89']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f66edb5-f20d-4a75-9fab-a008b485c076", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.91']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2087edec-3d97-42d0-82c8-e50e3cda9144", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.92']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7b581ce-ac5b-4662-b862-88eba02e69d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.93']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57f7cd36-bce4-42c2-b6de-38ab65c0c2f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.95']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73b55e92-39fd-4b12-8824-b2af55fba5c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.96']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9d06ae5-3a9e-4e18-a926-5f49c7425ed9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.98']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a0ea6ff-98d9-4c01-8f40-55ed8443ed30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.99']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2be63b36-92db-4c79-b29b-78b8dd3989be", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.0.185.98']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67fb66c4-cfe7-40d4-b02f-3cc448f33bab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.120.50']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e789b111-7c84-4bfc-9c5a-703d3f25e74b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.176.194']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05fff243-21e5-4aa0-84ba-be01573f8e12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.198.17']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c587274-a831-4cfc-aa64-75db932e915a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.200.41']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db7fc7b4-b49d-43d4-95e2-da49e79cb149", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.224.52']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--245453d2-f28e-4eda-8b68-ec89717f7fc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.227.84']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--230031ec-c3f0-482c-8770-f520851948e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.227.92']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c60a9ecf-1b1a-418f-947d-133e58bf75ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.228.33']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b2bacfc-ed01-4a14-b7bd-d8043be2520a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.230.76']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03db20af-6ffc-4236-b5aa-7f2ad4b69b96", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.43.239']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14238dc5-a760-446a-8979-2f6a49b61616", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.6.108']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3223a0d-8b38-4503-a6c1-a002c2c06ee3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.212.244.18']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9dab9da3-067f-41ea-82ac-ea6a0e0ae0e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.221.176.60']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8349df80-5264-45c2-9166-318dd99b0911", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.223.228.197']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--489fe14c-c9af-445f-95ed-f408d3574451", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.248.119.101']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f68eb1e8-23ab-49c7-90d8-c48bbbfc1d09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.72.197.115']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcd5b3f5-f818-4e7c-8877-4bcd70e56bbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.81.10.29']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f92c007-999d-4663-9f94-f931ade79702", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.81.19.9']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82439278-e5e9-41c4-b7df-b1e840c9274c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.154.224.192']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87d10d4d-28b7-45b7-973b-708d1eec39ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.154.238.11']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c85b35f-d4b2-4166-aaca-58c6c4019c4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.175.13.33']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8846d93b-4e43-4baa-9d1a-a4abb78949d8", "name": "Malicious Host", "description": "Observed: FTP, PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.175.80.97']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:ftp", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d1c5563-a6ab-41a0-8a8f-fc0e0b6c6686", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.175.99.90']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed31b77b-2818-4cf7-95d5-3fbb38fd36d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.180.193.38']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61b5a9a4-7902-487b-ab61-49a5d0211d1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.180.226.58']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88bd3a65-7c0a-4f55-a67f-84f370d6a88d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.180.255.237']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--100a9443-1a19-455d-8716-eb4b20ff308b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.180.29.33']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3af8a0c0-ae41-44ae-a393-9fd0eae405c0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.46.13.230']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5caf897-6742-410c-bb70-175c76940a9b", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.56.229.19']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e1ce976-bf36-4d23-8847-bb1abbcca42a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.12']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b98e694-f679-45ca-8579-32cb7a9ef8f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.17']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25ddfcf4-b3b2-4e86-951a-a343e8dbb269", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.18']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ab2db66-befa-4c78-ad93-83c5e3785f92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.19']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cabea11-73d5-420d-bbaf-02b6ca9f5816", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.26']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3ff5c59-24d7-4da1-a84b-da1171603b33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.4']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44ec684b-f5b1-46ca-8aae-5f104e30d942", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.6']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d2381ac-3f54-445f-a903-8d64956bd2a2", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '208.64.33.61']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c20eda8-d0d5-4e04-91ab-91bc07fbf385", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '208.84.100.247']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e55610ea-e461-4a17-9db3-32474c7b405a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '208.87.242.161']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c1cbf7a-ffac-4787-af8a-b3df8f6732c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '208.87.243.125']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a24ec1cb-e47b-412a-8c2b-c52b650e6e51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '208.87.243.51']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18ee30ee-7dac-487a-b0cc-385469b48694", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.126.80.127']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--575dcf27-ad1f-4644-8870-f1d5b685d299", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.131.122.116']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8daad11d-cb8b-44fc-9277-5da8e75483b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.14.28.144']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a40dbf80-5e31-4021-a5fe-f3bfdf166857", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.14.28.89']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd4d36cb-314f-47cc-a68a-ec0b14dfc33d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.141.46.157']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98118964-e8f8-4b77-a815-5b0d84c0e74b", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.141.47.217']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc063142-28f0-4093-a671-eadaa7da69e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.141.57.35']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--024e9a09-8b08-49c9-a685-c2559d7566d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.159.153.244']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5abe48f2-2934-4609-b99a-0b97d1bcdbbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.209.8.82']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9692d9b5-591d-412b-94e1-f8e9d349b809", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.222.101.194']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--336ca166-7474-47dc-afac-58fb97e01c3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.38.122.144']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21a5b7df-63d2-47a5-b873-b7e5666f3d3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.90.232.251']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4db87e8-8c95-4580-8af7-33e3a49c5ed2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.97.174.155']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3232c6e-b038-4483-bb7a-11665796a3dc", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.99.185.195']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70d565c3-2b55-462f-bf0c-7a5bfde79223", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.99.186.149']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdbf45c6-6494-4ffa-a09c-ec1be8915844", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.99.187.52']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a92607e-6301-45e6-803b-db94f165999d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.99.188.147']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cab9b81a-f10a-4a29-b15a-90b44d648827", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.99.189.124']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14216e2d-bfc4-495a-ae0c-187d94a02e44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '210.210.155.71']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3506efd5-e85c-4208-bd57-022df8ba325b", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '210.222.218.112']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56029b33-b96b-4f27-850b-d6dbd6430654", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.145.71.32']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7b33ede-5789-4cc7-8322-2b2da6ae5b30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.157.179.157']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26123dc6-0861-4e16-a1e2-459ecb94020a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.178.247.182']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--835ea696-2acf-4de8-a5bb-e77477907dd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.180.105.241']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d65c5ba-7520-4da3-a606-13f6761c637a", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.21.127.69']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d18590e-481d-4713-b3d3-0c76f6bc3bc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.22.25.205']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e070028-ad15-4a33-adaa-504a40229862", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.228.218.47']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33dc4efe-9d1c-4b99-acbe-e6da775bfb22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.25.241.153']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a3e9907-e781-491c-8a5a-7a02ec8a4478", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.40.167.121']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1b83f39-a1eb-4e4b-b3d4-e8d99a4c676d", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.72.129.211']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b446ff3f-3ede-48a5-8b36-92c4e92c863f", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.72.129.212']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26237416-859b-42ef-9a03-106b99f53880", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.90.188.252']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ef463e0-0ef9-452a-ad09-bb9489b70198", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.90.189.236']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19489f2e-0799-405a-805e-3133395802d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.100.184.27']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab23adc1-ad1f-4cc1-b829-0a5097cdd0ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.102.40.218']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a62245bf-ab72-4c19-ac29-c86844ed8f84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. CVEs: CVE-2019-5418, CVE-2021-41773, CVE-2021-42013. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.127.90.201']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5418", "external_id": "CVE-2019-5418"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-41773", "external_id": "CVE-2021-41773"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-42013", "external_id": "CVE-2021-42013"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a2974643-afcf-420a-8ee5-513945f7907c", "relationship_type": "indicates", "source_ref": "indicator--a62245bf-ab72-4c19-ac29-c86844ed8f84", "target_ref": "vulnerability--959e92a4-5c87-49c7-84e9-05987dd9a656", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ffd86a0a-e7c3-43b2-879a-445ccee31bbf", "relationship_type": "indicates", "source_ref": "indicator--a62245bf-ab72-4c19-ac29-c86844ed8f84", "target_ref": "vulnerability--cee9e8b2-8a5f-4336-8e8e-05d53f967e71", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ec38b1ba-0ce3-41e3-9ea9-793eabaa86f6", "relationship_type": "indicates", "source_ref": "indicator--a62245bf-ab72-4c19-ac29-c86844ed8f84", "target_ref": "vulnerability--73f12446-306f-430a-b214-3d2bbefbc8fb", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5309213e-6363-4077-ab96-c6f90242da20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.132.111.47']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41bbaab0-bb83-418f-94aa-c2ee67789d65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.132.127.66']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8797c971-13d3-4b4a-badb-ed83ea9a0224", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.192.216.2']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5890a442-f325-48f6-a8a1-74174066507a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.192.240.10']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d407a60-be0a-442c-8bf5-db0aafc738d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.192.240.126']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4437c27d-414c-4dde-8506-7aff5f79d5b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.227.140.112']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40af976f-2c31-479f-bd87-58132f69b06f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.247.156.102']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ad0542f-09e8-4a16-a479-1ecd0a5ceef1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.47.65.20']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35dcf77d-b6a6-4c8c-852d-4ca16d506aa6", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.176.16.100']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a48eff2-521a-4e3b-bc34-29dec3670c74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.177.179.80']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7491b4cc-cf8e-441a-a4e2-92c3d2ab810c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.180.203.227']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0e0dbbc-41a2-4c6d-b073-7d0481c6401a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.199.35.105']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a88d26c-8bc4-42d6-b973-6507607deeab", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.113']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa4e2061-66f2-4183-97f4-20a019a22337", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.158']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d420bd5b-b2c1-4532-ac4b-abeff11862ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. CVEs: CVE-2022-22274, CVE-2023-0656. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.175']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-22274", "external_id": "CVE-2022-22274"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-0656", "external_id": "CVE-2023-0656"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--eacd0d2c-81c0-4917-b3c3-6ef60282d978", "relationship_type": "indicates", "source_ref": "indicator--d420bd5b-b2c1-4532-ac4b-abeff11862ac", "target_ref": "vulnerability--fb5c13fe-ad37-4059-80d4-95aa86895d35", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f4bff967-6713-4665-b5cf-13780ab47898", "relationship_type": "indicates", "source_ref": "indicator--d420bd5b-b2c1-4532-ac4b-abeff11862ac", "target_ref": "vulnerability--a1f6f84f-041b-4d7a-a59a-e7bf0952776c", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6f55bf7-d597-4df4-ae74-3cb0336f28ec", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.56']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c03106d-513f-42a0-9167-75b46412838a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.66']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41257c0d-f4b0-4946-ac75-517b23797cf6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.60.255.181']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb650252-a480-49a4-ad57-9d0214ddb6de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.106.176.110']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cdd9b5f-0c0d-4202-9a9e-c22ac09202fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.126.227.187']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40bba588-8536-434d-9cc2-aa35b4a0230f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.126.237.36']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b00f195-b5be-4306-a93a-9c9c6e04b3c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.151.165.166']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e4328b6-5717-4ddb-ad4b-06522958574d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.180.246.106']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95b1ed61-9b23-41ac-9bb5-fd527444a526", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.180.246.160']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21fd1845-0bb5-4bee-84a0-4cf99e4b991b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.180.246.206']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f02d60d-34f7-43a3-8100-5894211b4a8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.180.246.32']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1d5c97f-37f8-4641-a160-c84ebfe108b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.180.246.49']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a31f45d-81a8-4d1d-8312-19dba02c5b55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.180.246.67']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5741a8cc-dfa6-49b3-909d-d6c10d9c74c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.106']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--367df0be-efd0-43ec-b9f2-0fc8015bd41c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.107']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1550b13f-01f2-4199-bd81-b6205d8047d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.109']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--456e8204-d544-4a29-b5fd-742e43233ada", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.110']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--448dec9d-d30c-41a7-a41d-1d1757e1273e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.112']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--735b9cd7-86ed-4f68-bbd3-25c6bc5486f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.115']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df01891d-f08a-4e25-9f7c-9e035378066e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.118']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a23989ea-4107-4732-8354-644096b83b54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.120']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d68f8319-19c3-403a-89c6-6e90d58f3523", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.121']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40db4201-d122-49ba-8bcb-1d0f3c8abaf4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.122']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d10a519-addb-46df-9484-1bcafdc8ed11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.124']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54b1ac81-aab6-4343-b61b-7097f4b8f5ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.125']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4dacfc2c-63ea-4f65-9b3f-8860be0147e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.126']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0aae9193-d3f6-4ab2-a47b-a4e5b9a8a6ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.66']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5833caf6-cf7a-4121-88c1-37fdbb344d73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.68']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a1753c3-d28c-4b1b-836f-02f3250cb72d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.70']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79bd505f-3fcf-4427-b66a-2f69752b7eb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.73']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81f3fccd-9f1a-45dc-b239-685a6f7bfefb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.74']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e2882ba-d115-49a9-9661-8510723fc317", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.75']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5d21190-e599-47d4-8803-dd3b00ea85f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.76']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c933fce-33ea-4354-90b5-ae9d55c8880d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.77']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a181263-04ec-4f18-85a1-d44df96c27d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.79']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53ec6bf6-a9f8-4213-8cfb-c33d6e3d515d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.80']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17391e32-9065-4495-a582-5caac59d1bf8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.81']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d3a0260-2f54-4847-9873-6bc332f9d7f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.84']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56d203c2-50cc-45eb-b27b-51f7821df3ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.85']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1edd38cd-bac3-4da7-a56f-ea52ae3cc8cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.87']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50902295-f108-480a-bbc1-9620f3bdbfec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.88']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c5a48a2-d22d-4d87-ba67-9fb24d219bd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.90']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d473b50-4863-442c-9b29-a6c2e9b7f40f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.91']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5ca5293-ef8f-4068-aa34-17f99130af61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.92']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9e05855-ceba-473c-9d45-4b5bd87e50ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.94']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd62bcc0-f7c3-4abf-8052-28129f81d979", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.96']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5729980a-2c5e-4353-a83b-02feb12e09c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.99']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9dce0e4a-c8ab-4701-9fc9-e46fa3d9da0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.226.76.10']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fda84528-c5b0-4fc0-9093-ef08c1952cf4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.226.76.30']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--492f809f-7d89-4704-b3de-e083afa058d9", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.244.83.58']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f458889-18bf-4cde-9d3a-d9be9ae0e15d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.103']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d73f93c-2ec6-4289-9365-b6414d29e187", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.105']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab7655df-4ab8-4c76-a484-bc535593e94f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.107']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24185e3a-a510-4c87-a070-060210f179cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.108']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--288d776a-be26-4105-b600-f79c7a025d03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.110']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--727b0a61-b87e-49cd-8a52-46a679eec2f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.113']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a61f729-7fda-4cf8-a7b2-16b6cdfae28e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.114']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c7e8c59-5c2b-4e31-95e3-0d9bf27e62a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.115']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad1a5d11-fc6c-4903-9c4b-4de72669054b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.116']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17586239-1d5b-4500-9d37-cc9843dfcded", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.119']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e282633d-65e9-451e-8017-e3a625da0ded", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.121']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd04a822-115f-4b03-9c8e-bfb089631a96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.122']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d2dbcb6-a7e8-4155-9a2c-11de77fcd448", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.125']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d058d23-f0cd-4c45-a8d3-d8e0645adcba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.128']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38d7fbfb-6c8b-4821-9cba-3758619ab4ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.131']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c2e085a-7b5f-47d4-b2e6-3def504e2ab3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.134']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--512d3ac1-007c-4708-b4cb-b5f2b713426f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.144']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d91f634c-a97b-477a-ae4f-de19a6e24370", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.146']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1d92462-09d5-4576-93c4-68850969e471", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.152']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e45e51e5-7cb1-4bae-999b-3a4a556b74c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.154']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bc3dad6-a30d-4127-a663-5412e5464867", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.157']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba089256-a691-4fa4-af42-e895127c2e4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.65']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--025ae5a6-047b-4214-bd31-ba7086099236", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.68']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ff17adc-8d6d-4cbd-934b-488406e72fb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.70']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fc7c60c-78d0-44ea-be0d-c0ec20ae05e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.71']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15beca54-cbeb-43f5-9c62-737e0cd4865c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.74']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23248271-b227-42b4-9d73-0b16a518906f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.77']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76aa8214-80f3-4363-b5e4-0766944b6b8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.79']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1658e72f-71e8-49c7-95d2-47c42cadca9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.80']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3147ea1b-5858-4973-aef3-a014538497cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.83']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d024d15-4b80-44a7-88b3-6ca9dc88e32c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.84']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1705fc38-a6f1-4d4b-a691-4aa68f9fd252", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.86']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c381e8e-6432-4e48-a14a-b4f31def6aea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.89']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--516a0302-3e9a-4bc0-b0d6-2806fc4cc4b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.92']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ad99b77-41c4-4fe8-966a-d9c63aa67c94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.95']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--048e9c10-58b6-4e82-995a-135ed1e80af3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.98']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21df3b9a-af97-420e-8a8e-9753d956eee4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.73.216.117']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2743e577-dba2-42e8-bd0f-9f1f7c48e313", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.73.216.20']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--046b48a5-e4f2-4221-a8f3-5f41cf081fd3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.73.216.203']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa369d1f-f10a-471f-ab9d-ba7a4065e2e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.146.95.163']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4c79d5d-a46b-41d1-abfb-e6f5602c9e01", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.154.61.249']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--359daef6-a98d-4652-b93f-18366d5b38a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.156.64.228']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b634c70d-ff13-42d7-a24d-29a54dd95cce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.165.133.185']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4606a551-5948-4c0a-b2b5-edbe3fbe76c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.216.59.228']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26873df5-899f-4d12-8c6b-93010b3c1386", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.217.248.93']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e2f0603-4777-4ea1-8bc9-2102832487ad", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.219.70.92']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e8d93a6-842a-4a5c-9d15-60e29982468d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.60.195.146']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--187f6971-0f0f-4ca0-bce6-0fe365ed7fc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.64.102.76']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44a0368b-47c0-4998-aad6-eb25d9f4fcd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.70.186.133']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28ad0efb-f89f-42bc-a322-6913595cabcb", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.146.163.192']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--976ca1b2-7066-44f5-a4a1-29ec42a2d1ac", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.16.164.28']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14e266b5-5975-41e3-8417-fd18676ad7a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.17.184.95']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6abf9c45-39d9-4ecd-b909-5a5e8f1436ab", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.31.137.254']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06aada45-ede2-41a9-bd87-4d956c91d1c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.4.148.45']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7d41c82-ad03-4396-a064-df2395080722", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.59.175.217']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d16163c8-ba88-4a88-a4ab-e0a2f080f0a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.62.15.102']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70c0080c-28da-4643-95cf-154e4cba02eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.64.153.175']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c09a2de-0e61-4831-8585-de4ef4ee74e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.64.153.27']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a2bd1bc-5e76-4d4f-9fb3-c7e08a9a05c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.66.22.20']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef5822dc-52b6-4b4e-a7f6-c1188db92df6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.75.92.58']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c60718cb-aa45-4300-b241-4d0cf975580a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.79.229.208']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c57f39f-abb5-4f8e-9e93-45e4e13c2f72", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.8.44.26']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9d48e4c-4ce1-446b-83dc-d43beb1407b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '219.139.83.165']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e1777fd-dac8-4f88-9d7a-b26e3a91aaca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '219.151.182.56']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfd776a2-2707-4ee2-92be-751f858ef36f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '219.154.75.157']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--386c6764-f244-40ec-8c56-eacc0f4cbc5a", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '219.155.88.50']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae063135-c7e8-4d75-9ad5-1e972ffdfc44", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '219.159.147.212']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99f88fd1-5a0b-49ae-a3af-f2cad8965175", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.121.206.61']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1449be45-91ab-4f52-94ec-d6f4df290157", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.128.221.64']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab3b2044-de70-4ae2-8f21-3c63096d12f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.132.250.236']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cd388bd-d6a5-488f-a4ff-d2eff92eca2a", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.135.170.62']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a5b8d7a-5b13-43d7-b427-febeac51935a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.180.49.230']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d14c9791-8493-4d27-8397-3a3f0d00702e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.1.163']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45b64602-b6dc-40c4-968d-aa729ffc571d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.110']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e27c3a20-d6b3-40b0-bb58-6b8d4c72a962", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.146']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--def9b4d6-3031-4804-b528-d44d98659771", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.157']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72414383-338a-43ad-a416-07f87f6cd5d0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.167']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f805136-da86-4ad7-871a-9869efda7641", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.176']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32895072-8499-44f9-a003-30fe0bb7e6d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.185.154.190']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--601710ed-346b-4d32-b028-a670d1ed4dea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.197.85.124']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81fefbb0-b764-42c1-8c9f-1b948663e212", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.197.85.142']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bacf4f1e-ea70-4db9-8773-ef58b60f50a3", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.201.46.38']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb90d2fd-b01d-4aac-92b9-a33dd2912268", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.202.112.119']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d7d1cde-0087-4448-b59c-8e1cd4277c0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.202.112.127']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ebf6dbb-ab16-4f2d-920f-3ecd63e7415a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.202.112.58']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67021f6d-a372-4784-9d17-f24e6292eb64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.250.10.5']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62c6871b-5097-4abe-9546-a35cee634381", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.250.10.94']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee64aec0-19b5-4db4-995b-48c069905812", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.250.11.27']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ecb9bd1-cc11-4347-b4b5-57e757cdd631", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.250.52.75']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96d74854-2c35-4293-a217-a6c6636bdf88", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.80.223.144']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--988d21de-21cc-4f2d-9a3d-27ab8c57f44a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.113.90.235']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cbe1244-ec24-4441-a97e-6218a66acd2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.124.82.229']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20a50b78-4e3e-45eb-86c7-9d7ec6173db4", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.130.29.85']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--744ad364-a0d9-4469-a33d-c42a1d1498d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.131.139.70']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e47ddaa-ca15-42b6-96c6-8a23c06a76ab", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.156.126.1']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cd7ddc5-3d19-40cb-b89c-47160deae553", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.159.119.6']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30f36e2d-88d2-4ae9-8b3f-7590b3fad889", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.226.232.42']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e397aab-5123-41c9-9182-d71610c6deba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.226.232.46']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6e28bcc-7f80-45de-8f5c-8dfa8bd21b12", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.226.24.62']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd25bed1-a07c-4463-bbe4-8215413dd7e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.233.53.197']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--526fc252-7b22-4405-a326-2d4be6810dfc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.186.13.130']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3fa006c-b361-4afd-97a7-3ee2bf6f5193", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.246.108.79']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--474d75cb-8304-4c5c-90d2-5f72ca258d49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.246.109.199']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef61cbfd-7cae-4789-b7c7-99f1f3969c2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.246.42.132']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0260446f-fe1b-4971-8d21-305a64ba549f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.88.163.135']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51114bff-8330-434b-9b87-753bc92db403", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.89.169.98']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c219a4ba-4b97-45db-a4cc-4c4520f9c534", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.93.147.233']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b1a1702-8719-4841-b9af-3aa36d7ac6f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.96.44.234']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d345c0a6-1578-4b72-87a5-b2538e0ea411", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.102.237.180']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c3b3c84-ae51-4773-bde2-97ac86b0115a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.109.141.9']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff61bfbd-c7f5-47b9-bf86-02f289eb9ef1", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.123.38.122']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55f9d7a5-0329-420d-bd01-90da74b1a388", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.123.77.10']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--424afbda-e75d-41f8-8ad2-88f643148a68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.123.77.8']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf9061bd-0751-4f06-9aa5-3335ca7a1d2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.130.154.67']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fae948b2-eeb3-4c77-aaaf-339ba45fa5e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.166.206.136']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e33e27d-0c85-4186-bccb-9f2557bd83cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.166.85.59']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dba9ba7f-0285-4ac2-8e7f-408ad6929e74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.167.206.131']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b5b3d08-8d3d-449e-91fc-00f275f584eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.199.167.255']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4cda079-69ff-483a-82ea-3d841cd36512", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.199.181.43']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce145df4-9d5e-4c7b-b80a-df64e5192a0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.199.186.248']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a353aab4-df68-4b12-ac1c-dfe28c6549b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.199.189.235']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b53c922a-b304-417b-8cd6-3df9bd414aa1", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.223.199.221']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7676f463-abe6-4e94-9837-bea7ebdba0f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.4.178.200']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--769c5d8a-494b-469b-a1e7-3b747ed52ba0", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.85.251.61']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55ed122d-3510-4eb5-ab18-f1198604b5d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.172.217.77']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0705512-b9e7-4e4d-9d4e-7ca45ee3f3f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.172.217.87']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e438a94-6fcc-4707-a87b-f1ba38967771", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.237.188.34']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b48b47ac-5607-45b4-896a-4f2feed62433", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.239.11.64']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78b13002-a8c1-4c11-a0da-6f988fbc14ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.239.12.100']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd2e9638-9a65-4f7d-a323-5c1ac27f38ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.239.12.129']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79468184-8129-4372-859f-67358617e89a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.239.29.33']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ac9bbf8-0a95-4b1c-b35e-91edc1d67ed4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.239.4.211']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf3dd514-339a-4d32-9ad5-5bb9ce387645", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.239.9.128']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ea50f59-c12a-4a4c-aa8b-36daabec4fc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.239.96.154']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b95b59d-50f7-4007-93d9-507a98ce317b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.254.204.187']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d3660f5-fcc8-4024-b5f6-52031753c1a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.20.175']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--082fa824-0c04-45f2-81db-921ae05a2676", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.20.48']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdf32b36-a3c3-490e-920a-5eecbd0dcbd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.21.214']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb93b0e3-54bd-44e6-9341-b8e2ef7f95ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.21.85']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e388d6b9-f1b2-4320-93e3-fb8af79c34aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.27.179']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f5f5286-91cf-4b9d-aa0f-40d7ddd98e1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.27.206']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--356aa82c-62f4-4b59-bd05-aba2775bbdaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.94.14.160']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47b39831-118f-43a6-b92c-eaf912580c35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.94.200.194']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--578f1c71-502c-414f-8b01-0a037a5b10c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.94.252.189']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d984dd97-7abe-45b2-a8a4-a69cdd46ce79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.95.117.253']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53621b6f-3687-46a7-b213-bd8f33ab9bed", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.95.137.106']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63421a83-5bb9-4367-9ad2-e086ef75794c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.95.20.168']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d553dac2-286a-43c4-b1ad-fc4eba028cab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.95.217.16']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce944102-40be-4255-90bd-3893e652cdfe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24.144.113.209']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c276625c-430a-4ca6-8ed2-18b22d91a3d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24.144.113.82']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9de378f6-a506-4cd4-baba-c55d0c5cde68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24.144.122.121']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95c6ad0e-e780-4627-9ade-b4d85e4ec039", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24.144.99.110']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f44e97b-db02-459f-b079-4ed77c1f0cde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24.170.232.141']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--853640c5-b412-4e04-b99a-1357e32232bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24.227.17.28']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37895657-58ea-4493-a9be-b7686292fcff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24.234.157.122']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a25d33cc-aef1-4401-9b0e-f48f7d8b0f7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24.35.228.16']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f1d985a-8c4c-4df4-9b3c-76047a6b3815", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24.43.161.216']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4904496e-f287-4d53-87ed-003a1e2a5900", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.155.92.28']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e68bd526-6741-4e02-bb25-54d3b9d33be5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.16.195.17']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6da1e201-0550-441f-a836-44a71dc31e7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.18.70.63']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72ee157c-4f79-4101-b5fd-c3c720d65cc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.19.6.176']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b944d709-106c-4cd4-a2c4-5b8795ded818", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.207.245.143']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0ecc316-7dd7-4b71-9de9-1692446d140a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.21.25.110']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af4d29e0-9308-4117-a11b-0e684058b82d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.22.118.173']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--357e2f77-7af5-42a7-a341-9cf11aeae80e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.25.64.48']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79ad030d-3ed8-4d76-8d33-73609bf41ca7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.25.69.144']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--feced753-9b55-4008-8df5-9d371d8c378c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.29.166.53']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dee95d83-5bad-4e29-aeb1-efd92ff87a8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.43.206.247']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--053684d5-4897-4f2d-910a-66436d70b8e5", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.56.152.186']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fadc9810-1351-4658-be80-5a270674c9fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.9.150.126']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff1412e5-c585-4f7d-b9ca-136fc433e3b2", "name": "Malicious Host", "description": "Observed: OPENCLAW activity. Sensors: openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2a06:98c0:360c:4fc8:abba:e830:50e0:62b4']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:openclawglobal", "protocol:openclaw"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43918d39-5b60-46b9-bb6e-66c8445d185e", "name": "Malicious Host", "description": "Observed: OPENCLAW activity. Sensors: openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2a06:98c0:360c:5346:3ce1:419:14e6:7392']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:openclawglobal", "protocol:openclaw"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77b32cdc-2ef7-4160-9eb0-ad1ce09bc972", "name": "Malicious Host", "description": "Observed: OPENCLAW activity. Sensors: openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2a06:98c0:3624:2eb1:b03b:7da7:8d47:b94f']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:openclawglobal", "protocol:openclaw"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f640f5b9-ddc6-4e5a-9a33-29d085e4725c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.125.168.113']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc544960-493e-4b19-a807-38539fed6614", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.131.24.55']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3275cf58-7579-4f2b-96ff-15516b0b737b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.136.156.209']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55d138da-fa62-493d-9ff0-e0e256e73340", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.137.139.70']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d0c3d40-72a1-47b1-b07c-43ae4773648b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.142.170.60']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7494e144-830b-4e0d-b1ce-16e01dcbe558", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.142.221.16']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eaa938e9-9622-47a0-a6c7-133d14bebe5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.144.91.72']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c408a6d4-dc12-471e-80cf-08373587891e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.145.205.60']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--345dabe0-b7d4-4ae3-9269-4eacc2dc1cce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.145.25.111']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5796341-99a5-4932-8037-4c5cf79e1d81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.146.221.1']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b62217c3-8e3d-4a2b-b661-3c64262bdabd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.148.156.80']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89166e94-b79e-478d-b206-8067df3254e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.149.255.24']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc8ff3fe-f17b-45f2-b67f-e5ffa7da5b85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.15.37.211']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba9ee068-45a4-4d81-aefb-cc54bd0367d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.16.158.206']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7330b70-c281-4025-aa7f-a38d60142afc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.17.61.116']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b29e492-1ad0-4832-92b9-b1ce986ff736", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.19.185.80']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d01cd921-4542-469e-a2a7-7bcdb4e4d2dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.21.52.165']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--203193ef-5557-484a-baf0-97614c60e4c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.210.115.222']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52bd298f-4327-4e35-9d40-8b846ba0e05b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.213.226.45']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0ebdb76-4854-4aa9-a43a-2e5b30b263f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.22.172.10']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ae0b282-de54-495f-a975-7832de29fb26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.22.186.85']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abc23e41-16c9-4ba0-8158-a8866dcedb2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.227.192.235']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb4e87f0-f1e3-47d2-8faa-b06106ed1757", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.230.246.9']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8feecc0-666e-4722-bf5d-f02a78e8a129", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.74.234.166']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a66b545c-5113-4691-a764-e1088956ef0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.83.245.221']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c66149ba-2da6-4c9c-b458-6c6152c8a913", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.132.90.3']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebbfd275-2817-4c6b-9974-069bfe0465d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.32.4']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--baef749b-6ea8-4d8b-8488-728469206d88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.32.5']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7222d645-0c24-4c9e-be18-43410516b04d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.32.6']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5fb4ca9-f7df-41ee-8647-423d8259e0f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.32.7']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--480b30cc-6312-4e5a-ad05-00e3a60ed7aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.32.8']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3edd3407-543d-4c67-8b63-037cc5212049", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.171.101.152']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9435a6f8-a9d0-48b3-a531-a9847af8c674", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.171.101.199']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d09efb4e-5d51-425e-9806-fc9e3df2955c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.25.237.190']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5c21551-7da4-4d2a-b50a-1ac43410dfda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.42.176.142']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22deaa34-6c55-4144-ab49-9a7fd6c4f6da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.42.184.158']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41215ba8-1f0a-4127-8cfe-6edfbdbd842d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.56.209.123']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bff7a63-f7c1-4ee0-9c6f-5a032a945362", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.56.209.80']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a7ee039-adbf-4503-9880-54ebf65f7f79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.56.44.105']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7d3ce77-9c5f-4c80-9255-625410031cc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.56.44.113']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b2fecac-fc71-479e-80fb-b57c894a18f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.56.44.157']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03bf9aa4-8ac1-4ee9-af6d-1e43015e8608", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.56.44.38']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b798f4c2-ced6-439d-bcaa-f5d7bc81b49c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.56.44.58']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65daaf34-8cca-403b-a70d-8bb51d2b8bf7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.57.184.247']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0e3a8eb-eed0-49f1-8f46-c0c38761bad3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.58.144.12']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d454517-5fd0-4530-bb60-62dc943716fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.58.236.3']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--580a4299-0f9e-406e-9abf-e8c5f15d13d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.59.160.12']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2eda4ec5-8cd7-41f6-92cb-9ae903e210f1", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.59.40.94']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--380b74a0-da20-425e-8f3b-2d7bdcfc6527", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.59.89.71']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9be5d35-37c0-43cd-a8c2-cf241ce67ec6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.7.63.6']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a7026fa-ee11-4ad4-90c2-0740559b3967", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.70.66.13']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db4c6753-415a-4248-98aa-6771442e4765", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.70.83.197']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2900f5b-3724-4587-8591-5ca1d5d76070", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.77.156.62']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee1d81ff-479a-44af-a949-1d17cd21c936", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '32.196.233.17']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91f584cb-18f1-43d6-908f-14f5063b76eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.106.159.10']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f84b9bf-b194-477a-addd-d09300f02007", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.116.68.216']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49fe5923-c1ba-47b1-b432-67100412220a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.118.104.241']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f19cc5aa-d157-4460-aae4-d11196f0102a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.118.71.202']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05f96d28-1271-434e-857f-ea4063e1601f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.124.173.172']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e61e6a6d-9fc6-4ae6-97bb-38b3aea89198", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.124.208.70']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8844da88-af28-4d3c-9a4d-934a814f7a88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.125.245.168']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06282023-8bf4-475b-996e-c27867fc4e20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.129.120.135']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0caf9938-406f-42a8-9a31-1bffe6f27277", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.129.174.15']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9266c96e-5ef3-425f-b94a-50e4df90973b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.130.140.18']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00c3d0b1-d206-4c22-b7ec-262c47669e24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.131.21.37']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30eff0b3-2b48-48b7-aa80-5d3f9c00adcc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.131.251.151']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ffa936e-1d26-4290-bad7-d968afe5ed53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.131.60.175']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0acf0d6e-6654-4fed-97ca-a19f1f796dff", "name": "Malicious Host", "description": "Observed: OPENCLAW activity. Sensors: openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.136.42.135']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:openclawglobal", "protocol:openclaw"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--072004cb-d7a4-40e5-a363-477675212a63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.138.51.131']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aad636e0-730c-4a4c-a3cd-bf7166f9fe96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.14.165.208']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f75e3822-80e9-408f-a082-c033188cfdbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.14.33.27']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86249024-fe37-4308-b142-6a52a416a590", "name": "Malicious Host", "description": "Observed: FTP, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.140.129.51']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ftp", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c18f2d82-b6e3-4d19-97f1-c6b1294208c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.140.228.167']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2299ccee-ec7b-43ae-b1d9-492632aec4a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.140.230.232']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5039a80d-b1ff-41af-92f0-85c7a1c5ffb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.143.255.82']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c693540-5c68-4b1c-af6a-de928801d6c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.151.194.112']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--450cb8b1-7f19-430a-935a-04eaecafdaf2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.153.151.62']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c61f479f-1625-40c2-a966-a0f9d3117618", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.137.162']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd3566cd-a798-46a1-9c57-6494993abf7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.196.124']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8754a501-2cf5-4498-8ed5-d57ec3eb1621", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.5.88']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd6039c1-b51b-4628-8c70-32d23453081b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.159.9.137']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dcba76c-c48f-4510-8107-ddd51c0072e1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.162.204.126']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d17ccc59-c268-4d34-b412-08ab06816f05", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.174.162.133']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22ec49d5-2647-42ee-a4ba-a885a19c8a7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.178.181.143']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b83a4845-066f-4670-957b-8e3db92cc8ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.178.212.49']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fabc0ed-9de5-4769-93f4-27bb3c96dd26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.179.245.73']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--057fd850-d376-44e4-8927-bd163cd14de0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.19.105.10']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3ba70ff-8cb6-4667-a63b-74fa13699beb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.197.70.90']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c948335f-fb47-4de7-88f0-7f2c65e8aaaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.22.169.78']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbcf9231-e5a0-4889-aab3-4bdb4129c7c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.228.104.231']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15ef91a9-24ab-4e51-9b78-f2a22dbc9f14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.23.188.238']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76baae52-4824-4f13-807d-a7b84f764b2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.24.2.74']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d363902-0990-4a33-857b-41d68bf27973", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.24.63.147']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8f11241-3ee5-4fe5-831a-259acf590393", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.26.217.108']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16ef3b9f-4d2a-4c06-9440-cbfd81f389fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.28.239.241']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13cf284d-094e-49bb-911c-b877811f5362", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.34.44.114']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9152ac4b-5876-4a7c-8122-9e4609f984b4", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.38.149.165']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98181e17-a7a8-4b27-8633-4cc39ceda88d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.38.162.226']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b0379bd-bac6-4bd8-981b-569e605e76fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.38.167.153']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1be0f4c7-d6eb-454b-8742-e8e1dc250238", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.38.195.167']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e867a4f-0cb3-40f7-af51-6553979e55d7", "name": "Malicious Host", "description": "Observed: FTP, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.38.201.101']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ftp", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41e31161-25b1-4d63-a00b-2cf2a903af6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.38.74.217']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a23c020e-82d5-4a09-9459-87bcffdec74b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.39.249.185']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--143de3a7-bcf5-4a37-97b4-4031f911c01e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.52.206.242']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf5d5c4d-adba-4cae-881f-d1f93655e294", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.52.236.5']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c0076da-1691-40f7-80c4-f9a0db441196", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.53.175.198']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--845ee3fc-12e0-46ff-9cbc-4adfb75d32f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.53.211.246']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c92d2858-f3af-4636-8a6e-fb54958967a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.131.245']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--964cad8c-02fe-4dac-b896-5e3a02790dbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.140.253']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5eb00e2b-087d-4bc5-acbe-182a028d1c74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.146.180']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3508d1b6-a6e0-4aa1-8465-2ad1033fce57", "name": "Malicious Host", "description": "Observed: FTP, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.197.208']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ftp", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18906eff-eb10-474c-b623-945df13674aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.57.135']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efe1f29f-555d-42f5-8487-ee31893b07c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.83.25']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e01a9636-3c95-4be0-9e77-ddb7d0d58e26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.84.200']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a6bd87d-faec-4bbc-820e-fb63fb9bf9bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.7.129.189']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c3f8509-115b-442f-9a45-17c48a68fbb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.74.126.244']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb66a01c-8bef-4aa1-83a5-0177ab4e2cfa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.74.88.236']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f70423b-d6e9-48a8-b3cc-88a2916e5150", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.76.156.180']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--916eff1f-ef22-4748-9b99-55e421bc4ef0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.76.162.171']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42993eaa-c647-4e92-a865-96051877f5aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.76.234.7']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f137c3f-264b-42a8-aab3-2662e183f109", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.77.120.248']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4c3b2b1-950b-49cd-b19d-ffcde17fba03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.77.2.153']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84fd3389-08ee-40d4-b7fe-ad01238df411", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.77.217.12']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc6c7ec9-07dd-4d78-9b4f-9b2dcddc0c9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.77.235.91']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e8ffabb-334f-4e4d-a5f5-f55cc707f4a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.77.78.153']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c5cc9d8-f6b8-4128-8385-0a009491641b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.78.189.165']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6feb51b7-64c9-47f1-afdb-61d06cd2af69", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.78.29.97']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cdf12fd-dc37-449d-afe5-3b6245e5c6f0", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.78.37.50']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e22abb5b-6467-4969-923e-e9ade2843e4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.78.52.217']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e76f60fc-58be-44c3-9437-84375af5324c", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.78.71.110']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2945ddfc-9b77-4824-800e-0fdca3fdc362", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.78.89.92']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8358b0e0-7b8f-40bf-9f6c-e8654048a259", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.79.134.130']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8272618-4beb-45fa-93f2-9404c0d73fda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.79.246.133']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfd8abe1-2e51-4dc1-825b-cd0179303af5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.79.59.238']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13c4e010-f225-445c-89a2-fdbb54b938f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.88.215.42']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1525b29-fa41-4a0b-8baa-b9128e8fc1ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.90.72.12']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6165c673-6a1e-4e3b-9a34-b290278d6bea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.93.141.62']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14fcbbee-bd7a-472d-bd65-41870c5e19c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.95.42.158']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0370f1a-c200-4e26-9b6a-f4e2597822fa", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.95.8.233']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58d6a739-8d81-402c-aece-2aa615bab411", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.165.123.240']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--519a2103-3c93-494e-bbc2-8dd8c5384f58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.169.206.177']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9422a0f3-c36e-40b8-9f39-650ff9f8a0c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.187.171.167']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--932934c1-b568-43a2-810c-545274d92ae7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.187.97.175']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32f56e65-ce1f-47ae-bcd7-cc148f50f982", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.192.228.47']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fc68380-2b58-4293-a7d6-3ff4a6eb51b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.195.101.254']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f3139bf-9192-4a8f-b101-920ed34c26a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.195.216.44']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4f71390-741f-47ef-8aab-e28e865bfd73", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.196.229.74']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9da171ff-859f-47b3-989b-1cf369347d0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.198.139.161']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c5888a0-1a9a-433e-bd63-1d16bd78b952", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.202.221.1']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fbc5c79-eadf-44a6-a61a-2d17c07df98d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.102']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8deaa41d-89af-41c4-9636-27e87013a487", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.104']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1416fa4-6c27-4fba-835a-3610891ed430", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.107']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b34dd32c-d416-448b-9412-9bbe6faeacd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.112']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab3bf393-ce03-46ee-831d-568b725cd3bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.115']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21547935-c922-4bf8-ac02-ae1f199ca852", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.123']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd9f10ae-9ac4-441c-a867-a82b51a8bee9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.124']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--142a9619-eeeb-4809-a9f7-33f423d4e94e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.127']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26e6e935-1040-4268-85e4-e2988344fe2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.13']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53a48520-4c47-4ddf-89fb-1564a784b108", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.14']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51983fe7-57e6-4916-bf1c-86a424b58b48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.144']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60e9816e-3608-41e7-9218-9514ccc45a72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.148']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b572823-16d4-4f19-b871-71e0e17a9a42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.157']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93d83dc6-556f-4daa-b390-c8e97da2341a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.158']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b9a2f24-8046-4cf2-bf08-8113a78286f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.161']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bab2768-4825-43f0-860e-be743b0a9a90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.168']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61bb3d96-5201-4590-b1c1-c869134edd21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.174']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--643265f1-463e-49e7-9804-ed1302092f45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.175']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06411ffd-90b5-4f47-b690-f07aa7feb255", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.179']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--628dcdc0-1ca3-4136-8ceb-feb73b0150b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.18']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d19a461-0dd0-4eb2-808b-426841e3e890", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.184']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3439844c-2ceb-40e8-b6b9-ea6c1f5e7a07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.187']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a653215e-991b-453e-9c9f-f202417a1a53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.190']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e56842d-b0bc-4219-a772-7cc5bbe44ebd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.191']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a56bc1a-cf7d-4423-b395-25699eddf3b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.195']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d09a13d6-1ab7-4a3d-9566-94a8a21417ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.199']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8810478f-2af7-40f4-ab58-dd1feb95a432", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.203']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d957866-3bd5-461c-9ccd-949d031dc801", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.212']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb79ed27-8ea9-4e9d-ad4c-7ef5ece04dd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.217']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d36e7994-7732-4d59-91fd-024aa7fd3b3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.222']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7caf856e-b121-47aa-9c61-d8a2ebc0e8a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.224']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2bffcd3-1bfc-474c-85e0-54e29bd6b7d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.225']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aeee52ba-8122-48af-a402-fa11f88ddd8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.227']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8751905-509b-4fd5-a032-508650ada49e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.228']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b99763c1-ea0c-4e3b-9e5d-da7ccb19e22d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.23']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12ac7de2-56a8-4576-98a8-e9b88f66b941", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.235']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--179a5271-d1d4-4e04-860a-8ab5002b0680", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.239']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf3b6983-d650-474d-be59-b106700b4d23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.241']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ead3d0e9-a05e-42b5-be69-fb4836c78fc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.249']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e11a8085-7f46-4d41-8223-b40afcf0778a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.3']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73a226ab-1b8e-4646-bd6c-471e8f4d6799", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.31']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9c0160c-17f1-4d5b-b87f-4ac4ea16eae2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.33']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4ae01d0-ac89-4d9d-b291-24bc7988660f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.39']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7289b4d8-87a1-4e20-8802-a937e9a337e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.42']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4148abf7-2e0a-482f-864e-0167c7f031d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.43']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cf16698-383c-4b31-a831-5d7065f51fca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.49']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bc58c9e-b96f-41cf-be05-8aa71409abe0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.56']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74de50e6-2f98-47d4-86c9-cf259a3f78fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.57']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a895774e-631b-4b11-a4bd-ba6878a4d02e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.59']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79b089f5-290a-4a19-aff2-2d7fc8004bab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.64']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fd5db9e-201c-4997-935a-a0f69fd68847", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.7']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffdb153b-b4e5-4d05-84dc-4b303afd613d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.81']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26db50f8-e740-4e77-a453-ccf2694bec6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.86']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc90d947-e784-425e-ba53-f36c183676dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.88']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b553b47f-9a11-4ca5-bb07-ab53373fe7ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.9']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f6c8b5f-d5a3-4af9-bf37-ddaf3f285bda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.100']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcb20691-0f1a-4779-94bb-51f136d1ca02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.102']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--218dae48-4da8-4a0f-8bab-104a4fd18439", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.103']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5299189-227c-4969-a002-27b4cc3be408", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.108']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--929ee1dc-709d-4eb5-a456-c0716d9d7516", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.11']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c0fecf2-a62a-4e97-9be8-b3c5d16dbeb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.110']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e25658d-af2a-4b41-88ce-e77aa5d97e8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.119']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e656ea86-2e2f-4bc1-80b2-0b90fa4f9571", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.128']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15cf4ac4-cc44-4961-a099-239ec89db495", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.129']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66501790-0b30-4495-a217-51fd34832e7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.130']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d65d69eb-7fe7-4955-b0d8-26c9bb5bb1cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.134']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--847b6446-c37f-42b7-8af7-8c950a71c3ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.137']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1952c8e-3266-4156-a8b8-0d4405b66e70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.148']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e61f4e1-4e48-4fb2-8419-fd06bce41e10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.149']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66863277-95bd-4290-b9b1-983004bb94eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.154']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d95867f4-2af0-4d56-aceb-8e019322ccc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.157']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--804099c9-a58e-4a38-8968-0afc570131ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.159']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97986cef-44b4-47a1-be91-1a63eaed4edf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.164']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97bfaf58-5541-44d0-aa4e-dec0ac0a9e7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.167']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--462b64a1-5354-474e-b05c-9a9733794403", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.169']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--028bd06b-4c2a-4ef5-8ed5-32d1ded846de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.171']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae373bbd-5e03-40e1-8469-940c9ed36ae9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.174']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69748efd-b21f-4f95-84a5-ad51c670f366", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.175']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b55859fa-801e-47cf-89b6-c0e64b303757", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.180']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c55159dd-f15b-43e6-b1bd-6a321eb25dbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.181']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f5e5f20-4e8e-4a9c-b2e5-2ce1e2c8e137", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.184']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1c81d3f-8d28-4f2e-8279-d355e8065d6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.185']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36c74dc3-27d0-40e2-b100-874c202fbc3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.186']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--555cc910-1a64-472b-b4e4-b2bb962fac03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.19']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52fc361c-cc3c-443c-9641-46b6448be03a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.204']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--073f0da0-0bce-4912-b844-7834109ab8d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.216']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cbcdbde-bf66-401a-9502-0eae0907198b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.217']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e380efa-fd1a-4343-a545-9656d365ff28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.220']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7d5f94a-ebd4-414a-bcbd-2dfcc740c0bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.226']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58d6a9e0-5141-4605-b4f6-f569dd4bbe5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.229']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d43b0d41-0f27-4afc-9dfb-8347da4042af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.231']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa267167-b205-4144-8979-468d178a2885", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.237']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff01b5a9-fd6d-4d47-b05b-5a9c296fe11e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.244']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5c62c42-50f1-447a-8615-8d6822726598", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.247']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4ea0a24-d23e-43f4-95b3-cf49d89a53bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.249']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce642fe1-6755-43d8-96c2-e5dde88606f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.254']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9df0abff-a891-4212-83af-1d7f47eedffc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.27']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2ca9655-9508-47dc-9792-9b7e48033993", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.28']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42bb90db-4ae6-44e0-9965-c0be40dc0e46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.31']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32d2b6df-9f57-4bae-9685-ddf11ee52845", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.37']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2765d715-c312-44c9-a8be-6030b63b92ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.48']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00b0751b-07e6-4fbb-879f-dd367ce38625", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.54']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b209e3c-a8e4-4542-9ce3-2dcc8f7b6a68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.56']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adc0f115-7d69-4512-a24a-a820b9f7cf4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.57']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62098f4c-f58e-4bcf-9ac9-1ec55e4623ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.58']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0266a71c-e071-4a71-85a0-50f915102559", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.62']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fc4fd13-d6a6-443d-942b-64cc2d0b09b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.68']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--326a8cd1-2b0f-4c2f-b50a-9b070f063f7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.72']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aea058b9-d2bf-4fdb-a083-92810fe7586a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.76']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fdb7b74-fcb2-4089-bd80-1d51305b9401", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.8']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c288223-2129-46fb-ac93-34045be75866", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.86']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--462edbae-9446-4fa0-a6f9-42f7da9f18e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.87']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--680234a2-f91c-4232-973f-fa2c0cc2ddb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.91']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92a5e741-40ec-49f9-8114-f45fffb351f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.94']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae5b7543-7c18-445b-be3c-fe1edf57fb6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.99']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6e1972c-0e37-49a2-9c6a-9bd34a919ea9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.205.168.35']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29bb30ff-ccf5-41c7-adfd-f98dabd3e6ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.205.215.83']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afbd9d5a-d196-41d5-8c4b-ca4da623015e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.205.248.166']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64aa680f-7183-4905-aa1d-4a175cdc1303", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.205.72.135']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--605062c3-5449-43eb-a96a-833f273b2577", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.216.144.195']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed95db8e-b6af-48be-91ea-a13639863b18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.216.172.131']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2660561-6434-4124-bb97-902de9333da4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.216.201.9']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10677d4a-041d-459a-91a2-8faca61dd3a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.216.234.82']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a04e9a8c-4913-4dbb-81f2-a268d720d4dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.216.254.237']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57b2044d-a957-449f-8943-432d3eae1bf3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.220.254.28']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d1890db-7446-4a74-83ed-435e8f3aa853", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.221.216.150']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd7eebfb-1e7f-473b-8370-6374c1a70fe6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.227.49.229']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80f38931-03b4-4e12-9918-42516010a837", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.230.131.160']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db310c18-ff43-4daf-a61b-348fed5a5003", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.230.134.81']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69f301dd-c34c-420b-ac19-79e9d971e5ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.233.120.230']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dabd9034-f1ae-42bb-b82f-9e9d28ba34e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.233.74.233']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0d481ad-c86f-4c6f-bce1-c964b5796b7f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.236.211.174']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a68c974f-2997-4f6d-b9b9-5cc1a2a78240", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.237.107.113']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bba8da0-6aa6-464d-8cf2-2457cb9dd3fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.240.174.82']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69181dc4-f47f-4a02-960f-003a0581dfe3", "name": "Malicious Host", "description": "Observed: FTP, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.240.29.159']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ftp", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5dc37df-cd36-4d2d-af2e-f27d3a4074fc", "name": "Malicious Host", "description": "Observed: FTP, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.240.3.145']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ftp", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c31e66e-bfff-4eaf-b918-215efa27708a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.240.86.139']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6ec0f9f-3ebf-457b-964d-3109a694ea56", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.241.166.201']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e961df1-0416-4329-8e57-3d9c8a346837", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.241.187.223']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8686ec6-ad0b-47c6-bc38-c01514db6d9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.244.90.205']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--016736ec-a650-4962-beea-c052fe6cf593", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.246.44.152']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49a307bd-246f-4018-a711-00a0dd33a956", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.253.28.117']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be91217d-0b38-43f9-9ba6-f475dc658581", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.106.166.15']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e67795d8-8a54-44ad-8317-87ca32719003", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.106.166.210']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2173e61f-4179-4bd1-a154-a0eee1080cc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.106.166.231']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e70124d6-659c-4843-8854-787546ebe2d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.108.171.228']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e3d6a71-c895-4204-b660-f6233c8395a0", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.134.96.76']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ca502e5-7422-4c45-81c7-3a43aec2bb9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.15.9.211']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa7dab69-3221-4ec8-84a2-d7e45113f86f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.151.144.79']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8346f54-95f2-4f37-93a9-9cc1ac2c607e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.156.154.52']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39bb1392-222c-46b0-a7a2-6d2a97d8c959", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.225.124.92']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a79b5a83-1104-410f-ba5d-211568679c0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.255.33.156']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa65329a-a239-44cf-99d2-bd19d3e22407", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.32.200.192']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ecc6fe5-1ed0-447d-a33f-87df45b41f55", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.33.26.60']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38fe799e-bc67-49c6-8e1e-0e9b729e9f75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.37.211.116']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--038ad175-4bb5-4d18-bbc3-e014b81401d4", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.79.232.215']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b7bb92c-e122-4b55-84ef-a28dbbbf4138", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.140.242.54']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc24c164-f48a-4eaf-89b5-e576be71421d", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.157.181.77']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc7298a4-0f99-452c-aaf1-6b4dae3b8219", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.157.40.4']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d72ef01-0f16-4ce4-bd7b-d6ed50e981d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.187.104.215']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abed8a93-1380-4309-91d3-95635955b764", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.187.145.139']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73d6b149-de0b-4ff6-b630-51ba5dc78fff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.213.187.251']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31e6a11a-f0f5-4723-bef0-48318dede447", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.233.85.71']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95994874-a741-4dab-97d0-52891d1df538", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.48.253.67']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d94bba2-0d1b-466e-bd83-0da824e5b446", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.77.150.112']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94afc281-7e69-486f-8cb8-8a638fca068c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.130.111.29']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d4e4f80-e454-4156-bdfc-c13f540d4e74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.19.156.227']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4867f85-d0a3-4c2c-a6ea-2fe7aaca6162", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.46.221.231']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2ee3e4a-de2d-42ea-ac2d-fd401ec28f4b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.72.131.163']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9626e877-22b8-4e45-9f97-11ebf016f565", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.76.185.195']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9822ba27-8da2-4e87-a287-a1427fe83b54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.93.206.2']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddd19339-43a9-417f-b564-d7c20e86f88f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.96.178.220']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e911202b-3ec9-477f-92ac-415de693e397", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.104.18.33']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e81b458b-c70e-4692-a1f7-34b9d866589a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.104.64.139']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78b76f7f-800a-49e3-9dc8-d8307606612d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.105.12.222']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--657fb6c0-0fe1-4873-b985-7d586f23e78e", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.106.23.166']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a80c90cf-3c19-4c7a-b5dd-fa8b48d8523f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.107.55.186']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e9fb149-1c8d-4c26-9f80-e5adc5bb0a81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.164.183.218']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc7cab0b-6955-45bd-b769-6f9782480cb4", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.55.185.149']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a339dde-768e-43b6-9e28-aa701f879d15", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.96.1.90']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d0ebfc1-7119-4976-adbe-5933c0f963dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.96.178.211']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a00a8464-0f34-4317-b6be-6637f55923d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.97.238.183']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b965390-81af-48ab-99f7-8f6de22806ac", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.97.238.88']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6cd1e0d-7ab5-44c4-b408-d6af718c5452", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.99.212.219']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94719179-3a9d-41db-96b6-ed9802d27b5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.150.191.6']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70a0b25c-768a-4f93-9ae6-daa84e30c5cd", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.206.92.183']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fefcb49-c010-4d1c-b0ee-d5fec4d33462", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.211.84.189']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--239b46bd-948b-421f-a78a-746b1c2050a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.227.178.208']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--314eb002-69ce-4921-b507-bd390d032e95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.227.180.232']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--936741f2-ede9-4855-b3ce-cfbdb1dd2158", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.119.24.130']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6216820-0329-4d73-a531-1d7d3ef12ac7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.119.28.203']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--049d6f4c-9065-452e-9406-5cccd5744f5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.119.33.98']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15afc060-f728-4e09-8bb9-3a5cb7603dbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.119.40.156']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85b51f8e-4a0a-46e0-a18b-765f00048fa7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.119.43.133']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ae15d32-cd06-432a-bc52-be4721b1721a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.114.161']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6574763a-50ac-414e-babf-b264eed4ffe5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.168.253']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d38243cc-1a7b-4a5a-af30-a5c71d250ec5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.169.38']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7815e53b-48a8-4685-bd0d-20bb00293596", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.170.45']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6680a021-e3b8-476d-8eed-b079421ec77b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.173.139']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6601e67b-175b-4094-a8d3-878b0e1eaf7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.173.206']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61965327-68da-4700-90df-0c4d8a87eccd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.173.90']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4db68013-dc39-4166-8dce-e9d8c4399d92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.174.149']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24e90a30-06c4-4c6f-bec9-5324170ae7e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.174.73']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df429439-5c3a-491d-a337-5086656fd208", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.103']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43394c3b-c6b2-4611-a04e-7010a75d7ef1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.174']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6aef10b9-292c-447f-9af1-85e8a3c6cf5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.197']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17f514f8-c5d7-47df-bfc0-1983f6cc7caf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.201']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f4b7f20-839c-4433-915b-f16048a61547", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.234']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a14885f7-e51b-4694-9077-e86b77d75a57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.29']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0152e3e-53b5-4aef-8416-1442bd4b4edd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.52']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fca908e-e1f3-4355-813f-fb6c4bda48a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.178.49']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b32332c6-93f7-44b9-8483-d57c32dcd0cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.179.252']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b848f83-a107-4b20-b6bc-35dc10f1c64f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.184.27']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47f53af4-b322-40ac-8029-6dd1a6dd16fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.186.100']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4909f29c-c4d3-48d1-a43d-d561ce0979a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.186.155']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--771d8745-b734-484a-90be-f169d3c78057", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.186.156']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1c435bd-3b4f-4de8-b433-4162afe10aba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.186.157']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d9d3c09-ac56-4d9c-bfd7-2144bdbda578", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.186.160']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb2b87d2-e0f9-4270-9234-b8a77f9273de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.80.250']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c505d4d-4170-471d-92a7-f321f2c3d0d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.86.76']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f08ac8cd-4033-42a7-9a21-f17b31c1b52b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.67.161.178']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61f45515-b3e9-4d7d-ad14-9d6d9f5224f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.67.161.44']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c18cbe5-d6bd-41fe-a9cb-99712f5cdca1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.67.177.206']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2c86a02-7d02-4107-9565-fd6d83c90fef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.76.116.231']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cab97672-2808-48a9-be81-8d03d7817c28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.76.116.33']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0eb166c-acaf-42d7-ad71-c8c217d43459", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.76.117.18']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74d38082-93ed-421f-87ef-eaa00a210b7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.76.124.110']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c058a119-67a6-417e-b3bd-b6d14dacddbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.76.124.166']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e67b1291-6621-41ea-9d6a-2721cc9a96d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.76.124.195']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3de0a23-0683-4b5d-99c6-3cd2d6de0beb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.76.125.17']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbb6a328-94fe-4d6d-a1de-1d5f9dbaf22d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.76.139.157']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f975380-78b8-4aa3-9eff-58f1bd24a2fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.76.140.215']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f10c0b38-2a5b-4445-9faf-71ad5d838551", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.76.191.129']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6b29c4e-f14d-40f3-9bc9-cf4b671114c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.76.250.51']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e24b70db-92b0-4425-97de-9d7d69f9d1b9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.10']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--297a2faf-1318-4fbc-aac2-e92b5f71b882", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.101']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c1adbc4-226d-4e58-8ad9-b4bc976ab7eb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.12']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--876091d7-48a2-4d1c-8c74-093da9978487", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.121']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de49b476-004d-4690-adeb-fae3b0288aa8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.13']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--006f15cd-b74f-440f-b23c-54ebf93aa2f3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.130']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd4da796-0d61-479b-8356-440cfa20a870", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.131']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae84f752-b6bc-407b-8bfc-b7ecfb23fafc", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.136']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66310356-aa67-425b-ae7a-f54cf559c7c3", "name": "Malicious Host", "description": "Observed: WEB activity. CVEs: CVE-2021-31207. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.14']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-31207", "external_id": "CVE-2021-31207"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9c360099-0b06-44b3-be3d-e79550e2bcf4", "relationship_type": "indicates", "source_ref": "indicator--66310356-aa67-425b-ae7a-f54cf559c7c3", "target_ref": "vulnerability--dcd22dff-dcfe-4953-a717-d5f7995ab85d", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--500ffd8a-0a31-4b0a-b2a7-1179368e93a6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.15']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a1593db-fe48-4b16-9818-347a3acb7c8c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.151']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40825302-ed98-41c6-88b7-b2ea0426d4ec", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.20']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c43c740-17e9-446a-86cf-e2e4f2a6964e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.22']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2847ca2c-db6c-492b-8dbb-6780e162cfce", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.224']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed587856-6c17-4763-9df6-39f20808b374", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.230']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c25083b-c907-4176-bd0a-9efb658de218", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.241']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cd29274-627c-4ad6-accc-50a8109e3c24", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.254']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c0d99ee-253e-40fa-ab15-08ae2435c54e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.26']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f65f9dbe-f752-499c-a669-f686a2ecda7a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.33']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--281743be-04d8-4f40-aea7-78ce7ca54318", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.42']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7c579be-e0d6-4e2c-99c6-249194a13c0a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.48']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--731babd0-af90-43f2-8dcb-97d5a6a0bb0e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.49']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b682e2d0-0c12-4591-a379-37bf3ff43fce", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.52']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b989f41-049c-4ed2-bf59-e1e55b10db67", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.53']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca16a94a-d3a2-4c4b-9dbb-679652a522b7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.56']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b304c410-3e4d-4e68-9d62-3f518cf6c0a9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.61']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7264108-ec75-46af-8ca7-7c0e73f0f8fe", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.63']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a7ddb2b-e7b6-4c6d-8e0e-ad472982a198", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.7']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2977731a-5a6c-4996-a1dc-50f1adb73abf", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.72']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc83578b-d812-4e96-ab4f-d4b8cc19cfea", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.73']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c14e36c3-e611-4731-a702-af8a9b23f13f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.75']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--931472cd-440b-409c-a880-814adefb9247", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.77']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57bbad93-db08-4042-b3b5-0aabc983f227", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.80.201.49']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5ba3b21-1679-4b2f-b467-ae05febc0591", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.80.204.149']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d959b7f-d2d7-4c88-904d-1842b1b2749d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.80.206.136']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c73f3b4b-4b64-4452-a20a-c45e0ac9dd87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.80.207.25']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8991ffec-7c2d-4bb2-b26c-897941d25e46", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.82.214.8']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7080e6e1-1d9b-446b-9eaa-21e790f91e3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.90.248.110']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6795435a-7c8d-4f84-b85a-bd8c66b0585c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.90.250.163']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--446d09d4-8a50-47bd-8b5e-241a57bed5d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.111.198.101']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62b7d5c7-e6db-411b-af23-4e24f51031d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.162.56.37']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b693992-7e05-4b47-81bb-d4a0c8426146", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.208.71.226']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cf33598-3d3e-413c-ba27-39d7e5a684e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.209.126.101']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d1ebad0-a893-4c70-b704-8a809952a13d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.24.238.168']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbe62ae9-9c34-41d8-a330-d208bb8e1e1e", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.60.234.169']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e219731-88b8-430f-9181-f34b10c1afc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.63.63.211']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e14ca19-2081-41be-847f-039f74d10bb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.76.168.3']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--457b376e-f813-47da-a373-83274312c9b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.194.134.200']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51fc8e6d-0c8c-41e5-be28-1a501c9b2824", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.231.234.101']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36b07b8a-30ee-4553-ab63-00ef8dad0c24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.5.231.175']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c77a49dc-c143-41a1-8d09-2a0e725e9556", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.5.26.139']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32b3abc6-8776-4f39-a1b0-ade7eaaedd30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.7.122.226']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edc7cb00-084e-48b9-834b-a75392811864", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.88.193.59']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63fd1c7c-9367-4445-8ab2-d7d88999fffa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.96.33.3']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54ee7acb-a239-41ef-87d4-24de7ba3c0a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.110.37.217']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--391a92f3-20dc-4abf-b739-fd5391beb005", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.128.113.103']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebee1a7e-6486-42c9-bf1d-9a3f63f93942", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.128.87.4']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ed486e4-4bed-41f0-9734-9c0241b8411e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.130.131.18']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eab0fd3b-2e14-434b-87ac-d655cc128113", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.130.154.56']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09cbc706-2cba-43c1-9b9a-fe2db74f1c47", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.130.57.46']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92ad5fc9-30db-4706-977f-665ace0fe7f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.130.60.195']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70c64525-f594-49e3-b9ba-bf01381a0ab8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.130.78.203']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99b43fc7-d6e5-463b-bf73-2e9c724c5698", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.133.220.37']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23245b08-e4d9-4236-acfb-599ece491bbb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.133.61.171']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc5c87f0-da18-4056-b141-0b82a30656aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.134.11.201']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16e13496-2c58-45e2-a61f-c0988fc6edd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.134.165.242']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53f95f11-a409-4a4c-acca-5844368ee5fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.134.23.185']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bb440f3-4ac5-45ff-a474-fa6f03925c6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.134.41.39']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb0184c3-c18e-4412-b55b-777956d66793", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.134.71.232']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--228364d0-0bda-45ca-9ebc-3af02c734a4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.135.133.194']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eff52cb8-3d9e-411a-9a44-24cad4fa2777", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.135.134.180']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7b3550b-6cab-48c1-aaf5-216477f3b4ca", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.136.86.241']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0aa2962f-396f-4a52-9671-13690b51bc73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.153.102.138']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26cd80b4-5fbf-4e68-bae6-d3b66b45be68", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.153.123.185']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e67289d-a88f-4f82-a988-715341872929", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.153.123.186']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2f28963-504e-4a48-954b-ea941ae9ba29", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.153.123.3']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c8dc0b4-82cf-4bed-8dd2-f6fdf8f61f84", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.153.13.30']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0234db90-75ec-4015-8a92-72f249af9ad3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.153.135.208']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc1edc9f-d839-4c72-813f-30fccb578386", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.153.150.122']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14078246-209a-4262-af9d-3b916390823e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.153.215.249']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--303ebca5-4a0c-49ed-a0fb-65549439c2b4", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.153.28.68']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91ead1d8-f2b9-411a-834b-bff21ca3ad37", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.153.64.216']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--071fe026-3699-4644-8184-b136f601e580", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.153.71.12']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf10f6fa-9207-4d30-b566-42a1f2240b02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.153.73.200']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf1d744d-04fb-480a-8199-a1df0184f367", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.154.195.142']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3bc11c0-34d4-4dae-a8fd-2a69f7355577", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.155.188.157']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c945601-5423-469b-b9e1-a13d3c4c9607", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.156.127.60']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b89ddbe9-128f-470a-ae75-459270e6d473", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.156.136.152']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50f7ea95-ebd0-4961-8aed-937657e49c0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.156.149.62']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4181c266-2944-46f6-a7aa-8b98aab6f113", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.156.238.232']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--875667c2-0e4d-4936-b6e3-d143f6b71c9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.156.47.42']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07652ffa-a20a-42f4-a079-f9bfb634e3e3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.122.146']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa31cff6-2a95-4afd-8c94-89cc4101f853", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.172.39']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--daeae8d2-a3ab-445f-92bf-3ba9fdc192f8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.174.69']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad436c4a-aa77-46e6-9885-f2676e4e35a5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.38.131']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee86f398-e889-4727-91e3-b44040faa912", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.43.147']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f31bdcfe-1b6f-47c8-964d-6b465dd6f21e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.52.37']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--484b5253-f93e-4a35-a785-c6792c9507e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.159.46.41']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a988aa12-3166-48db-9594-31acb0ff1325", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.159.61.24']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e53f84de-aed1-4939-af9c-0071cc83750a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.160.207.19']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad49ba5f-ec6c-47c1-80c7-420978c9e6d5", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.160.214.25']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e54cc27-6f14-4c9e-96d1-654730ef79c9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.160.225.169']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9aba29a3-392e-4e47-944c-4ce1b59d6bda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.161.224.78']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f8931c5-092d-4c49-b84c-7e594393ac6d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.161.233.190']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ec35ad9-eb11-49c0-bf23-0365c0ea61f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.163.113.160']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a9b3ee5-a1dd-48c0-92da-00fb42ac443e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.163.232.168']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43b44691-0105-4592-a4d0-d1f4df0d826a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.163.92.104']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfb89830-8c8c-42a2-879e-a2c12f797fdd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.164.0.96']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49622423-b2e4-4554-8079-f66fa585bd36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.165.67.31']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a440d0aa-0b09-48a4-896d-26e1e1918a45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.166.134.47']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bcc249c-f1d2-41ea-a3fe-4a847ce99cd7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.166.142.76']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc25b48e-ba10-4dbf-bd2d-2e5e06cc63ca", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.166.226.57']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29303a9b-c6bd-4bcf-8e1f-fb1da5e94477", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.166.245.120']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d7038b8-2d3b-41c5-ba5c-029a98f786d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.167.236.228']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--946fe0fa-a356-4eab-8d4e-e1c6fdf4ae31", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.198.188']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--accc1579-b175-475e-bf24-a60574b86600", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.132.114']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--702283dc-98bb-42a8-91fa-7193b27d855d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.174.16']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f08513d-7662-4988-a089-ca42f90811e0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.174.57']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96416f68-f55d-4ffb-9b53-191ea107f23d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.181.59']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d686f394-6f90-4f71-afd5-f07db7d7dd18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.90.99']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a8d7050-8acc-4ab6-8729-8a46d99aa385", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.224.126.107']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--536f0df5-1cea-4986-9d5d-4db0f60d9c8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.226.36.124']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b06cea25-d3a8-4d00-9f63-943eab4ab46d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.10']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bb2b9e0-1814-4c30-8a2e-06f5c4455193", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.121']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e404976f-e669-4650-b4c9-e5630b828006", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.8']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbc3782c-9ec0-462c-83e2-35ed6e303733", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.9']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7211882e-651a-45cc-b066-f566df29c9f3", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.243.142.42']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5813dcde-87f7-455a-9516-520a6ce66917", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.248.108.174']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95c82085-dc53-464a-b983-93f5af924902", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.252.159.41']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a8615ed-3a30-44c8-b412-4bdc413ec586", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.98.161.138']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86d4801d-e1d4-4b1d-aaf2-2c4a307dcdda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.98.164.42']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--854758f9-641b-4ce8-aa4f-10a1dbb7b9e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.98.165.116']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40815123-a6b2-4de3-b53a-f37aa8b43a2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.98.165.30']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff48b2cd-593f-4887-84a3-b8cfb60b626f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.98.172.146']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6ed21f5-0a9a-4b8c-8cc4-2a7437379a20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.98.176.193']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d85f2fcf-85be-43a7-ae36-ccc9d49237a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.98.178.177']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4634a8de-c8b3-4614-8ca2-52ade4906e81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.98.180.65']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f22cb5eb-444a-4f96-92a6-0057ddba0f89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.98.181.251']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75a5d02c-555f-4e19-a34f-164e9da47515", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.98.181.35']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e60d9f1-23aa-471d-a1db-9ead7b886a98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.98.186.164']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42ba5990-4272-49b0-a60c-f2013716cdfc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.98.188.55']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9667c81-2640-4737-897b-790e089f9490", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.98.189.233']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50f16f6e-1103-43ff-b9e6-edbc119c5065", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.98.192.91']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5be8005-3e5c-4947-944a-ba08d880d3cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.98.193.19']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a83caf4a-d0fa-4bce-b960-b72a7c84ac11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.98.194.142']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--682df294-5382-4b9e-a091-a09b04a9972f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.98.194.78']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--161e5f87-227c-48e6-ae81-0cc535e74fef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.98.197.19']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf18b02a-34e5-4033-83b3-0cb10544c5ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.98.198.6']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c2f28cd-3b0c-4bd9-8d53-fd6627d38bd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.98.200.127']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15841ffd-f7d1-4bc2-ba4f-84110e595db9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.98.201.42']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--043bef64-5187-483f-9d47-e8bb68347349", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.98.202.42']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c0bee70-b2da-4018-bd4f-8c362d500e04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.98.204.117']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50088535-43b1-4d9b-81a6-8e25962d582d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.98.206.22']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea4bc88c-ecea-4f47-ade3-e8fdcc035e48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.99.104.63']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec48c2bb-4add-4d6b-8221-09e1a27f4baa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.99.45.48']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7caaca9b-3bcb-45d4-885a-2376880e61be", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.198.85.111']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--760d8e0a-7249-4655-aaf4-0dda6c4748dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.220.185.172']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd882b28-dc57-4b3d-93eb-8cd19cf7afed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.220.185.87']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8f537f7-a687-4f4a-81ed-af46b53c68fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.11.57.172']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2136d757-1b98-4c26-b40c-699279181092", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.112.149.170']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ddc4d86-65a7-4545-8823-d52860da6fab", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.116.78.92']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d581f34-dfa3-4d68-8b0b-653aa405dfdb", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.117.177.47']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e185bad6-b587-4cd6-aa5a-000daa71d1bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.120.161.66']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2292530-02c4-455f-9896-a65789fc5cd2", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.129.185.4']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c725d22-7248-41f2-9ac6-d4c70cd15d41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.130.127.41']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a865db93-2125-4fee-9629-5871d857a8a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.130.41.29']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b574ba1-fb9e-4b9b-a09e-32689be58271", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.131.193.149']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd021409-f158-414d-beec-65cc816d2620", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.131.46.240']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b356d5f-2af4-4a16-b16a-e91ecc23ac21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.132.227.181']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e7a7a72-459c-42fd-9816-a9c36d0c471b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.132.227.182']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9a87fca-0763-4e7b-b382-2b585b9aadf8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.132.227.184']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58275377-2e02-4e90-be49-968ac3de71fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.132.227.185']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fa85acc-2a8b-4785-b415-33a9be903237", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.132.227.187']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c45955d6-bf78-4f6d-8f6a-04f2e49b1b93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.132.227.189']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5962a10-3609-45ce-a370-45b5cb5f7a58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.133.239.247']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1aa32c8a-a9e3-4e13-ad94-3287be3fc661", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.133.74.175']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2df88089-64ad-4b58-9b26-2dcf6d155a4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.135.161.17']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac56bb99-f72e-44f9-aea1-c399b8cc7d24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.135.193.193']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f90c47a3-f9da-4b61-a05d-b62bc31a1a1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.135.194.10']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57553a12-c295-473e-9fd7-9d3e9b73355f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.135.194.113']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fe13371-955b-440a-b402-01108864375e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.135.194.24']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2648373-6ab0-43c1-bb27-8e8e1a7f9e62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.135.194.31']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6eecfb69-ca24-4281-8cc0-6f77382c7b7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.135.194.83']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce63c82c-392b-4bc0-9175-c56298be7954", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.154.10']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59a7a587-9341-494f-95d9-e2c0ad3114ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.154.70']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03dcc6c6-fec8-4f25-a93b-ed292df6856b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.154.87']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9171bae-7ca6-4d51-a3ec-eee2d18c7d26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.154.98']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4c881f2-12c2-467c-96b5-d35a480018bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.154.99']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7e03177-412b-4863-8efd-44f1bd710984", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.10']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3370f805-824c-456f-9699-1ab36a8b0994", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.12']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33359ded-6a47-4ca2-982a-ae7c9752e80f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.145']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4217216e-02af-411b-8be0-caf4bf2f3ef2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.161']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e100124-ac1e-419e-af6c-f88f514494f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.164']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a5ede58-3743-43f1-bd01-ec80ee92fa20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.166']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b8249e7-70af-4f79-8213-c6108c05dcda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.169']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8b09c76-9454-4c3a-aaa5-332e113061d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.197']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1671b6b-80a9-40c8-a425-d0f4e6f9707d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.35']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ecbd196-1ad1-45d7-8c81-23f3bfb0ca37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.53']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52c34f36-5403-4b2b-9b19-87e375f35305", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.8']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebe5036d-33bc-4bb6-9244-612f5468497f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.9']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e45e1a85-5805-4fe0-8283-6f9167a60183", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.146.54.9']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c782ea3d-1ccd-4e4e-b1e9-14c6a0dbea41", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.121']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3d08e2f-3957-407a-a55e-da5f58642ee2", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.141']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--464fde81-c759-4267-bad1-2e90536c309f", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.147']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5560d5f-8d8b-4b89-9f19-6c228fed9ad4", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.151']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c57b3141-e488-4997-871a-e2807f490a19", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.152']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78750089-b41b-4d6f-91c7-209347d93e30", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.157']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03a88021-dd2e-4678-bf9b-9bccd61a4ce9", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.183']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--969210cc-3931-4b96-9dc0-621916e9303d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.200']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4742baa-e397-4682-b854-a87be12a3f4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.215']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2aea619-ba07-4621-b887-069739de6f65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.230']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61368bba-11a0-4658-8b8c-c91d2e0b957e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.5']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a20f4063-a862-4310-9146-cf97638f79a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.64']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4633387-e398-4463-985c-5a1d1ead2b99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.67']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4054e152-5133-42a1-85a0-6097fd9b7ada", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.146.52']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33edd033-67e8-4dbb-a13e-02b6cea1af7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.151.102.153']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fa1403d-3960-4688-bc55-aaba3b6f7b3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.153.34.117']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aec0b39c-1868-4ae8-887b-8578c5d8f2a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.153.34.153']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3f296ea-5b61-4308-916c-ed90c2580bf8", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.153.34.181']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--823bf231-c2cf-49f2-9e3d-0fe32d6bef3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.153.34.32']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f1a4562-fa68-442f-b1db-533bda609466", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.153.34.87']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb4fbb03-4335-42b8-b456-a9d61cd93e91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.154.159.12']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cee2fd91-41ce-4000-bd26-37751a19510a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.154.244.2']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99218657-efe5-4732-97f6-1c4a7287c2ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.114']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6de8ec05-71bb-40c0-a5c3-67609b05da8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.122']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a5c4f2b-cb2c-4fc3-a8a8-3c082e58c989", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.126']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--777b1beb-a144-43d1-9d0e-85cb951464d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.130']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04a995f6-c079-465b-87ed-75aabcbe835e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.156']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1914ee02-e340-40cb-bff0-c1c7b6081618", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.158']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63e6f844-6e03-4b3d-aac8-ac593499d47a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.165']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70c27af6-42dc-4363-b905-7e03c115f470", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.175']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6132bfd-08af-4df0-b1d4-58a8bd37f070", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.177']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff089d55-56b4-4eef-85a4-ff9d2f8473ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.43']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c0869da-7283-4857-9f08-607cefa1899d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.45']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee1e0b79-c140-4434-b2b7-b0f74b5a7b30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.47']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4dbe9391-b85b-4bc7-b0d5-7e78e80bf13e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.54']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22bd506f-be6d-4d15-989e-e9d7a9e5e56b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.56']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9934a5c8-17a4-484d-9c84-3708eceaa83f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.57']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84cb59d0-f2ad-426f-a84a-3c1efdc6a1b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.61']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de6bdbd5-3568-4f1c-b6e1-c6981bcdb96d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.66']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--458f38ab-6df2-4ce9-a940-81e19b1f7667", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.68']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f04d7d0d-e4c8-4200-8475-5a0f4a35dd81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.73']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb96d072-13df-4ad6-9e6d-73a3a82cbccd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.74']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91562078-1519-4848-978f-947757a17ab0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.79']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c25b1603-ac35-443f-bdd9-9bf7fdbb201c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.118']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08dd0855-0d97-4917-8fc0-12d03d80756d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.120']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54e58968-ef2c-452d-97f3-69bf0f346fc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.125']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0a5fb6f-ae00-464e-b508-976909d6d283", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.130']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf180c86-8fef-45bd-94a9-79c1c49d1225", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.131']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab22e8ac-983c-441a-8b2e-c1ce87f42f04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.153']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfea7847-09f2-4ebb-8f75-cb4370d65a4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.155']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--214ae30b-1bbb-460e-809e-88fb747ab3b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.168']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc270dc3-d937-4e57-84f5-aa3c415c0cc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.171']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5024445-f14a-4bce-a11c-69c2da39169a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.52']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02fe4bd0-50a6-4504-aa43-b1917f187825", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.54']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23ff1e8f-1c7d-4a62-bd31-f605bb759f9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.57']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--740db7c4-3ac1-4ac6-8be1-65a1bff0cf5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.60']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbeeefa0-18d9-4540-ab0b-c94154b412f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.70']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31fd3699-6c34-4e11-a2c0-365b77a56be1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.76']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d8a4969-0646-4be8-8394-82df2eae2ec6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.81']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5871a5d0-45a6-4597-81de-c4daec7f7b86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.83']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae2bfd64-2236-4ae4-aa8f-a6bb7d319504", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.85']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aea776d3-02e7-401a-b591-18737d0a8be2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.87']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2e1bc2f-e30c-417b-8d63-22c0d7b39b40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.88']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ee53907-fd1c-488b-aeef-6416ab6d0668", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.90']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9e9a19e-ddd3-4073-b83e-45c222782dbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.92']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--daaf7589-92e7-4b31-803a-9c8a333cef6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.95']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bf129a0-5b7c-4148-b7ba-43afb4db006b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.87.10']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c3f42f2-8a50-47b8-818c-61d4c79e790c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.87.127']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a80e5397-9d0f-4e66-a022-5c952764eada", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.87.234']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4986e800-4174-4fa8-9667-cdc768636554", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.87.7']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ce716f0-6bc9-47f6-8123-72917d5a0f1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.166.90.50']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12ac5ebf-391f-4038-9995-16868279087d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.171.132.162']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11e9c957-e200-43b2-922f-2d04d46a9a82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.175.123.254']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e6bb482-de90-4088-88eb-b0a1c62c9ef0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.182.5.205']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74a5e9fb-552c-4e98-838a-120aec982941", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.183.184.74']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--419a1466-dccd-47d3-86b3-0c2f34c27a04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.192.63.11']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d9c990a-d6cf-47b9-87e3-4488c66b1140", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.67.100']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4714f288-7536-483c-b265-6b35128f8888", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.67.102']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e44c9312-b0ee-492d-bd38-099bba9b0c46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.67.103']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--929e2050-65b2-4ae3-b5ff-6438ed4f8c3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.67.104']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68936171-62aa-4c86-8ca5-146771b0fee1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.67.105']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d468d77-cdb5-4a41-9660-d5accf922a1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.67.106']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2494e97b-6a47-4eef-86ca-3d3d9884946d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.67.107']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9d79163-6c3b-43e1-900e-120da55b0ad7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.67.146']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02110022-00bc-4a89-b9b9-08452e86b607", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.67.2']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8e2b551-89dd-4932-95a1-627deeabc144", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.70.248']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d5e9a01-f6f6-45bb-ac98-d8b680138d3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.70.251']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c383728e-d126-41af-908d-65adda432773", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.70.252']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0896db27-eda9-4cf8-8ca3-ef88a960d20d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.70.253']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f1280ad-333a-428f-904e-e226cbf6c0f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.70.254']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d171f393-721f-48cc-87ff-a33a0feb27d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.92.26']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--356a25a6-4c9b-4756-b1cf-eff6b30a673a", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.195.250.117']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14bdbe8f-7b39-4a0c-acc3-6f8e7001aff3", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.197.12.65']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3462b25d-b9ea-46e5-a90e-cf209ed24a67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.114']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95a216fa-8188-4198-8a29-10449f561acd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.12']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9600ed88-e09d-4a7a-84f1-b3ce88ad6f6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.136']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e759a630-c74d-42d6-8101-0614ecfbe8b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.138']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d35498f1-99a7-46cf-9991-48c7ddedcf72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.140']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--573d604f-1817-44c6-9cce-27e87add6b09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.143']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b0756c6-aa01-483f-8219-1651e490e3de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.145']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe8204eb-5400-4f50-8dd6-99eb88d0970e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.18']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a9853ca-5c00-41e8-ac24-a4b68858e946", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.190']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60d83619-a0a6-4888-9387-6eeb24c90521", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.240']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4504a1a-a602-42d6-bf17-72d185746b79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.241']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--172c52fd-5361-4e74-8e85-8ea95412509e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.5']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--baa2f1d5-32af-4750-9b5d-0a0a6520ae4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.8']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b8344b1-36b8-42d4-91dd-bf31ce7b413a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.92']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--938f3751-18bc-46f4-b33e-604bdb4cb8d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.205.1.5']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02d84221-bdb6-44f6-bf3e-a1b557cac76e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.225.135.15']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1f812a3-6f8d-4408-9f37-e99f67f7929f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.226.104.1']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4356aeb-16a6-48dc-aa42-dae4a6e298e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.227.254.154']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--702befb0-b66a-40ea-a1e6-9d2ce53ce9b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.227.254.155']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b09fc9d-93aa-43b6-a108-1006349c67be", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.227.254.170']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17c3cee3-133f-49ee-8b2e-b6ce3fa0ed82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.230.66.99']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a636be24-1fba-44ba-b71e-3ab60fbdb791", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.249.244.136']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2536f212-d6f2-4937-af90-e0d9301e84dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.249.246.17']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--349cf5b8-23bf-4812-b556-fc3a507c66fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.249.246.196']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14ce4b1e-2620-4b86-bb40-e9093f18dc43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.252.188.23']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c09f9e15-6528-47db-adb9-ec829633373f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.105.182']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3835f27a-4ea2-4c5c-ad5a-11acd09073b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.105.76']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--782a95ef-c193-4ae9-b9b4-0d6299b8bd08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.109.17']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bea8ada3-d355-4efe-8afb-55ab7543985d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.109.18']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--517c7ee3-4d66-4b57-9542-128a98ef059f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.109.8']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13491dc4-6163-42b8-86b1-644fb51c5e17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.110.79']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61edc5a0-ecd1-48e9-9ad2-769079e87eb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.12.122']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--282eca95-11cc-432f-aa7d-1ff5a75509e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.12.214']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9600f499-005e-4e91-8dcf-ba8c08892342", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.14.197']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--234d4bc2-149f-4cd5-be31-10b258e15569", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.33.38']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b4c4a28-da79-4783-93c1-14a87e8326b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.40.18']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e3c077b-1299-4c64-8908-f14ba1768d1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.41.118']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--188b4b97-e57f-4fa6-928c-0fa3c4c3ea12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.42.25']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea8bed24-3e3c-4908-8ae7-831f3422dbfa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.46.249']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a7e0dbc-106c-4e28-9344-162a8af4cf11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.52.85']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c0ddc00-8694-4605-85de-58c6a9e39ae7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.64.102']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--452bed57-5480-4029-8458-916633d58a29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.64.113']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ae07479-69c5-4e2b-af8f-9da4c9f4bf49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.65.162']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6eb52490-a932-4c09-9a01-0c8c2c6e8c0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.68.248']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1984a3a1-3758-4754-ac40-afab2e48adf4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.7.4']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--798555fd-b0f9-4f59-96c7-87d56a0a0def", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.70.43']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a1b8d12-3e0b-4950-adb8-41ea7e5b5a19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.72.139']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fce3060e-a7fa-492a-b638-76d2071cc6c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.78.24']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7701b326-86d0-4ce2-ab87-23f1f30c5971", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.83.110']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2ab690d-9c7b-43ce-959c-b48a0430bfaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.83.134']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d8f16f1-0da1-424a-875b-5e70f6a4dc13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.83.78']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab5e414d-c509-4279-b819-42a2f4116db4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.84.124']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebf0029e-e1e3-4a38-91cd-7840e2f54999", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.84.136']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ce2445d-4ac2-4d94-874d-89e70b2ec1e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.84.142']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2773471d-dfa2-42ea-97a5-5b033b641614", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.84.174']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38912897-d516-4754-a86e-63a87f6a6558", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.84.18']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04f7ba53-bd49-4bf9-83fc-540094f79625", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.85.218']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bca1b7bb-ce20-4e2c-9288-f7fce878a92e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.85.80']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46336025-fa39-41e0-b91e-3cbdebb48556", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.87.154']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--851f9c18-bcb7-48f1-ad56-a1a1dafc3e49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.88.207']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2af13bb1-af86-4adf-aa29-39c1a511c421", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.89.53']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f94b917-3c43-47e8-948d-ac4faa273125", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.91.114']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57a2001a-39e4-4888-bec9-4360ff41c74b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.91.194']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1174cc3-66cd-479e-953a-8e33c5550f11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.91.234']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--332e2ab6-32d7-4f22-8b77-ab09987a9add", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.94.76']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--161c2756-ff62-436d-b288-d631bdd9c0fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.95.200']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3c4397f-6892-4f3b-a528-4a66d1474827", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.95.64']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f3f8f73-2715-44b8-8b4b-92d5ca18616f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.96.174']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--737467b5-5913-49d4-ad2f-d16fa0c197fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.96.41']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98a793d3-b577-4917-af3b-fc055a8a8919", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.40.57.172']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2890adbd-53d3-470d-bbf9-b05f5ecad59f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.40.57.23']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--944c1b80-bd33-4f07-85b0-288b87122683", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.42.88.54']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25824553-f57d-41fb-8f91-439d537e1b0c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. CVEs: CVE-2021-41773, CVE-2021-42013. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.37.254']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-41773", "external_id": "CVE-2021-41773"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-42013", "external_id": "CVE-2021-42013"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d028b6bf-6c06-465d-8aae-93742588bca7", "relationship_type": "indicates", "source_ref": "indicator--25824553-f57d-41fb-8f91-439d537e1b0c", "target_ref": "vulnerability--cee9e8b2-8a5f-4336-8e8e-05d53f967e71", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a9e6e9d2-6c9b-43a2-a04a-db7de61dde38", "relationship_type": "indicates", "source_ref": "indicator--25824553-f57d-41fb-8f91-439d537e1b0c", "target_ref": "vulnerability--73f12446-306f-430a-b214-3d2bbefbc8fb", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3f6dca0-6076-4fcb-9c15-a54032ecb7a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.45.254']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff900aea-c6b7-4ba9-8e20-6e1ab0c3d5ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.57.106']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97751d45-a3cd-4ec1-b8a9-bf7082eb7bec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.57.251']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c0f5a3d-0942-4098-938b-68aacd40b4f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.57.6']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ec66c88-0206-4b88-acac-b2e64bbd461a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.57.63']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ccca880-cdc2-4b19-bd81-b6456e26df46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.58.100']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1766bc3c-8426-4fb5-82df-0d2f4fe244d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.58.131']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--204ae90d-3f7d-431a-9a3e-77cd003ba56d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.58.153']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d7cbd16-fd90-4e0a-820d-1b2b65c12ed6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.58.160']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b7eab11-bff2-4be5-a18f-bdb06f144922", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.58.167']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16296f26-d3ac-4605-9658-f92467a14fc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.58.197']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1bea3f1-e2b3-4a64-ba34-71a8eabec289", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.58.204']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2f91d7d-0360-49ef-bb79-1241e4f06a1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.58.233']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b7dfb3f-cf67-4a07-b9ef-81686d6a80f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.58.76']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--942fdc24-7aac-412c-872c-7ec5c646f6b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.62.37']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7264e838-8529-4933-a465-5488ddffbce4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.62.77']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3daa752a-3e84-4f1d-8ae8-5b3898d83a3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.63.68']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ae0814e-3842-4eec-85dc-f8ac319d8e3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.5.102.93']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4da3391a-66b8-486f-a9f6-26e668c317c1", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.5.138.3']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8009d261-0da2-4f20-a49f-2746f0bf8afd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.55.153.86']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe450789-5456-48ff-bdfe-ba947b7bdbd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.55.185.228']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0a8f194-064c-4eca-930a-d9f5ca6a02bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.55.33.25']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba0609ee-e4d0-46f4-b69f-14e47fde6a51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.100.193']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70c78e73-2d8e-4367-945a-c2d90860d00c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.100.206']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b579d3fe-d3bf-462d-ba78-165067c1ce73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.103.200']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f548afe2-928c-45a5-bc46-074eb485bd31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.108.104']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64aad384-606a-4ec7-979c-ef3553d32399", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.108.196']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58989815-0bf3-410e-b571-cacbc5f5503b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.108.212']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb72f06d-7718-4d92-8b89-851017d97059", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.108.218']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f253dccb-a723-4d6e-bf70-96853fd99262", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.108.32']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09bc60a2-6213-456a-80ef-a1eb1d15d6f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.108.41']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aaf8f77b-060f-4e15-b1ed-f08bcc7f3a16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.108.46']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d719a70-8455-4cad-a558-b539c85a309d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.109.13']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c07a7e18-6885-472e-99d9-2830e97e6fa9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.109.15']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5c83d93-85b4-4dd7-a5a4-7f352d81e6c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.111.145']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--615ac49f-abdb-40bb-9859-35269be587bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.111.148']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--388bf83f-0e34-42b8-b78d-5e18f92e7c46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.111.60']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--383382a2-82d1-4675-a493-cb0b4b3c857c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.72.13']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47ef8837-1cbf-47e9-8b94-12e6c87fb63e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.79.53']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80aaf4d8-59fd-40d0-ac1d-9e5ea3529e0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.82.11']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb31f176-1f94-4e56-9346-99877df29830", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.83.110']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e89948f9-a102-4bb0-a85e-ae62d7239d7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.83.149']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0f1929b-67ec-4b22-8259-20ab80dae0e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.83.247']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--674e0efd-1c06-4962-a225-e8afe8d9c3d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.84.110']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7610b8e2-71cb-4a70-b5c8-3c25e37516e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.85.254']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d98e1f87-83f7-4277-b614-e3e3eb7e3122", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.64.134.114']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba9a1a21-1803-49ba-8bb7-3b92f266fc69", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.71.168.98']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fc69a7a-a977-4a3b-a07d-23869a409dc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.73.20.213']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbf559f5-ebf1-4d9c-a257-1f06bb7e1506", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.77.254.95']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79cfc994-647f-42cd-91ff-77ac062535bd", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.78.204.254']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c936b20-ec28-43b9-bf83-8929b1255811", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.104.47']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54e18e00-e675-4462-80dc-d059994183c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.109.130']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00d64604-8757-49a4-b29a-e36efdf88f74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.109.193']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cf83e35-f621-4c00-819a-963efdc3b6ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.109.236']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef85829d-d430-4ca8-a8c8-e28b2d3ce139", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.109.4']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42e9951f-941f-4179-9c0c-97bf60c5fa71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.110.218']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb70177a-ff22-4cd3-9f42-8080c9cfde00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.114.248']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1155f6b-8d16-4be1-9384-dcae65e90ccf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.115.117']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a9da836-e729-4cdf-9f85-8ea79aa980a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.115.134']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dadcc0b4-5dcf-4aaf-a40c-b61e1b78f5f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.131.112']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5dcff580-62c4-4938-8959-db2c3e67d289", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.131.17']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--128790a0-494e-4977-b2df-c989ca00c1f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.131.188']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--934e1fb1-e68f-4d8d-ac9a-72ff853d68df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.131.193']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9073d809-ff94-41e3-84a8-8436a91332a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.131.210']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--669cd4e3-1459-4e4d-9f7d-ccca07754ad7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.131.221']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f661f92-6b1e-4db7-b572-f8ffb00ac596", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.131.235']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e510c0ad-7344-42d1-933d-67dc75469b20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.131.40']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de783b7e-932a-41bf-a9db-25a8ea0dd15b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.131.62']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d08ac7aa-67b6-4a60-b245-fda9feecb685", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.131.68']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e2260bc-2df6-443d-a972-f3495cfc9550", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.132.41']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff474465-76c7-4674-8f8c-3734f41bcad8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.134.165']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c72c3f0-b854-4824-bf43-1a0f438635de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.134.174']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e64ee75d-e5b5-429b-b5ba-4b8e5e1e45ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.134.179']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1880896c-d200-4108-90a8-99d74332f6d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.134.253']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2203b6c-b96e-456b-a14b-f99ff5338723", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.134.50']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8aa5c95-390d-4dc3-98f4-214d264df88b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.137.10']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3230336c-d0fc-41cb-ba8e-be2bed980f12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.137.183']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f86b2562-d9b1-4819-8633-9792446b0680", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.139.25']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a78e106e-9688-4198-a627-061f91cb2704", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.139.45']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98d53ad4-ae53-4cba-9446-9a895bf2ec80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.143.127']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9737fa0b-f254-43ef-b840-13eafdf833d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.143.134']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db1b2ae0-e07b-4bf5-a326-3097af17d014", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.145.107']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80b4b7f7-83a3-43c6-892c-d8f4e8877622", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.145.139']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34718ecf-5f4c-4b6e-ba53-305549924803", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.149.50']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--475c2851-461f-4481-9d4a-d5542762dc1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.149.61']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--110a2f44-6724-406b-b8dc-75143e1ef725", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.152.139']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f76da35d-ec2b-46d8-a0c5-15344429d512", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.152.215']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--478eb47a-b817-4dbc-81cd-aa60a5f4711c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.153.51']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d99624d4-15df-4a9e-9f1e-6c3ea4fc1c53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.153.72']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f27365a4-edbb-4867-8eb7-0b0d140f83b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.155.102']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efa3a4c4-766b-4784-8203-6b7bd78ae844", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.155.105']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d6d97c1-e4d5-49a4-8082-0aa4c2c4c2f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.155.106']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--804918c5-5d0c-4ec5-9a46-55a25d93e65c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.155.117']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6034f1c6-e93e-4403-bc74-68843cc2b8f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.155.132']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--025b65ed-2cbf-4d46-a5ae-3d67998f8295", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.155.144']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d582df0b-0881-40e4-bbad-85a409372bcc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.155.161']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb31a5f8-fedb-400a-b2c7-81127eeabb18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.160.14']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c1301ab-988f-46bb-b971-c92c60cf477d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.162.166']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e81801f7-c6cf-4846-ae74-9600472ea533", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.162.197']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c72bc9a-ff09-4ad8-9dfa-66e4945d00bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.162.224']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3276bf34-f0b4-41b9-9802-6e02dc623b6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.162.55']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c86b807-7666-49a6-b816-636bbb2da5a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.162.70']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9c732fb-d4f1-4cf3-8ca3-24bacd749971", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.162.79']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f28c54f-ffc9-4741-b462-0eb094d27fcc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.163.156']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48a6142c-c200-4545-ab14-29fd60074c97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.163.174']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--332f7e11-651c-4c8c-b0e2-3b2baa535aea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.163.196']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7252075b-ab3e-40a8-8531-baa43de911fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.163.53']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06348b3a-861c-4f48-bff4-7a94194628a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.168.172']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1f566fb-6253-449e-9728-8bd76df9aae1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.172.21']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ce79908-cb97-4ad1-aa04-2fab228409f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.175.233']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b36b74c9-9966-4147-bce0-da6ddeb24fae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.175.4']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06a1574a-ede4-4f06-b45d-970d1aac9ba4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.177.146']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--232a3e76-0995-4674-b57c-d4fa896ffd69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.177.179']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fe401c5-75ef-4918-adb2-9d67f718da3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.177.191']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0aa0b7f9-18e9-4a11-9903-9fed582499aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.177.208']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7294c7bb-79a4-4e49-98c4-bf6e1abc3894", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.177.245']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db1c133d-1a40-4a95-a3fb-2f82ab52699e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.177.248']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89bdf1a2-3a94-4530-8962-ff87d54df3e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.177.30']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f65ef0f3-e808-485c-ab24-901517477b22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.177.73']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89530366-bce9-4115-a627-7a0b472b6017", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.177.9']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d261c847-e906-485a-aab5-a1bff5442535", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.177.95']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b31e9577-fa87-423e-8ccf-a99092bcd731", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.181.104']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c638ad8-2d11-496a-8a65-e8fddf2eb673", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.181.119']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3ffc45a-36f3-44f9-a89a-8fd90c1fa1cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.181.198']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a086b67f-2b21-4d99-b5fe-7e226492ce04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.181.251']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d53d39c4-58c9-40d1-b1ca-944c360b054f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.184.12']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1304fa42-6194-4121-9259-9307eebbd65f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.186.176']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1101f45c-b904-4a55-95d6-aa7987ef53ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.187.75']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb2ba997-5560-407c-90ee-c5f65b7b50d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.189.23']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71809225-c8ff-4b31-8aac-c7a0ce8f1688", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.189.74']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d6f3c99-e39b-46c6-82ca-adf467f54a3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.190.10']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--119a2b1a-aac0-4e93-91ea-ecdd7b078544", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.191.178']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02837850-b16a-499a-b53f-ae910e1d9c45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.192.156']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2386e69a-57c4-4d72-86a6-766becdf5ff9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.207.110']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--677d3b3f-5a73-44cc-9ae1-6197bd45bc9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.207.111']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--971c3e4c-6375-48cd-ac8b-8ae808794c25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.207.129']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97ce2045-6120-47a7-bfb0-cc3e8bde2727", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.207.181']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51244378-6d4a-4290-a9ed-198e63f28d91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.207.252']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e32987a-88b5-408c-b996-9865e3dbd0ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.207.37']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21841118-0981-4db8-bbc4-5ebff1dcdeb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.207.71']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13ef26d0-5d71-451d-b76a-86e2609e57d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.211.97']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6e505b3-71e7-4006-abb8-cb747d5045a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.214.122']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89ba1f2d-9a60-4cfe-9b76-c579f2bb059d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.225.32']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31176f40-a970-45f7-bf89-898d678d6c61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.5.11']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8523f2ca-8a1d-44d4-8129-045086e47d6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.67.140']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e53cc95-eefe-4bd6-8311-9501790685d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.82.114']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e62218be-f237-4487-9969-c72862d24f77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.92.218']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbdfde62-9fec-4b46-9a27-e852aa91dbcc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.98.252']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a66a4f07-874c-4914-a31b-0884a0769ff3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.81.23.14']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23e0aa20-a774-42e9-b9aa-6886c99b3512", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.81.252.92']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6973f6bb-84c6-4193-8d44-a18da92e37ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.56.129']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93e29562-e784-4316-ad56-79a5632556c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.100']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af649d9f-9277-4ea8-8122-0bd03606b5f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.101']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78bb9d58-74b6-4866-adef-d405d372e54e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.102']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26dd2fe9-5be9-476d-86ad-c0632f9eebc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.103']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b16d7985-ccba-4d90-a2d4-42b3ad6a1dc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.104']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f870b948-3bcb-490b-b4d8-c64fe86c4a5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.105']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d5d71b7-ad80-485c-9f74-f5570ccf4e68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.106']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aecdf5a3-387b-462a-8999-f05a0be6ad74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.107']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--118190e1-4b55-40cf-af9c-3b766d19b201", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.108']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c936f64a-c941-40cc-a0b1-3ff9ff422a42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.109']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64c8214d-7b4b-41da-8ac9-5150d351914d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.110']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d225d05a-be28-4a1f-9e4d-8deab2b53212", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.111']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05619a32-a39c-4066-a95f-6e979f26fbc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.112']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad07ce53-b0ab-4bb5-8926-d9140fe85d0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.113']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2308b8a7-b73d-4814-ae76-02b0ae65886a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.114']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e51af15-dedd-4e94-be72-728d813e7f6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.115']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--423fe730-1cf4-458f-808a-6a83f1dab435", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.117']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2303ad2c-5d3c-4c99-9b40-8468bd604326", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.118']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--514c85f7-5032-4743-83d1-d4d493b29be4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.119']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6d156bd-1990-4f2e-a061-18af38d439a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.120']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a63661b-7ab0-4aad-8cb4-560488c97008", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.121']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1f010af-2c93-4bdb-9543-d528e988ac15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.122']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38d30d8a-50f7-4ba7-b72a-f1d4dedb0064", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.123']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4bfd593-71c3-4d85-ae84-bf3b17542e35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.124']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf27bd63-b328-494f-abb1-f0223253a351", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.125']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18c454dc-82de-46e5-b45a-417b7a83207b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.126']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d5694a9-5e18-4822-b8d4-9a1485625be1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.127']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c092eac7-96b5-4efe-84e2-19e94f7b40ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.128']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--758fa2b7-dd1c-4417-88c4-c7dd97473722", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.129']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f500034-e14f-4805-b73c-0affa5d7019a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.130']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68e765bb-5aeb-43f8-bd74-5237534f0730", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.131']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ce63e57-333d-4bda-81ba-0d5afea9b5bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.132']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6df50e9a-4c31-40ef-a5b5-51054d1b06d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.133']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d74f870-508e-454b-90c2-f0e64b1403b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.134']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ac62dba-2764-48c4-a3af-1421e7ffd17a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.135']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce7ee4bd-039c-4150-9e86-bf74ecfb6ce9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.136']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9faa793-dbc1-48b5-b205-a23c82ba677b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.137']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d2d93dc-92fc-4e01-81c9-7d8a1bb337d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.139']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e04dae9-0755-4056-80fb-3f8c9af210a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.78.106']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b45a39d-e6b8-46e5-8d9a-2d8d4a9cbf77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.83.241.141']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0657aed1-df25-4eda-8275-fbf0c081339e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.86.153.202']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fff383e-0261-4003-89dd-40acb2b0d7aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.91.64.6']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e75b39b2-c0b0-45ec-ac59-ec38cf3c529f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.91.64.7']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea0bd32a-ddbf-40f0-a3d4-fded0e66d1c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.92.1.214']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1fce0ed-190f-4ef5-9e63-76cf1add3b23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.92.29.88']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1d59822-0fe3-4b9c-bea6-481243d5897b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.101.135.25']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d06345c-b02a-4d8b-b589-10e32b008ed1", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.101.146.208']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7899c4e-a15e-4460-9bc5-a42672390476", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.101.156.144']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--318644ef-3040-4266-bca2-e5e6ee0e5dd6", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.101.173.8']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a120c7e2-597f-4073-b7e7-d32c17296eaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.101.232.106']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29bf642a-9364-4f4b-a169-bb1c51274079", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.105.132.32']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9381c7d6-ae88-462f-9ea7-8e5cf6cfe6f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.105.132.34']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d8959af-6764-4149-85e4-b023d245b361", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.13.79.128']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--429776b1-5602-4bab-bc53-d162f7d9eacc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.147.195.11']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e3b54c7-1a3d-4cd2-a67d-c6f103c2de6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.149.191.249']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f52b7418-5ecb-4ca6-a05e-93e3c0ab85b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.151.178.13']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--643036f5-6769-44c5-b548-31628370f0b8", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.161.50.109']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--909e0e47-0256-447d-90be-56d84f401bcf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.184.244.101']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6339874-1758-423d-9b5e-ddf0e5eb9f1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.19.67.181']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c4ffb1f-48dd-4678-9d4f-d2534978a0b0", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.225.192.181']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b893ab3d-46bc-47f7-85ab-90db310cb868", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.39.239.86']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b8c5ed9-da86-450a-a81a-f883b0801e37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.59.77.212']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08833887-7d4e-4f2f-97d0-cd42d92b61ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.62.157.119']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4df64024-9752-4249-9a18-16e0b69c3115", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.62.239.90']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6103b0c0-b0e4-4bef-a8f5-382e5486acae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.101.11.110']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd0ff2e7-1bc1-4a81-9c34-35ab7024704a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.103.157.194']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39490fb7-2aa1-45e2-9843-d3b5f8a4a56d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.103.194.228']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad612f12-9dd0-49e1-ac90-fe9204aadf2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.105.123.106']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9debe698-3567-4e93-bc49-e9ebbc299b56", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.107.116.200']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c43cedd-ab53-4a93-a6d3-d80a06f40c40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.108.152.113']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a9295a9-489f-4cb1-849f-925c34e86de2", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.112.20.177']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3edb6ab2-dab0-4e8b-a0cc-58365ed55e46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.112.208.109']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0160426b-bf4b-48de-9312-25f42604bb0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.113.100.24']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--554a7c7a-0949-4c2e-86ad-b77e579e8095", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.115.221.201']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a434392-c394-476f-9262-68afdf0d84fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.115.231.183']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d65089a-3627-4daa-9a50-80c4390c9717", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.128.123.198']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5480506b-e97f-4b0e-8e91-c8734c14a49a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.128.123.211']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c3b704a-132c-40a1-baad-1f0907bfe5ff", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.128.123.23']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6981aa18-4018-41c9-9d0d-942c927f07d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.185.238.84']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--596cc696-b338-486c-a0f7-95850fe0a7d0", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.236.116.235']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3c5dce9-c196-4966-a09d-aa388f4a805e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.236.183.165']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1624578-cd77-43fe-a8b5-afc0e2b335ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.236.189.99']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfc10e59-7085-4187-90c2-39a2db7f8cb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.236.196.80']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76521523-073d-4ee8-9233-601b329e3e98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.236.199.209']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fa84c8b-46c5-4c94-af17-0d48321230a9", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.236.22.81']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ee8d999-7775-4231-aad8-dc591d3c2357", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.236.244.147']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a46731a-cbe5-415f-9ec2-c2300126f73a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.236.252.83']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c10463f1-b2e8-4990-987b-f8377d80f1ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.236.37.23']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fca5a4a-a0d0-4847-9825-347afe49d4fc", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.236.42.148']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6d2c0ca-d507-4767-9aa9-3b7329a76ed3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.237.1.210']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55ae9d34-965a-4752-a8fa-a86eb78d4c53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.237.118.191']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--566c8ea7-1d55-4a71-bbed-346a762a1250", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.237.17.230']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ef19de4-828a-45fe-bfa3-1f893b478203", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.237.2.150']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6b5746a-f376-4576-bab7-517a34cc5692", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.237.3.70']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6da0eb46-23b9-4a54-8b3b-e9c2117218b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.237.7.233']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6046c4e1-f2ba-43cb-b301-8d19c7a71d8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.237.87.116']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b77bf20e-6954-428c-9a27-757706104a9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.237.87.73']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac5923bb-d3a8-4097-be54-376c6f639142", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.239.181.240']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92d9e023-c6ca-4935-8613-2f685871fb70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.243.116.54']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4684d39-bbd4-4c5e-9038-c5c15f572f25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.243.146.83']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10911ec3-c143-4a91-ad27-5698d0ddfba5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.243.208.30']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27fc7662-7a9d-4d3c-9f6e-296376a59e8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.243.224.67']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3adc969-baa4-440b-a2e9-ee928153b62f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.243.64.124']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f979a23-1ac3-4648-9ee3-e6ea4e225aaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.10.150']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--102e1e96-d943-4318-9c56-e2610310ef26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.117.221']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--116be252-7841-45c5-82e8-36c0d7affe6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.128.247']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfdbe9b4-e932-44cf-ad57-846c2c53e084", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.128.33']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d3a4f8f-7825-4ec4-82db-17faf7691b65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.129.115']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d96334a9-a0ee-470b-b16b-78bdace7a905", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.129.131']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7319eb30-c1d7-4d9b-abbc-b48ca789fc66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.129.215']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce94327c-3cf4-4347-b6c9-d0e543eecd9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.130.205']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88ede0f7-f528-4754-8793-ffe83da17574", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.131.184']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66753064-7d42-4c0b-a702-d77ac4c4c4ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.135.136']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63f61ee2-2a57-470e-ae37-3bfec98b32cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.135.164']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e78ff06-01c0-4798-b208-0d14aff9e217", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.136.10']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9214ab2-8a12-4fae-bc15-a72bf00190be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.136.11']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3ba9652-3257-43fa-9bf0-0afb54b29ab7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.137.15']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d573a43-5061-461c-8d85-0872425cc228", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.138.123']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd8335fe-9b3c-47ec-a629-cfb32635dff6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.138.173']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4206b254-8168-41d1-a853-9c0fdc4d6ead", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.138.78']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--039b0814-9511-4781-8e9c-b337066eea2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.139.137']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2874a9c2-2926-4403-8d26-a95ccc660ddb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.139.141']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09db1216-e1b8-4661-ae56-7f31a624722d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.139.154']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--210ba528-66b6-4bb4-9708-5aa3a601001b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.139.220']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43d51844-e6f6-4ca2-a99c-e1b38523f1eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.139.43']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ed5cba1-8c30-4c7d-bca8-0b1313709053", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.139.86']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7179dd9e-3d82-4cfc-bcf1-202a6eb936da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.140.111']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec1b38be-41e5-49ef-a32e-2ffc8e83b116", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.141.131']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0346770d-2c9b-469d-8ae3-1d8113b96ef7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.141.134']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec905f45-8f1d-4cb1-9be6-f4ba42254e24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.141.54']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91998ef0-82ec-4dd8-ba9c-18cf3c1a25c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.141.91']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--492d7380-11aa-4608-a516-aef0e85ff220", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.141.92']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--813f9dad-27c9-4e53-8b03-fd505ba9b7e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.142.158']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cdec12d-601c-44d4-86bb-70172c36ad03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.142.163']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8db4e87-efe6-4ad1-9bae-84eacfcfb389", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.142.46']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2141ec67-152b-4eda-8c78-3c63515b0e79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.143.165']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1603b7d-e35f-41fe-808c-5e569ef23aa8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.143.200']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20dab0a5-89b9-4e00-9a02-e67d2cc0ea3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.143.238']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5528b8a-1c61-4212-a935-5955de4300b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.143.56']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--040fe8bd-e101-457d-a966-028a5637505a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.143.73']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5e1be1c-2787-430a-af10-4ae7a571b3ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.30.30']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf36270e-787b-4fab-92fc-c93f3d6bc958", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.54.58']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52f50743-a831-479e-9f15-57e3f7e69970", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.56.147']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7538df34-212c-4cb2-9f85-e708834a118c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.56.233']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--568f4692-c498-400a-b088-faf8a9c62f10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.90.174']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64ef4335-95ec-4efd-8f97-4736740fedd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.10.55']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec7f2617-dd9c-41df-9f20-e10981b9592a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.11.46']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dda25cfd-b9c5-4a59-b256-ab01d69e25bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.116.24']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fe457c5-d54c-490e-af83-2f5e01d9147f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.117.176']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b0c8a12-a5a5-4b3c-bc73-a195e5b9d460", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.118.118']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7891567-0bdb-471b-a380-f6e713103856", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.120.63']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51d50a88-560e-4419-8baf-d91493c4645a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.124.189']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e009655f-859c-481e-92d0-421febc503c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.127.128']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cf6d606-db2c-450b-b73d-ca44de8eb382", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.128.143']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75246c09-e01d-4e0f-84d6-c09d90fd7074", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.129.126']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6f23921-e8fc-463c-8206-ce2c8ab336e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.132.90']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b36c056-472d-4b63-89df-0b5fd3767398", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.135.69']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf9786d3-67da-4d17-9cf2-334f6d57a210", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.136.213']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42578bd6-12e8-4216-a571-62aed591bd19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.136.218']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98493750-025b-49ea-a0e3-326ef2a23e81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.138.208']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a771543f-e58f-4534-a2fd-7acde6abd7e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.141.6']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--110b6c00-3359-456b-b429-5211a798726b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.143.46']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3eee4567-62bc-409a-b41d-674e177563de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.150.236']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbb1e3fd-b2dd-45a8-a6bd-ff1cb0472628", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.153.197']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5163d86a-c27a-4c1b-bb3e-69c793cb1dee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.155.115']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eaa17506-a302-45b6-bbe9-4188cfc9d5e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.158.4']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a64ea2d7-2e45-4ac2-9fe6-c843034d718a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.159.245']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5491b375-281c-4390-a322-201426754d27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.160.119']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5111e2f6-5c7b-4ada-a13e-7050bd93889e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.160.72']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--630439dd-f95a-4d68-9acd-6f21c501aca0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.172.169']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca65302a-4ad4-4161-a4d0-f08c0e3d3cf6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.172.64']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d10dc0a-4a0d-4a71-8179-14f37ea3ffd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.172.71']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74b0a95d-57a6-4d0c-a571-777e3f9a17ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.174.18']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f04ff646-6d5b-4769-95b3-4827ef8d3a62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.178.89']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8e714d9-52e4-4bb7-b5a2-4081cbdc76a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.181.125']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abeb3a20-2f9c-48ad-bfdd-73401876ee74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.185.80']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba21ad3d-b028-4a1c-8edf-91637aec6aa4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.189.46']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7a5d2de-b337-47a9-aa64-33128717f008", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.193.75']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5e9c9c4-d6cd-417a-aa40-c2891009e9eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.37.179']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--824aaacc-6b3e-4a88-b29e-ed5500394394", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.37.58']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a05968f2-aae0-4030-8ee1-772574dfe97a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.38.242']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd173d67-db42-458f-964b-e783a496fcc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.43.101']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c47bc26e-860b-416f-a14d-4977d753102f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.43.129']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c2e58a8-2c91-4ac7-ac49-48e7dc81a5e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.49.246']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c23b39e0-7bcc-4667-a043-bad6775a8d19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.50.233']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe54de93-0f73-499b-bbf0-23e49ac87e5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.53.172']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d72d83e4-5096-4227-8c99-ab5478b5cbec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.54.17']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9415074-8dd5-440c-8a48-be203f3af813", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.55.156']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b24563e3-dc14-4613-a966-b9fbcae01bf4", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.80.158']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ba722e5-ec6b-40da-a7b0-b1e8aeed4f86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.83.136']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cec51c35-7f20-4abd-8754-9f808f35edd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.83.92']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0877cf56-5d2f-4764-9c55-479c5559e81c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.84.32']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b8b27d4-63bb-443e-a3bd-8578c0c0374f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.85.86']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--589f845c-bd90-45a8-bc50-55260f780bd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.87.24']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--542d99fd-e87f-4603-8b71-7f03aba341f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.89.1']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--019f6e76-0eb7-4ea0-9eca-a4e7b4902afd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.89.131']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a032567-87c8-4766-81a7-610f6ef6c3ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.91.27']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d3e7a71-72ce-4e07-bbe3-bf578c7203cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.92.255']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb294307-2cd9-4617-9d0f-ae2fb22c0852", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.94.154']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ba6ad2c-101e-4c94-9d13-c95e2c75811b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.94.250']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aaefa80e-cd1b-4ac3-b756-712d279b5488", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.95.159']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86bd6742-ddf0-4d8d-bde4-c1896be8e005", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.1.246']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eaa511e0-89bb-4135-963f-6291efb5f360", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.108.43']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a08eee63-1506-413b-b0a8-199d1a236b2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.111.233']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--797b35ec-bdd3-454f-a57b-4192119d9c9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.114.178']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--040d62f0-ff47-435b-b82f-8ad59cdb545e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.116.115']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6059a67a-3965-4545-9279-f4d0b939a976", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.117.211']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b76f747-b047-4654-b2c1-c3c8b9d36fbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.117.40']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e72441b3-6062-4fec-a4a9-84252f44ccdd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.122.153']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f7cdda8-3516-4dc2-93ac-e6879bdb67dd", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.122.241']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c003677-1cb3-4041-975f-56822fff1f03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.125.230']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--017274c8-10ae-493b-8229-8373d0900201", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.125.33']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73c18c77-612c-45f0-9a9a-1822e688b94a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.127.130']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf8e6b73-055b-4a90-9ffe-c529d01e1224", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.127.66']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0262b0bb-fdf5-446d-81b6-ce045410994b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.141.150']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f358505b-330a-4b3a-89fa-68e1bb8b1c8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.141.241']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fcf52c0-480d-40eb-8b23-c29b2d1a6175", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.143.84']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c4f0a5a-8a9e-453d-9daf-69b47362dbb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.160.251']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a333c7c-5e08-4f0e-b42f-dd7454775ef5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.161.178']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34c7783e-8ee6-40a5-b948-8c30de71afd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.162.137']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--921c063f-4e34-4c3d-8410-8c1b7d98ad89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.164.231']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ed5c203-68e9-43c5-9558-c75b4ac1b59c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.17.127']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7652f367-ea09-4b78-90e2-f4ad9d489036", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.174.175']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--980f8823-aeba-4554-967c-bca389e55135", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.174.222']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a409b792-1174-4833-a560-4fdbc777ffd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.174.68']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da7ae25a-8ce9-43a5-b9ef-36c11a1c5614", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.181.19']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af69696b-e09e-4946-bfe5-22d790c41925", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.182.100']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5480fe50-700f-45b3-87d4-c60efac20c83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.187.142']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--685c5d4f-c4a0-48eb-bec7-b6647dbdca6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.187.94']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83294ff3-f8d2-4c8c-8deb-7892b07108f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.20.113']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8e07b81-4d5a-4ef1-b96b-f217137efc4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.24.77']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed25cb31-fd06-48dc-9d7c-5d59accf0957", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.243.140']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42c91c40-61d5-4df1-babe-f57ad686f487", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.243.238']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d237186-64ef-4ee5-b642-4472baf7e5b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.244.143']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03fde639-58d6-4d63-b973-2eacb992ac25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.245.44']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02fd18cc-0d4b-4d52-b235-6db0acd22711", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.245.58']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f99b4cb-9585-4bda-8fc1-da39db2e9a60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.248.165']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f10db8c1-afb8-474f-9f61-6fe55ab6be1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.249.238']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07502794-ffc0-4fc3-8590-6c2b35457bb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.249.8']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57cda0ec-3b39-42fa-9e44-fbe0e7d45591", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.250.101']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fa385da-3e4a-4720-8bd1-69d4eadbdd84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.252.163']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--073dbb19-9929-48b6-8d72-d0db5a9cae78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.252.169']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2942dd22-ed6f-4e54-9770-a6720e9d9339", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.253.16']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a390d6b-d101-4b49-b89d-0f4305ac57ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.254.168']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84938446-4c50-432e-8898-fe0ea1be640d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.26.195']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a60e0971-459c-4c59-bbbd-774f6f3e9712", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.26.30']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d88d55e-895b-49a8-9ed3-d2f5038b1c2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.28.27']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21e77f77-f21a-45a0-8ba9-52bfd9c7e400", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.31.44']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3af7023-440d-4cc7-b14a-b1f8e64c3523", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.33.148']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9e88b5d-05ed-4dc5-8874-4c028e408d10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.34.107']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03c45ebd-5b06-43fd-8691-98ab0bbaaee7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.34.170']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b3200c4-efcf-4be2-9bb4-5a777b56a0c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.46.207']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e053db22-4103-45f8-977e-52c43c5c30ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.48.26']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4f8919a-3d46-479c-8f0b-ad3109daac75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.51.172']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70a19a78-8eab-4ad8-a7d1-a79e2197cb4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.57.96']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffcf1e65-bd15-488b-bfbf-9dc232cc9697", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.65.123']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c41a9ca2-2d0b-4cbb-9922-0673818a7d23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.70.145']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1312dab-fe86-49ca-93f2-481836de3307", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.74.190']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99b6e73e-8ff2-430a-8051-771474d4d8b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.74.228']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e71d865b-f952-4692-a5cb-16b047888bfa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.77.150']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca1adcf6-bce9-4ebe-8437-d47fd8a23448", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.78.84']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81ee740c-e89c-443f-8e7f-e9ca7f151000", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.80.35']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7962c98e-253d-4995-9809-a1be15e976fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.81.110']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f318e364-16b3-4458-8712-1a6d2021ae93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.82.43']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e8bf4c9-a41f-4f92-91ce-cbbde3d3d042", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.88.148']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cacc92f0-4c2e-4bad-8b1e-61e384c9a529", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.89.71']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25fbbf5a-1134-462a-9826-0043facae9c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.9.231']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78114a32-424e-4881-8001-c9028abfefeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.90.30']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fef50891-b416-440d-94c5-007398aa3df7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.90.72']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db82540d-0572-455b-9b42-e6e99359c14d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.91.94']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b04f33d5-eaf6-4d74-a396-1f602a6079ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.92.248']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--172242ac-93a2-41b8-929c-06bdb8ab57f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.93.165']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6216d00-464c-488f-addb-a8f6df1af7f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.93.227']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2679088f-e8bc-4455-878d-917fe05f5c6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.96.9']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c0a9352-a02e-48a3-bc36-b686bbf316a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.98.112']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ecf7894-21f1-42af-a79b-65b3bf9ae7b0", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.252.46.218']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eee66b52-22ab-4421-b772-e12070d6b62c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.253.134.211']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--337cdde2-940a-4782-9fd0-5af3d4068833", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.253.5.130']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92633c4b-f840-4ba3-8b38-a15512cee14c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.122.67']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49a3abfd-b6f7-4f83-941d-674000e9e816", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.131.109']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8f341c3-54c5-45e4-851d-e5241e944cb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.132.68']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d7e7fc8-ccaa-4299-8c80-19f16368ecfd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.135.149']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ead9a7aa-f469-40b9-965b-582df7d6b0ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.141.209']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ccb6115-610a-4fc5-b646-1c4accd8804f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.148.139']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bc96d4a-dca1-4e04-b60f-f391eb9ef372", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.151.115']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ea7f100-0a46-4caf-86fb-68c79f4e1f4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.151.194']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95da8b1d-b2bf-403d-85aa-83e5ec1c8b5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.152.129']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c881331-2c4b-4e49-95f8-4e8aca4f42b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.154.155']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ba6eef8-839b-4f9f-89f6-08aa550239a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.154.232']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--027b97e6-d024-4d80-8ec4-e22cfc063466", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.156.14']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--093f6c55-e2d9-40c6-b62f-bbb15bf69443", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.156.46']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6940fb1a-67a0-4bd6-80d9-a4767ffad51e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.159.184']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83340360-1154-4361-bebb-38686402fc88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.167.143']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26425d50-09f4-4c2b-a334-c533092a54bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.170.239']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c811c44d-4d19-4b99-90d5-dc4b827d5767", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.171.201']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4fbf585-47c9-4766-9cd4-f9f94b3f2fe4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.172.141']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5aa975bd-5e8e-40dd-9928-0ba8b34730e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.173.90']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b6d5ea8-eaa5-4c2c-a71e-c580ebaa0a52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.177.253']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff01ef06-5ad6-47fa-8488-9dd702da0881", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.183.43']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f6f02ba-7b1b-47d3-86d8-2080b988a06b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.183.61']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39cff8de-ae8d-4131-a3be-b6f0094a9c09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.184.178']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74dfd7ee-35ee-4a2b-af37-9fbf48ae5648", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.184.200']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5a8c326-4073-4dfe-bf61-0abd802b95c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.192.136']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2eba9bc2-3b57-4e68-b341-1fb624e79330", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.192.137']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f16a6474-ddd9-4ed6-af18-622e784de4cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.197.50']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1dc9aaa7-9bc2-4db4-941b-1b81126a6fe9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.201.158']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--090917ef-4c47-42f0-b0e5-1d739f87fa03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.201.193']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--592a6ef0-5f2a-46ec-b151-d1c174ae5002", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.202.197']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60a15b17-fd4a-48a8-8dd1-b0b8e97b83a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.204.153']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73fb2bdf-e691-4a8b-8744-1454820fc7cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.206.163']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52b824f3-758c-4944-991d-b5fc8355200b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.21.155']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b587fa22-2c23-4f60-81fc-b16c24561486", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.213.222']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea1b6431-7f98-4d9f-983d-e2f286e8395c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.22.166']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa513f32-8e79-4c1e-b30f-a1f39b3b8050", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.231.12']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c701f84-d58e-45f2-ae09-6ab6aa8d7e49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.233.150']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3a8233c-cd6f-4b28-a0f8-6e7c264dfb65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.238.212']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a392f3f-57e6-4549-94d5-af36370c27f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.238.61']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c161b3c-6108-4de5-b2fa-395d5556d5cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.240.216']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47c3eddc-83f7-4186-b4f8-cbdba184bf14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.240.228']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01ffa833-b932-42d3-9fca-fd31fa5e9d31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.243.99']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10741040-9c85-4d8e-b45d-8dcedb8374e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.244.10']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f5d7b7b-6dc8-48e6-91f1-4a3d3cc3e39d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.253.15']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55a56332-11f6-4ad1-9c48-193e544fa5e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.254.1']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19f8dcc4-5e33-4acb-9078-1a8beeaabe21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.255.13']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--101c8188-1d4d-44af-92d3-186c914699b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.28.41']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--660d2567-2208-4363-a85a-053bede9785d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.31.152']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--508422eb-b2ac-4900-98a3-eb10700e9ac5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.32.206']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5c236de-9464-4df2-8c89-8cf5cb9639cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.36.99']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b39012fb-d1e7-46c1-9fb2-45e7e206850c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.37.131']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f046cef0-7383-4fb7-92f4-fe907440ce82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.43.235']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a013f6f-e8c3-4f75-a4a9-3316a2a9f749", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.44.103']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25577a30-a538-4fa2-a98d-93941b0aea65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.50.53']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--798c0423-afb4-48bb-80e0-5c4fc3f3361a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.52.208']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5de25a03-0b62-42e9-89a7-00eefa14f3e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.56.125']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ea92a13-8cda-4903-9619-9f75f291d8db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.64.75']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5585144b-8181-4fa8-b066-780f6f478aaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.69.253']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8315092c-3f8d-45d2-b711-75140e595794", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.70.175']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--051f786d-7016-493a-a97e-d36c5b2d9181", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.71.82']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d7f18c5-ac57-4a14-9611-7c1290a54e6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.87.150']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f2fcae0-ab9c-4299-b22c-462f7d784b52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.90.18']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0ab476b-a40a-4ca6-961c-b5c07cc348f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.93.174']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04594ecb-fd82-4747-a469-ef1ebbc16a77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.94.232']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--268e732a-c411-4cbe-b3cf-c6970154c344", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.57.232.232']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09e872df-57cc-4f02-af70-79b2f3ca1eb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.57.242.119']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6f407f3-2c45-40fe-9691-fcb906bc4855", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.74.13.101']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5bca17a-85b5-4efa-8102-b0d5eae275fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.74.19.210']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0894803b-25ef-4969-ace2-cc561dbb22bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.74.20.57']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45c04037-d1a7-466b-9b93-1ee269ff651c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.74.22.38']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78139776-a952-4894-a3ad-65d39d11fe74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.74.32.128']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36a8afea-0010-4ba0-8d61-800e5bf85a90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.74.33.9']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--061ad9a4-4788-4787-99cd-68c7dd119b84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.74.4.253']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13f075e8-4065-4d7c-8c59-e5fb23626521", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.74.41.171']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--048e63c0-4e80-4c0f-b520-1ac58d6ac32e", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.76.130.55']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8e3b50d-e26d-4ca5-9343-d5ffd7123eab", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.76.254.49']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13375bc1-df43-4fa0-af85-2203b6b8e4eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.76.26.151']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4300eda9-80eb-4a88-865f-49ed56269b5d", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.76.36.75']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2491690a-d2b4-4f80-b91b-0b1dde8349b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.76.71.87']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1736abb8-ffeb-46ca-bd45-cd563ae7ec95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.182.54']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c663bcb7-d322-4ec5-bc62-e03d78e1dc43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.210.218']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f71f08a0-9aa8-4e96-9518-71a1e7fdbf67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.215.118']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b8d6d23-bae5-4172-b220-935a4859fcc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.216.134']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e28c6c8-3771-4f0c-b9c1-3fe89abd81e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.216.216']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--783cada7-6f8c-40f8-b3db-b09d00ee44ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.216.95']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fae7597d-0d0e-4d7e-b347-f95b70213550", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.218.233']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f60d418e-497e-4c9c-ad2d-dd1f8416066a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.219.94']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--260ffe0d-abab-4303-93da-072d80b1fdd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.221.175']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7da545c8-b8b3-43ae-a151-1a33bad6c723", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.222.214']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--395a0a05-0433-4b56-9d1c-9c09e08d88f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.223.142']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a9678f2-5905-43a9-b2a7-4f67c88c1e2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.226.249']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afbda1ae-c8ba-4f25-9da0-0e7e7ce07dd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.232.193']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bdebc33-ca76-471d-af83-6d4bddc40505", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.233.62']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4fa501a-21ad-4592-91b0-403f131626d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.234.102']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b0bc4f0-3258-402c-8313-e800f263795e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.235.175']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7d53010-33fc-4728-8b78-8cd4e3b35725", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.236.210']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f92ee2a-6ec0-46a7-a976-1050eba894fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.237.102']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--356e6d79-95f3-457e-9a88-55431e148e51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.238.211']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dee3c1be-88b2-4453-afcd-c483a8a8f60d", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.83.131.134']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c672e857-9b2e-4b64-84ec-c3f658472cc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.83.169.110']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db1aaf1b-0aff-4f96-9ed8-b288fb716cb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.83.182.116']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b2efcee-e3d8-4e96-8de4-6e692be01408", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.100.167']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5ca59e6-03ce-496d-b8a0-86648566a9a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.100.190']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--353864e5-d36f-4d31-9c80-370fb37d522a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.100.224']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cf5e767-0838-468a-be1a-bd59350e4e59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.100.64']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6276415-0337-46be-940e-04016decfede", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.101.108']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3e333f4-c1eb-450c-a850-6380e4fcb4ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.101.117']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db4247fd-1424-4bc3-abd8-9a85764aa71f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.101.166']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b314dc50-3991-41f8-9da9-3d442523b88e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.101.191']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57b4b411-81c0-4c7b-a34d-fb9bb355667a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.102.15']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eaad4787-594a-41fb-9f0d-b3baec27ec63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.102.225']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4609a59f-a84e-4d02-9a34-128ea974bee2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.102.50']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a170013-814d-43ce-be2e-292fa320e72b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.104.148']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33ec65ae-b40a-499d-9fbd-50efde21856b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.104.254']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8737bff-98de-4aa9-8abe-751c22b88e62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.105.131']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc00581b-adb7-419a-b231-b527759aaa56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.105.163']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f446af60-ace2-438f-a3f6-67c7459769c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.105.165']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d28251db-4d21-41af-85f8-fd1aad1fc846", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.106.14']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1c4b7f3-83cb-40e7-8af9-e03cc67d10e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.108.199']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f454cb6-fd73-4cd1-93b1-5d302639c3d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.109.110']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5314d2f0-8fea-49c1-8a8d-338408166648", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.109.129']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cd10f8e-c94d-4816-a59b-467205555b6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.109.187']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1971a28f-571c-4108-b2a4-51fd297c2d34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.110.81']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3da047f-dcc0-4de1-bb47-d1df4ec6dcc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.113.115']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7afa724-5b15-41de-9175-4221cab49d6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.114.31']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22efcc59-93c1-468d-9af0-3670941a7b47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.115.172']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d637bb1c-95a3-4469-a58b-115bcc4484f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.117.18']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fd1d8be-7112-4509-a2bb-990f645ac315", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.117.39']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d531dcca-d59f-4979-8b3c-1a87754969de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.118.171']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c9aec02-b631-4e3a-9eb1-2853abf40de2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.130.38']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b0786b0-e1b2-4a9c-a7d4-7bb6eda7d729", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.131.50']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7a980f2-519a-4dd4-9c3e-fe68f1c9d568", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.132.0']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08d688a4-a8fe-420c-8083-d1a5d74fb29d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.132.63']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8854dfa5-fcd7-47c7-aba7-0eeec1dc542a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.134.210']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42f9fcf1-133d-4bff-ae8a-61ce707e26b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.134.30']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a143a49c-9af1-4b21-89ca-5809820ef52d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.134.36']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abe80497-8902-4bf5-84a8-20d2cb412068", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.136.17']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0613aff-fc6d-4aa2-982b-c8979b14c11a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.136.216']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09b13e00-74b2-45e0-91d1-665e62b5c22d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.137.34']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3381b2c2-40cf-43ef-af3b-6297e98db3d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.138.34']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--707cf11d-ca8b-4a36-81e9-c3e6a7f09d7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.139.158']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05d2ca23-176d-4ff5-897e-b41de591fc7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.139.182']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b786ef27-496c-44d3-82b1-ac183cb0f484", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.139.198']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e068f73e-2ef1-4ae5-aad8-2c06ff4fbb66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.139.61']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7718ba9-651b-4382-bb8a-8a545f0f6e2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.140.90']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fb38dce-727b-440b-90d3-90de306c2e28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.141.113']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e13f0397-7fab-4251-b4f5-2bd9bf53136c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.141.166']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85498df9-e4f2-4eea-b71c-7337ae3d6b5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.141.25']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b208f48d-9e9a-457b-8d69-43ff827f9b41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.141.4']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5eb15d29-88a5-49fd-ba7d-c758529da613", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.142.16']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f947624c-7785-48b6-861d-1d529dc24d62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.143.119']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc2e204e-cf2e-4579-bad9-efbaf69bdd57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.143.191']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a58bf43-cb1c-4873-a25a-378c03de2d7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.177.15']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d9b40cc-bfab-4f34-bd62-a1760844fe7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.191.150']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfa85905-b253-4335-86d8-2fed48d94114", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.192.145']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--151829bf-1eaf-49ac-b43a-fa75088a187d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.192.173']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d456335-ee6a-43be-a1a0-7d5378e8c49c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.194.245']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b12b06ff-a62b-41ca-98e2-81dec78706ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.194.26']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a69bf30-cd79-4aff-9206-164e976041be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.197.51']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b631dfc8-ffe3-445e-a787-4333214a6c65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.197.66']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37e866e5-43e8-405c-b096-08033aa47710", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.198.117']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2af27a83-0342-410f-a0d1-e271c3228efb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.199.64']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3d471b7-f8da-46c5-9b84-4d8eac7908ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.203.235']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21a0d19c-6e21-436c-907f-10a82dfd1dc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.204.88']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--532f028d-f1f9-40d0-874b-0ea9ccc1b59d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.205.162']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7f56ac8-856b-4080-84e2-ba28013563ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.207.245']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58d50b5b-c0eb-409c-ad07-7826f1404519", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.46.241']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--419cdee7-0704-4466-8f9b-f9f53017f084", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.85.8.171']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9375e56-22df-45be-a8fc-38b96457dbef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.86.166.68']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84edadee-ce73-487c-a761-395f7b9630bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.1.163']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3de9f837-e32f-4f00-b1df-5351389eb3bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.10.250']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d910d039-eb9f-4fd7-b08e-972a375a91fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.15.30']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8e0cce4-2b53-464a-8617-ba8b3db92a21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.20.3']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c84c8327-9e48-4144-9489-957532a3fd9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.28.30']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43fd15d7-21ba-4838-b77e-3b11bac43cdb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.29.116']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71c97876-e398-499b-98d8-a32c6ab96788", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.54.171']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e394f69-e2b4-446f-b3bc-dba21a8aa7d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.54.220']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--987dcd5b-00e3-4ee2-a35f-3ded382b61c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.58.42']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f85af25e-3707-4f5c-b204-2837af8f3e7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.8.116']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02d951a5-b5b7-42b0-bbdb-816e8dba9156", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.89.211.155']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4202960a-a4cc-493d-8516-e6a4eac86515", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.89.230.226']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13f9856c-cab0-49bc-a955-95ddd6f8a10a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.89.231.110']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85adfbe5-cf13-42d7-aa9b-28cdb4482c2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.89.247.18']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--606a6115-d211-4818-afe8-337da26fe18c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.89.248.96']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e2934c4-ac57-48c3-8f7d-02fb307e2e4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.89.250.198']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3169ae7-2092-46c5-86d1-3533b60a1fbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.91.125.252']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33a43436-563a-4019-821f-6aa586c30e08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.91.21.128']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1b9eca3-9992-4c73-9076-aae6471ee9d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.91.25.53']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cddbf96-819c-4329-a0f6-dc57337e255e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.91.79.97']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26638148-1029-4b48-8db5-6593fd03dae9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.91.92.212']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ed7ad5f-34a6-423b-b916-21f676f8dd3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.95.206.164']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2bda746-81b8-4d49-bae6-cdc9d6694164", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.95.212.119']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78dc6851-ed5d-44ad-afd2-88a009a5d574", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.99.35.7']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6673bc6f-8a3e-4a0a-b25f-e305be40583e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.214.144.100']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c90cb0d-c5a5-4f14-90b3-a3928dbcea95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.214.144.135']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3876132b-d769-4090-a073-ea88d7446f8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.214.144.160']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7432e73e-8d7e-4a33-b214-f757a66620f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.214.144.191']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca1e9342-a121-4815-b0bd-aba18e7313a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.216.218.131']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82b111a7-f3bc-48e1-a9f8-b9cd9b8f2127", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.216.243.151']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ef0d216-51a9-462b-aa38-335fc46969da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.216.244.43']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5664a253-6de7-4a33-9de0-6cd854a94095", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.217.108.212']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f054601e-eb9a-495f-b649-741f650f32aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.217.64.148']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--889951a7-3406-4215-8789-0c45e1b311f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.217.87.78']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71c6c02c-cc29-4f38-ad44-0a0726cb8cdb", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.151.235.93']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7f97fec-5118-4c2d-9689-c19b34b7c73a", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.158.8.146']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b09e55bd-9bc3-402c-a462-49db60bde05d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.213.136.216']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48c56a75-1745-4dac-b406-d837aff34e48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.233.108.42']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0abe9b4e-495e-4419-9ea7-94b3ad37c170", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.233.45.47']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4f54088-7858-463d-8a4b-73e97c066906", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.43.3.185']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--329e901e-10a4-4771-9f31-d469d1e07631", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.43.5.120']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46dc0b14-2224-434f-8a38-9eba443194dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.51.141.76']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d58a9db-3753-4bd3-9ae0-52e4f262e3bb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.51.183.84']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2140e65f-7435-4d78-8122-fa717433d548", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.51.203.164']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea09214c-c73a-40b4-b894-d8557d4d5d76", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.51.233.95']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aaac1845-2336-4cab-acbd-a77cf521915c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.51.33.159']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b742f322-cfbe-4a14-903a-6567b209c7c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.51.36.179']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b7341b9-6836-45f9-9a3f-e9890990eb1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.75.12.6']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68c59a24-5e42-4388-ac10-e56a9d4fc0c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.89.101.123']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--431d9b9a-7ffb-43aa-b22d-6c21b1bdc3e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.101.64.6']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d33141a4-7866-4f35-98b1-83a1ee4bb2f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.129.252.94']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16602313-2688-4b17-a7a6-eae02ae6583c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.133.192.138']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34d20611-362e-434f-b44c-34d685b7204e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.169.118']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55b563ba-0662-43e3-b1fe-5aa34df641f4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.189.24']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96bd7f75-5a1e-4a86-9075-5aefff9dd6c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.245.145']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51417f84-071c-44df-9fb8-644676e82970", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.181.124.116']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3793f09c-e84b-4c90-9990-f42e25547375", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.182.204.39']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cdb592e-d908-4493-bd10-de105f158ba3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.187.35.142']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0eba7e25-3d6e-427c-a03f-2a630baf4cce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.187.35.26']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09b98b0f-6083-42e9-82f7-4c4d1049dd3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.188.206.30']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd1aff8d-e9bd-4c65-a477-f4871bf39475", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.188.206.34']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73f38985-9d54-43ad-b121-95f4df091ff8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.188.206.46']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e81186e2-6a0b-47a0-9207-358525e51d35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.188.206.66']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3dee470-9b82-41aa-9957-afb1b2591526", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.189.161.57']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ab3ca78-70b6-4760-9c4a-81c849cc0d27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.22.208.246']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7276c292-8e5f-4718-a706-ac96552a7edb", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.231.70.34']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56d8873d-c1f4-436f-8ff6-ad81a2af5f6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.232.153.208']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfe12169-5c88-47f0-8ca9-3b635876967d", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.237.122.25']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a28028dc-fe2e-46b5-9183-63755138a244", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.237.81.110']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd66f7c0-1190-44ba-816e-6e5713973892", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.255.124.172']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c530f53-3dd4-46b2-9b2b-0c807df41b31", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.255.231.189']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f5d2168-8d36-434e-ba2e-cc59b2339bfa", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.255.231.33']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b0372d9-5037-4a5f-bc43-5eaf5ec55f0b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.255.231.77']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66e6daa8-cbe0-45e8-aa3e-1162bb531105", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.39.49.245']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed2c7b13-9ebc-461f-8850-ff9859607d73", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.56.24.71']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ed87ef1-fc14-4880-8d21-6cad78f34f2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.61.209.224']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d08049e2-a321-4a65-96bf-80e44281f783", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.78.239.83']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3c2e829-ea7c-40a4-825c-52d112218a99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.83.134.26']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6b243b4-0cff-439b-8fdd-a4229a4e6b39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.83.143.123']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a6bb70c-cc6e-4f66-b632-079421bb6919", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.83.143.40']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bce6440-0190-4379-9863-82143732a62e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.26.161']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58a5650a-baf4-4c31-9613-8f3317c02100", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.30.65']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d225732-0c09-4123-8573-a7e25c0ce800", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.44.176']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91648bdb-2e25-49fe-91aa-9f3d4f5abf20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.54.116']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a715c4b0-0be9-4814-940d-dce9f7c6f64d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.54.141']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2917fd51-0398-4d36-ab77-a509c7697f57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.56.159']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05e19a73-e899-4281-bcf3-b2e597563274", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.60.121']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5027cec6-c04f-4b2f-844e-50e93bd4f5bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.60.236']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ec1cdb0-e2ee-4afb-9933-88cdfb99f28a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.60.238']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5252886b-651b-4a9c-abee-3cf3c04be6d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.63.208']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d095273-20af-4d47-9d4b-3752cd12e4af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.63.40']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2038666-b015-4aa0-a4d8-eda3e8db9ce6", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.118.184.103']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3202621-346e-4e27-a364-d160dc173767", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.6.197.105']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f74d058-534b-4d6d-a617-3cb54a75c96a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.7.127.99']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63992de2-c156-495c-864c-6a30ca8e0120", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.7.233.211']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9dfb19f-fde2-4c18-8b83-f449d0782600", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.7.34.74']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--066c29ec-2443-4ee8-8001-5cd3d0b08dd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.15.98.45']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41ff55c1-efa3-4c8b-9832-43134d8843fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.158.173.124']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6d4635a-e0bb-45c1-b3c6-f4ba48db5bc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.158.205.203']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7291456-4b01-464d-91f8-5d4586ac0f6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.158.205.47']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--377d500a-f8e6-4173-833b-ccccc3d2bc0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.158.45.234']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d4976ad-3aed-45aa-a2d8-39de4287fddd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.159.104.219']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b5e874d-c483-4a56-8a2f-228c115753c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.159.125.104']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31560e80-9002-4aba-a296-1db558da3cdb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.161.128.68']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47c94aba-2c4b-4b62-a37b-e962e54afc1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.161.13.52']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d054ec7b-2421-4c90-9721-c309b2cf372e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.161.198.228']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e724c0cf-7d7e-4a6a-8875-ceda5f154175", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.178.198.251']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d656a5f-25f2-4b72-9ecc-71e7924eba2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.250.105.222']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e94fab0-db9a-46ef-84ec-c6aa736667c9", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.255.66.90']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fa83cc9-5f2a-4479-84b8-4a5cc83302f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.38.12.12']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--952466c9-6f0b-4e9a-82e2-308af120bbbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.38.12.13']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cbfbc5d-4dec-4f06-b4be-a6031a4cbfb4", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.38.165.152']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5895cf5a-8770-41ad-a3f3-514e4fe7a8a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.57.81.154']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9582b5e3-dcaf-42cc-bb56-26e1bd285ffb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.68.107.154']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bd0db14-8b2f-48ee-b89f-40383f51ac5f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.68.111.208']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b514038f-d5f5-41a4-acf1-025148a787fb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.68.236.68']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1e70f09-a9bf-49ee-a534-6133c8abbf98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.75.149.221']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78d36f62-53fb-4dae-b62b-3417c794e5e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.79.67.63']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4da3b62-b639-46a3-9535-5f09f418d461", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.79.99.235']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11730396-3c6d-4833-8c9d-9c17a0f14bbc", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.89.39.37']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:digitaloceanlondon", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f31573a-ee3e-4989-8d9e-3863379cfa52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.14.24.45']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4bccfd5-9211-4d87-b901-939cec648f44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.146.89.83']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bf8da60-f5a1-471b-b9e9-d5d5f472af73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.15.36.222']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--751e53b7-b9a6-41aa-bf8b-af89be788493", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.159.228.212']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b09ef94e-1bdc-4cc5-9813-65f257878b1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.159.229.49']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02f324c8-6663-426e-86d3-03c8227c01d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.165.81.251']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee1dfdc9-28c1-4995-9f5f-a4239be8696b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.165.82.22']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6aafc93-ce11-44c6-b362-39c6679e0fc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.165.82.6']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44ff9d25-7797-49ff-8056-8beaa5186a8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.165.88.92']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afed35f0-d704-442d-b87d-f1cdcce5482e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.165.89.103']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--178a0ec8-ecba-4396-b0a4-cf662a235fd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.165.90.3']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--925d6043-97bc-4731-a028-f98bf0dce432", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.156']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--548373bf-388c-4a9e-a521-b68197a29815", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.157']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24acf866-4a31-4dd9-ab23-d713ad3bbc3b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.160']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14dfcd47-2ea4-43f1-b542-a4a4ed02141f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.161']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38bdd1db-f077-40d9-8c4c-5ac3f1d0f0b8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.162']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--036f20a1-feee-41b6-9663-dc4b6f19bc45", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.163']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cecd7a36-49f3-48f9-b207-1771296910a8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.169']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75b0d162-b426-4d3c-8426-ad81539ab790", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.172']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd1b84a1-3ec0-49fb-92c6-19602eb86345", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.173']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07f0c72f-2fed-4377-b71b-06a2593207a8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.177']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85695c57-073b-454f-9afd-4f26f4667ed1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.179']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8735a2ae-4b1c-4e71-b06a-eecad01eae8a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.18']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--846d493a-3985-455e-af79-180d518beeef", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.19']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c95f054-1b91-4cf3-ac84-f60b28b701b2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.192']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b97f790b-9876-4194-b2da-53f8d9bb975b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.193']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91023d01-bc9d-4143-9fe9-e52f99d1ea04", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.195']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbbc3c7f-f555-4de9-8ec9-5ca077271217", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.197']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--075be8c2-4dcd-470c-a1a9-30567275b8cd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.199']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a4e4dba-ad16-49cf-9b9f-6c28291f2768", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.20']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e1cb3f8-5a93-4181-a4e2-1e6fa16ffebf", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.204']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddc7d98e-ace6-4188-b744-4dc6d34294ce", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.216']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d02f30fe-5446-4cc9-b8e8-e163211d6605", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.217']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--610408d2-6f2b-4652-8fa2-704db5cec865", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.218']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cbcc789-0cce-4a1e-bc8c-61d506be3af5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.222']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b841be5-5e89-433b-b65e-0ed8e68f7303", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.229']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e30f60c-393a-4b46-b81a-41b6da3b3fba", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.231']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f70e8a7-fdf6-4478-ba49-177c224e4e0c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.234']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a2287f0-c9fd-44e4-b86f-e6f65d2b563d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.25']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79cf88d2-f6fe-4c0f-a9b4-2855cf4c218d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.56']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a6ca2ac-23d3-4164-aefe-f824892038d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.180.145.88']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93261c18-638b-4520-97c2-7d9b157b9154", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.180.156.198']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd92cdb8-d636-4840-b064-d9ac2a74e69d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.180.157.167']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--861da363-8f27-46ec-8c81-09a18848f581", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.180.158.248']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5237e550-4632-4afc-9715-6bf9bd8b53d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.186.169.24']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39be7eb0-e0c0-4a98-ab71-4e73f15387ec", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.186.170.77']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--013e768c-f831-4a9c-8f63-ab156c1b65ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.186.171.52']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d924442-b5fa-4bb7-874d-09a300d2533e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.186.178.175']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--893b49af-917d-455f-ba86-aa9ca15b273e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.188.146.204']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--617047e9-909e-4b42-b8e5-fec287ce7363", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.188.185.85']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dafe6da5-7d65-43fb-b02d-b564cae6a23d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.188.189.7']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c7ccbd8-7c32-4735-a10f-833e5ad3dee6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.188.227.37']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--148f9533-0ac6-4359-89f4-0d8de4a1394d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.188.231.42']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32373c46-146f-46c5-8566-d78625de9805", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.188.81.67']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68052dde-40f3-4c79-b5a2-414c0eaec791", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.20.198.190']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c75eb88-e005-417f-9037-0fdd4e7c68de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.200.76.145']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dbc3ce3-28d4-4b7a-858b-833c2df15e07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.207.196.234']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6634335c-b9f1-4e73-a684-7262afe4c2f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.211.223.178']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93ac2cfe-90d6-41de-a120-45a556901301", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.225.29.1']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3ed8d74-5cd3-4325-bbea-ce8dda72638c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.39.227.58']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b9eba56-e75b-41e3-ac6a-b196ddb23f89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.76.200.116']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--047c1902-520b-4d28-a3f2-778d7274fe51", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.157.223.168']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afc91013-01b6-457d-87da-0970d05c4041", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.164.200.44']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e12ce450-00dc-42a2-b040-b79ab6f25a16", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.198.67.201']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6afb8729-8335-49cf-9018-53b26fc1e6f5", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.128.225.99']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62352422-9a90-4ea8-a280-a12911c66539", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.141.6.11']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de06f444-bd5a-453a-8ff4-15304b3d2c01", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.141.6.49']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa78ae81-b242-4fd3-bcd0-09d9e5666bad", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.141.6.76']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94a517c9-41e6-47ab-8104-961dfc5759ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.151.105.130']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--140de175-4fd0-43f7-94ce-05371804abcc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.151.99.52']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cc87557-d0a0-40f7-8a28-ce7fba7ff5d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.152.34.196']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd19ccfa-0975-4230-a026-74f31effe61e", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.147.171.11']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7184fda2-3ef6-415f-9ddc-0f70db23b936", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.186.8.61']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99ef5f31-7024-457a-a1e7-4067fe8e4731", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.19.142.76']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4363fd94-6301-4b52-a3c5-1d8f0db8d4eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.212.237.99']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0958c833-594a-43fd-8e38-ec0f2065763b", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.220.39.200']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d50cdd2b-cd04-4230-9cec-9f19ca66bcde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.221.146.170']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b7871ec-b24a-46c1-a5ca-58a9d5a0f596", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.253.129.91']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdf86834-1961-439e-8685-134aa8af9433", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.103.106.33']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16fed9b4-5b94-4f50-bbce-d7f605e48d39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.126.126.231']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--502dbddd-b910-418c-9d0c-ea2fb61d4ddf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.149.239.94']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--102c4a64-663e-4b7d-b418-78e6ad0dda34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.52.103.196']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdcf69b0-5ec0-43e2-853f-3ce2786195bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.55.114.229']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fa0cabb-9784-40fd-b99f-e55f66024d94", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.90.46.162']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d08b0139-acf0-49c4-a7d6-c72fe7317161", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.177.180.166']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1dfc2049-c3b8-4a69-9f61-d317f5d1c4a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.191.125.35']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b4bd563-c114-485a-a80d-94c36de13981", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.208.176.241']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--690d9c95-de4f-446d-b659-2f4049c5b14d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.208.179.123']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7ea7502-6dd3-49d2-9565-edb917d11f94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.208.179.92']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4b09aa0-a894-4dcb-a3da-4c57b990fb69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.209.93.190']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd5784b1-63d0-4671-8198-938a71987242", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.249.207.150']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--007722dd-996c-46d0-8054-8eff3c701a39", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.130.162.246']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--223c29f5-5918-41ef-8aa4-7e320278a3f9", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.134.201.36']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9d8e543-b702-4efe-852a-68c0ffe0501b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.138.113.187']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e27ba505-a2f4-428a-8c6f-2ad67e133b94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.146.235.54']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d32aef1e-08db-43bf-bb73-1b73a131721a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.181.140.110']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1edd5b49-fa78-4dce-b233-5a39899a2dcf", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.184.13.202']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad98b665-716c-412d-b4ed-9f44993cba84", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.184.69.163']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df92f4d2-c28f-410c-bdf6-41cdabb510aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.216.51.179']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58018d1f-3302-479f-9378-79758de37c00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.220.24.86']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a445657-cf9d-47cf-9801-56a41f1ec1fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.242.178.28']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--247f905d-86af-4a39-a829-ddba387d8b85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.244.180.62']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07869780-a36d-4a16-b6a5-40c539125d51", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.133.47.13']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da80b024-f4a4-478b-8eca-661696cc2653", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.133.62.83']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a35071f-b7dc-4ea3-a92f-58d2a1c31022", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.141.63.15']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15b65fe4-e61e-4fed-8e0a-a151f4a0e334", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.146.236.67']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0c0717f-de0f-4e02-849d-49e2a74772f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.164.177.224']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b858e5d1-ef95-4029-8dc9-33595421cfe9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.171.141.174']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7304cd7e-af64-4b19-987f-4f4e14b5573f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.171.147.220']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aff62c24-6339-47ef-8b9e-e9725d2688aa", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.171.151.236']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18ce0bd4-067e-441e-8d87-ecaf915b8f80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.171.169.75']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67d2d668-b64e-4714-a907-e68da9273140", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.173.38.229']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e958eb8-71f3-4c06-91c0-e0d55a39cd30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.182.85.212']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--742c51a7-cd6b-4749-b57b-a058fcb71377", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.210.142.159']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4528528a-b3fa-4547-962b-c8934d0ee633", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.210.189.225']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--870a91d3-290f-4dd7-b18d-74adb8987b38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.210.207.172']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38778d5d-1b37-494d-bb0c-cc0a90688230", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.210.209.225']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e51ceb69-ab55-4005-8759-330580b823a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.210.27.138']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02262d24-9502-47ba-8eb0-68cfc236bb12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.212.70.49']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f97d7696-a8d0-43c8-8091-056a83b68f96", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.188.77.26']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ee67614-3a30-46b1-b019-a66035a7f818", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.225.60.187']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b52817a4-48b5-47bd-a80f-ee6102094936", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.225.61.152']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e94973f-6db9-45f5-b982-ec5b35e750a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.226.71.148']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e4ab036-8077-4e83-9ef8-4e9d25baa73e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.226.87.205']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69065673-2f26-4624-9001-d188ad080afe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.11.140']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f84d1aad-8a01-475c-bdf5-f64a0e7a10e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.133.41']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2136b8c-48e8-49a6-97e4-273403967dc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.14.170']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad43ead3-b122-4533-95f0-7b2262eab2bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.16.27']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef278c02-9197-48d7-a38e-f1ecf9cac86f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.69.68']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0d527c9-87ef-489f-9e55-58df6d5c9867", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.23.128.216']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7103cf22-633b-43ae-9bf1-7b90d7871fab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.23.153.71']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9a8d575-e12b-4e45-9256-44690a3ff8dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.23.165.182']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb48dd51-fafc-4be4-82b9-773d2d02944d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.23.215.216']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a587458-63d6-4f6c-ae4c-de0272852ee1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.236.153.147']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1150ca7-6bd7-42ec-a433-1ef9120708f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.10']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79ffc2db-b2d4-4c1c-82b7-aca0b27938a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.100']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d3f0866-7875-41d6-9c51-6ae388353cfb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.101']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c7a38ae-6968-4e22-8bae-ab06c356f219", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.102']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cc725dd-706c-4afa-bd09-48aa725dd642", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.103']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb651fdf-a863-4616-b4fe-c6e9facb7153", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.105']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbd7cc9d-f233-4aef-8eb6-6ae8b43041f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.106']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--817b5875-eb19-4598-9d39-b0b1a7d96472", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.107']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6900efc-eaf5-439c-9d4f-3ebca60e10f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.108']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3740c4cc-6339-40b4-9d36-2f4a3d11d62d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.11']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--485d677c-4298-41fb-96a7-9c8bf9a834b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.110']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb5b8112-eeff-466b-bf8b-d2418f6bf85d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.112']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a2ea879-418c-4fd0-b505-47cda06cc6a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.113']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e60d93ac-bd0f-48e7-ab72-092c0f51dcb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.114']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad933310-627f-4b1d-83b8-0f29a6d1f20f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.116']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a655c9a1-1d02-45b2-a22a-f2b8e3d51e7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.118']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dbb48f6-c403-4f48-b584-1fe4a8042dcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.119']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc312523-3f6f-4440-8811-9e5edb9bfb43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.12']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5aa34bca-7f2b-4937-81fd-f68ef8e94f1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.121']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7533a4e9-325b-4352-857f-e2485374c67c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.122']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84e84118-894a-4c76-ba29-c0b794a07a86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.124']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29436fe0-43dc-4e69-b68f-c71690219c54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.125']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5a02d1d-6f36-4834-b340-a224d2a990e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.128']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32f35cbd-7a8a-4d94-b355-4822bcd15559", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.129']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--742a5bf8-dba4-4618-8145-0f4fee0f8245", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.130']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cbebec3-a8f7-4245-a5a1-0fd3782d03ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.131']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09327aa1-3bd4-47b0-b194-a77b47375578", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.132']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17e1b676-c3fc-4cd9-ba4a-3428978e0e30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.133']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16618c56-4265-484d-8646-2094d86ccaad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.135']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11ac384e-dacd-4909-bf88-2a2d9887c2ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.136']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1650c38f-afcd-4d22-844b-daacbac8d57c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.139']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4177bfd2-e941-4687-b0f0-1126077d2a10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.14']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bf29c1e-3d74-4503-89e0-b66db37dc8a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.140']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0015be08-b950-463a-a44a-1230223ac867", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.141']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--806bcb5d-5da7-4341-bec4-e3744d2a7612", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.142']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02752a22-b3f2-4b83-961e-643ae8473377", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.145']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4991e7f5-6299-45dc-9855-adac6657a371", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.146']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f1938cd-5f3a-4881-a8f9-464aa8c5df0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.147']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f95d892f-65bd-4208-8bec-da099a612fb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.148']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a97f787a-05ae-4d17-bc83-3a3e3159a0e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.149']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0696dbf-f842-4921-9ff2-2b0113d01de8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.150']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd8b0413-cdfe-4de8-b56d-63124b0f96f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.151']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9229727c-a6a2-4b91-b8c5-82d28479a54a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.152']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca49edfa-6914-4c4f-b6cd-8869ce99d28b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.153']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8761585-f0c9-448d-94b2-61335c28675c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.154']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da1dd815-d8f0-4bf3-9cb5-afb1b9fdec38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.157']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5965e1ce-8410-46ef-8d86-3620ec7fce8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.16']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69db3e44-832e-4414-8db4-bfbeac90d5b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.161']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--909578bf-c057-4bc6-b185-35af5191ce2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.162']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d0e409d-738b-4c61-8de8-1853eb6b84b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.163']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69333a9b-316c-43cf-8901-e5f760f0b7a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.164']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de9f8a7c-63e3-42b7-bd73-3d1564991599", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.165']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1efa3f02-4d2d-4fe3-9cc7-112906a328f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.166']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ccecada-bff1-46e6-b5e4-3b2afeded98d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.167']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--995e48b1-f59e-4002-a17d-9cbede589362", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.169']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51a119f8-2c23-476d-962a-40a74171ee57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.17']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1499011-e3fd-441f-b5aa-c4e501652e86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.171']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94bb4497-d62d-4aaa-a3bf-8b16db1c6a0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.172']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4cc4b45-66b9-48a1-b89b-e5e63d07efd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.173']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--893784c8-6a3f-4d9b-b5bc-6c17cb70c949", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.174']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26110323-4925-4f48-a665-5595d1d425a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.175']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--801b65c1-1855-4c12-89f2-8726440303da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.176']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f657a45-0d2b-47b9-84a6-c0aa7490004e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.177']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f062c6cd-8a3d-4279-9a1e-d07ba70eee91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.178']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--955ebe17-e6d9-4461-b209-8735e17fdadf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.179']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5aab1b2-2ebe-4db0-b1fc-5873ef8d240d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.180']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4c4c466-dd3d-4b30-8c17-b149a49cf73d", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.182']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30ac8333-b98e-4508-9c2b-9757848ec58b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.183']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c512ffef-1c3d-4b3d-afdb-1e7cc6b549a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.186']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--136d68a8-1945-417a-abbe-4f8ca1397a0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.187']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e570710-f861-415e-903a-98221c9bc2f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.189']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72e6bb1e-a9a3-4700-af53-cc7fc42cd389", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.19']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74f5af3d-9c58-42d4-8b70-97c89e6ed4c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.191']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--528de03b-d5c4-431a-99cc-979350285f32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.193']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08ebfec6-105d-4560-9281-cc0a80f51e5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.194']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--482be4ed-4f6a-4f1e-8cb0-238ec245a2e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.195']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03b5028b-7b78-4303-837b-62b3437d62b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.196']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20ecb98e-f0ab-4a89-a6b7-cfd93b12a199", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.197']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d81b72a-ca7b-47d7-89c6-7ec493d09e10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.199']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81742f85-d131-47a6-befd-710a09c31ff3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.20']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbfbf15f-80c7-4b37-9665-294e24da4c38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.200']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc409e28-217c-460b-95c8-6a1d8ffd6751", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.201']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b29354c6-2ddf-4d54-8b3f-deda50fa231a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.203']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d69c7fe-89fa-425e-b170-248d80dd4990", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.205']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e263807c-f18d-48cd-9b69-1a6e2eb8ab91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.207']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6f81ec6-85fa-4f1e-b6db-6143518ced8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.208']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91ef5674-df89-4d4c-a528-034fd0529c08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.209']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6459b14e-253f-409f-a433-3b8e3c47f20b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.21']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0308df9-930c-482b-bd49-d7a015f6f2bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.210']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cbe17f7-cb99-492e-82e6-4fcccc95d8dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.211']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5273cee9-133e-4777-b889-345cf949b429", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.212']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25e5eeb1-3bf2-41b4-9a16-5b51855812de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.213']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15e46e0c-f38c-4e04-898c-1aae841ae74d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.214']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24d15c28-410a-496a-b371-adc4239554fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.215']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67bf83fa-7722-4c2f-9825-f89e0f3476ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.217']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd1579d0-54f9-4998-a820-614d6efd3642", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.218']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56e9337d-e308-455e-9703-d7246dbcc1b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.220']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7477f065-d52a-4f93-8f95-817b1ce4b0b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.224']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08ff9d95-010b-489f-afc3-f0e6b5574d78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.227']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e340f88c-5b97-4406-b482-0b77819cb9d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.229']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb55f7bb-d4aa-45a5-b2e9-aadc1bb05c60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.23']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78e6a36d-2004-4b36-948d-6c11ca165f83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.230']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69cc9601-0f9e-4ab3-a952-a0c082bbad76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.24']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c515cb7-7b44-4240-9091-603395c3aa65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.25']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--631e5ec6-2fd7-477d-aa6b-8f6e8ceed229", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.26']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96d10bca-432e-4540-8a1b-024174d4d503", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.28']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f46a022c-cc36-40ae-b8b7-23cafe74b16f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.29']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92afe7b6-99a9-4ab6-aacb-3021dde61726", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.30']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--deadf5c6-e1ee-4725-ab60-7cc21ee68273", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.31']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aee166ae-9c1d-452f-9851-3bf05aff940b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.33']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cd5e5c9-7ce2-466a-af22-b2d716faf4d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.38']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8e2f5c9-94e9-4143-a09e-255ad444233f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.39']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a53c2c72-6c9e-46a3-9658-2f1e08d0a56a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.40']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f11ffa06-f01c-40f3-86e8-0184577acdd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.42']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--175a4acc-cf60-451f-83be-7fba1cd1061c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.45']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d1e0256-9e12-4d53-8da6-376e8447285c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.50']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d772412-534f-4885-b0ed-c04c0d4d6e6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.52']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21287ba9-d6c6-4412-b312-883b5e87919e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.54']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41ca0c11-2d76-4e95-b688-98893d682027", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.56']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ceda674d-4110-4a69-a80c-12d71082c5e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.59']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--104d9f98-0b69-4e07-95d2-72e050bf5250", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.60']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d814f79-a6ea-4d5c-9c0a-09b7155e83de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.61']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--838bf10b-4ae0-4694-b62e-a9c064de0557", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.62']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4ab4e7a-814c-49a1-b89d-852d997fa445", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.63']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d41f0303-6f31-4f0c-b834-765340fd226b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.64']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a1f9130-3efb-4961-a3e4-eb6c38bac3e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.66']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dda833af-3468-4ae1-a7b9-23c4685ca25b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.67']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a99fadf6-2c06-46d5-b148-d60fd4f20793", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.70']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afe9685c-9450-468c-9276-a66b54637ebb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.71']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7658c5bf-e08c-49d4-b89e-c07907a62a82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.73']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46b7159d-37b3-4239-ba93-69c0a158280d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.75']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba03d82a-3d9f-4d50-8a52-347b0483ae65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.76']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0780128-21f3-4296-8410-2cc359d4e861", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.78']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d50919b7-9ca6-44e3-b31b-aac866aab723", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.80']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2e114ba-83d4-4dc4-9ce1-e9bdb1ec1ff4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.81']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21184450-136b-4ad1-84c7-4a2cbf5a4790", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.83']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ade8a4d1-1d48-454d-92d1-2bc382acf587", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.86']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e457a32e-7988-4631-b175-45108baca012", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.87']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa0927ab-f8c6-4fb7-97a8-2e87bf750ca1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.89']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97ced617-5c90-48b6-a963-349a0b0d94b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.92']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9998349d-090f-46a0-9a34-bf87088b6cb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.93']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4659d18-dc72-413a-9c03-c5f9fe490430", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.94']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7b8a884-0800-4724-b89c-d7231093108f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.95']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f5b0dcd-2208-49d1-9d96-3bab21f2063f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.96']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bab2952-ab2c-4a3a-94af-7fcc6b116fbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.107']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6853d69-447f-4643-a1f3-b8bdc2b35a38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.108']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e66fb3b-134a-4589-8bcc-9270a9048549", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.11']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--770ef089-92a2-46f5-acf4-11fa41be4dec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.111']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e200ee70-7ed4-4a1e-98f6-773585326c56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.116']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c25ff61-3a83-46d4-9ef1-bf57cc7bc455", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.12']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--053e8d45-4062-4c9b-9b8c-a791d5f06642", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.121']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fd547ca-612f-4ecf-9989-4b536feaaa73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.133']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff55dd49-92f2-4cc8-addc-c07715cc0baf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.134']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be2664e9-34e4-41b3-9a8d-4e695956e9d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.135']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c57427d4-c56d-4b70-9605-8966654f029f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.136']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6e833ad-cad3-4ab0-be21-e2ec9461c408", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.140']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89dbbf46-1e5f-4b4c-abad-2c373beb033e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.141']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1207bfec-c687-4a7f-b86b-91b27943f8e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.142']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95a111f2-ba83-4900-ac53-262a689e9ff9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.143']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3eb73f2-9c18-4a10-9ed1-831bcfc9c4a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.144']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50b047f1-db85-451f-8959-8c3dfece8f7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.15']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8a21f3b-b037-4e3e-9989-551897dc82f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.150']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fa5ff2d-8fdb-44b5-a6eb-dc196f25e5bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.152']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef8b24b5-2aa1-492a-b7a4-f1a87b89b932", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.153']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f81025f-ec28-4f3f-b85b-e378f6dc2f92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.155']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--968f9fb5-9019-4c75-bee6-e21d2d292736", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.158']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2aecce44-e341-4463-a22f-d0ca0417e315", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.160']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4feb89a6-6bed-40ac-b8ad-b1d427162ebb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.161']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2080df7-cd05-4a54-a43d-dc448d35da81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.165']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c316abcb-075a-4b62-a4e3-45a4abfc55ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.166']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--357d0523-dad5-4387-9242-4a75fb54a408", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.169']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ed56a16-3598-414d-a031-686d575cf887", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.17']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5dfa44f3-bc54-4464-8af6-e1b488e8bb5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.175']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78c4cae6-cd6e-439c-9a61-38c906fa6e42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.176']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd9153da-3d8b-44ba-b049-a272c398dd5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.179']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9950b70-6459-49ec-a6c3-234ba4f6985f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.180']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51f70a06-d804-4ae7-bf36-96e91f2b2a1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.181']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0aeb8241-52fb-4a0a-be87-45921f8b85cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.182']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--390417ac-2626-4a59-a082-5866814ea851", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.186']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5037151b-4338-4958-a500-28b6bbfb2333", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.188']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a039b7a0-ea09-4d64-bfed-ce15f836ca2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.189']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a2acb5d-dd82-405f-85ec-c811883fe31e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.191']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e451b8a1-0938-4fd7-b5ed-a2aad8a37084", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.192']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af84010f-6cb7-480c-9ae2-d03f118bfc3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.196']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--791e8559-a337-44f0-a126-c96f8b178531", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.2']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee130e85-1975-4854-911f-2df3ad32a0d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.200']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b646677-1f2f-408a-8ed5-f0507fc23f11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.202']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2157a6a-ccac-4243-8c42-5f37e7aab1aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.205']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90edde88-6a47-47e8-859b-6d24ac4419e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.206']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a123add5-faab-4139-817c-d2c3459b1af5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.207']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b613d24c-ba9f-4141-a3fe-008cffaca415", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.213']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de2be333-8a7b-41b2-91f0-11bca9977054", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.216']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32119bcb-7b42-4d67-8084-1e82e3a21b7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.217']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa18decd-9a52-4d92-93de-60d3d8fa7771", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.219']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4cbefbe-4cde-4024-8e11-d7dc90967538", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.220']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a082e848-fe47-4e3f-a1ef-803037ede3b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.221']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d23eed8a-9af4-433f-bf33-80331e5c5a67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.224']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e932c34-8bfb-4b9e-b44f-3df46a65c302", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.225']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13f0768d-82a7-4c5f-8616-f5436c668553", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.228']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6dfe66f-b2c1-4669-b489-55236857f9d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.23']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82cc464c-5e31-4fef-b13d-fa73e43c12f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.232']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90026d54-2556-4cf8-b584-04c1a3d4e29e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.234']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff14e562-7108-404f-bdd0-8c69d40e1c74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.235']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fc6646e-e727-4659-a1be-bcfa9cc5722f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.238']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--840bb265-27cb-49dd-abae-2c7de96cb697", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.239']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b97f4525-0663-444b-84ca-f140a26786c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.241']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47a670ea-a8d2-43fc-b3ea-1f40e1b6daa4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.27']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3eaf1a7-09e4-4829-a50d-5e65a85e7572", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.28']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5695c86-4d4d-4ca4-8a76-f49fd79130fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.3']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d80f809-30c0-471b-a7ef-1e08fee1b0ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.31']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bed0528-d1ef-4fe1-a4b7-b8db7d302ad5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.32']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdc32f45-0556-4f88-a0b6-84cfeef6ac95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.33']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29ae78a1-c4f7-4080-94fe-b7b9d5f987ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.37']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bbae4ee-98e8-459d-ad65-4a739d2f9d3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.39']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e168afa0-42ae-4152-acfa-40410be4bb5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.40']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc04091c-58e9-44eb-89d3-91105c6c944a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.42']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca157702-4faa-46da-87de-6c9cac444a02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.44']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--925492e3-8026-4731-a149-a40cc0c4e90c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.45']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8eeaf88e-ed5a-4e0b-9a73-0567df70d45c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.49']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14584e62-8c3d-4502-a148-cef2f770e1f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.5']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6056bdc3-1c38-4104-827f-28f06fbd5c99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.50']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8322928d-7c73-420f-84a7-828009630cc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.51']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4770ff6-899e-4106-9c67-35b76941ec82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.53']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--724d05f8-3e89-468c-9114-b37545086436", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.54']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5ce3a8d-b6fd-4d60-a90f-648ad15c3071", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.55']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb4cb679-810e-483f-93f2-da6f2fdf2226", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.56']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69ee8cee-c30e-484e-b07e-cfa82d2f9b89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.62']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f9802d5-c22e-43eb-987b-668e6cc701ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.63']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3197181-f133-415e-97d3-8c28e3cca0a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.65']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6cfa8fa-b20f-49eb-a2b6-9dcb3468233d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.67']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34095fa1-360d-4ec6-bd03-248aff61fc43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.69']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7a3a807-1c96-4b57-9cdc-10b7b40e2f63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.7']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aef49de0-6f92-4f24-9b98-10546f070efc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.70']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1d1afb8-8e2a-4a95-94b4-dc8fe6fe1d90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.71']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c64e6d95-71d2-46f2-8446-e9983cbc4f8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.73']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f28fffcc-1056-4e7e-9787-cc299ad0b245", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.74']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0b3edad-f69d-4447-a348-0219b4e86765", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.75']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8d95247-bbb3-4a73-8bc3-b514a5f1afd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.76']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7a2cfde-8322-4704-88cc-6c7f1eb5e608", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.77']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69547aef-2862-455a-b60c-42256cb9fb03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.8']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--765d9aa9-fe84-400e-98c0-58fa15354277", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.80']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--413798a4-172d-4bb8-a62a-0117b96f14a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.82']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f19ab4e0-ff3b-4ac6-88a5-bbda127a62a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.83']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60c3c57d-abc1-4299-be69-b31aa3fb56d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.84']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03c049ce-a3c4-40b6-b225-95a384b664b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.85']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15e299f6-be3a-4478-84d4-07bd26e4c61a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.88']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba368a58-dfdd-415a-af9d-76b7295252bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.89']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eabbcb70-030c-48d6-8f61-bb82d34909fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.91']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69098195-62c1-4a2e-8e4d-a2fc683e25c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.92']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25293274-84ef-4b81-a2d6-40997b190061", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.93']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51db02b6-c820-4cd0-8542-064b5e8527c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.96']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75e6233d-0b31-4297-91cd-0c1ba346c169", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.98']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6828b6b7-2724-48f0-8ac8-6c155bf6ad77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.99']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f4cbc25-a87e-4996-8df3-76e0d0a9f710", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.81.115.187']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a3f5ede-0276-4a38-8e7c-65799ed1d904", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.83.43.7']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19e3a44b-c5ef-4c91-b424-4f9885905cc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.160.111']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c9696bc-dd5e-4eb8-bfdc-5f10c643686d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.160.135']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2646e43-4811-41a3-bc22-55aa1ac7cdcf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.160.164']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c08fcab7-1169-45ff-9da3-870280690c10", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.161.160']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e937f3f8-7afb-4376-a335-2402dddb99a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.162.131']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b94cfda1-c075-4eb5-964c-b4c8672cabea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.162.139']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b29daa5-db00-45c9-a7b0-d5613ddb5b03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.162.146']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bd4f20c-ee2e-4cbb-9801-6283d149e669", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.162.55']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5aa072d-eab9-4105-b920-305185f9115a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.130']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03490ffb-1332-4556-a6be-2e14f82888ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.131']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1208097-304e-4b47-8ae6-5e06d74bb140", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.132']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b90274df-d128-411c-8603-8bad3b8f0b56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.133']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--421f3a9f-ee5e-4715-af67-de2b73817294", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.134']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af7a7acf-17b8-414e-b88b-e1dcded94af8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.137']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0c1207c-1089-4deb-bdb1-0c21072cc9c7", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.140']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--410fa3b3-d5b3-49a5-afd8-2c4c2818e76e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.142']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13053f89-bad7-43ad-9d06-5795535c58fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.145']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6110049-63b2-4381-ab52-e90987a85e45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.158']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2aca364c-43e8-412f-8b33-f0ed3937e42f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.163']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a324585-ea9e-4b30-8101-76d16dee60be", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.166']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84653be3-2b8d-42c9-91a7-833e6562b2fa", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.170']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--657d393d-dcfe-4237-9012-4fc20b849347", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.178']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c662d7b8-b530-47aa-a924-d7776faac81f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.22']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9924f03-853f-4976-868b-a02ce53c7d16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.235']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5424448-5bc4-47bf-9eb0-9677ebe471b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.77']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99a3a095-396d-4fbb-b92c-07b421b15cd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.80']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da9b601c-395a-4d99-bd69-0085b94ab644", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.81']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55ac9808-ddea-4fd7-81fe-9e8200abe9d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.85']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd19e771-fd78-4786-9a65-7793c8de127a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.87']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fe221ca-597d-424e-98f5-5bc210ec8970", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.89']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cff0e68f-1376-4f89-a540-bfc9c9dc1449", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.91']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf0ce6b0-4c2d-4ac6-9f37-6bfaad82a049", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.92']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09b4bef5-27f9-42cf-b20e-c06cf10083d1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.108.197.81']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e399a99b-0a4a-4856-a3df-5c0620529c55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.181.112.131']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c59cddbd-22b4-4f74-96ed-4c19b5e4829d", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.186.8.21']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f71eeb5c-1e42-4c25-bc03-d56c6519ec1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.10']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--241284cf-f17d-43cf-b199-491bc72d65ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.100']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edca6f79-de98-4a05-8b19-23793b0b39da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.102']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ca60ea0-d468-4b9d-b81a-fd8e99fbbdc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.103']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73bf6364-2f03-4af9-830b-8e9414062428", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.104']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af0a6e5b-93b8-44cd-942f-723fdf57b54e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.105']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e18b5ca-ea29-4c4e-9049-79e933edaa60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.107']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f42726d0-fa9d-4e3c-bccb-82cb3c0e062a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.109']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7a10d6b-e6c8-4e2b-92d4-e5b9c461fd0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.11']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21b7e6d6-272c-40df-881b-e67f7590e7a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.110']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de6e79f1-e82d-46a2-aedd-8b4e2bb0e28f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.112']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28968c20-c46d-43ab-8e2d-20be0fb3735e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.113']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c372a6a4-1dc2-4d81-9603-f6683d01f524", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.115']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0eee19a-ba23-4a45-821f-f0e08ffe8b3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.116']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13a37de2-e2e6-4516-9b83-5fe7b730b733", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.12']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6218440-8f1f-4c37-a78b-4c6af4a9740b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.120']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f55d48de-106b-44b9-900a-7e7fb272bf91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.121']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0015103-e947-4952-b947-fcc37eef0a9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.122']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7662ed4e-9cbd-4f23-a7ee-4a692c7d0110", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.125']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d068a175-3e30-484e-a772-7411e63cdef0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.127']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35678406-98cd-4152-9c63-2b3ceae1966e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.129']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76d4c6c0-628c-4591-97a0-4fe1777f7119", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.13']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff11d494-9935-4428-b205-020cf96529da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.130']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d348698-85e5-4e99-b11a-636bdaea402f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.134']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09057f1b-aa54-4d98-b523-1aa75e8792be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.135']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc953466-595a-4ed8-8d2e-fe7be855d745", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.136']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa09cb85-d937-407a-8cc5-a61120e7f1f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.138']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--177a2d97-1466-41c1-a5c4-efb70b1ff77e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.139']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72bceb7c-4ddd-47b0-a81b-31021c9da5d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.14']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb5fc794-0c1e-42dd-9433-ba408a758dc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.140']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4cc2427-5400-4d4b-a539-3bb1d1a9cb27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.141']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--956aca13-ca85-41c7-b92d-6e3bb639ca59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.142']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7c41994-fe7d-4acc-8f16-dc5db1a43313", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.143']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--387df524-c28d-4f6a-a479-11af7eb6bb26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.144']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--134605b0-5f18-45ec-a3a4-1b0eb8a5abbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.145']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a1baa26-2ee3-4660-ae38-4b82c265107d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.146']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb9225d1-238a-4b71-aba0-8f234e1c460b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.147']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7085079-9d17-47a5-a98f-ede142867abd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.149']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2f169da-1d96-4866-aee3-b48ad8462154", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.15']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eed534b2-a5fb-45d3-85c2-aee83c9ff16e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.150']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--765f2af7-379e-46e6-b2fb-1fd9c8279a5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.151']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2f2e212-a5e2-4723-81fa-222b51801222", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.152']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a1597a1-8993-42db-bac3-5dc4c1f15a14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.154']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8be63f9-d91f-4f90-894f-127da8795638", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.155']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62c5aa84-b7e9-42fb-a9df-2e207e08c20d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.156']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db3f2f2c-99a7-4bb7-a800-e33b4664bac6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.157']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cee98bd-a701-4c5b-ba54-1b01c87a237b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.158']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb3186db-3662-40bf-b1aa-5902c35ff0fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.159']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72f667d1-a2b8-4a69-ba73-49ce3d9c7a58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.16']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22e162a0-16fb-4d7c-b8e6-0459b267b624", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.160']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54e0dcdb-a0a1-42f1-8828-462b4759102c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.161']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b6ba675-7a2b-4aca-aec7-e5762479effe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.162']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c3da610-53b6-49c9-8e24-73921df84866", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.164']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46048206-d1f9-4cf3-9d79-611108594a96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.165']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1859a06e-071c-41ef-9173-956ac38c3443", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.167']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea71ac04-e376-462c-b00c-a86e0023bfa9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.17']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac148832-3c9f-4dc5-a5f3-2a468444d260", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.170']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d84b0388-33c2-4a67-a6eb-6328096eda39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.171']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36b2299a-7249-49b7-b6b0-227e463cc2ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.172']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e85b59d9-a4c3-4fd9-8861-9613ec5eee2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.173']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb16e3c4-ffeb-42a0-92da-ec19243719fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.174']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16f6ed8a-f5c5-4b8a-8f0c-b49988fce4be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.176']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--823d7289-8f42-4970-ad30-0c0feef1b893", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.177']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72634f73-6300-445a-a80a-02ec20590d3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.179']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d645658-ccd7-4a94-9b78-fbc7c3ab8388", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.18']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b717fc7-2503-448c-a0a5-34d8f0110fb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.180']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e89774e7-c718-4ba5-8858-ea47b864697f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.181']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eecc8233-dcbc-4888-81c8-785e28aa2691", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.182']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2059c5a0-5998-4b0e-a1c1-9999d4a594cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.183']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59cf225a-c98c-439c-a4bb-d5a8df8b0730", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.184']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cda9681-8a12-4aec-8e9d-9e6e5864c0f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.185']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa0838d3-d9a5-4018-ab53-1f4ee225b091", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.186']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a67a210f-4bd4-4bb3-8534-6ad7a79fc541", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.187']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dc06f7d-f3ca-45c8-adcd-72b8f16d04d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.189']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3abe7543-059b-4e2f-868e-2b9ba97305f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.190']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b8cf226-bb67-4e3b-9ad6-8410f4b870b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.192']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57c8d625-13eb-4ac1-9354-929732467c9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.193']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93ce9c61-7924-4147-83aa-bde0c879700b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.197']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--daba0f14-79cb-4d82-b47c-31123342ddd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.198']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c38fd45f-c58e-4c0a-94e1-772e092de15a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.199']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19e79020-04e1-4d55-a224-da51f73ba180", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.20']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4abe8e99-2f44-43a9-bcf3-bbc6eec2b2f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.200']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c972e0a-83f5-4db0-b6b7-ca085dd472e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.201']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--978191ad-75ff-4728-bd89-ffed5cd5d1b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.205']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d09ddb5-cb7f-4095-828e-b0456550aff6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.206']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7e70cdf-58eb-4d68-95ba-8ea6f5a612ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.209']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14762ea7-1f00-452a-8f9c-d881c74a0f03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.210']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--939516d1-1d73-4830-80db-5ec4ea10c5b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.211']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9703730e-8a47-481d-84ae-63b063487460", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.213']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d362092-a358-4590-b18f-289b2e2d090b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.214']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e653969c-e998-4079-9d11-ec4c790ea4ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.215']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--caa9f6a5-edac-4e97-bdab-03a299dc8b6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.217']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62dbb1a6-dcfb-4511-80c6-27367a4641fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.218']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5983e416-05bb-468c-90cf-c320693d76c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.220']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78005709-a3c2-4140-96e5-4919dad0bbca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.221']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c37051b0-3952-4d1f-a0c0-70f44cc981b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.224']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52beeee7-2a17-40a5-88e1-6cc5665c60f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.226']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29185d13-6f7b-4332-ac6a-e5eabe155598", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.228']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91519796-4428-49c7-9a33-a5078e56b602", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.229']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd78e85e-6ccf-4bea-a3e5-9f360e44dbf9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.23']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e58edbde-2c1f-4189-a16e-5bbc53cd0f1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.230']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73a5829b-8549-425f-9a8f-887f43e5acc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.231']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e787ff23-e6b8-4cc4-a193-200b6c1f6b54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.232']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75cd9868-ba44-49b2-8229-62f11c597f54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.233']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c12c2d38-f4ba-49ef-b307-1f4d3b902d32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.234']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--280de673-a6d8-4188-bba3-9b427fefc24a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.239']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea00a5a4-6626-49dd-ab7a-759d8e174529", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.24']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9f58f77-808f-4d02-a71b-44e4c753a287", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.241']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5b0cd76-770a-433b-8fa1-efc84908fd7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.25']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98b96439-8e22-4b67-82f7-b70773424e60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.26']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--727eb2ff-1480-4b31-9add-fc72e427434d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.27']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20295c3d-2541-49d3-9c55-a1a937e89884", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.28']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c18f938-a8f6-4500-8ef9-06d88754d09e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.31']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16825658-fa17-42b7-b064-11a3097d2b62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.33']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb51d261-7570-4383-92e1-c6d8490b175f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.34']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71158681-7cc0-4768-b483-3c20d7f2aa5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.36']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3085a58-c2e1-45e1-8ee4-41baa9b05394", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.38']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--787bc147-4688-477e-b96d-be20dcaaf164", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.39']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5c0384d-49ef-40c5-904e-091657026d07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.40']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c812af41-d1d3-4ec6-b0b3-c9312bfb0c27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.41']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a90706a-3e71-45dc-bf29-66e899166e84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.44']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85934f7b-80b9-46b1-b3e0-72cc9db2624e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.45']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec1fbc9c-c443-487c-85a2-c570ab7d5982", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.48']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bfdede1-30a8-4082-9241-a7384b014a52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.51']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--677e5a64-3b66-4cc5-9b2b-14cb4fad26e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.53']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--134c1dea-13ac-4704-8eec-93153e93b63e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.55']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--700618bd-b770-4fd0-9778-563832a464b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.58']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c43372b2-9387-47dd-aaa6-7d04e1e1d4cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.59']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8a677c4-6bd7-4e14-a82f-f3c1dbd302aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.60']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4cb438e-4de7-498b-863b-0dd8b965ebaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.62']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1923831f-98eb-4270-8feb-621f1f5f7e65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.64']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e968219b-8790-444e-9d35-3b6ca6fa7265", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.66']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02a5ceb8-399f-4387-a06b-037ed5a9b678", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.73']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2dbb339-9fb4-4412-9fe9-d93839087b1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.75']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--339415dc-5690-435e-8d8e-8ed1f640a7bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.76']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--919ccea8-7d32-41eb-a02b-2841876662d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.77']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19959cf7-e4b0-493c-9bbf-abeb819515b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.79']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4dc6d8a7-5de1-4182-80b1-af0721020d2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.80']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de6d4dd6-865f-4b99-a6eb-a474ac11fe60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.81']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffb7c662-0397-43eb-8923-ba7400f23bfd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.82']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ab0e1ba-54ae-49e4-95d6-47573f4365b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.84']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--924a5fd9-b458-4683-9504-d627555ded77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.86']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c83a1422-922e-43b2-a401-a80bcfa09ad9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.89']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca52f82b-091e-48d1-a5fe-ac1df61d0190", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.90']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbb3c74c-9455-4a29-b159-85dc3392b128", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.93']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1dc6bb7c-f214-46c9-abb7-b2244442665d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.94']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fce7e39c-b1e6-45e1-8957-73b623ff3402", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.96']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--318b223d-e611-4650-baf1-059baf7d8800", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.97']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04afb7cb-0057-4de0-9cd5-516de82ce5bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.98']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54bdd3c6-a566-4c45-9286-19d9bee65bba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.99']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c65288c-256c-4d41-adcd-6093652328ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.100']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbb981af-9463-4908-9e1e-cf94aa8ac7f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.101']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7938ddb2-9920-459a-bb1b-934f318bdd9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.102']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--528d3bb3-4f4a-41ce-9730-304346021bc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.103']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4392eaf-a666-4af3-81a3-627adb00ad11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.105']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--716887e7-d86b-4406-9d5e-e85d4f784813", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.106']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca82bb21-6505-4b12-85cb-2e6029805819", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.107']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8598b0dd-a21b-45f5-a92f-97b350c1d12a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.108']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a92b6a21-e575-4eb3-85a5-855790430335", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.111']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fec3bee8-dd0b-4762-8a55-23332103c68d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.112']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2d500fb-ad2c-4e01-9a29-63898983c1ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.114']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--923c65af-1e07-4f12-b110-7e1af53b9763", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.119']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4d49c91-3a04-4222-98a8-24a58c3af49f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.121']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c89ea94-b088-4e55-984f-5cdca33473b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.123']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6eb8a459-0ea9-4b8a-9d2a-a00a2a1c89d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.125']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48731c1f-2262-49bf-a842-353c86d151a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.66']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e9d988a-836b-4a63-a948-2e91bd017419", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.67']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--840dea71-b9a3-48cb-8c09-72ffdf4ef418", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.68']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb673bfe-66e9-46c7-93af-bd829ad693dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.70']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16afc989-34e6-46e2-bdad-9e86e48d0cfb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.72']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd34e822-13d1-4b64-8fcb-6d8e066746b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.73']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d74ed97-568b-457f-bdd0-d8e4c9ef6cb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.74']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--210bc117-76c6-4140-8b89-d452445ec0be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.75']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8be3e1fb-c75a-4a7f-9b98-062daf23e523", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.76']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eaa68249-b16b-4b5c-a099-86c7e69afbef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.77']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--427a5626-6699-4f57-9e3f-a1885851957f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.78']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e94d663-3582-4206-b587-237e178a2639", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.79']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5ca0686-c30e-43d4-b48e-3937c856641b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.81']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99535817-68a7-4b6c-b638-fe945c306274", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.82']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcb0ab75-5195-4cf2-be6c-91604a3b216f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.84']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a0bc346-99b5-42d3-b5ea-37610aa136bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.85']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--065915e2-8a8d-4a64-9735-f500d9219850", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.86']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ddb4127-5dde-4e89-b5e3-686e9be45395", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.87']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--967c72f3-992a-4520-b1b4-65afa7f7b0f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.88']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f566cba-cc86-4aca-9afa-7f1668edfb79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.89']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27b9a743-7425-4a9e-9137-f98ea5e1ee31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.91']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2dbb30f-4316-4bdd-b48e-b7ff43c8aa27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.92']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f11e7ee-8132-4494-b28d-f9dbe6dc3f3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.94']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f87d214f-66a2-4fc4-a049-0f81413df893", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.95']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d622f65a-d72d-4d6b-bd5f-da48ce28492e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.97']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3efa309-bf3c-4277-967f-64e928a2880a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.98']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b498c90-d0b5-4028-b4c8-cbf0df1b76dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.99']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b3e0bd2-b475-464a-be1b-d4b5a14ec668", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.11.124.201']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45b380eb-7549-4d8b-a289-d6212de32d3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.100']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4062ce82-9935-45b7-bc4a-7bd62a8258bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.102']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d1a93e9-3436-4845-9ec4-2f940fdceda0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.104']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5c740be-e68b-4786-b44a-7674350d5816", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.109']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94303999-9f35-4e64-8e4c-e9e9366f3496", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.112']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09381907-6503-40e9-9d81-2e1e8bcd9048", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.113']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--603bdfd3-2b46-4cc2-9650-16c5e11f9050", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.114']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cfd2009-8966-426f-a0e7-91dc4dc101d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.115']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b790d824-f086-458a-89e2-ea34a480c741", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.116']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5201b082-f2cf-4045-ba80-5134e8c7709b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.117']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa5d8893-a881-46ff-812d-976619d3a09b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.118']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e463d103-5e82-4366-a053-652bb0cd0049", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.119']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14a9fe4d-7ddc-4bc0-ad0f-17f988d10f2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.120']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81121fce-8d62-40f4-9264-f364b51eadb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.121']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfd740bd-bb44-40c2-8c35-b2d73b70c684", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.122']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11c703d8-43d6-48ac-b81b-794285656729", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.123']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--333f6b94-0131-4bf8-8463-4694e369ce38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.124']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83d8b17c-5fd0-4580-9df3-0c35da3cd784", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.125']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5e2eef3-e13c-4bf4-9399-01a1122df7a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.126']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d787e0d-e57a-4140-b0c5-38fe0329a46d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.127']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5a56b44-fa65-47a8-913c-24c4e9807b12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.128']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a79a9e95-2f91-46f2-b56c-e732bca53d61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.130']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be1047e4-e4be-4c78-b415-7ce6eee485c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.131']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1863dd18-f5bf-4e72-a05e-f2aded9c7a97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.132']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53c27099-ae18-492a-808f-09ce18b9bc1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.134']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a92b00d2-bc73-46e6-b553-bf90aa6185b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.135']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc122d9b-c63a-4d26-bdae-5ea250d9c259", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.136']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba8c2d3f-c095-4973-b66d-5223b6716aad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.137']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf8274c5-4701-4241-a212-a7882f12b06d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.141']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ed7fce0-f385-4332-8479-901005d7d407", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.142']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efa446f2-310d-441a-afec-c5754064182f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.143']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46b784e1-2502-42d8-a539-66e3adf39332", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.144']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd91ef21-5571-4202-852e-2ac65daafb65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.145']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12044963-f5ef-4dc5-afce-caaec4f46d14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.146']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d90f91a4-3552-4a50-82c4-4720196c5d1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.147']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f85fbdf7-3882-4b3f-9d2f-f257ff62e62d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.148']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a428d731-4716-444b-abb9-635ec3720d5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.149']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00784e27-efa1-42f9-90c6-f5a8dfa2169b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.150']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--998f6f15-9ff8-4d31-b0fb-b2da5ab457e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.151']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c14578f-ae8f-4f0e-9de6-cdcca5e3c4b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.152']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf647c00-1675-4a2b-8a5a-0633655b2ee0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.153']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d29364a-7114-4863-a553-5e0ae9790828", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.154']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--339c1435-2331-46fe-9431-efddcfdd8076", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.155']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a504dc44-d9c4-420b-8c55-28f2808f940e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.156']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--021ab222-b5c1-437b-bc8d-a6cfd7bce21b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.157']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fdafd49-4f80-44e4-aa65-f4fda4d871e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.158']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcd150de-146c-4b83-b50c-aa170f8994ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.159']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41961467-6050-45a1-a802-347634fd95de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.16']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9645ba3-8c96-474a-a135-8b9488a65f4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.176']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ee0f4a6-ca3f-4efc-b151-cdea92e748d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.178']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41906d80-c87a-4406-a8ec-45be60628612", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.179']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1dfbce0-653f-4d43-9d7a-fb327f1a9d15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.180']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--848690ea-78ae-4cae-b49d-e8eae3851742", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.181']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1ec129d-63e0-4508-a6da-564fe3a14ac4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.182']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--785ce7ff-50ff-4ffd-a59d-6dd9925b10aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.183']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d157f93f-a1b7-404f-ad53-2c63662c1072", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.184']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8f09c98-f253-4f19-8afd-544ececdb7a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.185']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87902fd9-1b76-49f2-9ff7-1f0482c96e87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.187']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23a24909-6383-4e40-baef-fff3242f547a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.190']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a245f68-be29-408a-b9e0-a58859bba456", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.191']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d03aba34-c0ed-4dd7-b8d2-687b94bd9bc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.193']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53aa4c26-a6d4-4d6d-806b-d5127f9f6983", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.194']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67803229-d2a1-41e5-b55a-1b90179efa2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.196']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--036c17b3-d421-4488-b92b-f52653319e7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.198']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3280ca21-68a4-4ce2-90c4-33c516b499ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.199']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1b01f60-56b6-4fa8-8dc1-91226a5393fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.200']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0890b855-e907-4304-895c-ba6c9b06642c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.202']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--798d15f6-dcb7-4551-af3e-3eacfbfe359c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.203']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c46ec08d-2fd5-46f3-a7d9-6166a96b253a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.204']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56d54368-a587-48bd-a305-bf1107a5ff05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.206']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3feb459-9522-4b4b-8487-dacac27bd9d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.207']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0708fc2a-5abc-421a-bc90-e643605f9b52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.210']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f991615-a84c-4dfb-9da7-ddf5277ac8fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.214']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5194bcd6-cda5-4c31-8218-9cc1dcc6ec03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.220']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94994769-3dfd-462a-8b14-b5e2f59ae04b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.221']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--160b7beb-ed0a-4dc0-9878-95bac3080e38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.224']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4dc7f10e-ddb1-436b-bef9-828a833da2d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.225']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab2257ff-03cf-47d9-9d71-05ff545dbc2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.226']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2194172-21d7-429d-a6d5-fd051eed0cb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.227']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fba6422-2225-4630-aa8b-f54d84f4f4ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.228']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dd0a9a5-41c6-45c1-85db-5336f2af41ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.229']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e906295d-9f41-4149-b4ba-2a81080ab0b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.230']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ce16125-5cc5-4d6f-9836-858c059ccc56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.231']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3875c318-ba54-4530-a467-ce6923d8847a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.232']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29330b4f-cdbc-4402-ba2b-ccebc08d8e68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.233']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8237911e-ba44-458e-9755-522b63c87e3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.234']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fd325af-ed6c-4b30-8c50-af390e135d23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.235']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd3d6fe4-2baa-43c7-8519-3f785ba6a7a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.236']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ae783f9-2578-40d8-9b25-babfad3797e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.237']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d11d4bfc-17c3-44c6-809e-8e4e4fef1c1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.238']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b454ee88-2fad-4e49-8179-5a644b053171", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.239']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02ac1b1a-4c64-4064-9b67-8dc50f555960", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.33']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cee7646-d8a9-474d-b284-2b0dfde223e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.35']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b5eb39e-fb1c-4676-b099-192e62caac6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.37']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d445c6f-05e4-425d-83ab-50f78967ffcc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.38']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d24c9c6-914b-4d0b-9b7e-0f86a93a31e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.48']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d19fc60-fc20-4ec8-82c8-8434f463a2e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.49']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00793001-bae8-4f41-a175-b60a66a6f5fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.50']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d35e914-e723-4d42-a3fa-03744b9a3cfb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.51']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a9369ac-12f6-4525-b2db-4fafc0f1c604", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.52']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17fdbfa1-e7f9-448b-9775-ac347d9501a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.53']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d21e3b5-d335-412c-a67c-6e2d79809aef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.54']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0aaf1966-5402-4f0e-8dd3-fc83507ceffb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.55']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c985f66e-b06f-49a8-bc81-9bfbdf039cee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.56']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7651292-9143-4dd9-9031-e18f3f4df8ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.57']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04d2c00f-1011-4247-9b9d-042a7ee06a03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.58']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23f848c2-0902-44dd-a735-16d14b691f4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.59']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1b01449-c81c-4a32-8ca7-84b147e45619", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.60']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bc56add-36a8-47bd-8e2f-867bf4b4f311", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.61']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70266657-b9cc-4947-9422-975b2a65e42d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.62']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc9ba315-916f-4f85-a8cb-b784892a4eb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.63']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24c5f1fb-5039-4590-8449-35077637efe4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.96']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01d9a5f3-2282-4081-874f-d973acccc876", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.97']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fe9bc70-78fa-4d29-8d87-59633d49d097", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.127']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b3e11f8-ea5a-446b-bc5b-af2e480efe79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.128']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd538cd8-6634-4a88-bcd2-eedc7c04e4bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.129']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2b42f51-9926-4fa5-bd7a-7c177c823ee7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.130']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--739f0897-2f74-4f2f-b421-5975c0ae8281", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.131']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1341fe33-346c-4260-a911-4962d6ce61c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.132']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f66a2e9b-4112-4a4a-ac79-5e701f793590", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.133']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--868bca97-ac6c-44ec-9bd6-375dc5c75c26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.134']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f1cbbeb-ca67-470f-b48e-da4d8c44f46f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.135']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b16b15f-a108-4b52-8ffd-067fb8040714", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.136']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f84dc43f-28f0-4b00-9a73-9b4f4fbb1415", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.137']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba5de685-8506-41be-8345-9136b2ed0b6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.138']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--557a44d8-9dea-4874-a642-58b7dbc26e8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.139']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--989c5045-4c9c-4a1b-8d81-9716f9380970", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.140']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10b87679-801a-4918-a651-d643950ef9c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.141']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce72e03f-371a-4045-a599-4504e29fe6ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.142']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10ebebd1-b3ef-460d-b4c2-4a236b642e9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.162']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--829bacda-8be3-4156-9e56-75e96ba0feec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.163']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a39b442d-6f2d-4d46-b283-8982711f3163", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.166']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be9c6922-1802-498c-9764-cb0dd39c05c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.167']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--559b9598-d11a-456c-9877-856122df9afe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.168']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b799664-1cac-4e6e-b4bb-a6d52191b9fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.173']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d658613a-5180-4223-9de4-cb03b255c300", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.175']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5361ea7-f160-4a44-b761-710acf88ccfd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.176']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--281e847a-af9f-41bd-88cd-dcf03e708104", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.178']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00fc817f-910e-4e0a-8141-7729f52342bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.183']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8517b307-b00f-4427-b5cb-ebf5aa1d13a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.185']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d9832f5-3caf-4410-90ad-682a30336f06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.186']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82281f81-6c8e-4893-9cef-eec159b5a702", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.187']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87248a02-2a17-45d4-882c-cd60e8d6b6a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.191']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9d07545-dbf2-4ac2-9934-2c4b69acdfb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.192']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e181906a-d83d-4265-91b8-53e3246f13f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.193']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--877a6e09-a52f-4962-824e-8e940ad068c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.194']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4512129b-32a7-4d8b-948d-b8418a1351cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.196']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1407953b-bbe3-4572-b6d8-a9faacbe63aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.199']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--720c2544-58c7-49b0-8501-b8704445e442", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.202']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e327ada-3909-4c48-a25a-188c82153bc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.205']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd920ffe-5512-4d83-8366-d568de88dca2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.206']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2dcafe68-2250-4acc-af94-ab7eea83ba41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.207']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d6c663a-5883-49af-b13b-bbf4c7b086d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.208']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45eaf44a-8491-4f82-866a-6ffb0e6f54ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.209']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bb90239-5398-4d4b-a5ca-3162f5c093b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.210']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e6ef886-7bd1-4be2-8433-a0d4fead61fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.211']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ca4202d-5c13-47d3-97b4-b33679527adf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.212']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a692c2e8-1c09-4517-b566-c812266fc289", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.213']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7685d450-3a3d-4f43-8294-e08de07db46c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.214']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d93dc76-5791-42b4-b3d7-7f314b32d74c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.215']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84ca5a7a-884a-421c-861a-cc57154ffcad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.216']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cae62dd-d018-42bb-b1e2-b2d732277a5c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SIP activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.217']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--129db2bd-d256-41ca-bdda-479390042d14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.218']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ee96cac-1bad-4d4e-b34b-771f1d9da54c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.219']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--482f54d3-aa3d-4a18-bc3b-6f31465b39df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.220']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07cc9b00-71f6-4f69-98e9-6f0ec50fd1e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.221']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68f97491-9fd6-4524-b965-4cc01c146667", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.222']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3070727-f4f9-49e2-b3a0-8e0998d48504", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.223']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29a582af-5ac5-40f2-865a-e82dc1e3ab18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.224']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40b043f8-9aa1-44e3-8036-6cfbb79ecb84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.225']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7045bc92-09fb-4e2f-9166-df677b6e1637", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.226']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc75ea81-227c-420f-8b18-72238aefad6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.227']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7943447-5928-463e-8de4-d10561894d02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.228']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05df555c-c284-4230-bd21-b10f781e6cad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.229']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db24925f-ff10-49e4-b1e0-94116e1b55b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.230']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--faf50eeb-ebe2-4dba-a381-68c8cdbf1dc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.231']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--314142f6-1e68-477e-ae50-3316536856a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.232']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1633153-81f9-48ab-9b37-2d9f7fc6db89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.233']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8bdb269-46f5-40d4-b786-4e97b90fd974", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.234']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea2905b2-cfd0-4b0e-a808-5d491a4d2306", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.235']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--844ea54a-5485-4ca7-bd95-0e5a3e5b9295", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.236']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0ea5de0-8228-4739-8395-f3c3ad0c9a46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.237']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ccbcb72-4f80-43d1-afe6-c5d2f4302bf9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.238']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--407a1efa-0115-46d8-9ca9-ef7bf7b1ad7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.239']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a19dc29-6fea-4118-adfd-d414fe3658b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.240']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8db5cdd-ae73-471c-a2ef-ac34a760ffad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.241']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9443abf-317d-45da-8ecc-3b4bdc1850d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.242']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f96abbe9-cb75-4bb0-b986-3674a1f2635a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.243']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5963a127-33dc-4103-8480-f2f1d4f2c434", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.244']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d291b736-8eaa-4d47-91b5-b033cfb70005", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.245']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--829e85ca-dbd8-41a7-8b89-176000f408b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.246']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a4d1484-bfe2-4e11-9a60-bdfec3469cb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.247']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcd2407d-acc6-478b-95e5-f193139a282e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.248']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aeeb383f-2771-43c5-9509-a036540f15fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.249']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4a547ed-f5c3-40e5-8611-a2e253ce396b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.250']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd4a5501-f18e-4e3c-b650-cfb91b7ac384", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.251']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--677e7435-5bbb-405a-89d4-cc4cd1dceb24", "name": "Malicious Host", "description": "Observed: PORTSCAN, SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.252']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dad3e7ac-009b-4905-998d-9d9e2e1892be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.253']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c622dcf-cb93-4fcb-ad5d-52d5d0a53f76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.254']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eef948f2-c2b7-437c-bc81-984d6b19f98f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.100']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da491701-bfa2-45ff-94d1-bb6b6f0f5b30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.101']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--994b40cc-908b-4628-8ecc-e9c2c3ec1902", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.102']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be83c2a7-7005-455b-80d6-d3d4bcfa43c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.109']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cc64338-87e4-494e-bd2f-989e67bbea40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.110']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8335c4d5-77a5-445b-b270-4075fb2715da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.112']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1b0cf96-741d-4130-bbe5-389ea491c7d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.114']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--905d47fc-51dc-4b55-88a7-1aee5329553c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.118']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ad08fc6-5ddd-42bd-be8c-71a13d035680", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.122']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1c39a99-6c9b-48bf-936c-ed85dc8ee314", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.126']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbd40156-3dd6-4da6-93db-9f46861e2247", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.144']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbd7403f-7c83-446c-9e34-65f8d26cabad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.145']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffeef163-804f-4ce4-8313-b5ab7cbf6232", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.146']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3efa4e2a-4ab2-4429-89c8-2eb6014ad33d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.147']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa0a672e-a74c-46cf-8da8-6403aa45ea9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.148']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54f9278b-15d7-488a-a919-782ca741d843", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.15']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02f63c03-3cde-47d8-af69-9a395ad3dc61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.152']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e00db762-5c27-46bd-9cb0-123279636a01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.156']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e0bae51-c3c8-4014-84e8-45e2f0c07f23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.158']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cac6b55-b7b2-4f1d-aa75-ac7d5c2840b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.16']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e0f23a9-a6c0-4a1a-9840-679f74de4799", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.17']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53175f5b-08a9-42f7-a430-ed9d90c8e7b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.18']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf2904fa-d22d-4db8-8241-7bcb9a098ee7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.19']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46a8400b-3082-446b-9d1f-c8b4f10e3680", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.20']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb52cbdc-942e-46e3-8fe2-8f71684e1695", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.21']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be662f8a-4f66-48a0-ba74-ca21d34e9bf0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.22']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25b50521-769b-45bb-a352-31a7b757255b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.23']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17273b20-b002-4d1e-af89-ede3502c01ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.24']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7c64a8f-1f69-4fa0-aa6c-a4b108b6f82f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.25']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25948c86-f1d0-4b68-a295-d5d7525fad17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.26']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bce55352-79ab-40d8-9b99-5cefb3596a83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.27']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ade7b00-3eee-4c9d-9c00-82bcd33923f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.28']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d37dcd03-d20b-4ab4-8bdb-24352430a3a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.29']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53bfe1d8-010a-4571-9d37-953cad4cc4e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.30']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--270c7c69-5699-4f5c-a227-3c56b0dfa950", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.36']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c374a4d-3c57-442b-91bf-2209daae87a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.40']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b6accbc-ae61-40f1-b96c-07b0db717f0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.43']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--896173da-ca64-4fd8-bded-afc563b8156d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.46']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fbaf729-dedc-4abb-9643-690ebc3c0da7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.47']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0b3fd07-9585-44f7-a895-18e89bcea1f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.48']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d878b824-36c3-42b6-a881-86aea44e300e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.51']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--103f9264-78a0-4c9a-94e5-8b46070c6b7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.52']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4295f0a9-8d75-44f1-ae71-0fe232b854ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.53']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f81029c-fdcb-4785-96b7-e522e1c09009", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.54']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40b1f5ff-057a-4cc5-8968-a2c36dcb8b47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.56']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adc7bd72-7750-4278-820c-950dc6855f78", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.68']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0025b99-5bbc-45b8-adff-00db86883dfe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.70']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a20131a-f4e8-4178-8450-6581926ac22a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.71']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34e54a63-d0f8-43e8-99f2-498320a9311e", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.72']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02793e1c-1228-4d59-bfc5-feaa4ac9720d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.78']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6431ec9-b5c6-42f6-9ac5-23768f3396c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.81']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7b251b6-4738-47d6-b16d-1c9893818a43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.86']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c71c830-3e99-425e-90d8-4ca2a4bc133a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.87']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfc97fae-8cd5-42d5-b342-17e2bd58433e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.89']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34e67ff2-0c6a-4820-ad1d-d0cb3cc10610", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.90']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47719349-3f55-4d7f-882e-806d3dd26541", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.91']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25aed255-fc88-47d7-b4f4-6f415f054a91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.94']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8fa023a-f1b5-43d4-8c67-7fdbe5781751", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.95']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb9e9f4c-0b5d-4cde-8444-6e24265e251d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.99']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42f6e660-8b42-49d9-84ce-faa6801bcfa4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.15']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a5d7397-34a3-4599-b72c-3831d72ead78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.16']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--790d7596-bb68-4997-b07c-d6f39412a78e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.17']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--016dc81a-4da0-4d4d-9edf-eccbc7f9508f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.18']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd72cc37-98e8-4c2f-8e99-89fc7bfc899d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.19']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2356e10e-4bf1-415b-b007-fed94b389e27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.20']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a55820f1-531b-4ae7-8752-3e437c06bde3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.21']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc859a3b-b5d0-4d37-bb0e-b199352df7d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.22']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78641d73-7ce5-43d0-a46f-5f95194b212a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.223']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d601738-0001-499b-bf8d-68d873ba3816", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.225']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50d3c452-2f8a-4ad5-9dd0-2818f06c17c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.229']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76211359-9bd8-488e-b76f-d550619018f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.23']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fe1eb3f-dd98-4df3-b2a7-b537b82703db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.230']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11178e67-cdb5-47fe-9a78-9e3d77c8bd90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.231']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b650cde-d501-4891-b0d9-5c717ada9843", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.235']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cd9d86d-72ea-4bf0-9148-88f102d59abd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.237']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15d2c138-1912-4b1f-bb4a-36f6418ef00b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.238']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd147543-770a-4d6f-a008-dcb130a6bd78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.24']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a023318e-1fc5-4f48-9b4e-ebda2ab39e5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.25']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c12b93de-aefc-41bf-8256-c09f24b7aa8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.26']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22877058-2c9b-4a06-9d25-d5a432350297", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.27']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7419c6d0-aa0f-4c60-906b-331ab4f87a04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.28']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d728b0cc-cd70-43fd-9fc9-ca7cd5a39c63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.29']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82b3298b-ab41-4679-9973-8ac2098e82dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.30']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b3e28b3-381c-44bc-951d-5ecbf0bdfaca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.79']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2e31729-faa6-4550-8e34-a1a95d4e4587", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.80']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23fadb6f-14d3-423a-bc1c-e7acf87a7e34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.81']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0ecb0ac-9d0a-46b6-9586-b64a8b093cc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.84']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef6facff-6ed4-47dc-9c13-845e3b4e0479", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.87']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a1038cf-f71b-48b0-af44-7b0d55552ced", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.93']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fe4ea2a-8678-46f5-94f5-c5e9dd579779", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.150.198.186']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36da9fb4-a431-48d5-828f-af6706cb008f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.175.209.13']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b3bd19c-5c9e-45be-b14e-0e5e7118c9a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.175.209.239']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d18e3be-f1e9-4da6-804f-9a3f601ca2ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.175.209.252']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed476b42-0500-4181-bd57-95d2ebdb5dd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.175.210.141']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9ac1bcb-0a9f-4b58-91a0-1c7fda08accd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.175.210.15']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e718c9f-b556-4ee3-9c37-581e429dbe78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.175.210.8']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6bc42ac-8165-4655-a411-4e6abd4303ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.175.212.77']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba37638c-75fc-480b-925f-cdad1e9f4e0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.175.213.67']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86ace8f0-dfba-424d-9c7c-0dba4c76b488", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.175.220.105']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cff777f-7d3b-4620-9321-8384159d6e35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.179.10.139']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bd9607a-02dc-4bd3-bec5-376d03c26324", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.198.230.3']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--934e76f9-25b3-49a0-986f-d6c2d55ab823", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.32.128']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--717175eb-c997-48c8-b917-912e35c66cd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.32.17']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a80858c-f0d3-46d0-b40e-6724f568cbac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.34.196']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4855b474-7284-42da-bd55-a192fcf913b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.34.35']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fedc3a4a-09a5-46ab-a72b-3b20f84ff70f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.34.36']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f28ef65e-a07d-47e9-81ab-1f9549ec8806", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.35.104']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1effec5b-686b-4226-bef7-fd8b04f49dc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.40.100']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7468ce3e-305f-4bdb-8498-4c9603f0d2e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.40.98']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b510c2d3-2e6b-49f3-ab64-a34e774abc9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.41.127']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95167fd4-cb3d-4bce-b916-065924509570", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.41.7']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd55ac31-7fb3-45f2-bfb2-de3dc1ff5470", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.42.123']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d858a68a-0d2d-4ddc-b340-25b2cd5def31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.43.210']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71c01479-5ced-4681-b0d4-3edc7bc42a0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.43.46']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ac26b1f-283a-495f-be0a-1c7e99a067aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.46.199']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--583da801-e62c-420a-b774-1e6140411bab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.50.209']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99ee19a9-a515-4f96-914c-81dc58bdd016", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.53.136']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a70fb1e3-786c-4544-9128-c38723cb15de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.53.174']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--caad7f84-d0e3-4c5c-aa06-8d54f6f23eb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.53.4']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bb74753-707c-48ad-8a05-966b997f7687", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.62.150']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c1c4dfc-98c4-445d-86e4-665bddd57671", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.240.192.138']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2ce09c7-6c96-492b-b2cc-9aaa851fe83c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.240.205.34']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f01bc5c-e321-4f69-8df6-82edf5410d00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.240.223.240']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--167cd45a-9327-4ef6-b224-597305d68a57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.240.236.116']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56451022-e137-40a6-a4e1-549700ea0b33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.240.236.119']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29e3a0e3-5286-4a40-b2c9-ef2032474393", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.249.78.9']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c5bd3ad-2aca-4065-adf5-954bdf893780", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.249.79.160']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--936e090e-4485-4a35-aece-4dbd38aa343b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.249.79.173']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--125e7a5d-7c5e-48b2-beef-37428c35db3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.90.98.90']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfc47e7d-67e4-4f33-9684-6710cf5ca104", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.92.161.48']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f47fcc9a-eddc-457e-823f-11772beece5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.168.49.127']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3ab24ec-0e1d-4e81-aab9-4ea956f52417", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.175.185.198']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1eb8b63f-eee4-4f73-8ced-17e377b211c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.205.131.202']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd721b52-1c33-4859-a7bd-f12ced38624c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.205.143.233']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7792d090-0b25-4ea8-b9d5-0c11bdd618b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.205.153.116']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf8bb172-3275-4e6b-8172-41364dfe5e35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.205.155.1']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b0cefb1-a4e3-442d-9ee5-decc305505f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.207.82.48']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93505f1a-362d-4fc4-8a6e-050d5455f12d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.207.95.197']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1496da31-d600-411d-86dc-490a3e60480a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.211.219.187']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--254b2d36-5aff-47f2-8d27-48697a005b80", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.241.132.98']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0107d668-f000-4e38-9c6b-7f79d649e6aa", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.52.95.38']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--113eac2d-e9d4-4b74-9d99-c54786766caf", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.144.206.207']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e0a8716-770b-45a6-aa53-80688717032b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.168.31.36']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f022e633-9664-41a5-a28e-4455c5242c5a", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.178.164.44']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a685221-205d-4019-8dd8-52e22158bd86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.178.167.214']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adfef0cd-8cae-49c0-a66a-cfa94ddd6154", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.111.230']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f0d69a1-ff33-4224-aa7d-c0716304120f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.127.209']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7dffca8-8bc2-4ab1-850e-f5d7abe7d7d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.131.136']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--293a7db2-ae87-4728-8fbd-30f578118065", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.200.154']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bc6c0c2-69a2-486f-b335-3b8e1219389b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.212.21']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cba1b137-2672-4380-855b-f0cef1a8193b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.235.61.155']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18cdaab2-8c9e-48aa-908e-9b1354407d2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.235.62.179']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ee60f6b-a011-4581-aa52-bdcefd7f758f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.237.201.136']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3752f11b-47ec-4a85-9544-5284e8ddaa93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.64.170.2']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2d7b568-dfec-460c-9718-84504e3eecbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.69.177.102']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c98de2bc-f258-4f15-a031-934427353cd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.210.51']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d1af287-f285-4744-a36b-a02fdea47e83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.211.136']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6c3f9ae-2921-4094-b1e4-003812441c17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.211.147']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c875a1d7-6135-4b79-94fe-5fba383dc76a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.211.177']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bb12345-1785-4416-aa44-46ff620dcf7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.211.184']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--823264d8-72fc-481d-94a0-c0d8f0e7852a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.211.192']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a718697-dc43-4d0b-9950-8dbe92e6537e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.211.218']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--022ba8b8-71db-413f-a210-4f40f798b12f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.211.230']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--004a2fba-008e-4779-a5df-8a099c54cdba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.211.240']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68f7abad-74fc-4c83-82c4-6d6883a5fc46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.211.245']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--354fe687-ea36-46b8-9ac4-0d99e92349ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.212.179']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e626b68c-2cda-4a30-a83a-f89eee0de844", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.212.68']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4de85fc-0e7e-4517-94e3-20bc077defb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.213.106']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f02c658-46dc-4254-b142-38f3414f79cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.213.186']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba8d59eb-a136-466b-a6db-9c3d02b07163", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.213.245']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4382ef92-3749-4ae0-8ec7-edb4ab575ca4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.214.243']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49c47f30-897a-43f2-ace3-2b3065173b54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.215.121']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa7fa2e4-5aa9-46b1-9625-7fbfc707116a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.215.6']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccab54d5-419e-4b1b-ae7e-c7dcbd34687f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.217.245']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9124888-d18a-44ac-a0d5-f561c8883cd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.217.74']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70021095-4fab-48df-a313-670a3c8498ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.219.254']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--948a5d2c-a66c-4f0a-8aed-82bc78545912", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.221.61']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b169e9c1-a505-49e3-b381-8966d0f6c57f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.175.33.170']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--659396b4-2935-455d-b63d-0da240792395", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.87.221.194']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02617538-3096-4f94-b697-29df0026bbd0", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '70.120.203.193']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57ab4e35-1ede-4c85-ac39-141ae2b33665", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '70.164.4.233']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e65cbd57-671b-4a78-b9c0-424ca0b6386d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '70.34.253.190']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e05dec4-36a5-4a63-a67d-d06a59d1e7ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '70.45.6.191']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9d0ed6f-68ad-40b0-acb0-782cdf042ec6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.19.150.18']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e717d8e7-817d-40ef-b5f1-1fe08efa89b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.204']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5adc6103-daaf-4c1b-bfb9-762696eca91f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.231']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8712dce-a213-439e-8816-97f57eee50e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.234']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ec2683f-a749-4410-a768-1ebf175960f7", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.237']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5afec7ba-d810-41d0-aa98-e764a48375c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.135.131']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8938f6e8-b12d-45b6-bd33-1ebaa5229e9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.147.254']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80bcf59c-34ee-46e5-8132-19fc66b8e188", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.158.166']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58fe751b-fea7-4840-be15-694209ddd8e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.165.200']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68c66707-b4d7-4d36-804a-ba2607c15e67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.167.142']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a46c8de5-6533-43ba-8c08-4fc5eb23ebdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.199.23']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6825d2af-86b4-4812-8fb8-1bd0dab7aaac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.199.65']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29293aa8-c3e3-4363-b86b-b694e8fc43ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.199.87']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abbcbc9f-67e1-453d-b655-645b0a3c1dfc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.232.23']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--351dcce3-f795-4535-a2cb-bf165fbd5d02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.232.24']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58d3116b-d37b-4146-96a9-a582985fd13b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.232.27']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c971941c-362d-4eab-bb42-8059716562ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.232.28']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc1fc2fe-ed0b-46eb-b9ff-43b128e5ad3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.232.30']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20601c99-95df-4e20-b127-df65998c2143", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.233.142']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf2f9b61-c836-4e02-bf4f-6716bfbd814b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.233.174']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4c5508b-70e3-4b38-ab0d-d9a6129bead4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.233.175']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a364f6fb-49c5-46f6-80e8-2c2917e30f90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.233.2']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb88824f-0886-4048-89c0-49ee592bfbc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.233.222']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e58c7837-4c3b-4c9b-b732-befd20f0239c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.233.228']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c14765ea-1840-4d39-93e0-b2773bf15126", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.233.230']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4e5a638-cfcd-4508-9da7-8a19fac9578e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.233.249']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70bc0499-c0c0-4c6e-8772-dce469c1812d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.14.178.148']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c63eefa-70ca-402e-89f7-2678f803c79b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.14.183.184']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a074d41a-76c1-4729-8f2f-63907a7f2760", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.167.54.155']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fb7ca79-bb05-422c-867c-1895c8282439", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.17.34.38']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e40c05db-0df1-4b0e-b976-34d332a2105a", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.255.18.6']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c18c309-e3e5-4919-8f3c-eea6a29f5315", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.255.3.87']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--caad62d3-6573-4eb7-9247-43f0696e6e66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.50.82.254']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fff7454a-2163-4b6e-8224-ab03f0f08b7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '73.178.13.153']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e95503da-c48e-4d13-8c92-6b7709048aaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '73.204.137.84']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44fd5e7b-8b05-4702-aa73-8d13f4939d33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.207.240.187']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c3e43b0-1a8a-41eb-8ea2-29cfdf967997", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.207.253.22']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--225308d0-35b7-431a-a39c-c42ddee39387", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.208.181.231']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c4fa576-6f4a-4cd7-877f-25112ea63c19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.235.100.212']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e0ac9ff-388f-41c6-ab79-3f8213ca89b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.235.108.239']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae4d0904-bdb6-4744-8c24-0a98c6e0c317", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.235.121.114']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c29e2070-405d-4365-932e-bb19cb1d7e68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.235.121.66']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--842fbfc2-4031-44e8-8e71-f97e369425d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.235.162.254']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a00e2224-b130-463d-a521-0a6aa660c415", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.235.203.125']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63132055-1c3f-4071-929b-6f13b708ed0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.249.128.154']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4baaab23-2b70-4a4b-b8d8-ca3c3446c120", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.249.128.189']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0ef5d44-aad9-4d92-9b28-e1d09e63fb49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.249.128.217']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bf73487-f825-49f2-81a5-d429ad9bdd9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.249.128.83']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24c2b118-310f-49cf-8dd0-f5eb5c697acc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.249.129.23']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84526630-62c7-4709-a511-94033fd640aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.249.178.165']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0c15345-e106-4a58-9395-3e82f9fd9079", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.249.178.45']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b80a9f5d-d9a0-4c1f-b3af-233b1683e6cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.249.184.13']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f608e2d-3bb6-427f-b27b-62665c098850", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.249.192.245']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6099a5c8-392b-4312-833c-2755ca19d063", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.249.78.163']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9c3fd30-39f1-4d9b-a7c9-74b5c51a959c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.48.105.66']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c10510f-cbaa-4d02-b140-20687254e447", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.7.227.190']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--605c2988-c014-4e49-aefd-0a27408b94db", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.7.244.41']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56ad92cf-c3ce-4fb8-8b9b-f7b5695c7736", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.14']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47c24fbc-feb8-46d9-836f-22e35ca5bd50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.16']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1a1eaf5-d49e-44d9-ac36-f0f2d518779d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.17']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46602165-a4ae-4424-9003-9eaa8d9e7a31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.18']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61fcf12e-665d-42e3-ac67-a986f6b526d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.19']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--713ac23a-79d2-432b-ac7f-57953421327a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.2']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3f8216a-d9f7-4c56-82b7-de0e7f8742f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.20']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67cd33b5-b79a-4ef1-9182-d09261147f41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.21']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6610a03-4e34-439b-848f-e924b36d2f58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.22']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3363913-1866-45c6-9cbc-e3c60e9829a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.24']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d8a080c-8214-4874-b1a7-f5d1d19ca166", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.26']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a96772c-c5ca-4604-b766-baa453c42721", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.28']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15949220-f220-4ff7-9648-b74370be0b1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.29']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a822335-8fe3-4975-afb5-679d7463b6a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.3']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c591b454-5d09-4c4b-952f-f9289b0357fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.32']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3687725c-ba87-48c6-bb44-ac48c65c50c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.33']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af3df833-46d0-4bf3-b8a0-17e58bb07b69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.34']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9689dec5-080d-4734-9fd8-0984c5870ad6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.35']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c0fef6e-988a-4088-a35a-23a87f1cba25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.37']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--026da5a2-7c16-40ef-a0ab-299a2fcbed84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.38']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--229e5adb-35cc-4580-b5b2-eaeef9cbe993", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.4']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30d9658b-7be8-43de-b1a5-a9dfef796306", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.41']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fc499e3-46a1-46de-b5ea-c5d0cf7f6e68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.42']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fec2f19a-5730-41d0-b5a9-d5b231bc0e9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.45']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b9ff3bb-5b42-4349-8278-b39df6e6cca0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.46']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09098170-dad3-4572-988f-67245a53d774", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.47']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65e40695-878f-4a73-8cdd-3685fac4d50b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.48']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e5d84f3-412a-48eb-aa39-cf541495e93c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.50']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cca50f77-7f93-412b-8f5f-9f48fc2bb137", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.51']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a788b263-7be0-494d-8d77-5c8408445235", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.54']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3afa09b0-5eaa-457c-ac1b-410084627c84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.55']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d190275-34d3-4099-87bb-d36753551a6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.56']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8f35708-ff28-43b8-be55-daef9131bcb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.57']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2512830-38f2-457a-9bea-eb533754ed2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.58']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73965b43-b3fd-4173-a257-b36f47c23061", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.6']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11a11c98-b84e-4a4a-a18e-03d6853a8dba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.60']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59668511-005c-4862-ab8e-1845ab943062", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.62']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92af26f9-61f5-42f0-a568-70583a4802ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.7']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--023bf3a5-dc47-481d-b2ce-1bf5e8f95e25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.9']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d551702-b8e8-4b63-850c-19bf4a524f82", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.74.204.176']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60b8ac49-623e-4a78-9f27-fcf4848430bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.74.204.204']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd7ab64d-282e-4a8a-ab96-6c7f3d92b065", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.83.39.14']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c45e4e5a-d6ec-42ec-9f1d-e945c6dc4c3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.83.39.197']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4b71c08-93ac-4f7f-b143-6c982be9ebb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.83.39.94']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--702e5457-d206-42ea-b252-0f91c6696a8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.207']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbe745ba-f4ae-4d4e-8e1b-18e11340578e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.230']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d578e2f-0db9-4aa7-90e5-ffe9b1cf2e59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.238']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cb9daa6-f989-4732-a7ba-1e24e55cd2cf", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.33']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01b97f05-a7dc-4b6b-9ab6-ae25aed17e23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.64']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e88fc62-8f43-473a-b277-9144260d0d5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.78']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29a3cf72-0c6a-4f12-ad4a-87d9cfa13c57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.79']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--737d579d-9f34-4b52-8178-a1a49fb6b5e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.80']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a82c60fd-a6e2-4a77-87af-ddf00c55df57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.86']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7db5add5-1059-4e34-970f-c0f143fda303", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.97']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f537edb4-7a0f-4d55-9c5c-cf5e719791ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.91.65.32']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0ce439a-8694-4e8e-8f41-83d4e856078d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.91.66.1']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a7ace9d-7c27-4ab0-99d8-35ce02491f66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.91.71.10']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c40944a-480a-47bb-9018-e3e01de2f2a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.91.71.11']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dce1b44-4409-40e3-bccf-b88a6bebf5f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.91.71.12']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--156e52bc-9a06-4389-bb5e-3e1c71d06701", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.91.97.16']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc493ea4-fa9f-48ff-ace4-05e728e1b159", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.94.47.83']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bc392b2-7ea2-46e5-8d81-a155c4919b58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.95.203.182']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b348858-c2eb-42cf-beb0-95b9af2a2cca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.109.201.57']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bfcbfdf-234a-437e-954f-87f6b3db8dc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.111.67.162']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbf871d6-a634-470b-a954-7169551bfe91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.111.67.246']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdde73ed-45d0-44a5-9717-1a040bfb099c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.111.67.247']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a6a577b-da3c-4243-a10f-05a4283dc679", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.111.67.47']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0dab6aa2-4801-4add-a085-8299e8013567", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.111.75.47']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9d4029c-faf9-452a-8aa0-9d1a2db74e3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.112.30']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03f44997-2092-406b-980f-2922687117b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.112.6']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20376bad-42a5-453d-9393-f231e7ebb03d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.113.22']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b47ce8da-ac8e-41f4-a6e0-bc49ee2581b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.113.46']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93576f50-dcbc-4b16-bf1d-6257a4830bb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.113.74']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68822c5d-523a-4a05-8ff6-7b3c9a5852d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.102']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1f17c6f-69a8-44e4-927f-020cf690afe5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.110']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3bbb57f-3559-4de2-8e62-c5ed9930474b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.162']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--574958ea-af51-4981-b1fe-2290409c1459", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.174']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c395911-9908-49bc-a373-f577aad84340", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.22']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0eb1dd59-15f3-4454-b80e-ca74a7aa7393", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.50']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--692cb54f-7405-4c48-9551-5c0f9f30e995", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.58']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84977cf2-d96e-49a5-afc8-970b3ee4e448", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.153.140.147']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88428164-54d2-4391-a204-02055b346d1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.153.140.148']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--400aed5e-153b-4bd1-aac2-268807d5f6ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.153.140.159']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07d59f4c-a5e2-474d-8188-ee1fbf7929fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.153.140.252']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df28bb43-6bb8-409b-b44c-573379558661", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.153.140.40']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1153be0-a655-442a-ad0f-b519dccc2559", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.153.140.50']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b802d75-d38e-4e04-92bf-8cd094cdef11", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.186.151.102']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a30f83ad-8d80-4be8-9ec4-c6eb3b1d144c", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.186.180.232']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90d5a3cc-eaf5-42e0-9cd9-db80b76f4275", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.38.94.2']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bf0df71-c3cd-422d-b1bc-fbfc220b156f", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.44.192.210']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc6526d8-76e4-4f00-b013-48b15f7b46da", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.105.232.90']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--027490d1-cf79-4054-b6ab-5eb021f030fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.40.110']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84c47f64-1f48-444a-8c17-0934710adb0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.40.126']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d481ef0a-13ff-4f54-aac3-1d87688753b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.40.130']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a99ad9d0-b793-4df7-aa8e-3ffa17b093b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.40.138']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61946da3-5c16-47dd-9bba-2f5852fd1c0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.40.166']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75162567-8ac4-42d4-ac9e-b1a052776317", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.40.170']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14000b59-737c-46c6-8dea-cc5466bfc8fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. CVEs: CVE-2021-26855. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.40.174']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-26855", "external_id": "CVE-2021-26855"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--610b7a7c-a86d-4b48-b7ff-71aa718e08d4", "relationship_type": "indicates", "source_ref": "indicator--14000b59-737c-46c6-8dea-cc5466bfc8fc", "target_ref": "vulnerability--56396261-db8c-43a9-aa6e-26fda3e6d2d6", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f86fe3c-479b-451f-8434-956f97566d2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.40.178']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4235fae-bcbe-4e33-b995-23c6b44e6223", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.49.174']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--097b6763-54d2-4530-96b3-c1488728bb3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.49.226']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbfb8f0f-7853-4ac7-80ec-4d187c8158ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.56.138']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e614198f-05df-48d5-98b9-4a67dc726d64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.58.142']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4b47549-326e-4621-ac12-471b22476466", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.58.162']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--daf18e51-f11e-4793-82d5-9645bbc9d19f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.59.78']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5374a066-209f-4118-8b35-a02b6e08d974", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.60.146']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--255ad792-07f4-42ef-b2ae-455afe2b8715", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.62.126']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ed7b6d4-aaa1-4bbb-a7d2-2d447f56af44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.62.134']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92094673-2f4a-4eac-84ce-281be073b132", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.62.178']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48b19490-f2c0-46b9-8533-24f05062981f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.62.230']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--763a1d19-6150-40ec-aa76-cd1c385208ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.127.53.20']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7beee345-54ce-44a2-8a25-184b06e25d53", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.143.45.75']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdead951-81e5-4b57-945e-d8ae14e5e0eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.175.176.177']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2f5846f-ef1e-45f7-8def-71d16714f1a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.76.55.199']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d30763ad-222b-44bc-a1a4-c23c29a39a3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.130.158.236']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e7cf160-b85c-469d-9743-54935bf898da", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.136.126.42']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41e51289-44c4-45e2-82ac-6722a0a904b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.136.56.76']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15fdb1be-b576-4c0c-ad8f-3d756da4edf9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.137.182.141']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a8c4656-663d-44f1-b743-dcff130e268e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.138.157.183']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f461ecc8-7676-4cac-a42a-24bcd0bea30b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.138.204.154']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--261c0f01-94ab-4ec4-95e8-18ec506b2a97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.138.238.164']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7e97dba-ba74-4638-a82b-e17348f70c45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.145.56.19']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12b2439f-caae-49e0-86bf-61940d441a94", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.148.196.80']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--836661dd-ff6b-400c-a932-5bc210ebaac9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.148.81.231']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a28db56b-4842-4a80-8f22-660058d369ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.152.196.148']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b842652d-1ec5-4f46-91c9-9a31d05a6109", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.163.50.66']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4cf78e4-2cf7-48b8-bb4f-9d18762bd94c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.101.19']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9af097c-193f-4376-85b4-d57c4116fc26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.107.26']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c88a17f5-fb08-4cdb-91cf-96ffe7793463", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.116.61']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49e6f1ec-72d1-4b6a-bf57-c2ea901b4a0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.127.2']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc22b459-6411-4da0-adc5-382c39af321a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.196.146']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f93f0839-ee4b-4768-befa-4c365fe86d50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.200.249']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee61c7a8-bb8e-4092-a31a-b528be4bcff6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.201.82']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bddc44bc-5f61-4f55-a074-47a7a6759304", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.204.134']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8eb4d04-6ecc-417c-a9b5-ba8bd2712e0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.211.155']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b037c399-3f07-43d8-bc2d-8646476bb07f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.211.193']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5e78054-a7bc-4291-96cd-a3de7c1fb319", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.211.227']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80c0c24f-bd00-4eeb-8622-f580072ce486", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.215.33']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fd23ffc-0b47-457e-a721-ac9b94321e44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.228.224']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e24407b-3b88-4f2f-810d-763572391e9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.233.112']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--130fb4bc-de29-46a8-b8f9-0098d42cdfb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.237.241']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a53629fc-3ad5-4bff-8eba-3782acd6c7dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.237.84']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6e6e05d-8f50-42f2-bc0b-63ac290863cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.238.100']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6679c8d7-b62e-452b-8130-5abe03528177", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.238.181']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56a7ff25-bf84-49ed-ac7d-454460cdbf11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.239.57']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2408d90-d8b1-4267-acab-4107e9f73051", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.75.169']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42072937-e983-4541-8209-c06decaaee03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.77.162']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6b8166f-5a73-491b-902a-e917e2615912", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.80.8']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d63e515-e0aa-4779-baaf-c742adf3399f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.82.97']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43685e78-83dc-4e7e-8a7b-0e9c6c983bdd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.88.128']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0311fbed-1028-4e30-ae58-aa05ea37e5f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.97.27']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4db16a88-cdff-4545-9651-0967dce6b7a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.210.112.151']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4da350be-9664-40f5-b1c3-f00a44166fc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.210.123.17']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14c1d899-3822-4843-ad87-f2a916a55064", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.210.18.141']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cce6d64e-3721-4d07-951b-c3ece742231c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.210.4.144']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7f84f1e-9b66-4ab5-8733-4fc1a57fc834", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.11.111']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be3bb5d8-f98a-4373-ab1a-abfd3c90ee26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.128.112']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a72ccfb-515b-48e6-9dbd-801d708cf5ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.129.87']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c0228e8-e4e3-475c-9172-416f3e6b4f13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.149.145']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b32f022-c3b4-4853-ac28-9d84bab2bca4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.150.32']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b105f40-6d4e-4d62-9677-b36a1c13fc92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.16.226']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4511a55a-758e-4a7d-880b-c015fd16b5fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.16.92']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d385a1b1-311e-4448-a72a-b11c4ea09c53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.162.225']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6c8929d-4eae-4189-8e70-46841bd2805f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.172.246']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73eb1f5a-314a-4da3-9734-cb7584040f79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.174.175']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71dfc75b-b75c-4fbe-b8cb-8eb45d3c2a5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.21.181']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2b7a55b-52ed-4369-a71e-dabc1d8648bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.21.19']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb37c3aa-567a-4c6d-99d4-94676d9fbb45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.26.207']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f12afa05-898e-427e-9750-add1f98d539b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.29.84']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b448389-a9e2-40e9-956b-6ad90da0a23e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.36.77']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--002afe45-9805-4a3c-bae6-9a6a22c7f277", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.37.179']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42d9ff6d-ab43-4dd8-8eb3-c4f3147bd3a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.37.93']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6c214d5-65b0-46d1-b06f-7acf93f54a4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.42.134']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30e81a2c-8a43-428e-b290-5e10d5e8d8b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.42.24']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfc3d5ee-2960-43d2-b0f9-dbee97186c2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.42.77']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb9caaf4-63b3-4ae2-bb44-4df59b240397", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.44.110']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3df35a95-3c26-4182-9ac5-630ebbd838e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.45.194']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6ea48e6-4d30-483d-b740-3b45be9d5662", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.45.218']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8d83601-32f1-4559-80eb-5926efb11fd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.46.182']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f202d1f-f3ca-4bc7-916b-43c4f1f9336b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.47.177']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90058b0c-ac2b-486e-81dd-b81eca1097e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.47.19']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2727b0a-23d6-42a2-b000-32fe14d866ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.5.31']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbce75e9-dda6-4481-945a-b92449426f84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.7.229']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--776ea41d-b5de-4172-9b01-706b8ebedfec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.8.52']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--585b92d8-b5b0-42f6-b198-6065201201f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.9.248']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5bf90da-9ad8-4c2a-b6cc-3d016ce50493", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.213.224.4']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb1f2bd5-2204-470d-a928-4e45c60daf53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.0.35']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a4b1e80-12ac-4efd-9dfc-bcd5741ce92b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.0.71']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70604f54-c793-43f3-9f53-e8e3984678d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.10.242']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0c29058-f646-420b-8150-b2f070904147", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.10.5']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37a48af7-278b-4da1-8392-e27abfaececd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.14.197']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--017b9873-ac46-41d3-8761-efa17633d761", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.15.23']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b56b242e-7148-420a-8faf-c9f062d5bc91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.15.41']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe792501-a31a-42e9-91ed-8e72a97637fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.16.112']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f91454a5-3203-4492-bb27-c315d82c8b1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.16.15']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ff0c74f-8092-4114-af7e-b6827870c35c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.16.177']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1d85607-96dc-44da-8ed7-10fd0fb012a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.16.52']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef9dd716-425d-4413-a4e9-c6293d2e0cb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.17.156']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86af5eb0-d8a1-4fe4-a223-5372d97f2f13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.17.161']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5336cb1f-f99a-4039-8b99-372275e478d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.17.163']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c61d95fd-4c28-4003-8109-22ae6d0ed1af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.17.181']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1765dd2a-1168-4596-828c-2d8783700864", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.17.194']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a7f7508-9237-4621-b429-c60c4fcd589d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.17.216']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52ee17e6-eb1e-4e45-a0ae-72bba80aeb3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.17.61']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70a7c6fa-4f33-44ec-95f6-8d48d570abec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.18.14']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85cfe1f6-4260-4404-9013-9ae533209ebe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.2.110']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4eab57fb-eec8-4d25-9ea1-abafba02dd84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.3.150']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6995077d-7608-48da-8723-53103004874b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.3.29']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91a2f57e-2db7-4e3a-b90b-14c96c4358a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.3.60']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7efd0e29-8add-4559-b3ce-92593de9df0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.4.104']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03707888-4989-4798-b270-85a0950ac94f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.4.143']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63d17853-de11-40a5-807b-b0772823a8c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.4.24']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d93d8a2e-09f2-4a09-bc83-5c1465da5d4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.4.247']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--621d2207-2979-447d-b5a5-ef44fb49fbff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.4.69']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71af2943-41b9-46e2-817e-461aef6370f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.5.114']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2339ccc-1b5d-4e58-9693-1443db1717ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.5.122']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2cfe280-2d41-47b4-9820-d72bf4046dd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.5.132']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5dcb525a-eba5-470c-9276-4e3b400b5bcf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.5.135']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0d6faff-cb80-45c1-a724-3de2ce53a697", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.5.164']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1596a08-87dd-4682-b3fa-b2aa3b1af25e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.5.21']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d671af8c-85ac-47ce-9233-3d6796f6219e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.5.244']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1206c955-4f44-4cc7-8d56-e8b838007492", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.5.246']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e59f6ef-5394-416d-8542-2e5a51dacacf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.5.249']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c598d78b-496c-4046-b01e-08f4ce32d12a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.5.52']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a86f2af-3d8d-4066-a20f-b7811d134caf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.6.115']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e357e37-e0ab-4a7d-963c-f0e1f98db511", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.6.27']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c760e63a-e972-4cd2-bd91-ece8286fdc7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.6.6']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30337e77-6932-4331-85f3-7cd97c46fbdd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.6.61']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0545839-ff20-45c1-88b5-d4b9b78e19af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.7.102']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06b356fb-a36d-4781-b3f6-50b601259e42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.7.135']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33fe2c9c-d3af-4c38-b121-314b49fcd2a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.7.14']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ab998be-2a48-42e8-9f46-3a61cb74d1cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.7.143']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42e8994a-2cf7-468e-95f8-9da1d0c3e98d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.7.213']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bba6079-4889-4943-886e-e0d6ffaac3b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.7.218']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7c7a836-e10f-44ed-968f-8b4f17135efa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.7.237']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--353ceea2-5682-48aa-abd0-210f1d93317b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.8.131']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--921e0f60-33bd-40ba-a7e1-0becb52cc300", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.8.182']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ca93ff4-a449-46ca-b6b1-45942a0f267d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.8.223']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52402012-b8ac-4d0e-8da5-903f779635e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.8.236']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42c9b90c-59e8-4a69-bce6-11a6e61d2a89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.88.211']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8265c81a-a0e5-45fe-8354-49191dc837a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.9.112']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b37736d-4643-4e81-888d-48620fbc234d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.9.116']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca11377f-716d-4214-9ed1-2b522b8f01a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.9.20']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86adad95-f52b-42fc-890c-729ee6cf8392", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.9.247']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01edbd95-2011-4310-a7de-b859f285c4b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.9.34']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee0492ed-2837-4e08-9c99-0b6496812742", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.9.35']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac99d577-6b7c-4990-8903-15f8e46a26d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.9.76']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2dbd4ac-82b7-41cc-9e92-b36321fec780", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.9.90']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a26e0fd8-8f53-4d66-a11b-9fb9fdbebbb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.90.130']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43fda288-e8a1-4a9a-b8e3-def7f2b91327", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.217.123.179']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5f696f8-b1f2-4610-ab79-2a94173893bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.219.11.123']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6167cd8e-764a-4908-91ae-9f02e12e7c70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.219.125.155']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4afe1791-d8e0-448c-8369-7237ec2186b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.219.142.223']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0659b127-c4da-4db2-a3aa-a81e1a12b927", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.219.209.112']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7389dd67-ccf6-40ce-93af-79da1dae04ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.219.219.158']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--820cd85e-f8a1-4e35-9226-7a3454b971b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.219.223.160']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fbc0c28-6624-4584-9030-32298e53875d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.219.236.6']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad3e208d-4c81-45dc-a4b6-6219dbf25bcf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.219.237.46']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a6f2b37-cdfd-4fef-9c80-20ce302e3ba8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.219.255.177']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbc28b3e-0b7c-4161-bc90-428c8b1d1af0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.219.51.184']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aefc7009-23a5-40e4-9ba2-bc2e04ebe6a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.219.76.182']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--402e4d6c-f4a2-4fee-ac0f-a49d5cb559ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.219.79.215']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--822af352-bbc6-43d0-970b-a70c49dac47c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.221.136.6']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f317aa87-8607-44c0-b48c-aba6f1ec1419", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.222.149.241']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5165f87-e195-449d-b9c2-389b070aaf1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.222.154.180']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8ef4984-aad6-417d-9905-e63f9759bc89", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.222.187.219']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cbbf198-dd08-4142-9cbe-8a6804d5cfb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.222.230.46']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8895276-8d04-495a-b1f3-1d0a93b53767", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.228.28.150']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fe9d843-5bc8-439a-85a9-661dadf2b801", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.229.71.217']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4ef8189-1921-4771-b2fe-8a33590f5bd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.231.152.235']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--396e808f-096d-4c7e-8090-d8aeb463a800", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.231.160.185']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c3adb3d-1bf0-478d-ae7a-08e99663a694", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.231.211.146']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9eb3e0f-f3d1-4777-b93f-b4e4899bf4ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.39.235.79']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65ac29c3-fb79-4d8d-92eb-da47221f47c8", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.151.14.195']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdeeecab-adea-4b2d-a957-d3d159b9b804", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.179.17.52']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ef0049b-5ab2-4dfd-978d-b81e0ea51158", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.187.70.77']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54866c13-23ef-4f4d-9bc7-3c03c12600ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.220.178.85']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb436373-31bc-471c-9bcd-ae4dc726d939", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.244.95.82']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e2fac7b-70ce-4257-a97e-1f27c0660808", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.249.150.234']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d09ca685-79d7-4ae4-baf8-0e1f2e745c39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.249.180.57']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9858bb4d-19df-4d23-96ef-f260b0b4fc60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.66.66.31']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36d473f0-e73b-4d63-a850-0d94af5a6b74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.66.72.211']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bfd9771-a0ee-4d03-8579-61cc7c7ba926", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.66.83.43']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61070d54-65d9-4d28-8f4a-9841336ac937", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.66.83.80']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3fb332f-c4d2-4b49-b3f5-638143861a19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.66.85.226']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2969c25d-5a8e-4e87-b01c-1dbcc344b3ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.82.77.139']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec2543e4-bb8d-4ff9-9b28-0c3205b3c116", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.82.77.202']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e71a58c9-764a-4dd4-b532-6a60d03a787a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.82.77.33']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1736889-8073-4f17-9e7b-bf788807c189", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.82.77.48']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef101ffa-cb5b-4465-9453-284c5c0aa737", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.85.84.75']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4cfeba6-2610-4967-9418-4485aa418053", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.93.60.126']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0750becd-fa6a-46bc-891f-3ce6b9fafd9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.130']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55bcd84e-5a6e-4e15-9ea6-3e3e7ab0a98a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.164']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c5f95d2-f912-4c90-8736-7ca1f38adf13", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.165']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7784f5e-dce4-464d-b275-486bb978e44c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.166']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f22bf7a-9368-41cb-b78d-d1e7e29ff356", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.167']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--131e29ef-6b36-49da-ae22-8d9b722967b3", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.168']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54bc06f1-1bbb-44d2-ae4b-ba0d3338f57e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.169']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f99b462-3ef3-4824-ad2e-7cfaad29e101", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.171']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fabdd473-dbea-4264-b3dc-4f33daf4da9b", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.177']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9ab55aa-c738-4612-8d95-c8b641fc000f", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.178']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83ba050b-00eb-4cb6-86ae-6f6afa555ff8", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.186']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34485892-5e7c-4fe7-943a-f7bfa481098d", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.187']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f681c3a0-5917-415d-bd36-922b775bac4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.71']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0e10eb5-1345-4096-a2cd-7b9d33bfb6c1", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.93.54']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--217a69de-31d1-4358-b4b9-f78cc0085512", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.95.211']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2842ea33-b4a1-43aa-af77-61be4a2421a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.95.221']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b15c18dd-8c9e-4448-a910-5175cc77d852", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.95.83']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c46b13a-829c-4427-ae59-44ec146c6317", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.97.44.44']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3045414e-ba58-427a-9b71-aea1731948d2", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.10.24.38']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa82cc2d-950b-49d8-89bb-6662cc0ecf4b", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.12.63.174']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8feeddb-e05f-44af-acbd-1a75f2789706", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.161.239.14']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50b499fd-b9e8-4d64-b163-f1e196f2e4fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.161.239.19']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2dce9b58-c519-4e3b-a072-613918c24260", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.167.26.57']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e11561b1-cc80-469f-bb77-c29bc0536651", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.169.154.173']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47d7c1fd-ed9d-4dd5-8f14-025763fbfcc6", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.70.2.239']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c08dae8a-ec14-498c-8b96-47e34a786395", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.90.28.163']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--497fede2-07f1-4185-8496-f42ecc544d0b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.11.191.193']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e616f490-ef68-48ea-90a8-8c8274be44d8", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.200.235.138']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47176356-de30-4abf-8d7e-ffda9e464b39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.41.208.106']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--532486ca-21fc-4f64-9bf0-1ac9a989e91a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.41.208.107']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a5302d7-7e7b-47be-ab61-d012ee1f1417", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.41.208.112']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de2d382c-4faa-4a90-ae3e-50e58c62d86a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.41.208.12']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--895bb9e5-5e11-4b1f-9a75-107a039998a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.41.208.126']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f2e1901-3daf-44b7-9704-56c6e61ff387", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.41.208.137']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5b00179-0d53-4b2b-900f-eb68886f6a65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.41.208.139']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f487a9a5-d055-453a-80d4-628de7adb263", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.41.208.140']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48061e27-e905-47e3-a6b4-64822358b203", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.41.208.164']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f57a32d-0a18-4498-a45c-56769199797c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.41.208.165']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b275924-ffaa-4f91-9701-6cbcae325b17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.41.208.171']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6858b9d5-73d4-4430-af71-0f5c759c9ecc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.41.208.173']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cc18db8-149b-492f-b170-1cb9d5d70d7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.41.208.181']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc603dd6-d556-4c4e-ab5b-04368e80e1a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.41.208.183']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bccb18a-dafa-4d20-af02-5adcfc035df6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.41.208.19']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7a45a34-8d8e-434f-b1d5-5b0cc002cd76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.41.208.204']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b95d354-42b8-4780-b6d4-f921a2cbfbce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.41.208.223']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a4858ac-c710-452f-b2bb-e56ffd29b64c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.41.208.230']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3089609-6b4b-4692-b585-2dbafe7cdbe0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.41.208.247']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b307d910-bc52-4730-8adb-645f46d1aa68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.41.208.28']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bc36569-f270-4261-bf37-4b2d856e1397", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.41.208.36']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1d8998c-3ddd-44e7-baef-1c31e7e114dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.41.208.50']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c022c067-2533-45b6-b94f-09acb6f5bf19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.41.208.61']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17aa387f-9363-4a2b-a79b-93aca2451233", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.41.208.71']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--797eda64-01a3-4577-ae44-c138e6c41fd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.41.208.91']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cab5d525-1b47-4d83-932b-1559a3141a78", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.51.158.253']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13c46c9b-bf66-44f4-80de-58629d5a29a9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.73.101.221']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b2ec1fb-11c2-45d6-87fa-54d33dde6b60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.209.138']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfa20f75-aeca-4213-a323-ddcfc5103f6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.209.206']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5da611c-0018-44ae-97e5-c91aa8ba1419", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.209.244']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca1fd143-183f-42d5-8d80-1b3953d33073", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.209.46']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca3b33ec-5d88-4b69-9b62-9b3d963ffa9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.168.106.26']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5912d4d-3121-4e25-8fd2-4fd4365ff517", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.168.110.175']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e90b761-4d26-4bfe-aa0b-32dc0ebcf361", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.168.110.24']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e6898aa-908b-4bdd-a4fc-4f879c39aeb0", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.235.16.111']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2daf71f-3605-413d-8c74-8a0cdbf0d3d5", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.31.188.133']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--860cf92b-396f-4b16-bc9e-7978d749b828", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.0.241.216']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b8082b5-53e0-4a24-b43b-4a3fa54d6c67", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.247.136.96']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3ff96ee-ce77-45f3-95da-8c2bc1f43ec8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.247.142.62']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35a0bb73-4f84-40b1-97ca-9258a477d203", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.247.188.152']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7630246b-50d2-40e9-9017-c0b682188360", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.54.3.194']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b17701ff-23cf-4e6e-b9c3-9bff9a2a9144", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.6.37.37']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2a71da7-f4c6-4697-88b9-a214fcbb02bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.105.248.25']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38e24489-592a-4b6f-8044-91ef3c957a1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.11.167.11']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d896f535-79e9-42c7-bf3e-b10e4e2cd322", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.11.167.130']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9092a28-1411-457f-9400-a4ce0f114362", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.11.167.7']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85ec70ad-b758-4c57-b27e-6f2ad6fb7024", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.112.201.196']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c47ca63-6d25-47e2-a345-48b0eea74f79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.117.239.172']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13fe4b89-56de-4553-b751-9da775154fb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.121.120.155']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6923ff3-c8d8-4253-85c5-038dd6cbad63", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.137.91.53']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47ec51d6-c916-4c3e-80cd-96f751af147f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.137.92.113']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40f9f86e-3d75-421c-852b-fe00e38f6c4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.17.179.36']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91a91a29-0065-41e6-acff-2bb4c569d843", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.193']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f8b2aad-9ba4-4a0b-a794-afab26118c4d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.194']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--674ab86b-7c3d-4bc1-87a0-024b23f0058a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.195']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b77eef6-4837-488f-b2f3-6704c1f7ab51", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.196']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d7502a1-3a79-42d5-82bd-176f5b6da2e2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.197']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2aca762f-6865-4974-9c37-8d154e8204ef", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.198']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bf4bcb5-05b6-4d8d-93e6-1f57c10bcd49", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.199']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d08c9d74-5489-48d4-a985-7374e5245d20", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.200']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3aca3a39-d9d8-4efd-82dc-5c41505be1f3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.201']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ceb15ea1-5099-4732-b4fc-2cd3d2f44aaf", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.202']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72327be2-619e-4bec-9111-a74d53139aae", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.203']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37053bd4-134f-4e64-b54c-a958c57af1d1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.204']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9acca2d-26eb-435d-aa36-4d5c7bff1909", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.205']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fccf27b-46b2-4d78-a28e-10d51ccd41f4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.206']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5308e627-a93a-491a-812b-7b178cb145d0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.207']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a233062-6f5d-4615-bb30-905a8b815300", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.208']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61bd81a6-2c35-4caf-93d8-9b0c53001d4c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.209']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10ee9fab-e399-44b7-8f78-101142e3f575", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.210']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34822159-c4db-492e-b8a8-715344678706", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.211']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--720044d8-81f2-44b7-a126-1528033b34bb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.212']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17eb0392-f287-4786-990c-f7f0bc836ac7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.98.16']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b3a1a4d-92b2-49a8-901a-78f911cf31d3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.98.19']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b2be6d8-86e1-4f1a-a0d2-a3f210f558d1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.98.20']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4b9d066-d66f-4df4-932c-12751a36d096", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.98.22']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7914e5f3-821c-45b1-adf0-8c89f9f863e3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.98.23']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--838feac8-6b08-4a09-afb2-9b5608880ee8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.98.29']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--beef8f98-81b4-46ea-9822-af98b623e499", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.98.31']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18417660-a52d-453e-8d70-1d8c8078eeed", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.215.107.193']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df3ce86f-e93b-4b85-a8f4-df5b46f6007a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.215.181.244']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d29b043b-7ad7-4a76-b383-d3ac6c868d83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.1']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e96807fd-db54-41b0-884a-8d82967f6636", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.10']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97c89336-d553-46c2-aa32-9904c34fdd77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.11']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--186b5557-504b-4b55-9c00-e056c0427c01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.12']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c28749c-852d-4975-84b9-45b0f185fcd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.13']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41d762e5-0e49-442c-a422-221719409112", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.15']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4548c157-1fb9-4cd9-9a56-46ce95dcd39f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.16']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70918c9e-9f5d-4356-9a12-51b38d6d7022", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.18']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e9db74f-c926-4bc1-8da2-0ec523efbca5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.19']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7205ab4f-a301-4720-aba3-83784c19c189", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.2']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3d96e15-0a63-4f9c-aa11-afe496bd71fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.20']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0090adac-c2d0-4015-86e1-13f597b7c30b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.22']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5351d7c6-464a-4b02-92e8-4bda18bddc8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.23']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55e7470e-c651-4a30-8e4d-a6f598960819", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.24']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86c82c08-401a-4909-9f3a-8bdb6c491eb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.25']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--525771bc-3372-4d67-939f-d986bc2bebbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.26']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9ee4ec0-e627-4e22-9245-f1c4b66c7b22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.27']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08faf0db-a39d-48a0-b749-e1e882668a68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.28']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04003fe4-27e6-4adb-b18c-e0906190609d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.29']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27be14d0-92f4-438e-9bb9-2b8b2024f36b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.3']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba8a2f9d-4592-43b2-aa53-ea6c49ea6dc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.30']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b6098af-b8e7-4d53-bf25-b172de2be70f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.31']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d19309d-2464-4191-8604-e713eea62eb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.32']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6b30175-65a6-48b5-ae88-ad313ececd71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.33']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1171e94-78f0-44fb-a47d-ad367f82fd91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.34']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a05f24f7-5105-4c2b-9f4f-befec8e8cefb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.35']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f43e5a91-8728-4fd6-9a05-d9944185ca7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.36']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--214fd37e-63d3-442f-b869-7dde95fbc686", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.37']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--866e1764-54bc-483b-ad48-77ef7dcbfa6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.38']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d35ea6e2-8a61-4d9a-a7c9-40431d13c6e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.39']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--910be005-6fbc-4bc3-a931-c6aee46d2ecc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.4']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48a508d6-0908-45ff-b9ec-0a315cd6fa72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.40']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75f70ed8-db25-4f6d-a02b-aa007aa97587", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.41']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfee68fd-dbd6-45e5-96f1-17800945d7e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.42']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e609b329-f267-451b-8eec-da78e1b09424", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.43']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74ad5f4d-e97c-41de-b55b-73e5a6f51cd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.44']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--894159a6-0922-46f3-8c66-ef5170bb4745", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.45']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4846ca2f-4552-421d-8f2d-33bdd3b02943", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.46']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e873e73-ee4b-479c-8e00-42d758222825", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.47']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95b5a080-b8fa-46f9-983e-19b0dead6dde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.48']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54481791-74a0-4d10-b2d6-3d5494e214d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.49']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63f62314-1b0d-40f0-a0f1-c8f24175485f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.5']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--727060bf-f5b4-4d0f-92a8-9a0458983ba0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.50']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82222a18-8330-449f-975a-b911e1cea96e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.51']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69a30a2f-6b9f-4e1c-86c6-218aaf4f5f6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.52']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9aeed89-a453-4bba-bd6d-5d23f1b022f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.53']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96bd92e7-bd6f-4ac7-989c-879b858eaaa4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.6']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2eaabc66-8c18-42ac-857b-7cbf5ea9b211", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.7']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc6748fe-9894-4f61-8918-6a966ac3c1ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.8']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12b81da1-b6f1-4329-856c-3cdc26e3a41f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.9']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8ff494d-f091-4bc4-8e0f-314d8dd0faa2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.0']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6355a162-974f-4880-9918-ee4fab6838f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.1']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15701c2b-807f-4df1-962c-33f2f3dd2bcf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.10']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff3d58d1-c866-4c11-aa38-f74dcada2081", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.11']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3caf41d-e0f4-464b-afcc-0490b9f39658", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.12']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--993a81b6-f988-41a3-b0cc-5415a97fad5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.13']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79f456ee-25b0-43ab-b0bd-ffec81bcbddb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.14']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6206daf5-8be1-479b-ae6f-102f7228e922", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.15']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c671525-4c68-4e36-b276-f2cd02a9f4a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.16']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--969909a1-70f0-49ed-98ea-c893f2f85e72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.17']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6670bb3-87db-4ad3-adfe-bbbb9a46a8e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.18']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b61b1b05-c119-45d4-8d6d-2571ecd093bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.19']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c82f701a-2cb8-437b-bb4a-e29f7a7ddc6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.2']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81deda99-1434-4c09-87e8-d4e791608390", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.20']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6225974-a4d1-4c3a-96c4-af638a5f19ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.21']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c14d915-12b2-486f-b5b3-22150414c976", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.22']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21fdbb89-bcc4-4e3d-83e4-2ef08eea3193", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.23']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8835365b-d07c-4655-8058-a33912481b2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.24']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d67f4e2b-7a88-415c-87ec-f8d76e63777d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.25']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--504f2057-67cf-4274-af53-52f96a1b6536", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.26']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3145553b-dd42-47b8-a82f-521623f129fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.27']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19df2865-964e-45c1-be19-4fd22dccc0ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.28']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ff5f5dd-531b-43ec-9087-93565c953a28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.29']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cb1aa8e-1ee7-4ca3-8154-689755e7b9ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.3']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0584f5d-62c6-4c1d-b05e-e26a047d478d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.30']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--574f3863-6381-44a4-8d52-98f5e196b677", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.31']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbd029f0-1f3b-4289-8c06-7d48b8be2c66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.32']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4932920-7a13-496d-8701-3a3c8dc87453", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.33']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9da5836f-9fa6-45ca-9e59-522abafcafa8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.34']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--740cc280-875c-469c-b83c-7ec56a46f8a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.35']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b20bf5ea-c8d4-48d7-b527-8c716336020d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.36']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a76f9129-198d-4aea-9eb0-46d8c3e0fb94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.38']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d37f9cf6-8aa0-4186-b508-4f5ebbd2a538", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.39']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdd1c8cb-1853-4704-8288-8d8fb2023c18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.4']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9adb993-c688-44e2-a516-5acbe6a85694", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.40']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09f828ee-0a81-424d-8961-a5121f043efd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.41']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e52874ea-ff4c-4d93-b517-e5874ec3a0ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.42']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ce4d219-f713-4abf-84e0-4d5009a568cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.43']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--febacca1-f839-4cc1-9626-5dea2f5593fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.44']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--125f8433-b6d9-4a14-b1a1-d45615effbe9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.45']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49e71e96-3eed-4493-a8ae-294ba26d1802", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.46']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--339b5337-2db7-449b-9490-0837467ca41b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.47']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--927cf111-52df-4c84-9a6f-d3a0f1dc3d18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.48']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ce96266-857e-45c9-8545-9dda6249a16a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.49']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--243797af-2710-4243-9a5a-36d920243294", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.5']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--287b2f15-f3cf-4bcd-bc2f-87ac63d4dde4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.50']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72e8bf4f-a60f-45e3-bb34-1e956712323f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.51']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4921764f-8e83-4dd3-b230-00a83d11b97f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.52']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2f836b1-9d57-4751-8f73-a84c61164c50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.53']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20a19cc8-b565-43b9-aca8-702444751c30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.54']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b2c6a14-3626-46ca-8f1c-e3067ddb28f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.55']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9720f56-7cbb-4e35-a11d-c6799bd3f1f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.56']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a055293b-f406-4bdb-82fd-05221955a976", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.57']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a05b73fb-e378-47c5-8e45-0dc4053639c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.58']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80ad427b-b541-4a05-8a23-390579017237", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.59']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15a02ffa-ffe0-43c1-8c36-52291a18b547", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.6']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfcb466f-3d3a-4adf-bfc2-5295a519f50d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.60']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf37bc6a-627b-4254-8e57-3cb32cb3502b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.61']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7db86515-f37e-4c3e-a286-5521e6e1f40b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.62']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1229160e-a780-4f2c-98da-ce16f9d15c47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.63']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90767bb4-8818-43c0-9115-f6660076b7cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.64']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41622531-a1fb-4268-b103-71a1a9e75c17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.65']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f77be234-792c-4c73-b725-913e7c02cfcd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.66']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afe9bf41-7de5-403e-882b-8917a2b009ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.67']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34fe6283-61ca-4ef7-b23a-ccb3c740faeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.68']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce8ff282-43f4-4970-ab00-fbbffe24a881", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.69']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cc56778-d145-42f9-acd6-c333089cc822", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.7']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e77d7068-9d71-4897-b07c-90a3e979f510", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.70']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e6df5be-65e0-4bdf-835c-71914142d9bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.71']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3308ff8c-0d46-4983-9845-79c4b35c59e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.72']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88c8240d-7968-44f2-84d0-a52735eaf9b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.73']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36ffe404-922b-4377-ac1f-a1dba7caf10e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.74']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af7f5f93-9e71-4497-be2b-7203c6eb4c87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.8']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3333bb7-8e37-4d5e-8915-bb1d9ff65648", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.9']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e341fdc-b199-4bff-9f3e-8ab20f147ed9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.161.80']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--691cb3a2-ef49-4976-b1be-dd914a87944e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.239.151.51']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--679d1871-7f28-47fc-b72c-7609d4109a87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.239.155.220']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8da22a75-180b-4f44-bebe-263dba57ab19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.239.239.57']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e507280c-b3b6-4b1d-aae7-7187e3de50a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.239.244.223']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d622601-4b80-4189-9438-66353802d406", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.249.7.100']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f2e8ab3-91ee-4a72-969c-af3898ff77d4", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.56.210.6']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6f12cde-05a5-4593-ab7e-07bb87d6eb16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.62.115.218']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae5d7cc2-2a52-46fd-a04c-5a5e6dd2da11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.90.246.159']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--489beb5c-258b-43ab-82fb-0f36bb86c583", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.111.176.100']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9ad1951-a278-4628-8311-1ca9851348a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.111.187.169']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee6999db-692d-4e5a-b78f-419aeb2acb57", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.221.69.102']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33a33797-0148-4abc-84b7-657cb71045b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.25.235']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f31d981-1162-4e3e-8096-120de3f37698", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.31.32']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55529b47-28da-4ca2-929f-989455cf2d35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.31.34']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aef66e5a-7123-478f-ac17-0c04b8f626c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.31.36']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cce94883-512b-4fa4-8e71-210cc286b612", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.31.38']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cbb3121-b3a2-4924-97a3-88b055788c14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.31.40']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8519cfa7-bc3b-44d4-a9ee-8525e487e35f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.31.44']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9854f53-abbf-480a-9aa1-d86447c82154", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.106.218.222']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d45018a-0a46-4bf4-9438-c22844e27f16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.106.255.14']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5baaa11-e86c-4bb6-bf9e-b17539b16346", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.107.102.249']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b4434e0-87a5-4682-9e8f-5382065de19b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.120.104.75']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdadc513-530f-4511-a0b1-5bafe0e8832c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.121.69.138']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d249feb0-9160-431e-8749-ebbeed1c5a9a", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.124.70.51']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c24a1890-a944-4957-be1e-f807452e0fb3", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.156.176.191']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--deb9446e-bc9f-486d-8476-c7c32e41eb36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.192.238.74']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f96cbc75-a246-4dd9-b1a6-9d36840ed680", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.236.176.187']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92f7f05c-921e-4a7d-aa4a-91f6ee17c4a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.236.176.243']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--101f4975-3d3c-4ff9-872a-e04d3b8e1b02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.251.64.155']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc7449ce-0d86-4262-8fda-1ddfed2643a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.251.64.156']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96a0fd19-e283-4651-9a83-ac89803dff43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.251.64.157']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d420c1b-d83e-495b-aa48-41e0f0eeeae1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.251.64.158']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61c227a1-6c3f-4941-acc4-382d877e0db3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.251.79.125']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--349c102a-9ca1-49d0-91a2-3c996a6a786b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.210.63.69']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8290072-9e9e-435f-8a5d-6ccbd86a1745", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.214.24.117']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99a6c8eb-8d2f-44ba-a235-809a9e84cc60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.214.25.121']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96cc41a5-5f92-4f50-b0dc-68785463c535", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.214.25.123']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2920424d-53e5-47ba-80d4-38822a1f4c73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.214.25.125']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71028e3c-6b42-4563-b9a0-05344468338e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.214.26.142']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab75191f-8026-4704-b660-23e7356b6b5c", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.247.157.100']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--839ac51e-7f2c-4b1c-9a50-a167ea098d34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.254.6.173']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bf7d8b5-55b5-47fd-bc34-03671eea6c87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.80.189.24']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4b7b4f2-28be-4350-9322-9f3536c6215b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.117.18.7']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e3dd6fe-a026-4715-a71b-a941e37506d2", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.167.56.16']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77ef506e-0780-4957-9b5e-23881ffc9cec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.190.156.12']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--058078a3-6103-4e98-a332-94d747b0a2c0", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.190.159.181']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfaa4c06-b41b-46ac-be58-d5ce45aa7f14", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.130.95']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07c5985e-b4b4-43fe-8806-c66fc38732c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.223.69.22']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57352b86-b215-4317-ba50-13700510e986", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.23.113.208']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ac60bda-7963-4f4f-9d95-93f40d166903", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.248.163.200']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f2b133f-a85a-4294-acdc-ad0c9e31cdd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.248.167.131']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9280bc80-f05e-465b-bbab-0b4c0d89fdc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.248.168.36']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3be1e3fc-c0db-4460-b9d7-b866863a6dae", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.252.157.42']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5202a7ab-8aa6-49d3-9a9a-97b7fabe3d3e", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.44.32.243']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f66f6302-d546-4883-910e-7d5dd7a1fd9a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.47.53.19']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e739eacb-7dc4-49e6-a4d1-f32ab057384f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '9.234.10.188']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dfe271e-b0f1-49c2-8f85-1e58f961fc24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '9.234.10.190']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e8dd744-432e-4796-ae92-0b7c2863bb87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '9.234.8.125']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--912dcc38-35ff-4b2b-b1e2-50c0dbdab500", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '9.234.8.52']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e261ce8-5873-43d8-84e2-2d6eb5cedc4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '90.151.171.109']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a47bfbb6-3cc6-45e2-a87e-9ded8ad0d35b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '90.2.36.177']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a536b0c-3ecd-44fd-816b-f4c498b8617b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '90.252.102.27']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16fcd48e-8039-4055-b447-8038156457dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.148.190.150']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73e4699c-42da-4f25-9db8-37f05b79e6fe", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.151.95.154']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46935ed7-1830-4986-abe7-b3c1f4dff02f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.191.209.118']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b892e90-5633-466b-910b-8836023279c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.191.209.198']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5af0c5eb-af44-48b7-9b55-dd00ac122517", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.191.209.46']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f53671b-b197-4824-8dcc-6b6e446780a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.191.209.74']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33f842c0-ed53-441a-915e-7dd6904260a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.191.209.98']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1edfb35-0e52-46f5-9657-9f4d94736590", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.0']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fac467c0-28f2-49f6-a681-f08ef2a324f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.101']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af148c1e-401c-4fe6-b5a7-cccbaf4a7b8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.106']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--842fe6cc-fa86-4138-b5b0-e768e986e5c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.109']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d9cc7b4-3848-41e0-884f-5c4326bdc246", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.11']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ebb48f9-7ae8-437f-a54e-1fc8ddd227b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.114']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bedef17a-0909-46b0-b1db-d0230c910e06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.117']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--623f0624-3a3c-4f13-b70f-ce8004b49838", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.121']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a30cc84b-6cb8-4df8-90d0-ad06559d461b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.123']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03538964-a622-4589-a4f0-d73a10d0f1a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.125']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84c60c57-5d68-42f9-9ca2-c3ab0f48a559", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.127']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83e276a6-8567-4e6a-a43a-6168bcf9331d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.177']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4d0726b-9c8f-4d2e-8864-c337c69d316c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.179']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f251d286-a99d-4717-ac7d-a948850c6509", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.180']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1859cda5-1e0c-424b-a96b-e0e253814d72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.181']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df699f62-750e-40c9-a26b-5703a27353f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.183']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca889dde-6c0e-40aa-a194-7f3a89836797", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.185']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0532b64-c5cb-4e53-8a8c-9a460a6e790c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.187']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec2e09f3-d0c3-4ef9-a4bf-a7d2422a4683", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.189']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70dc3912-e239-41a7-8708-1c71f4a83800", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.19']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d6efb04-eb14-486c-8c84-c339788922c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.191']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec621cd4-e8ea-4343-affd-a19854b918d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.209']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d68dec4-c424-41ce-b165-6e1f446fc9a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.211']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0a82a0c-c2fc-4478-806d-66a7efaaccbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.213']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--697a3052-3544-47ae-92e3-911ff8231237", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.215']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--149a9bbb-d0b9-43d9-b47d-ba0d9e2c474e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.217']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d0e3632-a94a-4561-91cc-69dc98604c1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.219']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdf9cf63-6e81-4c58-a05e-e95bf4bcfe30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.221']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee613375-e5d9-4df3-b850-70ecc87ef4ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.223']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a67982c5-82ca-49c1-94eb-3556cdd11141", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.27']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7ef7809-2d32-4447-9004-a62160961f92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.3']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc0203be-1b59-4944-9a67-cc52f49664fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.33']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e8c0aaa-3ae5-4597-98dc-f576cf62ef6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.35']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25ed0776-e87d-4326-9ac1-c38a2b7c572c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.37']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad4bfb46-df56-4504-9fdb-d22475f14b3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.39']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4eb2bfca-4dad-478e-9c1f-967db21d042c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.90']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--015cd32e-37c7-4e78-baf6-0e9200f7fdc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.93']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3b82d27-b179-4e88-bd56-de774523394d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.98']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--befc1d7c-be71-4ab4-b2e4-25952c04a542", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.199.236.33']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0aaeabf2-5aef-445e-b45f-bda063683323", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.205.131.255']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54fd7d86-c9a2-4559-a666-281b61eaec34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.208.184.122']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6756eaf5-301e-482e-9c7f-08d8d9520649", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.208.184.128']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f635608-242e-42c9-a09b-4bcb2e5d47c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.215.85.193']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38c12042-1647-4cf8-af22-a66b343c342a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.218.66.198']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a9cc863-025d-4479-bc1f-85b2d0d3799f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.218.66.47']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0b1273d-e965-46d9-9e20-db26efd450aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.6.108']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2fdf6c3-2548-46f0-bcda-dc2836908573", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.224.92.147']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e403c43-ae97-41c9-8c0e-aaeecbcc4dcd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.1']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df9b0943-cfc3-429c-8101-7b5be5896d1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.107']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1bb3758-569e-4556-8489-99d307d522bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.11']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a870caa3-605a-4080-ad25-6218185c214b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.121']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c82ae77c-52fe-45b7-85e2-b0908ee67523", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.123']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22ec9197-18ea-4274-835c-d20602fa03ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.125']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b535a013-b561-4d85-b662-74917a56ca99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.127']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51bce739-5384-44e1-9363-acdaf71363bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.129']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--118ae7ae-c59c-4cdb-be05-9c7aa184ead9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.13']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc3b59aa-61c3-43c6-aa56-743a47f3c9ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.131']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2df9775a-698f-40cc-9574-40ccc4e31ee6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.133']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00de58b3-88be-4185-b9c8-018e54de1942", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.135']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--335c7763-571c-4fc8-903c-220875474729", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.137']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff9e1500-4e92-4291-9c4d-73ec50519863", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.139']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41ec6a30-68db-430c-9304-6a2b6c4e78c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.141']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf95cbf0-5ea7-41cc-b4ed-8b47220d4f2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.143']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0913c43c-c624-4adf-97ec-c9ed58cce285", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.146']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b230453-f3fa-4c4c-a64c-97a3505e31ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.149']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1a94fcc-10e9-4202-8b4e-5cc2c7949ac4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.15']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d6c50af-8206-4f38-b7bd-c4e60ae251e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.150']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8b07b10-2135-4807-a319-f44e74b7e348", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.163']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a051222a-e50f-4645-8752-ceeccd972fbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.17']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--829c16e9-de1a-4f46-9fe4-f09e4ca747e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.170']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b96930ef-e2fe-4107-9fbb-aab4d6ad8c38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.173']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e210fd2f-fe77-4323-be56-c4240a99028a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.178']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5336f788-4825-4fd1-ac93-aec24aa6e092", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.181']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cccdaeb9-e538-4697-a402-0106811098a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.185']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3a2b027-336f-4842-ad1f-b1b62677065c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.187']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74b6921d-da07-49fe-b133-6dbbfde149bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.189']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1282ec74-becd-491c-9c1a-1ffa267673dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.19']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec21d01d-40ac-40c2-8a26-01c7b9f8d0f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.191']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba0be273-b6f4-46f6-a943-cfb8fff0f0e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.195']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3e39666-316b-4d44-ad4a-5a591644e774", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.202']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--098230bb-eb8d-495a-a3ae-85d89f9d0e09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.205']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12852b41-cbc8-4b99-acc4-9a0b68720468", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.209']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36dff748-8fb6-4d15-b810-6a59ce7a0300", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.21']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5338a233-86f5-4af4-afeb-9adc69a8531f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.211']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c098b9b8-307c-4d17-8c49-bd2bd6112be6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.213']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6883859-d111-4d72-8e9d-5d7b82d87218", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.215']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35e1190f-a448-481f-b48a-4aee5c4afde8", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.216']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7a6fb9c-56cb-4b58-aded-25b457e07f9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.226']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ecb2ef9-57be-4977-aa96-29bfb50b57fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.229']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37a7c9d1-a2da-4d8e-b858-0807d286833b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.23']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5443593b-38c8-4d86-b35d-570c69c8feb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.233']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--520eb415-3ba2-4560-bc9c-acec31a3e564", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.235']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57f5a61b-fb67-4fd9-af24-0c35869bee17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.237']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f0d88de-71f5-4b64-b676-c6622d106cdc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.239']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ac32d96-ed85-491d-85f5-165bfe423f10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.242']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29943cd9-f959-440e-9f55-fa36ff68592d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.245']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd15e89a-aac5-4ecb-a6ff-876b0c4fc732", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.249']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ac201a0-9f9e-4c91-ba34-4a688f189fc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.25']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--078fe487-af69-42cb-9d77-9632a78964d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.251']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da251a8f-39cc-4121-b89e-bee729211c1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.253']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65b2afe3-86c7-469f-825b-56d218839593", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.255']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe1b9e6b-7528-4e69-8248-e16b8dde59a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.27']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad76ef07-d7a0-4e72-bbdf-8303080dde5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.29']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c57991c-e67f-4ec0-8cb7-dfa913c76898", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.3']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8a6443c-2c90-4297-8f48-850969510890", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.31']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee4756b6-93f7-45c9-bbfa-926abb051f2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.34']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c49a18e8-03ef-4e77-9537-72f2e58425d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.37']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6d798a1-9d2a-4cd6-b304-804baa662011", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.5']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b93a2b49-b22d-4bfb-a2fc-f8a7f2a62873", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.67']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73783abb-9bc0-4715-a2a1-67344cf18354", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.68']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ac77cd9-c83c-4871-9ca7-bebec135de57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.7']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b489dcf0-0866-48f4-926b-333c0d289e05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.75']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4253e637-5196-43b3-981c-e0e3e32aa7a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.83']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4db2f71e-15fe-451d-8a12-42dff3ceeb0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.89']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6b7d6bb-aef5-494b-a313-f4fa877a61bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.9']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41247bf8-1afc-4b29-94a3-d733b2aa8644", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.91']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf1d4172-7fcf-48b9-b170-4e248945c512", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.93']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a2b9388-a30e-4f66-9b6e-3e18153f3d68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.95']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf1d6097-7bac-42b8-ab4c-ad4bfff4851e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.99']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a37a740-b191-42d3-a28d-d10ff0198427", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.1']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbe69a0f-4da9-48fd-87a8-5b8aa54216f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.105']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00a8ed8d-3484-4539-93ed-3f5beaa35f0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.107']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12cce2e3-4194-4dab-aa93-8463717addb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.109']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bc2203e-df7e-42b0-b54a-1fbdda2ec674", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.11']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03a04292-1ce4-4a78-9c02-09f4643ec850", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.111']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14e836cc-abf5-41e3-bec8-1fed634b7ec9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.113']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ff3ff10-0beb-45f3-a151-1f5467f7a1da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.115']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b9e3ce2-f2ab-4dfa-aafc-bf3e9871d29d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.117']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--491075ba-44ae-405e-b5f3-6dd8d8e374b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.119']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--855120dd-61d9-4746-9995-6f3aaf06e3ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.129']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d22e728-1a05-49d9-8b4c-fb3dfc38c8a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.13']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59065a35-bb95-46bc-af0a-7248a4d1f73a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.131']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de93da1b-b714-4173-a1b1-ea60e65c89fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.132']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--253f5b05-20e3-4bc5-be00-14d013004047", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.133']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6deced33-a778-4d52-baa5-1423a6167312", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.135']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5242c35d-b73d-45dd-99c3-ca435b952d37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.137']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02b942d9-b3df-4147-87ce-b7183208060f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.139']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cd42a3f-af69-4bce-9734-d3bc154ed6b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.141']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a88aa09-104a-483a-8f2d-622764886f41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.143']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a60f5c68-055d-4e11-bbd7-ba1a163d24a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.145']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18abba69-5ebc-4ed3-aabd-a819da130b1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.147']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d77a97e-c628-40f0-9f2b-7587ef147d7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.148']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d5441a1-a826-4d3b-9afc-f22c4707f6dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.149']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4673224-21b6-44ed-8c1e-1c025055249e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.15']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63be8df0-c72a-4c90-8c0a-aa05e312ccc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.151']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc13c350-ea3d-4d34-8a2b-3e24156777e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.153']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98b6370a-d3d5-4e57-b146-7ecf3a71d336", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.155']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fb0487d-a404-412e-bd2f-2b4fcc8b7257", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.157']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe0b27e9-f083-42c8-97bd-6a2f039cfad9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.159']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca07190f-a6b4-40ca-9f67-513b6a4dda49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.169']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--697c2b03-81c0-475d-a454-db6263f118e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.171']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a284f016-0c0d-4859-90f8-37589e5d709e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.173']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89341883-cfbf-48c8-b93c-f6e4ea96c5fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.175']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9168004a-557e-45a1-95bc-d885c8fb11f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.178']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8742075-b0fb-4b3b-b510-33a1647ab387", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.181']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48629b74-6ca7-4c6a-9a6f-57ba2ef8a173", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.187']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b6df4b4-7d9d-4665-b354-65676b725f67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.194']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be2aa1a0-9bc1-4aa4-afda-846e943b16ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.197']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79f245bc-de6e-4f3f-bc59-1fb7452f2efa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.201']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15b3ae75-be8a-43b6-a90f-893c1b8e3a9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.203']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--137d1ad1-8ee8-43e2-8eb7-024fae0b5d7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.205']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd1c5b42-92ff-4d39-af01-6dc22cbd44e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.207']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c5bb761-b095-4461-911a-60682a772884", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.209']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d36b86b3-b166-43f4-94df-0e502b5ba511", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.211']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65285c50-e482-4f54-9ee2-1e0f174aeccd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.213']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f067ba7e-eba6-4407-8484-d885e862a2fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.215']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0fa6f11-1272-4df8-8e21-1e848bb4716e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.218']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6eb9419-beb6-473b-9f4e-c31efabbc021", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.221']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2696f978-045d-4bca-844d-3e7a209b136d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.222']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e272f336-d5f1-497b-9bc9-145c682e641c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.223']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--675bfbbc-fea8-4e31-b7a9-03cdb5687b50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.225']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d69eb63-74ab-40e3-8e08-2020961710de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.227']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f289a57-8763-4c5d-871a-5493c951ea66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.229']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af7dc48a-bde9-46e2-82d9-53e3f3d90dcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.231']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--552f18d5-9dfe-43bd-b2f0-923c6234ce3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.233']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84ac00a0-373a-4b9f-b4c1-1985f9fd6131", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.235']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a02b863a-7323-4349-84c0-8e195a85b610", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.237']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90b057e0-eaf4-4969-8b9e-e74c1a551126", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.239']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adb73a48-8929-44b6-bf6f-2b165c773227", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.241']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--645a6758-a4be-47f8-8f4b-8167c475f981", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.243']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be79947a-e3c2-4c99-94fa-cd043118d237", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.245']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f470cad-1bcb-4f9d-8b34-65931d3fd1ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.247']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba401d97-baf8-4d5c-b040-1ff822607c92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.249']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74526509-c5d9-4071-8580-c6903e474031", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.251']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4195a319-577f-48ff-ac8f-6671ece9aa9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.253']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa67f892-0525-4539-af43-367a1ca963e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.255']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85869e4d-51fa-44d8-8b00-40951bc8e42a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.27']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9270f3e1-ea3d-4129-9009-4288309e2e10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.28']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a30ad9d-3e0c-4683-a015-6d78271668aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.3']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--435db09c-25c8-4d3c-a406-dd4e0f3dfb1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.41']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80e539e1-e336-4e35-868b-481d998c924f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.42']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cee98ba-73a9-4b21-870f-2795afa27d36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.45']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43992a78-c93c-4d49-8711-9702e63d90d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.5']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9281cec2-f43c-4859-b6e8-bc5e29d872c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.51']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a835a014-579b-4579-9060-6d85ea271d68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.59']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6eb1235-fc62-42bf-b6a4-5d90fb2cac33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.65']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b01566c-53fc-4d11-a2ca-021d22e09c29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.67']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b1c3ed8-439f-4b39-b5eb-0d341dddae93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.69']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebba4a25-8bee-4e6d-8b26-1627dee267a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.7']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f293a8b9-1513-4a99-bf48-22d51e96f789", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.71']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e932ff6-9c37-4c4e-b97a-fd6f741b37cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.73']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f84d268c-9f33-4c49-9d01-06888834db24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.75']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--953b79d4-2360-4af2-a141-6bdc5a02d30a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.77']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00f86735-7a4c-493d-a3a3-7403115abba7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.79']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f46e581-23ab-4671-a117-f102e2416a84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.81']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3064a2b-af73-4098-9d9d-6173c53d9a19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.83']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52eb2986-d123-425a-ace4-83015d4a17a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.85']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56142787-6d85-4359-afde-f520a72e047a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.87']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee747c4c-0996-485a-9794-3be26c4f6810", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.88']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f6ede3c-a0f9-4a41-a735-f5db0f8707ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.9']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdeff40d-7514-4c11-aa66-c391b962d734", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.181.10']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25940beb-4805-4125-9b45-3e6e68afad5a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.239.206.123']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01adf37c-cab5-4b6b-a7a2-8231ef8fbfb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.246.14.10']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a0b900d-15ae-4104-881d-c9e0c14549f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.241.87']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99d6a9c7-b16d-4e4d-a96d-2550e60b2d95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.243.20']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72036f28-7cde-4ba9-81d8-b6e1b8fd9c57", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.40.11']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3acc46d-8ef5-409a-a310-7ebc1c35c514", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.40.15']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23ed5d80-7212-4070-864a-426436484ee8", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.40.153']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--897daf35-7e13-40f8-a224-a2ee162d0c85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.40.16']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1da8842d-a953-4b05-ab14-3cb4e6c6f9af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.40.17']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e55c043c-a719-43c9-a285-6efc5accf6d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.40.176']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6e35727-8395-4c46-ab32-117d2ce71227", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.40.202']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--578869de-000d-4a3a-a8d4-637dedaa0f3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.40.34']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--280919f1-3709-4dbc-81fe-7261c9fa261d", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.40.37']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97a44079-7fff-4aa7-a5aa-2a76310244e9", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.40.4']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0491a985-c5e5-4be8-8f77-cf0b0447da27", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.40.5']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a949cbba-3df2-4a61-b698-52b123833bdd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.40.58']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--312ebc3f-745f-4b98-9a80-4730e9251a31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.40.6']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b192131-26fc-4645-9564-dfeabab7df43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.40.63']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbda0799-7466-4619-8454-b0d6c6353dc3", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.40.7']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b766dad-6e01-4074-91fa-3834724bb933", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.170']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4184339b-6588-453a-a461-6ea87532d943", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.182']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4104558-d4e3-45d1-a01a-b567357bb78a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.195']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5234a36e-d0f2-44d5-9b66-bc322c83f5d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.243']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--134724c2-c6a0-4cde-ba65-05b935712334", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.28']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91800eaa-031a-40e7-b19d-bdec241a8f8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.98.151.17']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8c07b5f-8d22-4330-9901-b5f6c8bdcc99", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.112.126.183']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a8e5f4f-0ecf-4acc-ac67-fa5b336b2739", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.118.39.74']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82b142bc-78d9-44a4-8879-0973034fd97d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.118.57.209']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66755001-068a-44ab-9af6-464084a1de4f", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.149.153.107']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84992f8c-7242-45f5-b9cb-4dfb79c97fe2", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.151.78.237']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5a5f4c3-70bb-44d7-82e4-c1254a023a07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.222.22.61']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b2fca2d-0c66-42fd-bac7-ea7e3efe72dc", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.25.81.250']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce29288e-902c-48b9-b486-6f2564242ff3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.39.61.22']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--175d1b50-dc68-4b92-bf1f-d1dbf6a67c02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.39.63.143']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ad950b6-c358-4ca0-8230-c436a79d5a19", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.44.163.210']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b2ef0a6-e0df-46eb-8c56-aed003c2ec64", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.44.62.246']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1dcd2822-c5cc-4eb6-a37d-fccb8cdb38b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.53.12.248']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6233ee07-14da-4a1b-9750-e54da5a83e5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.60.127.186']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--089f1e94-b51e-4310-b670-b0703e10ee08", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.62.233.214']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6a6134c-69db-46ec-9ffa-94baedf98bc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.63.197.5']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ec064a1-b6c6-46b7-b29b-2c78874ab5b6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.63.98.73']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec582ee9-57bd-4dc0-885a-7f3fe07fb78f", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.114.194.159']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e0a1846-e270-4fc5-87bc-6f4ac405b54e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.123.72.183']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca8aeba1-843d-4786-85b5-3f4618858c61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.138.191.51']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb22c0f1-a656-4a23-83ef-4a4d2b7eec4c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.158.91.12']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26f6c81a-a947-4778-8ed7-54aa29633022", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.174.93.12']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e44a0381-a4dd-442c-a4cc-153537020af7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.174.95.106']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92c0e213-c376-443a-8ef0-18da6ba449e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.39.83.20']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74dd52e0-c23b-4b29-8e99-3340071a748a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.101.132.114']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9a2caaf-87fa-4be0-9184-18034dd1459e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.102.49.193']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a82324d-10f5-4226-8da1-bfd7d7549edb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.136.187.229']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d7b0f88-13f9-4850-92c9-183fc5a16646", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.143.197.189']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0838ca62-0113-4f00-ab7f-ceecb95fceba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.156.152.234']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7de839fb-5e7c-40ac-bf31-8dfa1f7c2c44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.159.110.201']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98021887-a508-4523-a6b9-4155a10e74f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.190.218.25']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--133b7560-3ae0-428c-ac27-5762be9649b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.203.133.74']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab4a890d-f4fb-43e5-aeb1-181fd4c714c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.1']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bc2979f-24e5-4fa2-a0c5-a56973a273f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.10']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--075c1307-bbf5-4ed0-870b-ad1869e5e28e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.105']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e76ea34-2877-403a-b784-e5c344bc6750", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.107']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63bd29b9-70fd-47ff-9b07-c0a6476ba48a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.109']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--167fcd0e-3b2a-4c17-9613-480dcddbda9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.13']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1492d691-92fa-4b45-9d9d-73a7df3db41c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.131']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e085dc1b-6650-489a-8527-d85847f29769", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.15']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6e402fd-b103-4ae0-9d33-b52d3dc14650", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.250']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef969a88-c5c9-4112-b711-e839f1c7239c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.253']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bdc39ba-3ebc-47ca-8b83-db6a543f7a56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.3']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--614f5ea2-8e8a-4164-9f7c-1dad8761919e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.32']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da1abb7c-e165-4bc7-8ef1-d1d455b0a31b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.34']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b1163e0-6d9d-40c2-874e-20c593abf903", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.35']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca242f41-45c9-457b-a4a6-db2b37dd6eb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.39']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b927da96-61c5-4b40-9b87-b638621748e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.252.134.51']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--588cae33-5e00-451a-867c-e96b564857fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.26.106.19']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbe944cf-f799-49a4-860e-4e94f7b7e7f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.26.106.199']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55bd5426-43fa-4c1c-965f-d0c3611878d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.26.106.252']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92d05aa4-4130-45c9-ac0d-027925ef2de7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.26.106.253']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b279c9d6-e21f-4c32-8719-6a8997579ac6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.26.106.27']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34ca064e-de86-40a7-b64b-8f40491949de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.26.106.31']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15e1cbc7-b7f6-46f8-8b57-60807af276a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.26.106.80']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1a031a8-99c5-476c-b5c4-b9647d44d223", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.72.102.118']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1968654-e294-41f1-ba9b-49599f485ddc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.74.104.89']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6232768-9c18-4928-ab84-2fa4dfa13194", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.111.199.201']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--993c85f8-c2c3-4a73-8d56-5ca88d1c7180", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.135.205.75']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a93e3856-edc9-429f-9955-ac632df772dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.179.121.150']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--051c6459-ce01-4fd3-a7fd-3b3a66ebf09c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.179.177.125']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84b82199-c22b-496e-9ca8-365682c77b6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.182.114.5']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b6ee98b-3f03-4232-99f2-7a62203eb803", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.211.187.223']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f8536b8-ce7d-453b-967d-6bbdc26ac63f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.214.53.157']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a849998f-983e-4d77-bff4-d2eba62dae47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.214.54.54']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbb3c920-4b4d-411c-92fa-94922688812b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.214.55.226']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf03c3a2-fb49-456f-b8cf-51b4a3422061", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.215.0.144']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84eb63a1-1546-482d-80db-eff13da5e0cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.215.108.8']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c29e853a-7850-4300-9779-c1b3309fa7e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.216.72.235']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5efd2647-aa2d-43a8-a627-262279e85a44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.71.127.158']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0769c2f8-2ba0-4dbb-9ef4-605257816dcc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.85.238.22']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13433d8c-2519-4c58-b58d-88e8ddd11ff9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.85.246.45']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a2cf9fb-5f98-4f38-b03d-3d5e4ed9affe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.97.67.190']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--931b8091-70d4-4bb3-a4c8-9980c6f927fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.126.106.72']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8f932e2-089b-443f-909a-a5f4d8e173a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.126.107.228']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70ab9cc6-99b9-48e4-8eed-fa0e7c61c5e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.126.107.39']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39b6b843-8f88-4d3e-b695-19fdd1d03e5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.126.108.223']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31eab777-728f-4fe6-bf36-4409de0dff9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.126.108.76']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77fac271-921c-4e33-a931-116dafe72684", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.126.110.209']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--884eb4c6-3ce1-41e0-9db6-fff32099e2d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.126.110.253']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93912022-2e5b-42d2-a380-8fa8afd229eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.126.98.20']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cc162a0-f043-482a-a4a3-afa6a6992e77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.8.116.34']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca58d03b-08a5-42dc-ba98-79910cf65802", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.128.161']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d9b7a27-a3c1-4d34-acdd-97d3c3fc96d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.128.46']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65870bfb-dd98-47b7-b887-0d0231d4ee04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.129.4']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d72c2d2-ca53-4de4-8a4e-c60dc4a74eea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.129.51']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f52b48d0-7b8a-4691-a66c-98e588b90964", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.129.78']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5886c04b-535b-4535-ba36-77d6524b1bba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.130.235']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60987a02-c260-4737-82a8-5b07dd92e43d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.130.49']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6ec67aa-3cd8-4a13-8252-acebd2fc615a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.130.61']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad1fe9e6-08ae-4756-9eb9-dfc108d04da6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.132.119']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--738271cd-8e52-4df6-abdb-3f78b57e7601", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.132.142']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29fc8df0-e336-4a8a-8e3a-98ca86a95b2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.132.159']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e62cc2e8-591a-4e96-bf26-3914788c0f46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.132.17']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2469fb67-e6df-4965-bda1-94b275d26a96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.132.174']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25ca106c-d74f-4192-9a32-66d811ab6464", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.132.192']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac364273-75ab-4727-9420-ed3100e818c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.132.208']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1531ec1e-c1ae-4c48-a6d1-46ad1cdd98f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.133.213']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f0a3c0c-0900-4d29-9718-2e7d6c6b1785", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.134.64']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b9752bb-373c-4302-9f5d-a551c9d8f24d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.136.107']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65d822e3-3898-4e3d-bc20-6679a59ecb6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.136.238']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cc27d77-4718-47e3-b628-f98581c996fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.137.35']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd1385d0-3f54-456f-95fc-19611165794d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.137.80']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ea69b4e-2a6d-4108-be95-c926870d7d38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.138.109']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c3080cc-5052-4822-a9c4-d4ae1087729e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.138.138']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3321dabf-d225-4f19-9136-58ff10802a84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.138.157']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27197ec3-c0e0-4f1e-b0a8-4ccc83c54d12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.138.160']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f20e3821-1ec5-48e1-8a4a-ac3d1045745a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.138.166']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6b1330e-b77b-4199-89b3-54a6212a1cea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.138.195']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e754084-6b04-4de8-a859-e7aac189c5e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.138.212']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--152f11eb-a131-4871-b957-7b88b773a060", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.138.227']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d23919a-3da8-4771-ba01-f94b1aadf429", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.138.247']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6be62c64-0ee6-4240-8c38-83428aeb4dde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.140.249']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--247985a1-0932-458e-b145-3622a477a578", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.140.65']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd00658a-ad0f-46ab-b1a8-206b04840732", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.141.150']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78aa4c79-a5a3-456e-9ba5-78a9abb73484", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.142.44']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--495969a2-dc3b-440b-bb36-afaf32dc9a0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '98.142.247.113']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73b6eae3-5eda-4e5a-88eb-d342f94e8a75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '98.142.247.115']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7268489-e7fb-4051-a179-e7b3cdc73322", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '98.160.106.154']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82bf3847-123c-4725-bc90-e652df23913e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '98.83.16.255']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdbcc36b-8eee-4e10-84b4-35561d8f85fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '98.89.204.118']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfa01aaf-7977-4762-950a-38221014e042", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '99.92.204.98']", "pattern_type": "stix", "valid_from": "2026-06-15T00:00:00.000Z", "valid_until": "2026-07-15T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-15-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88e8f317-bf0e-42c3-9ff2-89dac8b7b2ab", "sighting_of_ref": "indicator--50cb789c-0ee3-460a-91a9-a55c0cd470da", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d09bfef-686c-4548-a072-6e7bc8fcb83f", "sighting_of_ref": "indicator--d7ca0b6c-6643-4cc6-b46b-c517a916dce0", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1583625a-83f2-4a30-8d7a-6adbb9937d60", "sighting_of_ref": "indicator--e88945e9-0bce-4d85-9d77-86f9bbeab9e5", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7502c3a-6afc-4553-9310-1e9fbfb72475", "sighting_of_ref": "indicator--7b279f8a-94b7-41fd-846f-c4f880228765", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f9e33be-fccc-4a31-be56-ead1b31c325b", "sighting_of_ref": "indicator--e419c180-1018-4181-ae03-5d4ce5c39185", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64d5a1c8-3ae2-42fd-ba86-0dc8c795d902", "sighting_of_ref": "indicator--ba0bbe6e-b329-4dc0-9a48-4f917ca4b6af", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76d7e1e6-f4fc-46bb-ab99-a743554ed1c2", "sighting_of_ref": "indicator--a98b2d4a-53ba-48b5-9e1f-784b888157e3", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f001083-818c-4cbf-b870-a7643dc18c11", "sighting_of_ref": "indicator--e1fe1b55-2cd1-4926-b741-a48b50d67cc0", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7bb805b-a720-45f6-8a26-ea89496c664c", "sighting_of_ref": "indicator--8f71bd70-2a5a-45be-9a4a-a8f33560e3aa", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51c53910-e32a-499e-bb7e-849a30603705", "sighting_of_ref": "indicator--8d4f8ecc-ff75-4de0-b29f-610f76b683bb", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddec1e0c-a05f-418a-96a4-98d81ef94fc1", "sighting_of_ref": "indicator--1e1dfe1e-0d83-488a-81ce-42b8cbd50eff", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a4ab982-501e-412c-bcbe-6fcdaac86656", "sighting_of_ref": "indicator--4488d9ae-490b-462c-b8a2-ae3a249580f2", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0906cfdf-f894-4b26-9cb0-4638938b6b05", "sighting_of_ref": "indicator--9cb1efa9-4afe-426e-a57d-745244bc9b70", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee521149-d4ed-4aec-aea4-46902fffaf6d", "sighting_of_ref": "indicator--621cfe67-9043-417e-b5f3-c69131fc029f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--044cef19-4cd7-458e-92c7-5be03127c3b1", "sighting_of_ref": "indicator--95dfc5fe-4c3b-4b84-8eba-f388e919568a", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96c60042-9e58-41ac-a636-f0ef83c57e7a", "sighting_of_ref": "indicator--8c29b324-1d73-4e71-87df-f98c010aeb73", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e32dbc66-9463-40d0-b116-ef352254c32a", "sighting_of_ref": "indicator--8c29b324-1d73-4e71-87df-f98c010aeb73", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecfaaa98-ce1d-4f75-817c-3e0fd79b03d8", "sighting_of_ref": "indicator--8c29b324-1d73-4e71-87df-f98c010aeb73", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72967300-e3d9-4e9b-af03-4b78862873df", "sighting_of_ref": "indicator--358e1e2b-7c74-48f6-8995-aa94d05b8da3", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58e5896c-b1cc-4a9b-a7d9-880aa2771d3c", "sighting_of_ref": "indicator--2cd091a6-a58d-48f1-9d42-23908ebde50d", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d7166d7-c57c-4618-85ea-0cd32c9bf0f0", "sighting_of_ref": "indicator--7b3affc1-c233-46d0-b244-716f07eea2ad", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--041f0516-8bcd-43a3-b280-0775c55bc8ec", "sighting_of_ref": "indicator--36eb24e7-2ec1-46c3-b795-049003691808", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd0427e9-2570-4fd2-ace0-fd242264fd29", "sighting_of_ref": "indicator--9378ec50-d605-4e26-84e8-046cfb6a2d71", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7870331c-2ec2-4f05-9c25-8dbc7897aff3", "sighting_of_ref": "indicator--9378ec50-d605-4e26-84e8-046cfb6a2d71", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b4aa472-1c36-4f2c-9542-e7cf50048c2b", "sighting_of_ref": "indicator--79a21988-e404-4dee-a444-3a749c71e6f7", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dba3245b-832e-4276-a0de-4434656c7116", "sighting_of_ref": "indicator--fe8e7b45-bd3d-4f15-bedd-236f902362f4", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90e4b134-becd-4791-be13-b172e4cf0267", "sighting_of_ref": "indicator--23707196-da2d-4ddf-be71-8453d3cf08c6", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a3efb60-d49c-40c4-91af-588938c715f0", "sighting_of_ref": "indicator--f0974943-0b7b-46c9-b330-03a2d56ecee1", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18d6c4ba-98a7-4b31-a00b-fbfb4c211d02", "sighting_of_ref": "indicator--11406546-24d4-494e-8c60-a9e312c52af8", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f313a1b-260d-4943-940a-84264371e68c", "sighting_of_ref": "indicator--71bb2150-7026-4c0d-a9e7-3845790e6d6a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb2171c1-4f96-4ad5-aefa-1c3f6d746522", "sighting_of_ref": "indicator--5680db28-0b46-4767-b1c4-ea907237ef49", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45a7942e-c9d0-402e-b13b-22b8bc69b92a", "sighting_of_ref": "indicator--5680db28-0b46-4767-b1c4-ea907237ef49", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e600b36-6039-4966-b6e9-c799dd7bdf17", "sighting_of_ref": "indicator--da375f38-29e5-4ab0-93ff-19b1516157ea", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e231cba5-6969-4dee-8a9a-6b5b375da3b5", "sighting_of_ref": "indicator--da375f38-29e5-4ab0-93ff-19b1516157ea", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1010cc40-104a-4cc6-91ad-b2be8d519f92", "sighting_of_ref": "indicator--b069919b-04df-49f2-bf40-5231c9d66537", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--969f2acc-e1c5-475b-beeb-0ee9f2679893", "sighting_of_ref": "indicator--ea20fb87-6891-4505-b2e6-729f6a589efa", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92c8d1f5-f03c-4636-b3a5-965a53c124d8", "sighting_of_ref": "indicator--ea20fb87-6891-4505-b2e6-729f6a589efa", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ec5a456-0be7-450e-8ae3-2b3d59d50c60", "sighting_of_ref": "indicator--04621efa-f481-4699-b0d4-4b95396ed64a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e53a6f8-f7ae-4cfc-b471-a29bcffc8eb7", "sighting_of_ref": "indicator--f6ae1527-0b40-4080-b988-3b2a2fc02e65", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb95cb15-d8a1-4d1d-88a3-9091143b811c", "sighting_of_ref": "indicator--dfed09fc-cf9a-44c6-b163-9c3729eda7a0", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3e3f47e-eff2-4651-a7bb-94946cca2c4a", "sighting_of_ref": "indicator--88632e1a-8985-4935-abe4-be7f324db46e", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da33c097-ffe0-4bff-b40e-6f1b760fab2e", "sighting_of_ref": "indicator--809737df-c4f4-47ef-8fbf-bb4023668ccd", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cde1147-c526-449c-ae5f-04809f66c0d6", "sighting_of_ref": "indicator--7b82ec48-4dd9-4c08-bf31-3d18c8394a77", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3071a619-c853-45fb-b5cc-7107d8678a71", "sighting_of_ref": "indicator--94d64ce3-e98b-4688-8992-9e785ba2d472", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dcaac37-294b-4ac5-a171-425028f33568", "sighting_of_ref": "indicator--10cea4d6-c147-475f-a671-a95fd81eac48", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f024559e-5823-432b-9973-3058e26e0714", "sighting_of_ref": "indicator--10cea4d6-c147-475f-a671-a95fd81eac48", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2498c806-f7ff-4ac5-87eb-a6c19d1cbb6e", "sighting_of_ref": "indicator--9343f80b-0bbe-4265-8993-74f143e288c2", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd2ee52a-e67e-48f7-95bc-581cad9fb244", "sighting_of_ref": "indicator--414b1004-25c1-4c81-ba01-edce273c4201", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b96d40e-91db-416b-a485-0eeaaf9f8dfc", "sighting_of_ref": "indicator--09a30603-7bb1-426a-9210-6ebeeccc020d", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef504676-87d0-48b2-8ad5-5af488e3d242", "sighting_of_ref": "indicator--46c158a8-e743-4f69-850f-28cbdabcc744", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83db56d6-7b43-4250-b5c3-31608ed86da8", "sighting_of_ref": "indicator--7c677559-6090-410b-a508-ddf14184f892", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--caf96ad2-e45f-4374-aa17-5b25824a1391", "sighting_of_ref": "indicator--ac8f9a39-394e-447f-8fe3-311123de4d5d", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3862255f-9928-4a9d-8e00-92188a68088f", "sighting_of_ref": "indicator--11fb69c2-43d5-4c13-9b7b-570e31d45b90", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5a5af1b-ca92-48de-b395-bc572eea2db6", "sighting_of_ref": "indicator--0eb897f5-1c39-48e7-9e4c-684163981a51", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ba732e5-433a-48a4-9c3e-7288de9edffb", "sighting_of_ref": "indicator--7143baec-e736-4d7e-b295-2bdc7d2201d9", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8cf5c09-da05-4b9e-8970-1e29acb97568", "sighting_of_ref": "indicator--44add0b9-caf5-42fb-a108-e6e324eb1cd5", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eca92f7f-6f4e-48fe-be31-87ab5464292b", "sighting_of_ref": "indicator--c2a8be54-99e0-4df8-bf06-12b40090c533", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5915537a-8e96-4668-a83d-5c0c820e0485", "sighting_of_ref": "indicator--99164086-988c-47b2-9695-098b79ef9fd5", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--091ac770-0e7b-4e54-94e1-1ba6359a74a7", "sighting_of_ref": "indicator--fa981710-115b-4c30-a99a-c88fc0018a28", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e24675c4-e020-4a2b-83d6-69e4b4a0ebb1", "sighting_of_ref": "indicator--e9ea51b8-6466-43af-a921-99d5555f5a3a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d275626-fbc9-487c-8f39-67c9db761cb1", "sighting_of_ref": "indicator--7c87163b-b704-43e7-a3de-53761d685292", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7695bb6-cca3-4abf-87c6-199a97f6b625", "sighting_of_ref": "indicator--fba26761-d59c-4625-8ff9-4333d7f6d9e3", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66b78552-7821-4914-b31e-ab5609c1bdc9", "sighting_of_ref": "indicator--400d74b5-2262-42ab-a428-d2b108da0b47", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9701556c-21e8-4f14-b904-6bbd5afc827c", "sighting_of_ref": "indicator--ac2cd4eb-b4f4-4d8e-b5ce-1f804db384b7", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1c174d8-18a7-4659-aea7-2ed9dc6b441e", "sighting_of_ref": "indicator--f5974ad1-92c5-4dfe-ba6d-87e2d4005b1a", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--316688f4-0137-4055-a5f4-d741824b2e6a", "sighting_of_ref": "indicator--f5974ad1-92c5-4dfe-ba6d-87e2d4005b1a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d6f1696-11b1-4b01-b08d-0b14c4e746c9", "sighting_of_ref": "indicator--f5974ad1-92c5-4dfe-ba6d-87e2d4005b1a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dcf27e1-567b-4993-af4a-7a03f85bb535", "sighting_of_ref": "indicator--98c44b61-01a4-48c6-aa78-980bee32cfd3", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef753182-e2cc-477a-871c-d646ef1c1a21", "sighting_of_ref": "indicator--98c44b61-01a4-48c6-aa78-980bee32cfd3", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfd7a70e-4fd9-4bde-b9a4-4aa46857d475", "sighting_of_ref": "indicator--98c44b61-01a4-48c6-aa78-980bee32cfd3", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fe4d2af-5c34-4a96-830d-65d1f1204227", "sighting_of_ref": "indicator--ff2f65f5-32b8-4701-819c-08bd5535fe25", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4e05e19-30cd-4f0c-b793-7feda0842672", "sighting_of_ref": "indicator--ff2f65f5-32b8-4701-819c-08bd5535fe25", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2a0f227-7a1c-4991-b167-560203501046", "sighting_of_ref": "indicator--aaa053f3-f2cd-4c09-a2fd-f1239258c915", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4139fc23-485e-43a0-8274-b5b0475917b4", "sighting_of_ref": "indicator--4567fe8e-7051-4f7a-af9f-5dfacc35af2c", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53642771-7148-4782-a16d-3c83cc962b2c", "sighting_of_ref": "indicator--6dea92ec-0d70-42b7-bfd9-69caa2bac19a", "where_sighted_refs": ["location--cc47317e-2c18-43a6-8938-dea748a56ad5"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d184bcaa-f80f-48dc-8e94-84bbcf863f5c", "sighting_of_ref": "indicator--20456473-547b-412c-aea3-866e8bb30b67", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24f81286-8c77-4b23-80fe-17f016f0fbba", "sighting_of_ref": "indicator--fdb0df33-444d-4748-ac78-8bf3e38a975a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--955eff4d-c2b3-438d-b50e-0a96a5e0fe1d", "sighting_of_ref": "indicator--76e75deb-6889-4165-b9a4-a5da8b363e8c", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--929aef39-b854-41f6-938a-5c1ef3928aae", "sighting_of_ref": "indicator--173589ea-3323-4538-a866-c4ac30235e7d", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b6d8764-3b8e-4904-9572-fa331ba7e876", "sighting_of_ref": "indicator--c9bd20c7-3d99-46f1-864b-1a007a52bd57", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--939637c7-8eb0-46a4-812a-2a3199a73155", "sighting_of_ref": "indicator--db471cc5-b7bd-4d82-90b2-d1d2b90307fb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b08a1312-f515-46ab-9909-6b7e68994e95", "sighting_of_ref": "indicator--bb1b28f6-a2b8-4c31-ab58-9e187f2ac217", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--393c1a97-3e6a-4720-9ae5-bdaf78afad1d", "sighting_of_ref": "indicator--6c6b721b-26bc-4a95-8865-0234cf79c03a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf6229e4-d84a-4ffc-a277-68fb48ecc2fa", "sighting_of_ref": "indicator--56b27160-380e-4fa2-b93c-1fb35dbf2285", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcdbfbc2-f26e-4c18-8414-613822cb9202", "sighting_of_ref": "indicator--b9dc52d6-19fe-404b-a002-c33acb72ff0a", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e45e8d47-d08b-441b-bc00-8abdcde6644f", "sighting_of_ref": "indicator--79fb7df0-35e3-4c32-a630-d72670cb60b2", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8af77eb6-333a-477d-ac50-e5c3890169d7", "sighting_of_ref": "indicator--6057b9fe-2ae5-43dd-863b-3e7841593ee1", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2087b727-389f-43a4-b914-11f39355df02", "sighting_of_ref": "indicator--6057b9fe-2ae5-43dd-863b-3e7841593ee1", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8efdb6c3-0033-448c-b629-9d9e4deb0811", "sighting_of_ref": "indicator--6057b9fe-2ae5-43dd-863b-3e7841593ee1", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18a59c4c-46d6-4692-9465-7ca87e46ea1e", "sighting_of_ref": "indicator--9f8cd0e8-54f6-44a9-ab84-d3b8464c9a73", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61ddbc80-32f5-44fd-a82c-b50aafdff718", "sighting_of_ref": "indicator--c6ed3cae-f942-4a70-af7a-7e7525486a92", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--998ce15a-dcd5-42d9-8142-1630d0f1367f", "sighting_of_ref": "indicator--c6ed3cae-f942-4a70-af7a-7e7525486a92", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7203f1f2-2734-476c-851c-e3bcc9a2dae9", "sighting_of_ref": "indicator--c6ed3cae-f942-4a70-af7a-7e7525486a92", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0f55c40-4c63-45f3-931e-71bddf3b19be", "sighting_of_ref": "indicator--531b5166-9c8c-446e-abda-1628d2bc7b8c", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0ed775e-f1ed-4fab-94e7-2719b1d04457", "sighting_of_ref": "indicator--ba6d9c80-67e8-4b6e-ae42-96f963c0bd60", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f3b18bc-92bc-4b46-9a8a-5905298a363d", "sighting_of_ref": "indicator--ba6d9c80-67e8-4b6e-ae42-96f963c0bd60", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f13bc281-511a-4b55-8111-1da732ca9df7", "sighting_of_ref": "indicator--ba6d9c80-67e8-4b6e-ae42-96f963c0bd60", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55c5962b-d422-488a-94a1-d852da7c7a00", "sighting_of_ref": "indicator--8b66c126-0899-49ec-a806-b0dc940925d5", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b9d2292-a674-4fff-b771-f5c4fa77396d", "sighting_of_ref": "indicator--8b66c126-0899-49ec-a806-b0dc940925d5", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--044e434e-609f-4452-b1b5-aa63c5ade8c1", "sighting_of_ref": "indicator--8b66c126-0899-49ec-a806-b0dc940925d5", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c75da4e7-f49e-4bdb-96fd-26203052a93c", "sighting_of_ref": "indicator--6a81e1d9-0f0a-4055-a2ed-36233e794c09", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60e81d52-8529-4d09-aea7-41cbeb2c956c", "sighting_of_ref": "indicator--48a24b01-f9f7-4f84-9e01-e0a27f6002ea", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--448e8c45-58da-479c-8d86-bf451f3b58a2", "sighting_of_ref": "indicator--48a24b01-f9f7-4f84-9e01-e0a27f6002ea", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66e25150-293a-4269-883d-db67bd46187d", "sighting_of_ref": "indicator--cc88810f-8fa2-4f30-ad37-26a3a031a15d", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f061d9a5-95ce-4d67-a18f-e2817f600bdc", "sighting_of_ref": "indicator--cc88810f-8fa2-4f30-ad37-26a3a031a15d", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--784a2c97-f068-45fd-b6a8-063830c6adc5", "sighting_of_ref": "indicator--dd1270e3-1289-4d4c-8aa2-93a7d48a7a88", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--191d41de-288a-4f10-879f-c97d16e6eb73", "sighting_of_ref": "indicator--2ba72097-7101-4be6-94b9-e29f97e06c9e", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--095492bd-38f2-4d3a-b3ae-b9204ab71cde", "sighting_of_ref": "indicator--2ba72097-7101-4be6-94b9-e29f97e06c9e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86f3517f-e24d-4ed7-b883-e306c9036fcc", "sighting_of_ref": "indicator--2ba72097-7101-4be6-94b9-e29f97e06c9e", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d185ddb-157f-47ef-ae26-5eea5678aa3e", "sighting_of_ref": "indicator--ea591b44-6223-4f35-be72-176ca7b00514", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05e94cd2-f460-4a03-83a3-c7dc2be271cb", "sighting_of_ref": "indicator--4fc7c640-a79d-4587-9f49-0cd2ed667e04", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bd36cb7-1789-4765-a84e-43aef7a31bb4", "sighting_of_ref": "indicator--5c0abbed-7e6d-4b18-9636-c76c314a6142", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2235ffa9-319a-4aa0-b531-3499e7a8d7e3", "sighting_of_ref": "indicator--96d57b23-b164-4bbc-ba96-30f47d8a73b0", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--948493c5-e84c-4093-92be-dc77ecd972c5", "sighting_of_ref": "indicator--96d57b23-b164-4bbc-ba96-30f47d8a73b0", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adeb5571-0f20-4a0d-b51d-13cc91fbf18d", "sighting_of_ref": "indicator--96d57b23-b164-4bbc-ba96-30f47d8a73b0", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f8530d0-f655-410e-bac4-93910ba12aa7", "sighting_of_ref": "indicator--a7284625-554f-45ee-874c-9cfa2062242b", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5325dc71-7c47-4964-8320-cf6d75b9ac4e", "sighting_of_ref": "indicator--c4ff9347-bf21-4e6e-9c4b-387c3b27046f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c9f1005-74ea-4f33-bc59-e745a77d0c59", "sighting_of_ref": "indicator--c4ff9347-bf21-4e6e-9c4b-387c3b27046f", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0f22146-0abf-4dca-be8a-cf246c79940e", "sighting_of_ref": "indicator--c4ff9347-bf21-4e6e-9c4b-387c3b27046f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7771e7b6-6e8a-4537-9553-16bd0378ea40", "sighting_of_ref": "indicator--002c6ea0-a454-4716-a7e5-91935c835f25", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3edb5246-4a5b-4ade-b933-809c6c2aa654", "sighting_of_ref": "indicator--002c6ea0-a454-4716-a7e5-91935c835f25", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5484ed9c-46e6-4b00-bbb4-5667bc562a3b", "sighting_of_ref": "indicator--002c6ea0-a454-4716-a7e5-91935c835f25", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48346a9e-ff49-449c-b1f9-561e97118933", "sighting_of_ref": "indicator--c19fb8d3-96e3-4738-953f-a060ce696db8", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db27658a-60f9-46a3-8307-a6f72b77e58f", "sighting_of_ref": "indicator--c19fb8d3-96e3-4738-953f-a060ce696db8", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--184b556e-ce35-4e23-8ee7-0178c0b5bee2", "sighting_of_ref": "indicator--c19fb8d3-96e3-4738-953f-a060ce696db8", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55130fb3-0c76-436f-96ed-0bd4d401b818", "sighting_of_ref": "indicator--7318532f-e523-4dd1-902d-d2ba42c7bd47", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3742559b-517f-4d4a-90df-6af5a9f656e8", "sighting_of_ref": "indicator--7318532f-e523-4dd1-902d-d2ba42c7bd47", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0cd3c00-ce24-4f54-b80b-7b9185efec9b", "sighting_of_ref": "indicator--fdb16cf1-dc3d-4710-bbcd-45ac7c3f8642", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--404b5a33-343b-4bab-979f-91bd13ced2aa", "sighting_of_ref": "indicator--fdb16cf1-dc3d-4710-bbcd-45ac7c3f8642", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddb7f2d4-7ec7-4e8d-b708-ce8d2746154f", "sighting_of_ref": "indicator--4864865a-0182-4b93-8d56-6f5cdbfddfd4", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af036485-35ae-44e2-8750-95fe39d0b8c5", "sighting_of_ref": "indicator--dc998157-a2f6-43da-a1f3-ce6a3b9a9ce5", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dff7ae3b-cd3f-465b-a069-20eb56087cde", "sighting_of_ref": "indicator--dc998157-a2f6-43da-a1f3-ce6a3b9a9ce5", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7871f2bc-4e39-4ad3-9641-e7da46f3f509", "sighting_of_ref": "indicator--dbb38272-1a9b-4de3-9ffb-ae67bad9cada", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cd0c47b-1f74-474b-838b-676767396d6c", "sighting_of_ref": "indicator--d9b71770-035c-4e6d-a679-068008494bdc", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85439fad-50d6-4b83-889c-272c0bb7a6ec", "sighting_of_ref": "indicator--d9b71770-035c-4e6d-a679-068008494bdc", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58cb60ad-002e-4381-b701-8cae3b557601", "sighting_of_ref": "indicator--e88ce125-06cb-49b4-b29b-5c994e3264eb", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df793e10-a674-475e-8749-d8d671339a51", "sighting_of_ref": "indicator--e88ce125-06cb-49b4-b29b-5c994e3264eb", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15b87904-e053-4398-a5ae-19b51f08f1b2", "sighting_of_ref": "indicator--e88ce125-06cb-49b4-b29b-5c994e3264eb", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d72f0928-74d3-49ec-a68f-5ea1ec58a8c4", "sighting_of_ref": "indicator--5e448485-5f52-435f-a31c-23451e2e9047", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26499f92-53ce-41a5-aa6e-1706161846d4", "sighting_of_ref": "indicator--5e448485-5f52-435f-a31c-23451e2e9047", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fc4f997-9841-4be8-94df-bdda60a8ea4b", "sighting_of_ref": "indicator--5e448485-5f52-435f-a31c-23451e2e9047", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--066ef198-8577-4c5a-84d6-56896fe228da", "sighting_of_ref": "indicator--2d8125ca-7014-401a-ab05-4a3d1e100fe6", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5117e36d-6a7f-4d2a-8ce0-dd059bc31223", "sighting_of_ref": "indicator--2d8125ca-7014-401a-ab05-4a3d1e100fe6", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b933317d-6fcf-4cb3-aab6-a4b7ebde1180", "sighting_of_ref": "indicator--2d8125ca-7014-401a-ab05-4a3d1e100fe6", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71033189-f445-4b83-8b42-84cb028f08cc", "sighting_of_ref": "indicator--f1d620be-1439-44e8-8c82-826dce9cc252", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5164f62e-3376-42d3-9dc5-f71d30c576bb", "sighting_of_ref": "indicator--f1d620be-1439-44e8-8c82-826dce9cc252", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--978a162e-8d47-460c-ad85-da8e9fb1d5d3", "sighting_of_ref": "indicator--f1d620be-1439-44e8-8c82-826dce9cc252", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dbac4a1-ab7f-4138-8367-af72d48e06a1", "sighting_of_ref": "indicator--69317f60-fc8b-4a0f-8e2a-ad8363694a5a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dcfd923-cb1a-44bc-b288-cb580db61a14", "sighting_of_ref": "indicator--0972ebab-f77e-49ec-9c25-b77b420f3f35", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d399d0c4-b8bd-4b40-b62e-dbb44adad717", "sighting_of_ref": "indicator--0972ebab-f77e-49ec-9c25-b77b420f3f35", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6385a2bf-d99f-49d1-920c-be706475a4bc", "sighting_of_ref": "indicator--0972ebab-f77e-49ec-9c25-b77b420f3f35", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7240bd73-a636-4a94-924e-bdad22b4727b", "sighting_of_ref": "indicator--1072e53a-dc7e-4e01-875e-68fcb4996518", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51cac26f-afb7-4a4a-a47b-464a15ca86e8", "sighting_of_ref": "indicator--1072e53a-dc7e-4e01-875e-68fcb4996518", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ed7c65e-0210-4d7b-a090-9b6cb48fdf2e", "sighting_of_ref": "indicator--05d521ef-188e-4ac4-8cb3-4c0d7b9bbfae", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e694c7f3-515d-4eca-967e-46d358781f6d", "sighting_of_ref": "indicator--6b1e9995-bf5d-45c6-8c6b-96cdd0340fec", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad20841f-2b83-4ed1-9680-54195a15e79a", "sighting_of_ref": "indicator--4fae05ce-31b3-4365-a975-2a059dfc1704", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c199078-0a36-4887-9c28-94ddb7bb4ecb", "sighting_of_ref": "indicator--6d3115ba-1fcf-4eb4-8ae3-3ab2e0bdefd2", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5faa9200-2f08-4bec-87dc-99c8bf33bc1e", "sighting_of_ref": "indicator--08bb221a-06ef-447f-8a7f-920abdbb8c35", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8864158d-79a1-4c4d-a53f-fb09deb39530", "sighting_of_ref": "indicator--6dc069b3-2da5-4433-afa1-fdbbbc7b92cf", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d41f457-8751-4f22-9f7f-43743f8ea984", "sighting_of_ref": "indicator--d5cef03d-9a46-42bf-adcb-32c4daa58388", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e80e0ce-b796-4c9a-99a1-006d99c2247d", "sighting_of_ref": "indicator--6e3ca4ec-f5e1-43d6-8127-242eb666ac41", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--866ff7ba-1025-4b46-aae3-e37dbc820f3f", "sighting_of_ref": "indicator--1f6407ae-eff9-4062-a388-137bcc706687", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a809e610-de00-44da-a313-6f2493cf873e", "sighting_of_ref": "indicator--e8da037c-c83e-4b87-8cea-69b27fe37b68", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1e460d7-375d-43ec-8791-6a40e7c2f2ad", "sighting_of_ref": "indicator--e8da037c-c83e-4b87-8cea-69b27fe37b68", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebcbc315-baee-4ba7-906c-4970e22b6649", "sighting_of_ref": "indicator--e8da037c-c83e-4b87-8cea-69b27fe37b68", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58099e14-1894-42be-9397-d097cfd92c14", "sighting_of_ref": "indicator--937696ff-d25e-473d-8b19-2b5516ec82b5", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12fba9e8-7dd6-438b-bf86-a38ce25c6974", "sighting_of_ref": "indicator--59a4afa9-9c47-4ff8-b889-b542c99f2700", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f4f0a41-8eb6-4298-8a1f-8c886424dce7", "sighting_of_ref": "indicator--6a42b68d-ce15-4bf3-bcf2-1903a9a3ede8", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d930bd73-5ac3-44ac-bb76-824705c56c3d", "sighting_of_ref": "indicator--e7dcf742-2e58-4d2e-9df8-f7247d496386", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ead2432e-75ca-4771-95cc-2a0585bf776a", "sighting_of_ref": "indicator--869dbaee-2d91-4b0e-a0ca-87403366b102", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99019644-1822-4ab2-971d-8ee3b03cb16d", "sighting_of_ref": "indicator--73d9bc8a-4594-489b-877b-03734a08b76f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac397f66-df95-4d76-8a3c-a74ff28dba42", "sighting_of_ref": "indicator--cc3c92d7-1f1c-47ac-8fd0-777480617324", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3372eb5-a9a6-4f41-b455-7a5e19e58fef", "sighting_of_ref": "indicator--6f19b9df-e034-4563-afed-d8da7391f0ea", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a77a6d7-8682-42f3-baa0-1bd902c292db", "sighting_of_ref": "indicator--a1c96486-32f9-47d9-9385-3928acad0260", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1dea763-a1e3-40d9-b226-65e39ba94604", "sighting_of_ref": "indicator--6688c530-9288-4eb8-9fef-cb73acebd9fd", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6e94ef3-dafa-490a-a5d6-dafad986bf9e", "sighting_of_ref": "indicator--6688c530-9288-4eb8-9fef-cb73acebd9fd", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--035451fc-8d91-469b-9a4c-f1c68afe8bc3", "sighting_of_ref": "indicator--6688c530-9288-4eb8-9fef-cb73acebd9fd", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c23e74e2-0804-4032-aa77-0d053664c82d", "sighting_of_ref": "indicator--6102d00e-9950-4590-a6e5-ebe4a66c21ca", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74575079-3463-4ca4-9c6b-8cb00618104e", "sighting_of_ref": "indicator--6102d00e-9950-4590-a6e5-ebe4a66c21ca", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c3a129e-7966-465e-9f9f-e3b49ab03b9c", "sighting_of_ref": "indicator--4a86287a-ceaa-4c48-937b-60628aa127a6", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21c60dae-28e5-44e8-9ff3-61e7c273fe13", "sighting_of_ref": "indicator--4a86287a-ceaa-4c48-937b-60628aa127a6", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77670da9-293d-4b8e-9d6c-7e1a8daf6a90", "sighting_of_ref": "indicator--4a86287a-ceaa-4c48-937b-60628aa127a6", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31075aba-eb6c-4c5d-bdba-e2a084cf5bcd", "sighting_of_ref": "indicator--b7630d54-c11d-44e0-b0a6-ba20f02e9180", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8af6d650-b4fe-4f69-822b-bf7af9ede1fd", "sighting_of_ref": "indicator--05124c91-2235-4cca-bd30-d69a2c88ff5f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b4bbdae-2397-4d8c-bb3d-47e8cf81f83f", "sighting_of_ref": "indicator--05124c91-2235-4cca-bd30-d69a2c88ff5f", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4155a890-84aa-4d17-ba2e-2bf5497ee948", "sighting_of_ref": "indicator--c5e2f9d2-87d9-4426-a9b3-80d5d40a5e24", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46438ddb-11f0-403c-b2b3-a1e4eb5b35cb", "sighting_of_ref": "indicator--c5e2f9d2-87d9-4426-a9b3-80d5d40a5e24", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c210ed6e-07b0-4fe4-9f2b-4c1b0fffa8d4", "sighting_of_ref": "indicator--fd52a780-d733-4402-afdf-e79d37ca8878", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bab7d3cc-6f79-49ff-8746-b672d13fd7f0", "sighting_of_ref": "indicator--7ef38510-351b-4491-9735-e5117b7f7e4c", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f78c593-b206-44ff-b401-b722db8eefb0", "sighting_of_ref": "indicator--d1ee6c5b-6641-4f02-a2cf-4842d8810a19", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae22b45d-8247-4006-a08c-43d7e90033a9", "sighting_of_ref": "indicator--69d715e8-68ba-418a-8d4b-78ccf1981181", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c10632e-cd83-4edc-a999-513a9fe909bd", "sighting_of_ref": "indicator--69d715e8-68ba-418a-8d4b-78ccf1981181", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72350c72-55cb-42c6-986d-273f7eee1234", "sighting_of_ref": "indicator--a5419937-bd73-4ce9-8eec-8af061250a5b", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eac0cbac-4c89-490a-ae96-30749b6542e4", "sighting_of_ref": "indicator--a5419937-bd73-4ce9-8eec-8af061250a5b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17d6c607-6622-49ae-ac36-7dc1fb392b9a", "sighting_of_ref": "indicator--2b1e9c40-4e7a-443a-a941-0befcddfffa2", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83864f4a-0d04-492c-8182-1ef6de6ba00e", "sighting_of_ref": "indicator--2b1e9c40-4e7a-443a-a941-0befcddfffa2", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--241dae88-6d13-4bd0-9767-d183888f3376", "sighting_of_ref": "indicator--2b1e9c40-4e7a-443a-a941-0befcddfffa2", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31405d52-e4da-401c-b78a-d19b11b2f98d", "sighting_of_ref": "indicator--738a0f91-3418-41fc-9a2d-000687c38668", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd55b812-4591-4686-be49-96da5189a604", "sighting_of_ref": "indicator--e47e7fb1-1d4e-47e8-bfc6-372f43bbc7ad", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e580a62-7bb3-4bba-a1a0-d73f8fc30c67", "sighting_of_ref": "indicator--1312cb33-79e4-45ba-b944-a5ba87b98a00", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07bb6355-41b6-4082-aea2-da2b9ebbdcb2", "sighting_of_ref": "indicator--ffa4e37d-b3c6-4d9e-bffa-eaa963429c75", "where_sighted_refs": ["location--cc47317e-2c18-43a6-8938-dea748a56ad5"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1013a4b5-2552-47a0-9217-e9d3320717d6", "sighting_of_ref": "indicator--ea752b61-6e12-4e27-a909-7f2984930e5c", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--243d85fe-8e9f-418a-a7f5-2e580ccefe78", "sighting_of_ref": "indicator--138b6402-1ce8-441e-b051-e6834753c35f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51dcded2-f489-4972-a7e1-2d74dc30d771", "sighting_of_ref": "indicator--138b6402-1ce8-441e-b051-e6834753c35f", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--745e7f90-8f74-4a29-be66-eb7d480604fc", "sighting_of_ref": "indicator--138b6402-1ce8-441e-b051-e6834753c35f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3ed6a09-2bb4-4d24-bd54-c911282119a1", "sighting_of_ref": "indicator--e26859b5-d42d-43ac-8929-a643fad4f6ae", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--748d63ae-72dc-4338-a636-ef50231d461d", "sighting_of_ref": "indicator--e26859b5-d42d-43ac-8929-a643fad4f6ae", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1594aec2-b32d-4913-adc5-3ea8c73a92ab", "sighting_of_ref": "indicator--e26859b5-d42d-43ac-8929-a643fad4f6ae", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7342141-46f8-4305-9572-19075ce296d4", "sighting_of_ref": "indicator--a8946d54-7faa-41ca-a043-e4dad95abe70", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb50c918-796d-4db8-bc0b-dda894909e4b", "sighting_of_ref": "indicator--a8946d54-7faa-41ca-a043-e4dad95abe70", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57eda152-584a-4471-a998-e43fae688e50", "sighting_of_ref": "indicator--a8946d54-7faa-41ca-a043-e4dad95abe70", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c371c6b6-f4a0-49fd-92d6-5882d72094ba", "sighting_of_ref": "indicator--19f44252-c4cb-4aaa-9d74-f933ce571c9f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a66b4e1-0bf3-4131-96fb-329adf614662", "sighting_of_ref": "indicator--19f44252-c4cb-4aaa-9d74-f933ce571c9f", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21ec8f7b-e42d-4cfa-8d21-6563329817e1", "sighting_of_ref": "indicator--19f44252-c4cb-4aaa-9d74-f933ce571c9f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--458a61e4-c7fd-40a3-b8e9-c0c9715258a7", "sighting_of_ref": "indicator--f5d41fe9-3686-4ea6-9171-1d4da6330c89", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48ed025b-8a45-4a47-bd16-2eb86fb9b9b7", "sighting_of_ref": "indicator--b182df99-6833-4e69-872f-1ca48c1b0541", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63ff33e7-9a83-4dfa-bb87-7f590034e1d6", "sighting_of_ref": "indicator--b182df99-6833-4e69-872f-1ca48c1b0541", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bbab68d-340d-4820-9495-250c371e5dc4", "sighting_of_ref": "indicator--fe910bee-a999-49c6-9d47-7199c6f892d3", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac1add04-68ea-45a4-b37b-28dae010a588", "sighting_of_ref": "indicator--a6fb157b-b98b-48e0-91f3-c5a8d66bca5a", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6e87be4-f3c9-4d9b-baeb-2e205e4bb355", "sighting_of_ref": "indicator--a6fb157b-b98b-48e0-91f3-c5a8d66bca5a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75765829-1b69-441e-9f5a-21b658ba49a7", "sighting_of_ref": "indicator--710e2ba8-d5a3-46f5-8569-ac7aeba1155d", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c568eb5c-e501-4cf8-b8d4-97406b563496", "sighting_of_ref": "indicator--710e2ba8-d5a3-46f5-8569-ac7aeba1155d", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d175f119-1b08-436f-a1b5-0bb107b08297", "sighting_of_ref": "indicator--710e2ba8-d5a3-46f5-8569-ac7aeba1155d", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27e191ce-b1cb-435e-9021-dcc5d8b50a2d", "sighting_of_ref": "indicator--109f8fac-6db5-49f4-b9af-ee308f96e100", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c5828ec-fe20-4d7d-b97c-d292e8c752a9", "sighting_of_ref": "indicator--109f8fac-6db5-49f4-b9af-ee308f96e100", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e59575bb-bcd5-4104-a91a-d481cd1928a5", "sighting_of_ref": "indicator--dd11e023-1ff7-4f2d-bd1d-735e6efd6b54", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03209188-64b2-4dd6-b74d-53da31c868bd", "sighting_of_ref": "indicator--dd11e023-1ff7-4f2d-bd1d-735e6efd6b54", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1e81bb0-0868-4a24-8c8a-53a80cc96ae7", "sighting_of_ref": "indicator--259acf36-53e0-4fc4-b5a0-12df1bfd26fc", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74e6dbf8-eb52-409d-905b-adb945e5deb4", "sighting_of_ref": "indicator--259acf36-53e0-4fc4-b5a0-12df1bfd26fc", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e663c961-168f-4cc9-b495-0778f12b5ea5", "sighting_of_ref": "indicator--1aaa1f05-f7df-47bd-a842-2a464c49f8e4", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4582c370-4f28-41dd-8891-212505c33c18", "sighting_of_ref": "indicator--1aaa1f05-f7df-47bd-a842-2a464c49f8e4", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53cddb48-2db3-46c6-8e5e-46fe327d7311", "sighting_of_ref": "indicator--15ec4030-c150-4da5-b636-bec4ab112ebb", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa27b542-df5f-4430-b1eb-7183d51e92f3", "sighting_of_ref": "indicator--15ec4030-c150-4da5-b636-bec4ab112ebb", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b762871-b98e-422c-967c-2f29f553dc1d", "sighting_of_ref": "indicator--5f514598-08c2-4514-ada4-da0bbc955eec", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fd93c3f-0422-43c1-8779-599dfddae0ec", "sighting_of_ref": "indicator--fcaf196e-8fee-4836-83ee-dd568d94a8d6", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3125fff3-b2b3-47d2-bfd6-d1174dfc63a7", "sighting_of_ref": "indicator--769174b0-3e50-4173-97f5-586198a54cbc", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af2c7101-cac4-4049-94a5-b857c5bdadc7", "sighting_of_ref": "indicator--bdfd9de0-88c8-4b5c-9cd3-05120c22f97f", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a0f53c7-9a28-4f10-a09f-b57a2571efca", "sighting_of_ref": "indicator--bdfd9de0-88c8-4b5c-9cd3-05120c22f97f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--484a7023-1c53-4738-a96d-abe402424687", "sighting_of_ref": "indicator--07bcf547-463c-4da8-a3ef-5420cf6ccd8a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afd20f37-3eb7-4573-983c-aedea3269224", "sighting_of_ref": "indicator--07bcf547-463c-4da8-a3ef-5420cf6ccd8a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea8699f2-7207-4e19-835c-b37ab5a31caa", "sighting_of_ref": "indicator--bfd6abc1-905e-4589-87fe-938ef98a9a71", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--987a6a9a-1f6b-4636-b225-2eb25bbb3a0c", "sighting_of_ref": "indicator--bfd6abc1-905e-4589-87fe-938ef98a9a71", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b669bf48-fdfa-445e-b087-de391559389a", "sighting_of_ref": "indicator--c6860e61-5f90-45a5-84d2-922b6d51b600", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11d695c8-66e1-4450-8e7d-9f88868a2f49", "sighting_of_ref": "indicator--c6860e61-5f90-45a5-84d2-922b6d51b600", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b8099e4-d0fb-43d8-8dfb-711d5379d654", "sighting_of_ref": "indicator--c6860e61-5f90-45a5-84d2-922b6d51b600", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d1062cd-b3c3-431b-a059-b0cb9baf2553", "sighting_of_ref": "indicator--58bd9cde-4d20-4c87-a530-41badba43a03", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13d1653f-8fde-497b-bd9a-437a9dfdfad4", "sighting_of_ref": "indicator--ca9c0c0b-4f0f-4c2d-b125-445e700b0679", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--017ff449-5a75-459c-bdd0-ca8c74a285f6", "sighting_of_ref": "indicator--cdeb8f0c-aade-4218-99b0-fa93c0b77733", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--591a747f-ce5e-4463-bc25-964b5f4a8d04", "sighting_of_ref": "indicator--6de2b2ad-4192-4b8e-aae2-0a1868e56934", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca45135a-ba95-4e2f-8f09-9dc037e06fc3", "sighting_of_ref": "indicator--cd338a38-47a1-4c9d-a24b-c0b1cb85c66f", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b998783b-6541-4ff0-ab5e-ec29388a5125", "sighting_of_ref": "indicator--c5c6677d-53a0-4647-a7bc-b0dd11147cbd", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc7ffba1-c867-4bfc-a43f-bed5582fa601", "sighting_of_ref": "indicator--15e6d1cc-536a-4743-af5a-af1f13e417f2", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0706ad10-6de0-4562-95aa-a562a38e5e1d", "sighting_of_ref": "indicator--15e6d1cc-536a-4743-af5a-af1f13e417f2", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b88b46b-3b53-4bf1-9766-ce86759b9ab5", "sighting_of_ref": "indicator--9717223d-c260-4520-80f2-94f8664930da", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96a8194e-07e7-4f81-a6fb-24de165eeb25", "sighting_of_ref": "indicator--7357187a-8445-4997-a49b-526d61d24a07", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57260aa1-a43a-4e83-bbc0-b3a2e4dc0f90", "sighting_of_ref": "indicator--7357187a-8445-4997-a49b-526d61d24a07", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--113c2001-8d5d-41c8-b09c-82c5caf96459", "sighting_of_ref": "indicator--7357187a-8445-4997-a49b-526d61d24a07", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e1ff712-71a3-48f2-b0b0-b63c379fbdbc", "sighting_of_ref": "indicator--edbd1437-db5b-462a-9843-7e6a7e1b59c0", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95db94b8-d14b-4594-ae4d-9d3ac4449a76", "sighting_of_ref": "indicator--7c648f7d-dbb2-4cba-9fb0-ae88e026715e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b35fdbf-fb43-4fb5-8c0e-32288b72d35c", "sighting_of_ref": "indicator--7c648f7d-dbb2-4cba-9fb0-ae88e026715e", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b36105b-8f67-4036-8e81-b03b3f70a4ba", "sighting_of_ref": "indicator--671d9416-991a-4efc-bd2f-fa590741aecb", "where_sighted_refs": ["location--cc47317e-2c18-43a6-8938-dea748a56ad5"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afb0ee80-2d68-4432-8eef-cbcd5fd42745", "sighting_of_ref": "indicator--130a5f1a-2971-4c9e-a352-630f9ecfb254", "where_sighted_refs": ["location--cc47317e-2c18-43a6-8938-dea748a56ad5"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2595b373-0259-4331-b588-4e75f4b7288e", "sighting_of_ref": "indicator--0fdac3af-3ff7-4f52-bf4c-c70f1e96b959", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--726d248c-83b1-48d6-bbdf-3210c14a2d5d", "sighting_of_ref": "indicator--e9770f33-1365-4e95-9a05-88cde5f61d54", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6bb7a9a-748f-4906-a845-b7751efd2645", "sighting_of_ref": "indicator--be497744-c86d-409a-9e54-c5bb72d0ab96", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--443cb488-9ce2-45c0-a38f-44e357c9d669", "sighting_of_ref": "indicator--235cb056-cab2-47c4-a0b6-7f30bdf37e9d", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3060547a-c213-4e60-a205-dadfe7c30286", "sighting_of_ref": "indicator--235cb056-cab2-47c4-a0b6-7f30bdf37e9d", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62faed8c-2f3e-435a-86e2-e94916152e84", "sighting_of_ref": "indicator--3786ffd6-83a7-44a2-946f-d4eaa94a0530", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0837b7a9-0f86-4965-8b8e-bbb931ff6082", "sighting_of_ref": "indicator--2d39a5bf-6878-4abb-ba37-04af34059821", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--380aea95-a1d4-4388-8193-90fd72b139f4", "sighting_of_ref": "indicator--2d39a5bf-6878-4abb-ba37-04af34059821", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2843cf0a-5e1c-4e6d-87fa-46d055a9cf7a", "sighting_of_ref": "indicator--77841a81-2524-4f7a-bcca-eb8902b5e87d", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a82938b-6f4d-45ac-8343-63a0cf76f9f0", "sighting_of_ref": "indicator--95372a32-17cb-4a8c-be35-fde53486534b", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55fc2be3-df6a-4cbe-8d3e-4edba24a1f12", "sighting_of_ref": "indicator--95372a32-17cb-4a8c-be35-fde53486534b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--409942ab-f693-4192-a6a9-d6230f924c4d", "sighting_of_ref": "indicator--9f849e77-cddf-4740-b478-71f8f6d344f6", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--226e70e1-e034-4b73-a726-ded86af7f198", "sighting_of_ref": "indicator--2fcbccff-9647-4cb5-8663-fd9db496bdf3", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2448d7e9-7ed0-45cb-afa5-3c0e41ee674e", "sighting_of_ref": "indicator--2fcbccff-9647-4cb5-8663-fd9db496bdf3", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2ab6233-54d3-48dc-87ed-7cd28d152b5f", "sighting_of_ref": "indicator--9debcbd8-3bdd-43de-8847-c3e012709646", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4eb1f599-ff46-414f-9362-3294c6491c15", "sighting_of_ref": "indicator--9debcbd8-3bdd-43de-8847-c3e012709646", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29716276-7c8f-4717-893c-92bcc5058cbe", "sighting_of_ref": "indicator--fc5eb052-1749-44a5-a904-900e8a53efb5", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edf3d1c8-4522-4157-918b-869bb925d541", "sighting_of_ref": "indicator--39b8166f-e990-4dfb-9853-41daa77a19fa", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e5f9efe-9643-4fc8-8c95-236a981af249", "sighting_of_ref": "indicator--48ee9c04-0ade-4d69-aab8-8df9ec5d7913", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9abcc7ee-de5f-4c04-8ef2-5a5e659e3b98", "sighting_of_ref": "indicator--48ee9c04-0ade-4d69-aab8-8df9ec5d7913", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4561a5a-23f7-4f21-9523-a2016f8a1e85", "sighting_of_ref": "indicator--0019c169-5966-4540-bb8b-90b0530f8799", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9057fb1-5c9b-4d72-bbde-7a27af45d0c4", "sighting_of_ref": "indicator--0019c169-5966-4540-bb8b-90b0530f8799", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--246d67e6-a267-4877-9644-0f4b017c89bb", "sighting_of_ref": "indicator--3ceecdcd-4237-4288-95fc-554595cd61d3", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b464d45-a453-45df-83d9-11f6064a5962", "sighting_of_ref": "indicator--8dd9468e-492a-42d0-a731-deda102b8002", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb69e27f-0eee-42f8-9629-003efc13ec88", "sighting_of_ref": "indicator--4d918566-195c-467a-b492-741fd4385585", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0699d0ff-72cb-496e-9f2a-6cfb80aa4912", "sighting_of_ref": "indicator--0c9d7d2b-a616-48ab-a549-f57d76b8dead", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c22fbf0-61e5-4866-9b8a-9d0645f9c83a", "sighting_of_ref": "indicator--7c69a555-2bb6-4b4a-ac0f-514aeba14693", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec058d35-833b-4979-9d1c-51c8c6084946", "sighting_of_ref": "indicator--b3089e96-4404-4509-98a9-beebe04ef832", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82f76ff2-cb57-422f-8f9f-4cc6c8fb9e04", "sighting_of_ref": "indicator--f44b36f4-4870-45ff-87bf-6bd63c366907", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32adae7b-db12-413e-9448-f2ccf2235fa9", "sighting_of_ref": "indicator--aa2feda9-1848-4306-81b9-e0d03cc093aa", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26a38f93-afa4-43e0-9869-d62fff3a239e", "sighting_of_ref": "indicator--aa2feda9-1848-4306-81b9-e0d03cc093aa", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--621d69ee-c33b-4418-a52f-19eb9d8e9d7d", "sighting_of_ref": "indicator--c62fea59-c764-4600-a6c6-effa8537bede", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab5dac15-3b86-4d69-b4d3-a645c0d7c273", "sighting_of_ref": "indicator--c595e75f-7468-4417-b843-4b0850a699ea", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d51393c-3c1f-40c2-9021-4fc5c13ed1ee", "sighting_of_ref": "indicator--c595e75f-7468-4417-b843-4b0850a699ea", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--514fba75-d400-45bc-9c9d-b5fe242b09fc", "sighting_of_ref": "indicator--67fa9dca-fa9c-4001-a65d-ec4667978ae1", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74358e65-61af-4cdb-afd7-9e7f8438bc1a", "sighting_of_ref": "indicator--933d8b35-beea-4805-92af-da18cc73f727", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7471b000-30ba-4a83-b7ae-3352436d3219", "sighting_of_ref": "indicator--c3dc2047-10ce-42f9-91b2-ead0dcadee07", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d300154c-e09d-4ba7-bedd-23bcd37ff5ce", "sighting_of_ref": "indicator--b6b1324f-a0c6-4783-bf05-c8589f9993fa", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--498309b8-6254-4572-912f-cc5a64183b3a", "sighting_of_ref": "indicator--b6b1324f-a0c6-4783-bf05-c8589f9993fa", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a2cfa2d-27ad-456d-aec7-b9760fbe1b95", "sighting_of_ref": "indicator--b6b1324f-a0c6-4783-bf05-c8589f9993fa", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd03ae2b-4a77-41b8-a16a-4e90fc7bcc1c", "sighting_of_ref": "indicator--9506df39-c1f2-4b69-8770-718b05d6af7b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb2b1723-8a3d-4317-b6d8-230b30ec9712", "sighting_of_ref": "indicator--46ea9d99-5062-42bb-bf9f-c811b05c76fd", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a37c879-2d14-4a5d-ab44-23d782ecd231", "sighting_of_ref": "indicator--37ef3ed5-17a7-49c7-bdb1-9d35887dfa83", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d7e0415-5880-425d-b414-0c9a4e68fe97", "sighting_of_ref": "indicator--37ef3ed5-17a7-49c7-bdb1-9d35887dfa83", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d59cb624-546a-44ef-be49-8b0df88a48cb", "sighting_of_ref": "indicator--5f119d4b-f9a4-4143-bfd8-f25753817918", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8edb2dc-e784-4fa0-882e-a1fff3f70ae8", "sighting_of_ref": "indicator--c7e023d8-c347-4a8c-b41b-532e63c3581d", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f05b90a-daeb-452f-b070-4e9d1e45dadd", "sighting_of_ref": "indicator--bd9cf1a8-c132-41d5-a20f-09a2a28f092c", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9c9e0da-cfaf-4406-970c-5491c3440835", "sighting_of_ref": "indicator--bd9cf1a8-c132-41d5-a20f-09a2a28f092c", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e248a7f8-4048-48dd-a874-d0ed8c59a6be", "sighting_of_ref": "indicator--b8826630-e2c2-48b6-99da-6aa8bbca76c5", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01f224be-d3dd-4094-aad3-0da59ed96564", "sighting_of_ref": "indicator--97f28c1e-1325-44a1-b0ec-9b1fbdd8b16e", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf58363d-e387-4ae8-95d4-68fb1f497675", "sighting_of_ref": "indicator--5bf57792-d214-40c4-ac96-623f47b13424", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cd4937f-89f1-4b9c-a0d1-1a9ff4fa84ab", "sighting_of_ref": "indicator--8cd2b09f-49f1-4792-af5f-4015a59da0fe", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50aefccf-414b-4bc7-9973-ef9762d17f9e", "sighting_of_ref": "indicator--f7c043d5-595b-4529-9aa1-cad706f02a15", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7107abc-3a24-4bb8-aba5-26cf30bb9bc4", "sighting_of_ref": "indicator--e88bea6e-7b5b-4712-8787-173592e6c89c", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1caea629-46f3-41ee-a010-4ab489fa95ae", "sighting_of_ref": "indicator--8016d7a3-993c-4b9a-a838-1dc0a3a3b92d", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf292b67-3068-4b8c-a2a1-a0c308e36fc6", "sighting_of_ref": "indicator--2dd3e4e4-7fda-4133-a8d3-9942b57b7fb3", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d3cd061-a88f-461d-8004-892b9f6d3bbf", "sighting_of_ref": "indicator--c57e3819-b754-4020-8aa2-c71b34513c6c", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48e70410-10b5-4381-90bd-feed6b33ca4d", "sighting_of_ref": "indicator--31540aa6-c716-40d9-b070-cc84dabc4d4e", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1f347d9-651a-4074-854e-7f38565c825f", "sighting_of_ref": "indicator--26a1c4d9-713b-48e3-ab7b-e7576d4b7926", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2ea09aa-4a21-47ef-9ab3-4c04d95f9341", "sighting_of_ref": "indicator--e344f77d-93bc-4f74-964a-a97ca7d33dd5", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b630e46-0078-4e4a-91dc-66848f48330c", "sighting_of_ref": "indicator--12e0e75e-389e-4ed8-b03f-7edadbcadc7e", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--416d65bc-9ef5-4af0-a1b1-df156f3c0b52", "sighting_of_ref": "indicator--a3d2ba41-bbd9-458c-b6e4-77719f33d29d", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb92c267-3812-4ad4-be3e-1d112f59d4dd", "sighting_of_ref": "indicator--d874f390-5d30-498b-8ee3-97c6a4a12f1c", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4cf8ac5-a6e7-4bcf-b68e-1b96e2f02d11", "sighting_of_ref": "indicator--d874f390-5d30-498b-8ee3-97c6a4a12f1c", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa1f89f0-d240-4c69-8ccb-74a175418ba0", "sighting_of_ref": "indicator--d874f390-5d30-498b-8ee3-97c6a4a12f1c", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9db2aa76-c9bc-4f18-b466-4d6853b532de", "sighting_of_ref": "indicator--42a6a536-136f-4213-8e2e-5f7c8a64eb43", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e931f105-1cc0-42b0-a39f-6c70d136b12a", "sighting_of_ref": "indicator--1612186a-cccb-44e1-8e7f-064f13b0de5e", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59b7aeb9-5e48-4b5a-a5bb-c603189f7643", "sighting_of_ref": "indicator--1612186a-cccb-44e1-8e7f-064f13b0de5e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e84b3ce9-399f-4512-83d5-4288429b5496", "sighting_of_ref": "indicator--3b15483c-abfa-4a8a-85c7-27fdd4f83bd0", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7685d49c-dcb5-4782-a03a-8ba2b3254f0d", "sighting_of_ref": "indicator--3b15483c-abfa-4a8a-85c7-27fdd4f83bd0", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a84b3fbe-cc21-49ad-bf43-8e8dd2ec7f69", "sighting_of_ref": "indicator--9840b53d-f136-4ed0-add1-c42672315638", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5969c923-ae07-430c-a4a9-efe92e74cb70", "sighting_of_ref": "indicator--9840b53d-f136-4ed0-add1-c42672315638", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ed778ee-8cbe-4dbb-ac33-3d1252681ac8", "sighting_of_ref": "indicator--f7c88314-b756-4e49-952f-736ede4583a2", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--743cda2e-b38e-4301-9211-fd48ba5c383d", "sighting_of_ref": "indicator--b71a960a-d84c-413a-b86b-7622dc9be89c", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74fcd91e-1e13-4a7b-be1d-09a12123feaa", "sighting_of_ref": "indicator--5b2b28d2-6b1d-49ca-9fc1-8342e443711b", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e57e7510-dade-43dd-b81a-b16943998bfb", "sighting_of_ref": "indicator--5b2b28d2-6b1d-49ca-9fc1-8342e443711b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3230cc28-a92a-4a5a-9cda-8f06360fab01", "sighting_of_ref": "indicator--5b2b28d2-6b1d-49ca-9fc1-8342e443711b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0efe6b23-039a-424f-9c12-f0a81b66631f", "sighting_of_ref": "indicator--ec79d681-cc34-4e0b-8218-2b2d546abbba", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbb8fbb4-fcb2-4e8e-bc6b-72d386db0b87", "sighting_of_ref": "indicator--ece703b4-ef27-4a1b-b9cb-d4878ce9146a", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96b24970-b3f4-431e-99fa-a73014040d05", "sighting_of_ref": "indicator--739784e0-5efa-4772-a828-e354f2711861", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebf1898a-835a-4947-9c19-002a11f73146", "sighting_of_ref": "indicator--36cb3800-3d35-4f55-b631-79ec390f8adf", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ce80e1c-da8a-49a0-af56-d823ebe679c2", "sighting_of_ref": "indicator--850cf872-7b44-4ac3-8d28-a9ca10e36dc2", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c80aaa8-008b-4a51-b802-6ff8a9a7d682", "sighting_of_ref": "indicator--3c4f5ebc-621a-46b3-9419-a9e4b4b593fe", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5979412-6c28-4946-9f8d-52f84f5694b3", "sighting_of_ref": "indicator--127e3fb5-aa27-4f25-8b1e-63d243b05d71", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d9b8ba9-1401-4567-82fb-8b50ad91eba9", "sighting_of_ref": "indicator--1d17b539-ab35-4d93-a185-cb3008584500", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--381d9386-c1de-4cd6-963f-f93d089bc8c4", "sighting_of_ref": "indicator--1d17b539-ab35-4d93-a185-cb3008584500", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b8acaed-b5fd-4353-8397-962de66c9e77", "sighting_of_ref": "indicator--06adc8f3-3a29-48d9-9c3f-c3f38b1059f0", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--860eb0d8-7a83-4606-8cef-824308555790", "sighting_of_ref": "indicator--67631075-2690-41ba-b541-2ae347ef9797", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2809ace4-a645-48f1-aa82-7f7abc21dcc1", "sighting_of_ref": "indicator--67631075-2690-41ba-b541-2ae347ef9797", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1444b724-aa3f-48e0-b3e0-543aec0aa940", "sighting_of_ref": "indicator--083fc2d7-c106-44a7-b9fb-d7e6a1c22876", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c699280a-396b-4d26-8496-9b0cb84eff6c", "sighting_of_ref": "indicator--a47a3727-2eec-4d86-88d0-1a9fde7ca2e1", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef88663c-90b1-427e-9513-3815c4d4ec40", "sighting_of_ref": "indicator--a47a3727-2eec-4d86-88d0-1a9fde7ca2e1", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd9ea23e-8978-4707-8dda-94edbd066312", "sighting_of_ref": "indicator--4f2be587-1142-4205-9057-1ffc259fde9d", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fc269c8-2782-4e5c-963f-20bcbe2dd7be", "sighting_of_ref": "indicator--4f2be587-1142-4205-9057-1ffc259fde9d", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8980580d-862e-4e90-baaf-ce4a6dbad782", "sighting_of_ref": "indicator--9efd161f-7c3a-4753-8977-fa8f489c7f50", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8d2ddfb-b73a-494c-86fe-0b0985ed4c5a", "sighting_of_ref": "indicator--9efd161f-7c3a-4753-8977-fa8f489c7f50", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fd66e79-6ec0-442e-8b0d-084882c09505", "sighting_of_ref": "indicator--b9540563-c650-4355-931b-769eb83b0142", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9738ee89-c1d8-43b4-8006-ec088a388111", "sighting_of_ref": "indicator--b9540563-c650-4355-931b-769eb83b0142", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31ee01d6-8782-45db-bdea-9030acab2493", "sighting_of_ref": "indicator--b05ff26a-1dbb-4c8f-bf52-2b9069f85110", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21ace740-5fe1-4657-8d86-5049b654a0d6", "sighting_of_ref": "indicator--aa8d9d5f-c089-4422-ae96-542f8e8151f6", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ae3bac2-8167-4da3-af3c-f2ef8916d0e9", "sighting_of_ref": "indicator--f7fedf1f-54ff-45ab-bc50-4a94717363a4", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4018ac9-f9c9-4ba2-8232-2456235ffa95", "sighting_of_ref": "indicator--7591e450-aacf-4f48-b6c5-5406b43cf59d", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--869cd622-b306-4aae-8845-c6f7733085f5", "sighting_of_ref": "indicator--7591e450-aacf-4f48-b6c5-5406b43cf59d", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--533bb67f-7d73-4119-ab1f-ed0e4a6ba8d1", "sighting_of_ref": "indicator--57ecb1e2-665a-4f16-b8ae-04381a6c66ad", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90e40a26-b41c-4413-9fa7-aa347530b8ea", "sighting_of_ref": "indicator--57ecb1e2-665a-4f16-b8ae-04381a6c66ad", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb624950-dfba-4749-ab4d-48d3ad3e24f3", "sighting_of_ref": "indicator--c0e81ad9-9a30-4a5a-9445-b371d143e855", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93d31e5f-b0be-46bd-98ab-674bb768bc58", "sighting_of_ref": "indicator--c770cb44-5055-4180-877c-4fdcd2f37af0", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2c13291-36c2-4ce7-985a-4a441602eec3", "sighting_of_ref": "indicator--c770cb44-5055-4180-877c-4fdcd2f37af0", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07fea298-5769-4bf0-a054-19070fa36ae4", "sighting_of_ref": "indicator--ccbb3564-ca1f-4158-b8fb-984908e7282c", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34d3f8cc-3744-46cb-9908-cc1ae35e76b2", "sighting_of_ref": "indicator--ccbb3564-ca1f-4158-b8fb-984908e7282c", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd25e375-fd3f-4e53-b01b-35a0972bed03", "sighting_of_ref": "indicator--0404b176-e67e-43e5-b915-c06ccfb65b34", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77ce99a6-e427-4767-9edb-6bf4f7ef01d7", "sighting_of_ref": "indicator--0404b176-e67e-43e5-b915-c06ccfb65b34", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b8b60a4-af4b-4b3d-9a38-753d2a981130", "sighting_of_ref": "indicator--b4d29ce6-3a5c-4e89-95ab-2618c0525601", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19b9abf0-f5d8-462e-b128-4924d92327ab", "sighting_of_ref": "indicator--b4d29ce6-3a5c-4e89-95ab-2618c0525601", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0763741-1572-43f6-98e2-5e1c6c5ccfd3", "sighting_of_ref": "indicator--e505ab3d-32da-4a02-89bc-4a93468eadc3", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41a330d1-6e8c-484e-9ad0-89d5a5c31a5a", "sighting_of_ref": "indicator--e505ab3d-32da-4a02-89bc-4a93468eadc3", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6ae89a1-1efe-4879-bb27-f35d2865793f", "sighting_of_ref": "indicator--7bcd9de7-23d6-4c18-9f22-d832c79b66a7", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c48567d-0bbd-44ef-971e-cabec36c3145", "sighting_of_ref": "indicator--7bcd9de7-23d6-4c18-9f22-d832c79b66a7", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6f80459-2591-4ded-af42-ae4af8dacf59", "sighting_of_ref": "indicator--3de266b4-66db-4f70-a6d0-96eab82f833f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ba9129a-b8bd-45db-b105-c9eeb0552562", "sighting_of_ref": "indicator--3de266b4-66db-4f70-a6d0-96eab82f833f", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fe308dd-1237-4e1c-a9b2-7ea413ecfdd8", "sighting_of_ref": "indicator--3de266b4-66db-4f70-a6d0-96eab82f833f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--446cbf68-dde2-419c-ba70-c4fadfa7161e", "sighting_of_ref": "indicator--b0ca3f0c-450e-43fb-afbc-dd03dfead902", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--196706f8-f940-47c1-b7df-e3b4df421255", "sighting_of_ref": "indicator--b0ca3f0c-450e-43fb-afbc-dd03dfead902", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50592ec4-698b-4a59-96a4-1222b71bbf8b", "sighting_of_ref": "indicator--cf7afe46-a5e3-4c03-a68d-00f03d2e428e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a19a560d-8711-4125-877f-f6b7d8e52deb", "sighting_of_ref": "indicator--cf7afe46-a5e3-4c03-a68d-00f03d2e428e", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14b9a7f2-284d-454c-aa64-0e02fb5cbe2b", "sighting_of_ref": "indicator--4b2f3318-21ce-4c90-8a55-4d8514fc000b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70466376-c4da-47c6-a2f0-b4dbbb290070", "sighting_of_ref": "indicator--4b2f3318-21ce-4c90-8a55-4d8514fc000b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40c142c7-6d5f-4d72-a2d6-75f4ac1fcfc2", "sighting_of_ref": "indicator--2ec40918-fd01-480d-9803-1e0380098bb2", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5d8ebe6-2553-401e-ae7f-b85c57371ed3", "sighting_of_ref": "indicator--39306c10-b629-4354-ab89-bb58af65a196", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78b749ca-2758-4a89-94ec-e211a2faf732", "sighting_of_ref": "indicator--39306c10-b629-4354-ab89-bb58af65a196", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19ad4362-adb8-40cd-9cac-43b1cd9f6e54", "sighting_of_ref": "indicator--41b2ff6e-f8e5-47db-942a-7828ebecc121", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac0cb600-85a7-4d6a-9f58-f0bf56cc1588", "sighting_of_ref": "indicator--1cd31a26-6188-4761-89d1-d498bf31ba81", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f9e7232-d1ed-4f81-b02f-a5b66a8f2b52", "sighting_of_ref": "indicator--d6ec5bda-8542-4e19-aa77-94c7604a559b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2311e430-1da0-4f94-93c7-edf65576901b", "sighting_of_ref": "indicator--cc756fff-a697-4178-a7e6-b591caab4b8e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6bca18b-81f4-4e41-8573-172ec4946c6a", "sighting_of_ref": "indicator--ffcb4876-f843-4381-a29c-5d589ea5f32e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20feb286-15b4-447f-9762-90289b41b43b", "sighting_of_ref": "indicator--4f78a452-b1ed-4e27-9fa1-b2316c347e82", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13271489-4fbd-4136-aa9b-fc6c83a0220f", "sighting_of_ref": "indicator--382a848e-3b76-4f3c-ab47-7be61ed18fc7", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4eaea70f-ff0b-4219-9fd6-bf978ab89812", "sighting_of_ref": "indicator--28698ad6-bf52-489d-ac24-7eebb988df00", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--058d192f-0481-4fd4-9414-df4eed89571e", "sighting_of_ref": "indicator--bdd24249-2673-41a4-824e-db2209a0a8d3", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1e4adba-5d7f-4565-b6b9-e8e40c522b38", "sighting_of_ref": "indicator--a0f95e9a-db17-498d-ac30-bd399292cea0", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56f8807c-b2e7-4d4b-a9da-29f6e5934089", "sighting_of_ref": "indicator--6d9a775d-f0ab-47f0-b276-27d83970fbc9", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81865971-99dc-48cd-af5a-949568210359", "sighting_of_ref": "indicator--c49dd51e-9412-4e2c-a321-61978f48ee36", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cce453cf-a24e-4fd0-af71-25081b22a607", "sighting_of_ref": "indicator--3ed1c246-fa74-44a7-8548-372c1d95b8e1", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf3927c6-5475-4dc2-81ba-13ebb0e33cfc", "sighting_of_ref": "indicator--2a03679f-aff9-480a-89f4-63d88fa3f92d", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0a560a3-84c2-4003-9445-d8c99a27f285", "sighting_of_ref": "indicator--b798959c-c291-4ad6-8d55-0e1cf95f0df2", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80e77ed1-6b9d-4829-ab7a-e68dc7873823", "sighting_of_ref": "indicator--e25aa1ff-66cf-4a17-8a8b-e6efdae97851", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34384196-3865-4e41-8e38-bc9b5d4e6ef5", "sighting_of_ref": "indicator--29419421-0ea7-4291-9c7d-21f2b6e1b383", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--554e5e54-7ccc-4a16-8afe-74c44e519de1", "sighting_of_ref": "indicator--65dc27bb-cb96-4ebc-91dc-40a75940ceac", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ad1b4c5-7a14-4d58-93d5-e5d5b47406a1", "sighting_of_ref": "indicator--c0bde6ea-1fa6-4182-8f3a-73545daab7d1", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--553d6c07-690e-412f-898d-44d3ae6ffeee", "sighting_of_ref": "indicator--eb8cae29-e583-4cf0-a994-d880a7d3e0f6", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cd15406-1aa0-4506-b299-c4e458426e6a", "sighting_of_ref": "indicator--0e71ae36-a70f-4538-89b9-33a14786e094", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c783c0f6-33c0-4468-a4fb-668fcf06b13f", "sighting_of_ref": "indicator--20ce31ef-5549-43f7-89fd-7ff5e0f41ae5", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd87d9b5-0cc5-4111-9406-f0c44fa7dbee", "sighting_of_ref": "indicator--20ce31ef-5549-43f7-89fd-7ff5e0f41ae5", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c661752-cecd-403b-bdd7-d07fcfc29932", "sighting_of_ref": "indicator--dbb26de9-b700-4de5-8692-c2ca65053062", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01ef7e6e-eee7-419d-8054-ff043541315e", "sighting_of_ref": "indicator--51d812a5-e53d-4a65-a51c-0d63eeeed523", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5417bbc6-9585-4ef9-af45-42d3a55a63a0", "sighting_of_ref": "indicator--51d812a5-e53d-4a65-a51c-0d63eeeed523", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--263999e2-97cd-4cd5-a113-b58683be1b45", "sighting_of_ref": "indicator--51d812a5-e53d-4a65-a51c-0d63eeeed523", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e4654d3-2bb8-4a64-bbd0-f6a9cad8f929", "sighting_of_ref": "indicator--a0fa41d3-1fb1-45b8-86b2-aac32a32d075", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dca19bc2-48cd-4c72-85a9-a6d6d12d810b", "sighting_of_ref": "indicator--a0fa41d3-1fb1-45b8-86b2-aac32a32d075", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b3056af-78ae-4b55-b0b6-d6740d9b9757", "sighting_of_ref": "indicator--a0fa41d3-1fb1-45b8-86b2-aac32a32d075", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca6ac2fd-2efb-45d4-8b7e-9efddd3490f9", "sighting_of_ref": "indicator--9061c458-37a8-4d51-9ac8-b226244a7c25", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--545574f7-b61d-4ae0-9d2e-1534e069c500", "sighting_of_ref": "indicator--9061c458-37a8-4d51-9ac8-b226244a7c25", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcfe3909-d3cf-486b-8a9e-d2d08fc12c3b", "sighting_of_ref": "indicator--aa775b68-41d2-453e-b01a-8497f96caaa1", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c54f39f6-26bc-44e5-ae96-506c99f6c22c", "sighting_of_ref": "indicator--1880139d-8a5f-4944-be14-4f1b99a9cf06", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e1b870d-a272-433b-82fd-994fbde3baf2", "sighting_of_ref": "indicator--1880139d-8a5f-4944-be14-4f1b99a9cf06", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a054f2b-fde7-4b58-83b0-f77a5f796909", "sighting_of_ref": "indicator--1880139d-8a5f-4944-be14-4f1b99a9cf06", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19d5336e-e6ea-4e32-829b-42c2868d883f", "sighting_of_ref": "indicator--af9d17cd-fd1a-438e-80e5-287ed556632a", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e2395c5-efe3-4710-8e34-02226dfd7304", "sighting_of_ref": "indicator--f75fae1c-362f-4868-b533-3fb6fd80dd6e", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d07b7214-bd44-4186-9557-716b9d123356", "sighting_of_ref": "indicator--af9ea32e-7f58-44a7-a63e-9d40ccb927c1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--485da04b-7a2d-4ef7-93e2-3834d04cccb1", "sighting_of_ref": "indicator--736ad5b5-238d-4451-8981-bc1290b5a511", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a268141c-6f5e-4ce3-9d62-23b92abcd8b8", "sighting_of_ref": "indicator--736ad5b5-238d-4451-8981-bc1290b5a511", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a83c73ee-5a42-43c2-b3fa-457141d174ea", "sighting_of_ref": "indicator--ce6c1e29-4477-4a96-a714-1a13b02d6c6b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3bf20b6-90a4-4c56-92c8-6acdb8ff7389", "sighting_of_ref": "indicator--27c73226-9858-4e27-9c41-9c61fc828539", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48fc2152-618e-4322-b531-0d4e146f6884", "sighting_of_ref": "indicator--bb50f969-acad-46a3-8275-2081076441ea", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a032109-903d-471e-a842-225fd58c5274", "sighting_of_ref": "indicator--f730b941-19a3-4de3-bd62-87cdd856a714", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bf64f2f-5107-44d1-8172-e582b8ae7f6f", "sighting_of_ref": "indicator--f730b941-19a3-4de3-bd62-87cdd856a714", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a2c021e-fa4a-4ad9-93f9-738f9550e958", "sighting_of_ref": "indicator--3e01945e-5d1b-4524-992b-e11f5aa00e5f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf5c7332-bd94-4429-8ec3-1c6d1b75cccc", "sighting_of_ref": "indicator--3e01945e-5d1b-4524-992b-e11f5aa00e5f", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1032c72-78af-4985-a5a6-10681eafeb3b", "sighting_of_ref": "indicator--3e01945e-5d1b-4524-992b-e11f5aa00e5f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30b976ca-048d-496b-b57c-3a9be565cd97", "sighting_of_ref": "indicator--070a644b-7308-4920-86da-723c149fc726", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0db54c6c-48a6-44c5-a28e-d9ad4f618fce", "sighting_of_ref": "indicator--070a644b-7308-4920-86da-723c149fc726", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cd6e1d3-fd50-46a0-b334-927f4e746ad7", "sighting_of_ref": "indicator--2e34049e-826a-4eb5-8c3c-248bd63c87bd", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68c75516-5cd6-4f6d-9d20-c6d0f196aa2a", "sighting_of_ref": "indicator--620bf022-44e0-49c3-89ef-f8bf578853ff", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29806730-6f91-434c-998c-441a0b840fc5", "sighting_of_ref": "indicator--782eabf8-2881-414e-bb5b-65b3df3ab11b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60b23af3-c303-4a48-a6b0-8a910feba160", "sighting_of_ref": "indicator--6f993dda-5ce0-4967-b0b6-1747e9693786", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fedf1de4-4d42-4559-86e8-db992729d8b3", "sighting_of_ref": "indicator--8f80f225-66e5-4e9a-882e-55b71e02d510", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bbef5f8-b9cc-4aa9-88dd-4d38849ae9d0", "sighting_of_ref": "indicator--e5e68df6-4a9d-43e3-be2c-d0b51a4f1e8b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d42a7fe-55bd-44c0-a960-2db81e3da5ae", "sighting_of_ref": "indicator--6e1b1377-be0a-432e-a684-7e4c517b4fcc", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35e458d5-0789-48aa-8977-a8a4c614eda1", "sighting_of_ref": "indicator--3797cd88-845a-4b47-94fd-c6ef707e9f27", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb238b74-c58b-4fbe-b69a-29331376a678", "sighting_of_ref": "indicator--3797cd88-845a-4b47-94fd-c6ef707e9f27", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99ff89ca-0cb5-4768-97f5-f547a6fe68b6", "sighting_of_ref": "indicator--8ae0d798-c9d9-4ffc-a001-33d5581573d0", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ce719aa-f5d7-47d8-92a7-0116f6e9d667", "sighting_of_ref": "indicator--1a4ebf0c-b753-4de8-8780-40bdee80f39e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb0225b4-748a-4961-b3f5-5da869092e6f", "sighting_of_ref": "indicator--32fea690-971f-469e-9f97-19f6df365b5c", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8a30f75-e418-4e4c-9e5b-b8278bcc5c99", "sighting_of_ref": "indicator--4cf43dfc-c9c3-467e-8fce-b9dc5a35fa4a", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85b8e2b5-a038-4737-be77-215d9159795f", "sighting_of_ref": "indicator--4cf43dfc-c9c3-467e-8fce-b9dc5a35fa4a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62033d43-8dd5-4e7b-8786-387b74407d27", "sighting_of_ref": "indicator--2ce382ac-be00-472f-b824-ca79d0ae3d99", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4fc6daa-61f5-45c3-99d1-de028fce75ba", "sighting_of_ref": "indicator--2ce382ac-be00-472f-b824-ca79d0ae3d99", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9a89a2b-ecfb-4c44-ac53-1b1c2da67f61", "sighting_of_ref": "indicator--b46b026a-a235-469b-9f6a-ba718ea99802", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d18451f-14b3-49fe-a3d7-83f58d6ebbe8", "sighting_of_ref": "indicator--b46b026a-a235-469b-9f6a-ba718ea99802", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9e6039a-c6cc-4a27-b0b8-6cf44ab6ce22", "sighting_of_ref": "indicator--4311152d-28ee-475a-8413-4be97699bb05", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--039a1b06-61b9-42f6-a004-7f4950e73561", "sighting_of_ref": "indicator--4311152d-28ee-475a-8413-4be97699bb05", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a652ffde-72c8-4ce2-a416-12557e2fc039", "sighting_of_ref": "indicator--4311152d-28ee-475a-8413-4be97699bb05", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d6a55bd-93d2-4593-98b4-d285f652c263", "sighting_of_ref": "indicator--b88e4ca4-b455-4894-8224-a0c1afc1b946", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77b28cee-a819-4424-986c-471b85550daf", "sighting_of_ref": "indicator--cc775b1c-4ffd-4adf-9c50-49c041cf405d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6ea553b-5402-49a5-a03e-d84e029101d3", "sighting_of_ref": "indicator--d8e91725-b4df-43ac-894c-28ac4ed53d10", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60aa4bf6-5f6f-411e-b37b-bee2190aa44b", "sighting_of_ref": "indicator--2b17169b-8c16-48bd-9560-9c64a8045355", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73b4a749-7fca-469c-a341-79ef852d407c", "sighting_of_ref": "indicator--2b17169b-8c16-48bd-9560-9c64a8045355", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a226ece-9887-40fe-8e64-c5744954b8c9", "sighting_of_ref": "indicator--8884aa12-1e6e-4447-9cd5-1e03337536c0", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab0069d6-478f-461d-9424-e2eeb9cf58a2", "sighting_of_ref": "indicator--8884aa12-1e6e-4447-9cd5-1e03337536c0", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--193babcc-ee2e-498f-83cf-8208f1b844d0", "sighting_of_ref": "indicator--8884aa12-1e6e-4447-9cd5-1e03337536c0", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35aba07a-e1ee-4b97-a5e6-db2dd60efae4", "sighting_of_ref": "indicator--827ab610-07dc-45bd-b635-957ddb9fdae0", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cc287f7-0668-4840-9b6d-22917233cd15", "sighting_of_ref": "indicator--827ab610-07dc-45bd-b635-957ddb9fdae0", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbf70cb3-d33f-4e32-a4a1-c3916c8051aa", "sighting_of_ref": "indicator--827ab610-07dc-45bd-b635-957ddb9fdae0", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e76659ae-878c-447f-bc4b-030ddeac6d5c", "sighting_of_ref": "indicator--ba412a62-d05b-4e29-8982-2b190bd7bd4b", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06e8455b-b61c-4c0c-8a94-87676debb97c", "sighting_of_ref": "indicator--79297644-8e65-4a53-a100-7b260431969f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8cdbfb1-8471-4312-817b-53ffb7b4e313", "sighting_of_ref": "indicator--79297644-8e65-4a53-a100-7b260431969f", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b74f446d-d9bd-4e4d-b771-1a22461b08c3", "sighting_of_ref": "indicator--79297644-8e65-4a53-a100-7b260431969f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b025a7ea-e1e0-4f13-8967-131e455812d5", "sighting_of_ref": "indicator--d558c3aa-277f-4431-a9b7-da3eaed28965", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c071a11-a853-46a9-be23-c48194d10e2d", "sighting_of_ref": "indicator--d558c3aa-277f-4431-a9b7-da3eaed28965", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c74a4606-3c13-4607-9dad-51f87304a79e", "sighting_of_ref": "indicator--d558c3aa-277f-4431-a9b7-da3eaed28965", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4ab1f59-5a44-4a45-bf0c-f246e425bad6", "sighting_of_ref": "indicator--985500b0-c776-447d-97d4-8780eee077ce", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--507309be-9390-4067-abff-4c62d8843e33", "sighting_of_ref": "indicator--ee6a4f3c-bb27-45cc-860e-027938456196", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc722001-3770-4ec9-90bb-dd336a91f98a", "sighting_of_ref": "indicator--32d602db-9567-430d-bc6b-67ab67591596", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fe67210-57bd-4f6e-8e7f-de91fd14172b", "sighting_of_ref": "indicator--bd598aef-0e93-4a55-b231-9e23b38109da", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d604a93a-2774-4e74-8f55-676b17b4661a", "sighting_of_ref": "indicator--944d205c-a8c7-4127-96c5-70b20af60c38", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7221978-a640-4ead-b117-dc89d0c9c8be", "sighting_of_ref": "indicator--944d205c-a8c7-4127-96c5-70b20af60c38", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a1eb5d9-ef84-4351-86b8-1484705d6c31", "sighting_of_ref": "indicator--f5733529-f564-4e4e-8a7e-adc0ad14355e", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--401d95ff-3b1e-4e37-900f-dce6c804c02a", "sighting_of_ref": "indicator--f5733529-f564-4e4e-8a7e-adc0ad14355e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a085128-b675-458f-98d7-2a2fd05f6a95", "sighting_of_ref": "indicator--7ba77f45-b683-4a06-9f93-74e5d2152fbd", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da75a778-b11f-44b0-90b7-bf9e79ff63b0", "sighting_of_ref": "indicator--a9a59e8e-930b-415f-815a-e2b1d637f2d5", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1f1c8b0-4117-45bc-99ac-6876aaecd43f", "sighting_of_ref": "indicator--73eedf0d-cda1-45ac-ad14-035bfbfe4cfd", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--099883af-0dac-42f3-a733-6ce983d059f6", "sighting_of_ref": "indicator--73eedf0d-cda1-45ac-ad14-035bfbfe4cfd", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33a40f15-548b-44cd-9f50-34e734fd03c5", "sighting_of_ref": "indicator--0165d751-05a3-4d70-beaf-dc7b84535549", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--936f673b-1ec8-4c51-8900-276efa9e63ee", "sighting_of_ref": "indicator--5200b490-c80b-414b-a348-7bc73fa72250", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1835816f-984d-421b-9c99-255dc0749b63", "sighting_of_ref": "indicator--f7c95922-7ef6-4af0-a74d-8832dd5b7958", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5a1b858-1068-440a-be5b-8cca294d0278", "sighting_of_ref": "indicator--f7c95922-7ef6-4af0-a74d-8832dd5b7958", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8054f851-37b6-473e-910d-7d09cbaa5883", "sighting_of_ref": "indicator--ed1b8bb9-03a3-4a76-be23-43389b7ca537", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86943871-4752-4398-a452-b547502eb47d", "sighting_of_ref": "indicator--ed1b8bb9-03a3-4a76-be23-43389b7ca537", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ddc9fda-400a-40ec-add7-08e99d7c80f8", "sighting_of_ref": "indicator--d73ef272-90e8-40a8-a131-f65903e18922", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4037be6-ccf7-4920-af18-d1e54c08b1a5", "sighting_of_ref": "indicator--d73ef272-90e8-40a8-a131-f65903e18922", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c2b3620-d861-45fd-9b1f-e5dc1906c639", "sighting_of_ref": "indicator--d73ef272-90e8-40a8-a131-f65903e18922", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ca6758e-2cfb-42bc-8b3b-92b95e2c9fee", "sighting_of_ref": "indicator--c68853d6-90c6-4901-8e7b-cc15830ec555", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0db0d3f-0a9d-4183-8739-338fa25540ff", "sighting_of_ref": "indicator--40c3825d-4d08-4be5-812a-400447c80477", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2503065c-c5f4-4027-a22c-970dbc0ab17f", "sighting_of_ref": "indicator--880e6f1c-a06b-46e0-9c1d-a218c62a9de4", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e999d20-9258-4aed-ad76-de94ee4ac966", "sighting_of_ref": "indicator--c23a7e08-e7b3-4f9e-af12-0f6647461ff9", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c999ed4-1f47-4401-a3ce-d7f5ed159b38", "sighting_of_ref": "indicator--f6350bb5-afe5-4a95-a7ab-ac7e4d440c1f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaeda1ea-9326-412a-bc33-3505beced520", "sighting_of_ref": "indicator--92922274-db86-4be4-ba9e-fd1348f406f1", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d10a2b5a-f0b3-40f6-aa70-1928fa072a06", "sighting_of_ref": "indicator--4ac9b604-1829-4f43-a3fb-4548b89eae02", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ed79efc-41a6-43be-b4e3-8d1e8d3bda7e", "sighting_of_ref": "indicator--8576bc0f-eeb4-4014-b476-eda965844787", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abd7285e-15d1-4ec9-b16e-53c3ac48c081", "sighting_of_ref": "indicator--d04308d5-2ab9-4d47-a7d9-fa35fcf72a12", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8307ca13-1acf-42b9-aed9-90409cfd10d8", "sighting_of_ref": "indicator--1bb3122d-1a25-4319-938c-99463f11cd7a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--764c981c-c0f6-40a4-be22-f13847205159", "sighting_of_ref": "indicator--b1ce3c01-4dbd-4b3a-8d38-13a9bd7cadff", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--230cf67f-10ed-4cef-8760-ab5ad79d78c0", "sighting_of_ref": "indicator--70066eb3-efb1-46b8-8b77-afef9889e76b", "where_sighted_refs": ["location--cc47317e-2c18-43a6-8938-dea748a56ad5"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce662e54-ce1a-4918-b355-f4a541c3003c", "sighting_of_ref": "indicator--4bf92b2c-ed98-45f7-a925-1016c44b1e30", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--facbc3cb-e92a-434f-a5cc-a437b7cf0184", "sighting_of_ref": "indicator--1bec7cc3-193f-469b-9809-5dc6c8f84641", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cda0dbbc-be7a-4a92-9f38-8fc90cb12b42", "sighting_of_ref": "indicator--97ab048f-294f-4640-b665-58f3abfac07f", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77ba9a7a-19dc-46c8-ba4e-c567eac6a833", "sighting_of_ref": "indicator--35516ff8-e9f5-4d69-962d-293cb278cc9f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcb15a1f-c8d9-4778-a31a-f290cf642f47", "sighting_of_ref": "indicator--71e6678e-18af-4b60-8a40-c0bb56b9fdf9", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8469b0f3-bd7f-47a2-b8f8-0c72535e2794", "sighting_of_ref": "indicator--53eda91c-c694-4963-9b90-639557df31a8", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--996cf176-1626-4cf1-9783-1b555096cba2", "sighting_of_ref": "indicator--328fdd26-26cf-4e46-a932-97818a015f20", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b51b64f1-929f-4ee8-9acb-cd2e6fcd64c5", "sighting_of_ref": "indicator--b0de3817-6b59-4812-ab06-efc3d36fd791", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81cc7bfb-4ddd-40b3-9ff1-46e2bf46755c", "sighting_of_ref": "indicator--d0a22108-d07b-45d3-aa90-4cacfcf71c47", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--385a2fb9-9882-492b-8150-2641003031b5", "sighting_of_ref": "indicator--490924d2-b711-42df-bce9-fd1651756073", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bad6130f-12a1-4bd0-95df-6372585ef3d0", "sighting_of_ref": "indicator--09f373af-7c12-4a2b-afd0-5dcffdd1bcfd", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91a43eda-3c4b-49c8-adb9-9244af784a93", "sighting_of_ref": "indicator--6a2a44c9-caaf-4bd2-bee5-aa451b95c1c5", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55c24cc2-dec5-4a0e-8c91-da6af9a8816f", "sighting_of_ref": "indicator--6a2a44c9-caaf-4bd2-bee5-aa451b95c1c5", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f43d69b-1c33-4fbb-b173-4bc296237c1f", "sighting_of_ref": "indicator--fd668cac-74b1-4dd9-a1db-c3a287faad2b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c81e8dac-46d9-4e06-9cd5-ccc6597316b0", "sighting_of_ref": "indicator--acef7c66-d3eb-40d9-832b-bc13c7f9ba24", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--592e7864-9f18-4c8c-ba6b-fd2590b47569", "sighting_of_ref": "indicator--7480d641-d205-401c-81ea-2096594a0af2", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9436e2e0-7d33-444e-aa39-5ca2ea5ba468", "sighting_of_ref": "indicator--3ca0bd3d-1ca2-4d64-b530-8859edaeb0cf", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30cac733-6cc3-4686-908d-dc9ba5ac861c", "sighting_of_ref": "indicator--ac323122-7e09-417f-b6f7-981db3758868", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee955b7e-f40a-4c52-bc15-12496aaee614", "sighting_of_ref": "indicator--b1e5dcab-8b59-4163-a33f-ffb3657e8104", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--939f4c0a-5640-408e-a77f-a35b8d2cbe0a", "sighting_of_ref": "indicator--6fb73f7e-b1cf-4733-b3ba-a9d4474fad85", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0306d90e-7daf-4d8b-9e09-66ef4dd151c4", "sighting_of_ref": "indicator--636814f3-87d5-4e7b-96bd-51f2203de407", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--144a6fb6-d8a9-48bf-851e-59afa0f2bbd5", "sighting_of_ref": "indicator--e8a8e4f5-742a-4a6b-b45e-a88c410c3cf2", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45d1c165-a3f4-4f5a-a0d4-347e2ad5acc8", "sighting_of_ref": "indicator--eba63d22-7f8b-4db6-8f95-6db286a0946b", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69abb426-cefe-4a78-b055-e2395aad1b26", "sighting_of_ref": "indicator--eba63d22-7f8b-4db6-8f95-6db286a0946b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c27c9866-64bb-49fd-9bb5-9ac4e87657bd", "sighting_of_ref": "indicator--fb34bee6-c9e9-42d6-920c-aa7b29bc602f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd957a85-5434-41f0-8b77-4f6817888853", "sighting_of_ref": "indicator--aae7ece4-540f-4e22-8e06-bbf935e2017e", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dd72daa-d1cd-41ff-b92b-8d68dc4296b2", "sighting_of_ref": "indicator--3b08d3c0-cfa2-4708-9ea0-b72b4cb0a83e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30b72f1a-c9d5-4e29-8fa1-3ea16adc78e9", "sighting_of_ref": "indicator--328867a2-dbf9-4369-ab31-8382e650890d", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a03a5d0-1881-4bc1-a184-6436cdfbf916", "sighting_of_ref": "indicator--ccff571c-c74d-454f-8269-a3434766a44d", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b16bb484-622b-48e0-866a-6f3b2ab8b5d6", "sighting_of_ref": "indicator--ff6cbe35-925e-4536-9b13-4032c8397a5b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec40bd37-8016-4117-9f87-4b280694a0d4", "sighting_of_ref": "indicator--86929f54-0a8f-4e77-988a-e8bda9fafa9f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f01e856c-6849-4657-b06d-6f6c3586b179", "sighting_of_ref": "indicator--510156af-2aa5-4249-950b-2b27cddeb8d1", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de0af76a-f53e-4900-a3fa-557018115d87", "sighting_of_ref": "indicator--c33e45a9-ae41-44bf-90b1-8e8ca985fe94", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d811f97a-ee31-47bc-bbe9-7c68ad1ad5e7", "sighting_of_ref": "indicator--c33e45a9-ae41-44bf-90b1-8e8ca985fe94", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21a2604d-970d-4aac-a7dc-f6624bf1cc0c", "sighting_of_ref": "indicator--c33e45a9-ae41-44bf-90b1-8e8ca985fe94", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--272be380-6827-43e8-aabc-c777160f09fd", "sighting_of_ref": "indicator--7f69ce8d-5d20-48b1-b5d5-ba0167ecf48e", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25db9081-e082-4824-9532-a673f6a470f0", "sighting_of_ref": "indicator--d3649a1a-5ba9-4df4-8e46-b38bd9947936", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--790f027a-6014-41d6-84c2-9224770ffc69", "sighting_of_ref": "indicator--d3649a1a-5ba9-4df4-8e46-b38bd9947936", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--158ce8a1-95aa-4466-b2da-75a497194a59", "sighting_of_ref": "indicator--d3649a1a-5ba9-4df4-8e46-b38bd9947936", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--079527fd-40bd-415a-8f91-86cb52ebb3c5", "sighting_of_ref": "indicator--121e5026-fd84-4330-8f05-5eb6cf9fb14b", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bf46192-d31c-4b2c-b7c3-a01eccfd370b", "sighting_of_ref": "indicator--75e9cedf-5f01-41d9-b757-c67c0b790d36", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b360a4ef-230c-4e65-bb74-ab3154a2ebcc", "sighting_of_ref": "indicator--8e3edf66-f60b-4bd3-b54c-26d5c79359b4", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba27cfd0-1171-453f-8cd7-fe6b1ddc2e12", "sighting_of_ref": "indicator--70752951-88b0-493a-bc68-f6a250ae2dd1", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6152ede-4bac-44d8-9ae9-bbee54902529", "sighting_of_ref": "indicator--70752951-88b0-493a-bc68-f6a250ae2dd1", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6c2cb3a-b09b-48d4-97b5-a885826e45d9", "sighting_of_ref": "indicator--70752951-88b0-493a-bc68-f6a250ae2dd1", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a423c2ba-7d28-4a82-b1a6-f230be338d3a", "sighting_of_ref": "indicator--12bd86d0-985a-4015-9437-9ddfe7ce07a2", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74a49c53-4fa5-46e2-845c-832b75d8e072", "sighting_of_ref": "indicator--12bd86d0-985a-4015-9437-9ddfe7ce07a2", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13b4d7f2-8f16-4f26-a36f-cf1ac1826306", "sighting_of_ref": "indicator--75a645dd-4c2e-4c82-8768-e8da967d718a", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aee2dc71-1d4b-4157-9826-1c69320608b2", "sighting_of_ref": "indicator--75a645dd-4c2e-4c82-8768-e8da967d718a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af6eb343-0a24-4c40-ae76-1f239a78f905", "sighting_of_ref": "indicator--35b3a49d-47de-41ec-82ba-fde16f63798c", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42b53e6d-7152-4cfc-939b-2a9ab2e42179", "sighting_of_ref": "indicator--35b3a49d-47de-41ec-82ba-fde16f63798c", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--596da1c2-1291-4219-969f-7726e2f1b78f", "sighting_of_ref": "indicator--ff3134b4-492c-42b4-8d5c-1b49f0371d29", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--976927f4-5925-43fc-9caf-89db327998d7", "sighting_of_ref": "indicator--ff3134b4-492c-42b4-8d5c-1b49f0371d29", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e77a2823-8e68-497e-8c51-a8dac86eba5c", "sighting_of_ref": "indicator--ff3134b4-492c-42b4-8d5c-1b49f0371d29", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a04e21fc-cf33-4964-bcad-c2c463b26445", "sighting_of_ref": "indicator--8e814851-6821-494b-a79d-73fc691e1ea0", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf558c68-bce0-4737-99e7-5d220b9448af", "sighting_of_ref": "indicator--8e814851-6821-494b-a79d-73fc691e1ea0", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ead6291f-0f57-4d34-bacd-693492d654d5", "sighting_of_ref": "indicator--8e814851-6821-494b-a79d-73fc691e1ea0", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d903f7ab-36bc-4250-a5ac-4434797e422c", "sighting_of_ref": "indicator--438f060c-59f3-4721-a24e-1270c7b142a4", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2be05c6-c224-4667-aa24-9110b963e4ce", "sighting_of_ref": "indicator--09ee4c4a-7276-4ebd-995b-693636ff28fb", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96d87d2d-20cc-416c-822a-8567bf18edc5", "sighting_of_ref": "indicator--3174719e-b440-4524-8575-a180e0b6792b", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--895d32fa-446a-4e56-b132-9437b4b6c3cd", "sighting_of_ref": "indicator--ba71ddbb-bec6-42bd-b31b-4d9831fae8d9", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e14f629c-4752-4002-b8ff-720eef14132a", "sighting_of_ref": "indicator--d8e2dfb7-82b6-461b-9533-50262d21d601", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1f887c2-f4fa-4f9f-bbf9-a399196ec69a", "sighting_of_ref": "indicator--51e70664-aa19-42ce-8024-a4e86731c813", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--314c8e28-63d0-45f9-89fc-5de9bafc1300", "sighting_of_ref": "indicator--e91ca646-d48e-434e-9a4c-eaca355cc32d", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fec02e6-73b1-4a52-af6c-d88bf990e103", "sighting_of_ref": "indicator--5d1a84fd-0f16-4efc-845f-183c0bd5eae4", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09d3cdbb-5dd0-46cc-aa8c-cc079c7c46fe", "sighting_of_ref": "indicator--67a76dbf-5a0b-4251-92d0-d874c9afab3a", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eda31cb8-d6ee-43a8-86e6-3b0ecb7b32b8", "sighting_of_ref": "indicator--e5717cfc-d567-4567-a8a9-6a7e15d10c2a", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ace8c445-d698-4a07-8f8a-dc3242ea71d8", "sighting_of_ref": "indicator--e5717cfc-d567-4567-a8a9-6a7e15d10c2a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--884faea8-9523-4b72-8b88-844c96412113", "sighting_of_ref": "indicator--e5717cfc-d567-4567-a8a9-6a7e15d10c2a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26a9ca04-e62d-428d-82df-04472f2e062b", "sighting_of_ref": "indicator--ab59e995-0d08-492d-bb3a-81aa4348de83", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6cd1b2c-3534-4f4f-a48d-32a1e3115ff6", "sighting_of_ref": "indicator--bae494b7-3036-4214-b380-4203dfa4ba9f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dfbf58d-b32c-4025-9710-c0ff0aac5011", "sighting_of_ref": "indicator--bae494b7-3036-4214-b380-4203dfa4ba9f", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19d93c5e-975f-4e83-be32-e82b9b5c849d", "sighting_of_ref": "indicator--bae494b7-3036-4214-b380-4203dfa4ba9f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a61ef2db-a190-473a-ad26-75aa1ba617a1", "sighting_of_ref": "indicator--af0ecf00-92a3-4291-8790-466f38b6c977", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3acec76a-9429-413c-a976-d9a495f97546", "sighting_of_ref": "indicator--16b838e3-0d34-4263-b9af-beee11529a76", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1355933-41c9-400a-93d9-f7da485b806d", "sighting_of_ref": "indicator--e19f9b04-f4a2-4265-8ade-5325a56dc41b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--206b347f-7ab9-4d6f-80d8-2f41ee84afc4", "sighting_of_ref": "indicator--9c0e6c35-b016-4938-af8b-9051cac67662", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b3f7ab1-dd08-4470-baa3-075693a89cb4", "sighting_of_ref": "indicator--108c5ef4-462b-42a5-8029-8492a8104fda", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59d03b2e-a7de-4ed5-aca5-c84a878ab164", "sighting_of_ref": "indicator--c0eafc13-66e7-4de0-b32a-14a15bfed204", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba2d5bfc-230a-49eb-aaa4-072a3dcb0174", "sighting_of_ref": "indicator--476398ba-5160-44b9-9e1b-7d8a419624c8", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48b436aa-5216-46f6-a2b5-d6354f505edb", "sighting_of_ref": "indicator--2c299aa2-2eac-40c3-b59b-6016f03725cb", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--141436b9-1b04-4340-8b09-9efb58e54109", "sighting_of_ref": "indicator--9f7ddf48-0175-4020-b196-5920f7426db4", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7bfe183-ecfd-426c-a0d9-2e0809bfcc26", "sighting_of_ref": "indicator--f0f7e711-6fd9-45d6-86aa-2d6beb37ef56", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86cda4d2-53bf-4f5e-849b-097b12994248", "sighting_of_ref": "indicator--49f53c12-cb58-4c0d-991d-6d7ea36e0437", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b04b87e-1919-4189-bbbd-6af1f68d4b6d", "sighting_of_ref": "indicator--4dd036d2-50a1-4ff1-a0cb-077e4545a873", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5e6d17e-3671-4ac3-b000-671d1b2f48d8", "sighting_of_ref": "indicator--4dd036d2-50a1-4ff1-a0cb-077e4545a873", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad4f8284-bfef-4360-85d8-9e22ce009a54", "sighting_of_ref": "indicator--8ea5703c-7d86-4f0a-b59c-9d13489e97af", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09d1be0a-95db-47be-9fc2-9e752ee1bf21", "sighting_of_ref": "indicator--ebc8688f-b0d1-4344-a3e9-b9ec750fc224", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ab6e9bd-db66-45a1-ad29-fe7b456e3fed", "sighting_of_ref": "indicator--f8451a62-b013-4db1-9f3c-7a570022d300", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70e246c5-32ac-4727-b495-22ed7b224e4a", "sighting_of_ref": "indicator--d33f4bf2-c6dd-4f68-92a8-baa91fc6f7ea", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2586649-fc57-4ece-8bdb-26d770a80bdd", "sighting_of_ref": "indicator--d33f4bf2-c6dd-4f68-92a8-baa91fc6f7ea", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df567077-3288-4af1-8487-64e5cd086376", "sighting_of_ref": "indicator--9860f854-7709-4619-b314-9d3652993387", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff735f97-a1fb-435d-bc12-ec08f25a0805", "sighting_of_ref": "indicator--9860f854-7709-4619-b314-9d3652993387", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--409d7f3a-36fc-41da-881e-93f734dd175e", "sighting_of_ref": "indicator--9860f854-7709-4619-b314-9d3652993387", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f2062c1-5640-40b9-9042-4f8808c1fef9", "sighting_of_ref": "indicator--e8a48099-9c00-4cdf-b477-841e51fb811a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b33921b2-b1c4-4c29-8ec2-f29f80523118", "sighting_of_ref": "indicator--e8a48099-9c00-4cdf-b477-841e51fb811a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85907ffa-db6c-408e-a91a-941467f896d1", "sighting_of_ref": "indicator--29cde6ae-9e42-4f14-9ab9-a1ca25a65d9b", "where_sighted_refs": ["location--cc47317e-2c18-43a6-8938-dea748a56ad5"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b47f06ea-1cf5-4992-9490-5a56356eebeb", "sighting_of_ref": "indicator--6f2349e8-113e-446e-9922-e9a4c8cdada9", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42f694a1-d287-42a8-89a1-f1408d430f9a", "sighting_of_ref": "indicator--0afa6421-7f80-4cfa-a3d0-454c74fa1b09", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2295a671-69e6-4a24-8985-15a0de75d735", "sighting_of_ref": "indicator--d60ce198-d402-43ad-aac0-cb82362e5d6c", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--709aab40-1289-418a-972d-29f32a319cde", "sighting_of_ref": "indicator--d60ce198-d402-43ad-aac0-cb82362e5d6c", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d842547-7f35-4c82-b444-fc956f83a91d", "sighting_of_ref": "indicator--c34c9fc0-a97a-4573-a975-d885a6808d0d", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a267fae-a240-445b-9467-a18697d55eb5", "sighting_of_ref": "indicator--fed131aa-e628-4373-ac28-bdcc2268f32b", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4728baad-0a71-4c8e-aad3-7524781f915d", "sighting_of_ref": "indicator--fed131aa-e628-4373-ac28-bdcc2268f32b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b10b35cb-9d84-4f17-a76a-840bee4ade55", "sighting_of_ref": "indicator--df6d0ec6-c054-4e89-af50-1de634de9745", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2bb458f-a1f1-4c90-81e8-7c06177b163f", "sighting_of_ref": "indicator--dc153bf9-9ebb-4995-a7f5-9f7aed4c4841", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79ffb39b-325c-4495-bb09-d30cdf8da297", "sighting_of_ref": "indicator--ad76ca0f-bf43-4265-aa73-479da59ffd10", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84bdfa3b-d8b8-4f9b-ae40-0e6f3a526a37", "sighting_of_ref": "indicator--82c82f5d-33ae-4c75-8b80-e7cce7d0ba1c", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54820a57-7cc4-47c0-b1a7-1847e8ce04cd", "sighting_of_ref": "indicator--82c82f5d-33ae-4c75-8b80-e7cce7d0ba1c", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60c59355-2118-490e-9156-b7ee0f19be1a", "sighting_of_ref": "indicator--82c82f5d-33ae-4c75-8b80-e7cce7d0ba1c", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e3b8f3f-dfd1-4742-af8c-7e27aca09645", "sighting_of_ref": "indicator--eb33c129-c1fb-4672-891f-cf93dc1f0aba", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d86f363-5612-4971-bc7f-77240b99770d", "sighting_of_ref": "indicator--eb33c129-c1fb-4672-891f-cf93dc1f0aba", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49ba730a-e966-4cf2-89d0-26cbc3de9da2", "sighting_of_ref": "indicator--944f8f75-a0bf-41a4-a450-dd15d4193da0", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0d81b22-3cf3-499d-a3da-ef9fd771a029", "sighting_of_ref": "indicator--944f8f75-a0bf-41a4-a450-dd15d4193da0", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--608e2fbf-2135-4e00-a79a-f761b699c53f", "sighting_of_ref": "indicator--d6a98636-02a9-4946-8644-3b5c24f4ab84", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efacd7b0-3a23-49d1-88ec-9cf04ac3e870", "sighting_of_ref": "indicator--d6a98636-02a9-4946-8644-3b5c24f4ab84", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9832f932-a1de-43ae-af16-c04134e98765", "sighting_of_ref": "indicator--dbea050d-3ab3-49ba-8ff3-91dbe69c9320", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e065eaa5-9457-492e-bf0e-e5cd7afa7f46", "sighting_of_ref": "indicator--064f1a31-b850-41fe-a560-835a35fd13d7", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--397056b4-f6b9-4baa-94c7-a05f0abd8934", "sighting_of_ref": "indicator--4a1963a5-ab2a-419f-8ee1-686654a9dc74", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--390188fc-0617-4a7d-b9d4-5c0de5d75fd0", "sighting_of_ref": "indicator--3c59f79e-172f-489d-8415-9447b36f12c4", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de1dfe52-5dbe-4335-b74c-b74e879b020d", "sighting_of_ref": "indicator--648ab9cc-d9c5-4def-b614-76a7f5c3fe75", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab7652ec-3b0a-4513-b378-5b92e13fcfb3", "sighting_of_ref": "indicator--5cb3d341-4f52-4b94-bfae-a1eb154bf0e4", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9a1fdb6-d274-4db2-a005-8cf77f684765", "sighting_of_ref": "indicator--5cb3d341-4f52-4b94-bfae-a1eb154bf0e4", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b380c41f-9050-4673-9950-75b96d1bd0e4", "sighting_of_ref": "indicator--a5384016-3a83-4339-8000-e0ba1f0594d9", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d191a50e-50ca-4b10-9aa2-3980222fb843", "sighting_of_ref": "indicator--87c1a0a0-62b3-424a-8713-89669978c2e8", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7356b801-4f10-4dd2-be98-23a40473fe67", "sighting_of_ref": "indicator--d8861f21-fc2c-4490-97fb-9c3ec5f71992", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92782a66-1c7d-4850-8b1a-12557f73af54", "sighting_of_ref": "indicator--a729db50-aa80-4e0f-a6c3-0d4c5fafed53", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4434510-eb0f-4347-9196-9edf057e6461", "sighting_of_ref": "indicator--48498eb7-c8f7-4442-8f95-ad4731acca1a", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89d7bd6c-b6f5-428b-9bcd-89244fc0df6f", "sighting_of_ref": "indicator--9b203a17-aa16-485f-9072-55e3ac6ec6fe", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f571b9b7-798a-4594-a2c5-2bda3d3269ca", "sighting_of_ref": "indicator--9b203a17-aa16-485f-9072-55e3ac6ec6fe", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4218faff-5d1c-4f34-9c73-1b6fab9557d1", "sighting_of_ref": "indicator--050e6f1b-ee3a-43ce-adb2-7e942017c93a", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08c9493a-bb07-49b3-a892-7018fd3e7f26", "sighting_of_ref": "indicator--050e6f1b-ee3a-43ce-adb2-7e942017c93a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a195861a-1264-4487-9ced-22ef57d4ce93", "sighting_of_ref": "indicator--38e576e9-6e57-49d1-a7de-f2b770655274", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0947e514-ba9f-43b7-8a1b-baab36fc78df", "sighting_of_ref": "indicator--052437be-98ab-4a52-b883-817dc17bd7ea", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f93c1005-aac5-4d74-812f-a18381c21d63", "sighting_of_ref": "indicator--b7171942-2ca0-4770-b798-278c5d28f1d7", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2731f2b-befa-462b-9849-a91582b8d0bd", "sighting_of_ref": "indicator--859317a2-d10b-4a97-bfeb-31c591e2b0e1", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2af8e28b-6717-48e7-aa9d-a8415871b0ab", "sighting_of_ref": "indicator--0645e6c4-37be-48fa-9a91-fe2c517dcd65", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8959574b-9ee5-42fe-868e-48c912bd1a52", "sighting_of_ref": "indicator--980b906d-7822-4523-97b0-2d9efecc74e3", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ec3dccf-88f1-4a9f-8036-9bf4303e2f7b", "sighting_of_ref": "indicator--f9507405-ec1c-413f-a0a2-11bf9e5d8625", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26c96dd6-81a6-4ac8-b803-0c9c7f4bb60b", "sighting_of_ref": "indicator--d8548d14-e755-48ec-a060-d0a936ea3ab1", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e419d8ea-86f8-4ba7-83b1-992da208c33c", "sighting_of_ref": "indicator--5902374b-f87d-444d-9a46-bc025f3c77a4", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8720b525-f83e-4785-8f25-0c2a983977f5", "sighting_of_ref": "indicator--5902374b-f87d-444d-9a46-bc025f3c77a4", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a19a2a5d-8e6d-4fc6-bb35-091e0c81ae13", "sighting_of_ref": "indicator--e3e5cd79-ea1b-45cb-87c5-7718380d0489", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5da5d06a-0ad2-4f4b-93e7-c32dd1b2f68d", "sighting_of_ref": "indicator--e3e5cd79-ea1b-45cb-87c5-7718380d0489", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6661c508-f7aa-41aa-a9dd-de882a6e1dab", "sighting_of_ref": "indicator--e3e5cd79-ea1b-45cb-87c5-7718380d0489", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f04490e6-cd0f-4ab5-bfa2-c24ccda43557", "sighting_of_ref": "indicator--b5baa4ec-fd70-495f-9170-51ffcaa1e14a", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b17494e-2e71-4b62-9401-8a435dd9c3ec", "sighting_of_ref": "indicator--b5baa4ec-fd70-495f-9170-51ffcaa1e14a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8f4498c-8356-4575-81c4-d2447dcbb333", "sighting_of_ref": "indicator--3713a088-a430-48c2-914b-c599e8634bf2", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b417174-098f-4402-a956-38d1f4d63237", "sighting_of_ref": "indicator--3713a088-a430-48c2-914b-c599e8634bf2", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41312611-9ec7-4ebd-82cc-b829202a7494", "sighting_of_ref": "indicator--3713a088-a430-48c2-914b-c599e8634bf2", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b53ff8b-06fb-4ee1-ba3b-ddb4c3c0a7fb", "sighting_of_ref": "indicator--73bdf590-1df3-45bf-be08-466f4b2ed467", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70c0d39b-135a-4cae-91a7-13b7abc152c1", "sighting_of_ref": "indicator--257831f9-d74a-42b5-aa3c-ee51a767f413", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85e74f6a-974d-4307-9134-de985732adc8", "sighting_of_ref": "indicator--257831f9-d74a-42b5-aa3c-ee51a767f413", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71c1b227-8367-40b5-b93b-c3424d2bcd65", "sighting_of_ref": "indicator--a964b760-e26f-4de0-8d0c-32b641c83f92", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dec01e4-0ed7-4ed0-a6e7-2b726e7d2e4a", "sighting_of_ref": "indicator--3fdc1c11-3df0-4fae-813e-ac7744042b6d", "where_sighted_refs": ["location--cc47317e-2c18-43a6-8938-dea748a56ad5"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--588d5028-df28-42a2-83c2-b6cb3d00f916", "sighting_of_ref": "indicator--74748e41-e7bb-4042-9388-4a51dbe27ab4", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e523e6e1-a004-4368-b446-9668a3fe627e", "sighting_of_ref": "indicator--74748e41-e7bb-4042-9388-4a51dbe27ab4", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a69583c-6de7-4e7a-b32b-bd39eb82ff6a", "sighting_of_ref": "indicator--74748e41-e7bb-4042-9388-4a51dbe27ab4", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b56143c0-cae4-47f7-b8bb-8569e5f66cc5", "sighting_of_ref": "indicator--c3ac61ad-0877-40b4-b149-75e4f57b5a7e", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9862756-03d4-41a6-9dc7-4065c0ece222", "sighting_of_ref": "indicator--ef0b7fbe-27f9-4749-8bfd-7a344785fbb9", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b306bef7-797c-44d4-981a-3a21caf7aa29", "sighting_of_ref": "indicator--59d3c82c-c3f0-4d66-bb72-4ad02c77af58", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b76a61c9-8369-4489-9d18-8aa27da7d95e", "sighting_of_ref": "indicator--916fc4ec-900b-4247-bfe7-620bb2dc4339", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a8a80b8-5829-4a8f-87fa-3148806709ef", "sighting_of_ref": "indicator--5fffdce9-baea-45be-a178-5150ad150283", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80362a70-0f1a-4c0a-a5fc-b5118ae04c1c", "sighting_of_ref": "indicator--363ac680-ca2f-43e5-99eb-863952053954", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc378253-42ba-48dc-bb59-535d714fc7a1", "sighting_of_ref": "indicator--88f71e2c-0b9a-44d0-a03a-4726269696c6", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23a6a753-f1bd-44e6-af31-d0019dcc26f4", "sighting_of_ref": "indicator--09f43bdd-ccbd-48ad-820c-aef7a144ff54", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e456df47-5aa6-4712-a8ab-a8c14d73aa31", "sighting_of_ref": "indicator--b2bc8a4f-7ddf-452b-ac20-694b6fa0fd25", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--289f6ef6-433d-4929-908f-f3b55e274d27", "sighting_of_ref": "indicator--567b8480-100f-4e3a-a0fe-20bc1336f350", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--776e5f3b-c537-4e4a-b125-736e324f940d", "sighting_of_ref": "indicator--0bdd0dd9-0ad5-4f2a-801a-00efc01545ff", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea8d5acb-e512-4d99-9070-1595393448a0", "sighting_of_ref": "indicator--f76229d7-ecbb-4977-b692-0c9ec509a63f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bd8a8c7-64a8-4410-85df-619c6998b083", "sighting_of_ref": "indicator--95d7b570-0aec-4e20-9ef8-470c63e34eb6", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f112beba-5aaf-4dfe-8481-a71ffb086617", "sighting_of_ref": "indicator--51a72fbe-1689-4c6e-8ce2-18776075d004", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21340048-fa0f-4f25-85bf-dd902b01dbf4", "sighting_of_ref": "indicator--ad01005b-9f7b-49e9-9568-9c7b9d01a0ab", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c19c6d19-73bb-4128-87f0-e5aaf1e33243", "sighting_of_ref": "indicator--e9dc3579-dc25-49f8-a4f7-c82f134c3a6e", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a62e4c5-8e72-43b6-bcf1-26e5eef98899", "sighting_of_ref": "indicator--869a40a4-3307-43b4-ac73-c81c90991d28", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d68969bc-b267-457a-928a-17cfb981c5e8", "sighting_of_ref": "indicator--6a745a43-04bd-45ed-a937-4932a24f5b2c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bea08a69-29f8-4a9b-a91b-aac99d865a04", "sighting_of_ref": "indicator--7a6d082b-aff9-4c7e-b415-d5ce564db182", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--665de944-d4e8-441c-b4c9-1e67cadaaae1", "sighting_of_ref": "indicator--3bf84d1f-9dc3-4e69-81aa-6d0d36dfd8a0", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f54d86a-1269-4bf3-87aa-11bbab81e2d1", "sighting_of_ref": "indicator--b43d2e78-6399-4372-859c-1d8bcc5f4af0", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36bc75a4-e9a5-48a0-8efb-b3d3ef94b1bc", "sighting_of_ref": "indicator--119445d1-3e0b-403c-9a2c-427721ab6a1e", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--834783be-5425-4c38-a00b-5c996ae7b7bd", "sighting_of_ref": "indicator--e43731dc-b783-476e-bc14-5a68843d5018", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59d99b63-9735-4075-9ccb-54a0129bc7e4", "sighting_of_ref": "indicator--b61fadce-51e0-464b-89a5-9906a0a41c49", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43d08f0a-4113-4d74-8a0e-4e6f6ef4b7ce", "sighting_of_ref": "indicator--dc7374bf-337e-48c0-8191-d1c505a7db95", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bae394a-1210-45fb-8177-2bcc2e804b54", "sighting_of_ref": "indicator--ba60b1cc-774d-4e26-bb9e-3611b91a7cbe", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7403b938-68f8-4f06-ad58-3a95e94a5542", "sighting_of_ref": "indicator--b1fd3481-b31a-43ee-8cab-0e8f67db9c59", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5861a5d0-262f-4b39-be2c-2a3cc2433b69", "sighting_of_ref": "indicator--d6f8d0e6-7ff5-4168-9c60-990772801c1f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--307dd178-c4fc-4807-8d8e-98f87dc48c1d", "sighting_of_ref": "indicator--be3e8c1b-d926-4ca6-a70b-540e013ffe15", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0ca085c-a055-44db-9406-a6fd4e9f0d23", "sighting_of_ref": "indicator--d1daa625-f658-4e59-9f08-9a9d30a0fea1", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6daf784c-98d4-46b6-947d-02d80d77bf91", "sighting_of_ref": "indicator--b40ced8e-5232-4277-a622-408ae9660e3b", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eebb1f5e-a47d-4284-aa5c-985a116b3f47", "sighting_of_ref": "indicator--3c1ec230-35b7-44a5-9507-6edc80acb172", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a84adb76-a8e4-4734-807c-6018c9a3fb8f", "sighting_of_ref": "indicator--404dc626-dd87-4bda-83ca-109a30a9073a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c1b6deb-bb77-4175-b396-e3fa4f3708a3", "sighting_of_ref": "indicator--f3da913d-5f38-4be7-820a-d5ffb8bb70c7", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebc5d436-c70a-4a60-a122-19950a8eda8b", "sighting_of_ref": "indicator--87e162c3-65ff-4fa8-902c-3d08325ebd9e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67cc5532-3373-4aba-a184-c72f3c129250", "sighting_of_ref": "indicator--d4d237a9-8e11-4834-bc7e-f76cba7078a1", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39619c87-0738-4684-992c-6a244613a03f", "sighting_of_ref": "indicator--d4d237a9-8e11-4834-bc7e-f76cba7078a1", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4aab2b38-5b27-47f0-9ee6-206634a55fca", "sighting_of_ref": "indicator--f02c4d2b-f2a0-4390-8fa1-28594008e9ac", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f00ff473-48fd-40b9-b9bd-6fc10ca22b0d", "sighting_of_ref": "indicator--ec87362e-23ae-4535-b585-490255433285", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3f3cfee-3144-40d2-9071-8ccb612a6845", "sighting_of_ref": "indicator--5e3897c1-3809-4c61-b4f5-739b05784f73", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5076d5d4-a376-43b8-a8ff-b9cf8908a29b", "sighting_of_ref": "indicator--5e3897c1-3809-4c61-b4f5-739b05784f73", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dcc5a52-be6a-4725-af97-b38747aef646", "sighting_of_ref": "indicator--a33eae45-dd65-4d29-8c87-ad277ae5b09a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20a650af-b40f-4799-b83b-ef9a6a2ba4d2", "sighting_of_ref": "indicator--f1a4002d-7b03-47b0-a73d-7e0867a3111f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--497dd590-b310-42b5-af0f-ff99716be212", "sighting_of_ref": "indicator--f1a4002d-7b03-47b0-a73d-7e0867a3111f", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e514764-65aa-42bb-92e8-fda1dd46ff3d", "sighting_of_ref": "indicator--0c682887-9211-45bd-9d67-9c4aa877413b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf4174f2-d74e-4879-8051-84e3ea9abbcb", "sighting_of_ref": "indicator--38a64e3e-9769-494d-aaa6-19c2d0d6730b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10a0957d-803e-4b9b-8885-b219d9af49e4", "sighting_of_ref": "indicator--934c891e-2520-40a4-9b48-d81683e30053", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--086e030b-cb16-4e25-b94d-5314fd85c729", "sighting_of_ref": "indicator--06d469c7-5909-42d2-b0b0-8a79d3254325", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5f7ce35-630d-43c1-846b-a80cf6ae90b6", "sighting_of_ref": "indicator--f8537181-48d2-4df1-a6f6-5c941533b6df", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8cc72d3-171f-4635-95e7-140420701911", "sighting_of_ref": "indicator--18c3b4bd-3a43-4d14-bb93-efe6db920015", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27208c47-e3b7-4f53-82a8-d2793381cf4e", "sighting_of_ref": "indicator--6aaea74b-0da7-48bd-95a1-0a68156a03ef", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d7524f6-17b9-4388-a85a-471c45fa4e97", "sighting_of_ref": "indicator--c0f2fc0a-42d1-4d3b-ba18-decb91e5eefe", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e70a6734-e21f-49cf-b66a-7802c93ba060", "sighting_of_ref": "indicator--b4c2eb68-34f9-4bf0-8b67-1f46d3b7f1c9", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bc0fa41-ce18-4364-8fae-9772fbdae364", "sighting_of_ref": "indicator--0ae448c9-8670-4fc7-b7ab-a28f405db4f8", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01f2a64d-7cf0-4f6e-828a-a0b5ca074494", "sighting_of_ref": "indicator--7445ea7f-1e72-43ed-98bf-2d0f9eb49a38", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3017bcf-5ebe-4486-8782-0f7340955b7b", "sighting_of_ref": "indicator--1f42eaae-152a-472e-a423-2cca3b235e86", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52a96b83-a2f3-4769-aa95-5a3e49293953", "sighting_of_ref": "indicator--cbe510e1-5f53-48ff-abf7-0fc1831e2c94", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fabe751-539c-4fe1-b5d1-dbeb6c7612dd", "sighting_of_ref": "indicator--05d7d959-1fb8-4878-a04b-ac8659c17d15", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac784c5d-6b76-40f1-b199-f9a50318f165", "sighting_of_ref": "indicator--d658c397-3f3b-4155-a144-e0cc4babcad3", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--241effab-378d-4ed9-8b71-0a8c2e0505e0", "sighting_of_ref": "indicator--febd8706-96ff-4059-b825-ab97e3148611", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58338801-91ed-41e8-834f-df7d8799d004", "sighting_of_ref": "indicator--febd8706-96ff-4059-b825-ab97e3148611", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90ca6509-1df5-41cb-bafb-5e61460d3d26", "sighting_of_ref": "indicator--71c3576c-bb67-4d3a-af42-ca113c081c08", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d91d3c3b-7e1a-48d9-a8f9-72602d46197c", "sighting_of_ref": "indicator--e1676897-032f-49bc-87c3-cd6e9aa478c1", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19cd8fbd-d5d9-4de3-a937-b58a6f7435c3", "sighting_of_ref": "indicator--a42a26fc-549a-42f1-a9d8-3d6fe78cdaf1", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03304ce9-a6b9-4d2f-8218-0282794154f6", "sighting_of_ref": "indicator--5eeb1991-4024-4ef6-9a63-534783e7c7cc", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fea9190e-ed46-4beb-ab0c-1cbd112a8038", "sighting_of_ref": "indicator--56777d42-89ee-4f0a-a00b-155977d206ba", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--140a7637-f08e-45a9-b161-4331de340827", "sighting_of_ref": "indicator--892dc476-1153-436d-9145-e0a4bf342f2c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee8a7b91-fa8b-481e-9540-d0285e3efda7", "sighting_of_ref": "indicator--24563d1e-fa57-4869-a834-cd8ead7ed40a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89d8e657-9d0d-4183-b35b-dfec2044f3b0", "sighting_of_ref": "indicator--8b0ffdcb-3557-4024-b3bf-5e153b5fc246", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02a0a45b-efc9-4892-a859-cbcef0703336", "sighting_of_ref": "indicator--cc466231-f0e2-45e3-8014-66456fcc7849", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4100e50e-fe98-415c-9283-6630a2b71949", "sighting_of_ref": "indicator--a2affa9b-5499-4a44-a64e-4394bb0e80d4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7a298c2-afd4-411a-b7c8-4c128e0290a1", "sighting_of_ref": "indicator--16a4c7c4-0111-4a98-9443-1ebe0ef3be3a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ad7be4c-ddc7-45c1-8914-7f77f86aa38b", "sighting_of_ref": "indicator--0bbf2e1d-a6c0-4381-bf8b-a2a8088d5ee9", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e0ee886-00e4-4713-9c1a-1dda255e7364", "sighting_of_ref": "indicator--0bbf2e1d-a6c0-4381-bf8b-a2a8088d5ee9", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e133ec8b-d386-46c8-a3c5-a673c82fbf68", "sighting_of_ref": "indicator--36bc3fe7-75cd-4ad3-b2ad-c2f3f5d5bb42", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb69fc85-e331-426d-8353-f38119cc3c7e", "sighting_of_ref": "indicator--366b3d05-277e-43f6-b6f7-b5fb15b14136", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e62cf208-e4a9-4e56-9d1e-f86befb6dbed", "sighting_of_ref": "indicator--e8bb268d-6252-4747-9ff8-2f56a794368c", "where_sighted_refs": ["location--cc47317e-2c18-43a6-8938-dea748a56ad5"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a2e813f-d8cd-4844-8710-79b81928d522", "sighting_of_ref": "indicator--cbcaedec-6a42-462a-949c-13d76530f4db", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--453a2583-dd52-465c-9e23-86060b41b9e5", "sighting_of_ref": "indicator--5d16d2b8-d5ce-45e9-bb25-ce619c41ae88", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dce7c16-6200-4582-aeaf-8d90ca28fe61", "sighting_of_ref": "indicator--beeed883-705e-4881-8078-3693c92d6210", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d7bc80e-9cab-4202-9681-49c8a7cf972b", "sighting_of_ref": "indicator--8eeea2bf-0e67-4b8b-8948-059bc49e9acc", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83ec5160-66b5-4191-a685-88f11942a0cc", "sighting_of_ref": "indicator--0d90f2c9-fd12-418a-8d32-4c0428e92312", "where_sighted_refs": ["location--cc47317e-2c18-43a6-8938-dea748a56ad5"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54b47391-2ab0-40ae-b0bb-f0dabcb48c70", "sighting_of_ref": "indicator--4200d17b-9485-4e00-b09d-bfa0ed67b070", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adf4978b-4a23-4b36-b7a5-9f16eb3e8d47", "sighting_of_ref": "indicator--98ab5311-1d9b-4e61-8ff1-38db76ac3afe", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74cadb36-19ee-4825-9a1b-5d8a29d13856", "sighting_of_ref": "indicator--98ab5311-1d9b-4e61-8ff1-38db76ac3afe", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e21053b-712f-46dd-b2f1-c9c23fb4bbce", "sighting_of_ref": "indicator--4f0c9f5a-a5d2-49f2-a6ed-2b32c1eb5e2b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d3a2543-b178-41d2-9d25-8df9ea1b6da9", "sighting_of_ref": "indicator--114e630d-68e4-4801-9f9c-db0d503ef16d", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28024057-4fae-4a2c-9341-d8ffc86503c0", "sighting_of_ref": "indicator--c075a356-4ee2-4e2e-a214-cc25dae7d6d3", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43e7578b-f08d-44a5-ad9a-98d539ab2625", "sighting_of_ref": "indicator--d67c2554-ebb0-48a5-8a2f-73a4970f7019", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcb7817d-1ee1-41c7-940b-ff0301f0ff25", "sighting_of_ref": "indicator--3b2afabd-2000-4a3e-987e-586e0b7098f7", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb72a7b2-ad74-437d-a469-6a2ed7b058bd", "sighting_of_ref": "indicator--6e8505ad-44ca-4560-ab7f-846e581e94c9", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f34ed0d9-4052-48bd-96e7-513f5c80294c", "sighting_of_ref": "indicator--6e8505ad-44ca-4560-ab7f-846e581e94c9", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--688f5387-07c1-4486-90c5-386022adcd8b", "sighting_of_ref": "indicator--76fac808-e9fc-4600-8ac1-1008efa5bf67", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ded8863c-fe3d-4049-ab20-e3f9ac9bf20e", "sighting_of_ref": "indicator--76fac808-e9fc-4600-8ac1-1008efa5bf67", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87a4b49b-6f8d-4686-af7b-5f661e9cf833", "sighting_of_ref": "indicator--9aaa1242-c4d1-4f88-aa35-951206f9d331", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--991bd065-73a5-428f-ab0b-7e880b2c463b", "sighting_of_ref": "indicator--9aaa1242-c4d1-4f88-aa35-951206f9d331", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57e6453d-6ab2-4af2-83ef-7a09afaf1e2c", "sighting_of_ref": "indicator--7cad7a47-2c2d-4c71-8b89-5ae9ddf5c3b5", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8298084d-86fb-4d17-a1f6-bc06778b234f", "sighting_of_ref": "indicator--7cad7a47-2c2d-4c71-8b89-5ae9ddf5c3b5", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d31d878f-ea0a-4ba7-ae03-5209e01d93c7", "sighting_of_ref": "indicator--848b1b3e-e440-4280-804f-57459b30b1ae", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7864ce0-67b1-4d96-b03e-a2f886134731", "sighting_of_ref": "indicator--6a5c402b-ee9f-470c-8f2d-3f0eff9820b2", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08a728e9-25a7-44e7-bb51-e90b920b3e5b", "sighting_of_ref": "indicator--2fa67b4a-c06b-461c-a01d-8afc6991c4f3", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efaaf118-4a9f-418b-96ef-7c10c595f436", "sighting_of_ref": "indicator--fd7ae577-738d-4f40-926e-6e376de8245a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ad00570-0fcc-46e6-88e8-2f0e68f8afcf", "sighting_of_ref": "indicator--c1fd3616-5c89-41d3-918c-32fcae55c2cc", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6498423-346f-434e-99a7-38243e74c86c", "sighting_of_ref": "indicator--8088732a-555e-4977-a981-694b997a9391", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2f5493d-54a3-4815-946b-f8f835134333", "sighting_of_ref": "indicator--ef5b83a2-6124-4b8b-9006-23ea30c7168f", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60f72d71-3126-4356-8677-42e33a03de4c", "sighting_of_ref": "indicator--98d76245-8585-4ed3-bdf3-de7ce3e1c665", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--956f641a-1b9d-42ef-b20a-e9241005a029", "sighting_of_ref": "indicator--914a3fe8-3738-4709-b183-c8e7a8396d6d", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14f08fe8-999a-4610-b36d-0c587a2bc61c", "sighting_of_ref": "indicator--7becd405-4a9f-4e27-b678-0827c09dacf6", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bb5ef2c-d664-4740-b33b-1ceb9b41df00", "sighting_of_ref": "indicator--d2c03622-0a48-469e-a963-515aeac96e14", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c82cefd-478c-41d8-abb7-196da45f78f9", "sighting_of_ref": "indicator--56d9b36d-cc8d-43d5-b2a1-15358ff8c054", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17fef009-3baa-4f51-965d-993daf4077dd", "sighting_of_ref": "indicator--0143a209-f2f6-44ab-b72c-bf84e2180857", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52c53c7e-a209-433c-8e95-342c66c8ee81", "sighting_of_ref": "indicator--88a5d84e-ae39-47bb-b315-e54183a1e1c6", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10848125-ddf5-4dd3-adb0-28b215465acb", "sighting_of_ref": "indicator--ddfcaa0b-f3a3-4570-8bf0-69c2e9c3d6f7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5dda9f3-cd87-4edc-a090-544fd5ec8996", "sighting_of_ref": "indicator--e0da0a16-982c-4990-8efd-0f2060cb5adc", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91f366cd-017e-4d80-830f-d984b2c62cbd", "sighting_of_ref": "indicator--4ed8d49b-6cfe-4c0b-8f3f-2a52787505fb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--762ce431-e363-4247-a513-06652de0286f", "sighting_of_ref": "indicator--1cca5533-1167-48b4-b9e3-8fafd2fc6db2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92d2a006-adf3-44c3-9a71-afb049050d70", "sighting_of_ref": "indicator--1203653b-f774-4025-ade8-ea1672060add", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e68ecbd0-2fdf-4eaa-a84a-4031dd8108bc", "sighting_of_ref": "indicator--f92838c8-8679-44af-bc0e-1268526a76a1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25d10494-5d10-4570-b20d-91efc33f036b", "sighting_of_ref": "indicator--375c4356-2995-4a9f-a982-f48a79b3555b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64439168-4eac-418a-87dc-fac5b19c7476", "sighting_of_ref": "indicator--375c4356-2995-4a9f-a982-f48a79b3555b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c7c970b-3b87-486e-beed-800bd3a3485f", "sighting_of_ref": "indicator--2fabf988-63e8-47ca-a4b9-530064d976fe", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2654c78-4b5e-455d-b51e-409eee187dcc", "sighting_of_ref": "indicator--2fabf988-63e8-47ca-a4b9-530064d976fe", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d35acf9-e16b-4de8-8565-c7c29990b63e", "sighting_of_ref": "indicator--88b788d8-f59f-418b-8a4f-b492e3598b61", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89d5f30e-1d98-4ff5-9db2-1a434dd2fa26", "sighting_of_ref": "indicator--a94260e1-f232-47cd-a29d-3f257eada804", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--627f2ff6-ec4e-4e16-8a1f-df59345a9e93", "sighting_of_ref": "indicator--be25906a-632d-4c95-b5bc-5b802d25184b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66bb80b8-8e29-466e-80f1-e29b65e21a99", "sighting_of_ref": "indicator--9eb49675-da1a-473f-9875-0a84b10873cf", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eaa83c01-24b8-405f-a715-153fcc319778", "sighting_of_ref": "indicator--d963cb8f-6ce8-4e3b-a9ef-ce79f2e3c3f8", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d4f371c-31cc-4335-9713-c8f93d63058f", "sighting_of_ref": "indicator--0c0f4eeb-7b5c-408b-abbb-9675b9edbac6", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--743691b2-1483-447c-8149-9cda98a40c0c", "sighting_of_ref": "indicator--5ccbf480-f9ca-47f7-a4ae-a41aa924d42e", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccbbfb90-57e1-40b9-85d4-860a93f8cf93", "sighting_of_ref": "indicator--6a29d385-85de-4873-acb1-898561178fea", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aac44b5a-2a73-4b26-9c6e-33f97467aeb9", "sighting_of_ref": "indicator--4408daf0-8e7e-409b-934f-0c2184ef9271", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f88f5db7-489e-447c-b1bd-a58285fb922f", "sighting_of_ref": "indicator--37ec3bc9-9e1b-497e-aee3-d167c5e16be1", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2adf11b8-d261-419b-a70a-68994aa4ca82", "sighting_of_ref": "indicator--8389c23d-d08e-45a7-afdf-e563de3fd0d8", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d76a4b6-5378-4da6-987a-167108a2f6d0", "sighting_of_ref": "indicator--2a44649c-77d0-46a7-9691-5e2060e6e30d", "where_sighted_refs": ["location--cc47317e-2c18-43a6-8938-dea748a56ad5"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd21af8c-a5bf-4022-b6f7-c7ea1c1a05a8", "sighting_of_ref": "indicator--659f72b1-df7e-4549-9de2-42ac4ca69365", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c71d0029-fc4a-42d6-bbec-68914bbd53b7", "sighting_of_ref": "indicator--e891bef4-4661-4f27-ad4a-83acd1bba620", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea476440-ba3d-4c74-849c-d55fa5703182", "sighting_of_ref": "indicator--e891bef4-4661-4f27-ad4a-83acd1bba620", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07f61678-298e-4bfc-a552-966975116e51", "sighting_of_ref": "indicator--59e76f65-be6b-4bbb-b166-16d8839c7be2", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fdff9b8-55c1-42e1-b319-34eefb563788", "sighting_of_ref": "indicator--8ff9b6c1-011f-4674-802a-c09352102482", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d576484e-032b-48b7-9cdb-0209b9c8c986", "sighting_of_ref": "indicator--78a28ae8-676b-452a-88d5-401095ebc250", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--712cf765-50ff-42c9-a8f7-5ce319310ab6", "sighting_of_ref": "indicator--ea4e4bcb-93d6-4812-ab47-70f8193aaf26", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4b027fa-0a42-4842-96d0-9c0228f4e495", "sighting_of_ref": "indicator--ea4e4bcb-93d6-4812-ab47-70f8193aaf26", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e18ff1a-b338-4b8f-bebf-509d60cb8307", "sighting_of_ref": "indicator--dce7b0bd-24b0-4b34-b5dc-28d9ebeb6000", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b3a7c4a-096f-4719-8347-dd6f6d8f3477", "sighting_of_ref": "indicator--e89829bb-8c6d-41b7-85d8-664d39c65b29", "where_sighted_refs": ["location--cc47317e-2c18-43a6-8938-dea748a56ad5"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45861134-65ce-4b61-8288-b64124c04268", "sighting_of_ref": "indicator--8a8f0adc-a1cc-4fb1-8ae3-a02bbf29c442", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4966e1dd-1aca-4ca4-9224-b30880ce1bde", "sighting_of_ref": "indicator--ab4287f1-6816-4638-8922-5817ae6e2eba", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7261ea7d-694f-4158-8484-ab92c68cdc8d", "sighting_of_ref": "indicator--cf47f45e-3f2c-43a2-b050-6c8096e2b3f0", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f619579-9a37-45fe-b4be-c99e598618a9", "sighting_of_ref": "indicator--ded86f7b-686b-4d06-a094-2557e9c37e6c", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24e87025-f40d-4306-83b0-840b46087b0b", "sighting_of_ref": "indicator--f8ce94ca-e6e4-44a6-98dc-4065163c0a3a", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91e5f2a3-c47c-4588-bbc1-6419a9e42a72", "sighting_of_ref": "indicator--f8ce94ca-e6e4-44a6-98dc-4065163c0a3a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e9c36f0-8a01-4da0-b496-55b162afe9b1", "sighting_of_ref": "indicator--f8ce94ca-e6e4-44a6-98dc-4065163c0a3a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00135063-24ab-4d1c-a001-86bff7c399de", "sighting_of_ref": "indicator--d251f18c-597a-45bc-a44f-6a08a072bb1f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e7e8920-2d95-4f72-a96b-722f5f88beea", "sighting_of_ref": "indicator--d251f18c-597a-45bc-a44f-6a08a072bb1f", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bffd9c2-54a9-4ab7-9190-c88ea17e1ce9", "sighting_of_ref": "indicator--d251f18c-597a-45bc-a44f-6a08a072bb1f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--103aec13-75f2-425e-b841-dcc4182697ae", "sighting_of_ref": "indicator--183ee8b6-6f11-41af-a35f-6c2d580392da", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99dd15eb-fa5c-4ec3-b91d-958e9fedec2c", "sighting_of_ref": "indicator--11d0c00c-59ce-42cf-b2b6-084cf79dbd95", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e127ae56-38b8-45ab-ba89-a31e6584cc97", "sighting_of_ref": "indicator--11d0c00c-59ce-42cf-b2b6-084cf79dbd95", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98527017-3074-44bf-95fe-5876d7d03fa7", "sighting_of_ref": "indicator--dec884bb-1871-4d8a-97a6-75f5bf898999", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73aaa1ac-fe45-45f5-949e-6982e3e8a7fb", "sighting_of_ref": "indicator--f79a0f8d-cf16-478f-8014-c4e69bd18746", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8d6272b-54a6-493b-9b1e-0786e07436a6", "sighting_of_ref": "indicator--f79a0f8d-cf16-478f-8014-c4e69bd18746", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53171411-7284-48a0-8e35-3a4176ddab6c", "sighting_of_ref": "indicator--3667abd1-e9ba-4e84-a805-bcd19f9590f6", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9c9fa47-c6c3-4b47-b89a-de3c17eee3fc", "sighting_of_ref": "indicator--503e37b6-ab29-4c32-b493-181bba31ff91", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1655b7b6-f559-40c2-946a-a090d109a6ba", "sighting_of_ref": "indicator--cd30b0bb-1e0b-455e-b19a-98be50f66d6e", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fc5c033-2104-448a-b1a8-a7608911ffd3", "sighting_of_ref": "indicator--8050bb88-7b4a-40e0-8ab3-0c9fec591918", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ff4ea16-2d0c-4051-86f5-15c04683f194", "sighting_of_ref": "indicator--e7d03808-df27-4ec3-9073-08406527b7e8", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7009e73a-1fdd-456f-b178-eca5be3c9763", "sighting_of_ref": "indicator--54896786-c0c8-4d54-8eba-1db3e2c03157", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5866218b-71c2-4a60-b66b-429c5a1428d3", "sighting_of_ref": "indicator--54896786-c0c8-4d54-8eba-1db3e2c03157", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7da306d3-799f-459b-b04f-3164f28f9f2a", "sighting_of_ref": "indicator--fc9abf08-a6da-4303-976c-1b598e058e36", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9bf359d-611a-45a9-a702-45d35498b35a", "sighting_of_ref": "indicator--fc9abf08-a6da-4303-976c-1b598e058e36", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--207f4f1c-228a-4bd5-a976-0689ce580085", "sighting_of_ref": "indicator--93436f62-0287-481f-b11e-f5a4ca07b701", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cccceb4-459b-4a57-888b-bd3aed74219b", "sighting_of_ref": "indicator--3a72200f-70ca-4b2c-99e0-118b95b215c2", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f29df3b2-9b8c-4370-9d88-1985e5d082dd", "sighting_of_ref": "indicator--0045f65f-068e-4e1f-86e1-7f118c77d9b6", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--108befd1-1588-4f72-bbf2-ef2d61ebdf50", "sighting_of_ref": "indicator--0045f65f-068e-4e1f-86e1-7f118c77d9b6", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2049e43e-449e-4289-88d4-4493b8fa357c", "sighting_of_ref": "indicator--9995649f-092c-4767-b1e0-2baf09b5ab3e", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f991c5a4-65a6-4af5-9757-b150d0f46fa1", "sighting_of_ref": "indicator--a2f91465-3ff8-46da-8da8-6db1833759d8", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3d513a8-c474-44ae-aca8-a4732c60cfbe", "sighting_of_ref": "indicator--a2f91465-3ff8-46da-8da8-6db1833759d8", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43fef508-64e8-41c6-b874-c2e02c5b368a", "sighting_of_ref": "indicator--d50f7de2-86a4-44b9-97d2-6545be89d2ec", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27662ad3-cc7d-4fba-9096-9eaf09521672", "sighting_of_ref": "indicator--d50f7de2-86a4-44b9-97d2-6545be89d2ec", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3751a9c5-502f-4e0b-b1e8-08f7de4e0bac", "sighting_of_ref": "indicator--7fbaa366-ea11-490b-9239-fcc8289d7d37", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9b14530-94a0-4e96-99e4-b6a9bac2e315", "sighting_of_ref": "indicator--cf255e88-08e1-486e-a1b9-03316da50af9", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d438e384-facf-4758-a466-97a81abd9b14", "sighting_of_ref": "indicator--cf255e88-08e1-486e-a1b9-03316da50af9", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b6178f1-6dbf-4ac7-9c35-20af5c01ab7a", "sighting_of_ref": "indicator--188a6c8f-b0dd-4c14-91ad-2f479b3ae9fd", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c775ab5f-702a-4fce-9af3-fa32ea7cfdaf", "sighting_of_ref": "indicator--c16fde00-24c3-41db-89d8-41efebbd2d5f", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5fefc1c-d010-499b-a848-a68e7b2ebd3a", "sighting_of_ref": "indicator--c69e1bb9-a73e-44d0-b24a-13193d612f9a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd3d703c-8ad7-4e06-af13-f9a7c1cae91f", "sighting_of_ref": "indicator--c4578c1f-1f28-44fb-b2a1-1819b9da576a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c497142c-d05c-4a51-9be5-a5fdba7a4865", "sighting_of_ref": "indicator--a2e846ff-7cc8-4363-927d-2c32ca794775", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38b71612-d407-4636-87e9-d46c310bce6a", "sighting_of_ref": "indicator--a2e846ff-7cc8-4363-927d-2c32ca794775", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04c44c1e-e7dd-49ba-a9a0-c5e3be40e18b", "sighting_of_ref": "indicator--9701819c-ee1b-4333-865a-acd267d2439c", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1142acf2-5197-48d1-bf19-2f5f09deb333", "sighting_of_ref": "indicator--0e77d785-4d44-4f02-bc98-6b913c3e5bed", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db971b74-e678-4a11-98c0-36d695d2d416", "sighting_of_ref": "indicator--0e77d785-4d44-4f02-bc98-6b913c3e5bed", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5b699f8-92f6-43e9-b577-54384d84a254", "sighting_of_ref": "indicator--0c5b4584-fe25-46e0-b826-e4b271f3ca83", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a1c2a72-2322-4413-956e-6bc61f1cba38", "sighting_of_ref": "indicator--0b0d53ae-1371-4eeb-bbbb-853730b765ab", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4dd66f0-d6e1-4d6b-8a79-6912fa5d95f9", "sighting_of_ref": "indicator--0b0d53ae-1371-4eeb-bbbb-853730b765ab", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef809965-b0e6-4004-b85d-c1d2526716cd", "sighting_of_ref": "indicator--664a0ef1-cec8-49a3-b455-cf3036aabc2f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b93a0f4-491e-429c-b439-70f4e99d697c", "sighting_of_ref": "indicator--664a0ef1-cec8-49a3-b455-cf3036aabc2f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--984959a5-b2d4-4311-9596-f58795585381", "sighting_of_ref": "indicator--8423fa82-c9d0-4d9f-b4ea-6013b701cde0", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99f48884-0017-4db0-aac6-b4d8bce5530d", "sighting_of_ref": "indicator--084a711b-ed7a-4717-8d4c-59208757819f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebafd6ae-a217-471c-a62a-e369da5abbab", "sighting_of_ref": "indicator--084a711b-ed7a-4717-8d4c-59208757819f", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--233e1e67-2872-4bf1-8d6e-da949e451841", "sighting_of_ref": "indicator--084a711b-ed7a-4717-8d4c-59208757819f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--589c4007-23f7-4ced-b4a4-50646aaa06de", "sighting_of_ref": "indicator--018d83d9-12f7-4416-967c-9bceed800c97", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98d56286-37b4-4638-9453-80d3d1551695", "sighting_of_ref": "indicator--b4518e76-905e-42ef-bcfe-f4ae244598e8", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb50ffa5-57ab-4694-a3ef-db297034d587", "sighting_of_ref": "indicator--fe9cfb00-0172-4d2a-9568-50697d6e5cff", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66b90110-f8a8-460d-b22d-dca45e670679", "sighting_of_ref": "indicator--fe9cfb00-0172-4d2a-9568-50697d6e5cff", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--332cf508-6668-44fd-908e-5502d07ddf20", "sighting_of_ref": "indicator--61548227-2041-4c8d-81b3-9dcb8ed0e33e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc8d8394-b8dc-4d6c-bf5d-4ed7958ed811", "sighting_of_ref": "indicator--61548227-2041-4c8d-81b3-9dcb8ed0e33e", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91296416-de5a-4e67-b585-30bc0e3609fb", "sighting_of_ref": "indicator--466ff925-3e08-48bb-9346-192190dcea05", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab0f9a53-ac0f-4aea-a847-928963646005", "sighting_of_ref": "indicator--466ff925-3e08-48bb-9346-192190dcea05", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbdee20e-e9d3-4371-ae73-2ec7983c4740", "sighting_of_ref": "indicator--e1944d45-1e9a-493a-9400-bf331ce08933", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--689ec905-8d9d-4009-b8b0-178015c0f0e3", "sighting_of_ref": "indicator--c5fcd9ba-b229-4252-a7c0-e4734058512c", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d365a38-93c1-4819-bf9d-c22db19e6d0f", "sighting_of_ref": "indicator--0477ac87-7521-44ac-8cbd-71d253e673c9", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cafecfb6-5cc2-433b-921f-ce8c62aa8075", "sighting_of_ref": "indicator--0477ac87-7521-44ac-8cbd-71d253e673c9", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5da2e13c-4cd9-483b-8e03-75f8939fa327", "sighting_of_ref": "indicator--68ae6f42-1801-4e86-b4a0-c41ea776fb9d", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb9a6924-1f81-47b8-8f6e-98c0417518cd", "sighting_of_ref": "indicator--d16aee17-5a2f-4b2e-8873-c6923852f524", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a373be7-a7f5-4774-aef9-2a82e2363c30", "sighting_of_ref": "indicator--d16aee17-5a2f-4b2e-8873-c6923852f524", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72d910bd-cc58-481b-9780-1228c37d39f6", "sighting_of_ref": "indicator--cc49c30e-7863-47ef-8bc6-c430864b9c54", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af68a164-535a-4ea8-82b3-69f0222425ec", "sighting_of_ref": "indicator--cc49c30e-7863-47ef-8bc6-c430864b9c54", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--895a280a-9d49-4b3f-ba3b-99573e5579b6", "sighting_of_ref": "indicator--cc49c30e-7863-47ef-8bc6-c430864b9c54", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14c04a43-7b8d-42c1-ad41-1b7776fd9f03", "sighting_of_ref": "indicator--9531100c-a04b-4363-bc6c-6fbd8ee955be", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bed1af96-8302-4534-8504-ac15bdb88524", "sighting_of_ref": "indicator--9531100c-a04b-4363-bc6c-6fbd8ee955be", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--022c72cf-4eb8-4001-b03d-27302cf32e9a", "sighting_of_ref": "indicator--9531100c-a04b-4363-bc6c-6fbd8ee955be", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--699941ab-8ef6-4dce-a457-5b5ddaed4547", "sighting_of_ref": "indicator--b3f7e8d4-a902-487b-87ec-f78794f5bc1e", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--558a8d5e-fe37-4c89-8bba-35505b5d3ee0", "sighting_of_ref": "indicator--b3f7e8d4-a902-487b-87ec-f78794f5bc1e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38691f3b-13ce-4924-b601-dcf23f555f3d", "sighting_of_ref": "indicator--b3f7e8d4-a902-487b-87ec-f78794f5bc1e", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--095b694e-1422-4fce-934e-8e828e62b502", "sighting_of_ref": "indicator--faae5a17-0bae-47b6-85c2-bb74d6d05ecd", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c063ece-6864-41d5-9cf1-e19c589734aa", "sighting_of_ref": "indicator--faae5a17-0bae-47b6-85c2-bb74d6d05ecd", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b5aff88-bea8-4be4-a050-27786aaa958e", "sighting_of_ref": "indicator--78c0c6f2-2e14-4ed3-a3e5-b9c8cd0f2528", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58c21fa1-b8f0-4e85-81d9-a17bbde8ac00", "sighting_of_ref": "indicator--71ddbd22-5023-4222-bc63-a9e4addb62b3", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff07e63f-7375-491e-b24b-784991e493dd", "sighting_of_ref": "indicator--9bc52da8-dc61-47ec-aad2-e82b5cf312b6", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29b526de-0bb1-45a7-af2a-701dacbb862e", "sighting_of_ref": "indicator--77579c37-8952-4110-aca8-a03e3d9d8e8f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3944287-220d-4b0d-98aa-1928e74251e5", "sighting_of_ref": "indicator--77579c37-8952-4110-aca8-a03e3d9d8e8f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2532d774-513d-4396-bb8d-fdad88de53a1", "sighting_of_ref": "indicator--3521d435-ded5-4587-81bf-3fa01af8f0db", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0d17dde-64c4-438f-a867-571362b3bebf", "sighting_of_ref": "indicator--812a06cc-e558-41b1-9e42-7c20f4c9b00e", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae70ebf2-5073-4c45-a10b-c471e0631a9a", "sighting_of_ref": "indicator--812a06cc-e558-41b1-9e42-7c20f4c9b00e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b6bfe87-f5fa-4bce-bde4-a2110843441c", "sighting_of_ref": "indicator--812a06cc-e558-41b1-9e42-7c20f4c9b00e", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b05e3cc-75cb-4777-8430-5af244185296", "sighting_of_ref": "indicator--899fd7d0-7c7a-4c70-a7e3-76005c0dede8", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dc14376-14fd-4eae-9c8c-b780e1f40dbe", "sighting_of_ref": "indicator--d7963b08-dfff-4b0d-9a37-f7251827419e", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2f83fbf-d2ce-4da6-96ed-329b691ff8dc", "sighting_of_ref": "indicator--d7963b08-dfff-4b0d-9a37-f7251827419e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--018cf892-55f7-49c6-a9d8-b5abda97bee7", "sighting_of_ref": "indicator--d7963b08-dfff-4b0d-9a37-f7251827419e", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff5ce2b9-ea48-4b0c-aae5-0d2f1b1a3cdd", "sighting_of_ref": "indicator--d32d9b53-3ae2-4a16-b828-5678186a65ac", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--505dff90-7e89-4018-9630-cb9d0b5ee21e", "sighting_of_ref": "indicator--d32d9b53-3ae2-4a16-b828-5678186a65ac", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5574d17e-cb80-44ae-93eb-508c4b2bd626", "sighting_of_ref": "indicator--d32d9b53-3ae2-4a16-b828-5678186a65ac", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82a85ce3-6a54-4b8f-af01-94f6fac12dfb", "sighting_of_ref": "indicator--11860a85-6a91-4468-bdcd-204e8080eef9", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6158336b-e16f-45e5-9cbe-6e4e83235dcd", "sighting_of_ref": "indicator--1af6428b-a56c-41ec-afca-851d4a32a2df", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3234ca54-efc7-4fbd-9dba-b2e52c253e41", "sighting_of_ref": "indicator--1af6428b-a56c-41ec-afca-851d4a32a2df", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b114b18-c421-4cf0-80aa-1e865af0ab71", "sighting_of_ref": "indicator--6b7ab6fd-3667-4357-87dd-55ce7d6ea39d", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acbfec17-5b1d-4279-9a51-61ab56b75478", "sighting_of_ref": "indicator--6b7ab6fd-3667-4357-87dd-55ce7d6ea39d", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61df45b9-cedb-4c74-8a3e-5038d1813322", "sighting_of_ref": "indicator--c32bb710-b63b-47fe-8956-fd56614ce374", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--113d43a0-b1e4-4e52-a455-2076bf682f60", "sighting_of_ref": "indicator--520d3cc0-bda3-4767-aefb-c939662e2336", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--488da8f3-4d39-4901-affa-e210ec319094", "sighting_of_ref": "indicator--520d3cc0-bda3-4767-aefb-c939662e2336", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--067b5a69-3657-4028-a3ef-fe534d8115e7", "sighting_of_ref": "indicator--520d3cc0-bda3-4767-aefb-c939662e2336", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcb28a18-7b74-4ef8-b4a8-61ec5313b482", "sighting_of_ref": "indicator--eec4e86f-6a21-4281-ad6c-1c7580f0ffd9", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f78f3061-66e5-4bf2-b7a9-5f36616be86e", "sighting_of_ref": "indicator--eec4e86f-6a21-4281-ad6c-1c7580f0ffd9", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b3c9f30-bd38-4702-a836-4af0168f9fff", "sighting_of_ref": "indicator--eec4e86f-6a21-4281-ad6c-1c7580f0ffd9", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce8df8d6-3d6e-4b0b-b513-73b8719d1029", "sighting_of_ref": "indicator--a9659125-00c6-4576-b0b7-cacca466709f", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6717fc9d-37b3-4f11-9b71-e7183ec304b1", "sighting_of_ref": "indicator--a9659125-00c6-4576-b0b7-cacca466709f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49d5ea14-81ab-49a4-9539-bec5ce701502", "sighting_of_ref": "indicator--1bc68bbe-faf7-420b-8278-8932802ceea7", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--717b1a1c-7e0c-4f91-990a-fd65c1ae7f1e", "sighting_of_ref": "indicator--5bf4041f-84f3-429d-9ad8-8606259c8251", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--298728f0-c05a-4761-96a2-1d32a0ae0116", "sighting_of_ref": "indicator--1f396885-533e-4415-b8d9-22ee95687be3", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--926867a4-a1e6-45dd-b4d5-6ee386437f6b", "sighting_of_ref": "indicator--1f396885-533e-4415-b8d9-22ee95687be3", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e6b07d1-bf8d-4bc0-abac-4aa69bde4929", "sighting_of_ref": "indicator--1f396885-533e-4415-b8d9-22ee95687be3", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e66d1d4-ec78-4474-a7bd-ffc040bc8707", "sighting_of_ref": "indicator--2405c083-a13f-425b-880c-ba6cc6ea381a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dc03d1f-edc6-4be9-b9b2-81599d37781c", "sighting_of_ref": "indicator--2405c083-a13f-425b-880c-ba6cc6ea381a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3861820-3aee-43d3-bddd-6d824b1b6178", "sighting_of_ref": "indicator--482096f3-a136-4e63-9d4b-34ebe6fa2b49", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c639f809-6659-47a3-ad9a-bcf6398b250d", "sighting_of_ref": "indicator--4b20650d-2040-489a-a675-86b4841a2075", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8c04115-789e-4390-988a-820cdb012640", "sighting_of_ref": "indicator--86fa390e-0fa4-473f-896f-608122810cc2", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d6aae06-84ad-44ec-8546-40bbeadc8fc5", "sighting_of_ref": "indicator--86fa390e-0fa4-473f-896f-608122810cc2", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbf6e2ac-9c4c-4083-8698-85f61aacf05d", "sighting_of_ref": "indicator--27f812a1-41e6-47b6-9d58-f06827804198", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--294c7208-35e7-4924-a445-38cf875a8fb5", "sighting_of_ref": "indicator--88b30a28-fa2d-418b-89e6-bf0366c125bd", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0763e5c4-75d9-4e71-846b-49dde9fe8bc6", "sighting_of_ref": "indicator--5d9aecd5-7373-4f06-bb36-ba453f315ce1", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9b399f0-2578-456a-9b61-6fb4ac3e6d13", "sighting_of_ref": "indicator--bd232045-1f39-46ba-803f-065b91d11bf0", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ac2404f-eb0c-42bc-b955-dbfe8f9cbc09", "sighting_of_ref": "indicator--264dccef-9cec-4558-a768-0c2115a7728d", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b90cec71-bc71-4ec5-bdca-abe757ef59ef", "sighting_of_ref": "indicator--1a55e3d5-b7a9-4438-b50d-c84d4b6f716b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0529cd50-0077-4f07-9799-faea40df4505", "sighting_of_ref": "indicator--3bc9c3bd-0702-458b-a552-b4a3d86495da", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f47f8560-d078-47d1-8768-b0f71c0720fc", "sighting_of_ref": "indicator--235d321d-10cb-47f8-88dd-bffa6e46d056", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47be99e1-04ab-4430-b93a-79d9227b6fc0", "sighting_of_ref": "indicator--d5bd4418-3eb1-4fb1-8fe0-bbc5160d1e6b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4868b77b-45bd-4246-892b-12831a594482", "sighting_of_ref": "indicator--b617eb4a-157d-4712-9d54-b358d29f38b3", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15032fa4-3c91-4f0f-9af8-23ef2e97675c", "sighting_of_ref": "indicator--8953c386-ade0-49bd-b148-0be547c2cb6c", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e50bbad-282d-4f19-b1d3-7f7edff5de39", "sighting_of_ref": "indicator--e3f75330-8dea-45a0-bba0-4a775edd17b6", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fae0889c-d0e3-4c5f-bcf1-90481d3b00cf", "sighting_of_ref": "indicator--7e15f3e2-84e8-4b4b-8bc3-09604ed5bdb4", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74be4bd5-d507-409f-893d-fb1cf4e77163", "sighting_of_ref": "indicator--5d1e51cc-2c3c-4587-9a06-e1ce80ef4c41", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1da924f1-4a66-46c3-a601-00e587d596b7", "sighting_of_ref": "indicator--10198ce0-049b-4796-9e61-0b420b00ec17", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd670716-f856-4237-9177-a2a82ce00f18", "sighting_of_ref": "indicator--d2ed3883-d979-4923-bba2-5e2da0c6bc0d", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29e5dbbb-af00-49ba-8b4a-fd7c550658c4", "sighting_of_ref": "indicator--6df80489-95a9-47a7-b378-5654f3025419", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70f7c5ba-c26f-4499-881a-4289e666b5ac", "sighting_of_ref": "indicator--6df80489-95a9-47a7-b378-5654f3025419", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--979f733a-f515-4c11-ae73-7912ac68d2ec", "sighting_of_ref": "indicator--84797e8e-7e22-4812-87f5-ed6aca7f018c", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--958584b2-087b-460d-bd21-1e2eb669d985", "sighting_of_ref": "indicator--07ed8f62-936d-4dec-b4f6-66f061eea7fc", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8a69598-b950-41b3-b924-db477055d232", "sighting_of_ref": "indicator--07ed8f62-936d-4dec-b4f6-66f061eea7fc", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44800251-41ea-45cf-b914-6e1567ec402a", "sighting_of_ref": "indicator--07ed8f62-936d-4dec-b4f6-66f061eea7fc", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--941824ba-9aa1-441f-9ec1-af8149b9b887", "sighting_of_ref": "indicator--c2f68693-2214-46ae-a2bc-45fd986e960f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--549d4f50-c420-49ca-a172-33d4f9fa558b", "sighting_of_ref": "indicator--c2f68693-2214-46ae-a2bc-45fd986e960f", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc02c00c-a3c3-44b7-aae0-b61947ae22f1", "sighting_of_ref": "indicator--c2f68693-2214-46ae-a2bc-45fd986e960f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85b906a0-6a59-45e5-a725-7243c4af2ab1", "sighting_of_ref": "indicator--af50aacc-7b47-4711-a0e3-20a1a7a58d04", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a733515-adf9-4b3f-a653-7985c8fbb0b4", "sighting_of_ref": "indicator--af50aacc-7b47-4711-a0e3-20a1a7a58d04", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a987fe1d-5632-4af7-85b6-24e47b70276c", "sighting_of_ref": "indicator--af50aacc-7b47-4711-a0e3-20a1a7a58d04", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2888e6d-c4e4-44e0-bbef-0f3d5aa27490", "sighting_of_ref": "indicator--04912255-4745-4eb9-9920-34aa131e1f50", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a035e717-e24c-4905-8f5d-b57c3c6a58c8", "sighting_of_ref": "indicator--04912255-4745-4eb9-9920-34aa131e1f50", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b94b747-d536-4986-9d51-034b793a8a10", "sighting_of_ref": "indicator--04912255-4745-4eb9-9920-34aa131e1f50", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07462607-6266-4e2c-a483-636c84af89d9", "sighting_of_ref": "indicator--5eff8521-9f25-438b-bdf8-c10c9ec36d3f", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3a18c40-0139-42b0-b734-ed83f01cb3a8", "sighting_of_ref": "indicator--384670aa-2fe6-4d5f-a724-4788f09d0eab", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca0d7224-76c1-4de5-998b-16f619cb03c3", "sighting_of_ref": "indicator--384670aa-2fe6-4d5f-a724-4788f09d0eab", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa721466-3dc2-4fd4-a7dd-0f22330d175b", "sighting_of_ref": "indicator--30d463fb-bb1b-468a-b3d8-cf8de0441c75", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8275ccd-6f9d-43b3-a7c8-949902dc75d4", "sighting_of_ref": "indicator--3b9cb483-ae03-441f-bbda-add63e94d480", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23d6eb10-467b-4024-9556-35a9f0d16230", "sighting_of_ref": "indicator--3b9cb483-ae03-441f-bbda-add63e94d480", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c69e22b-0d3d-4e1e-9da9-1c51655e0afd", "sighting_of_ref": "indicator--1942e4eb-13ab-4377-8d7b-38166b0fb099", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa4334fd-d0d1-447b-b84a-5db497b33ff3", "sighting_of_ref": "indicator--6e73bec2-d161-47c8-96d6-f5b5dd04c98c", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--919de989-43c5-4a3e-a4b5-4dd1ca9a71f1", "sighting_of_ref": "indicator--7cebeafb-7812-4215-822e-cdc010d5bea2", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee205c40-f98d-4f13-81f0-9efa8fa75037", "sighting_of_ref": "indicator--7cebeafb-7812-4215-822e-cdc010d5bea2", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffc78390-6e75-4d6b-99e9-d12e231c2160", "sighting_of_ref": "indicator--d663c023-f9d3-4b62-b4c1-2990a7a3d08d", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f73148e-4646-4c0e-9137-f31f6d955404", "sighting_of_ref": "indicator--56864321-1398-456e-bb24-34e92377c423", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b07fa57b-fc26-4077-8e1b-30e6202ee704", "sighting_of_ref": "indicator--8a636380-dc9e-416e-a53c-da93a183d7a5", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--519c1059-c650-4eb7-ad16-42aeef5f0a7a", "sighting_of_ref": "indicator--c33365a0-638f-4559-a0ee-3c2272df2fe2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c12472f-9d1e-4f18-8377-2055f5d97fb7", "sighting_of_ref": "indicator--b1fe4ef5-5378-490d-abcb-bf2cd1b02e8e", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91ee0a20-9edc-450a-b089-cc47a5045ab7", "sighting_of_ref": "indicator--563141ed-63e5-4310-8007-81d487bdf7f8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09ebabed-f2eb-4e6e-a44e-2c48411ce0e0", "sighting_of_ref": "indicator--46979046-91ae-4084-97bd-5d2ada02571e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e000f52-ceac-48a7-bffe-9f17c9c70e1e", "sighting_of_ref": "indicator--0142994c-0d08-4f6d-b5b2-936745b7fe0e", "where_sighted_refs": ["location--cc47317e-2c18-43a6-8938-dea748a56ad5"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69ca8418-e38a-4574-aed5-9ec8c6f1f2f3", "sighting_of_ref": "indicator--55f63b01-c297-4e43-a6b9-0bccca8cd9d6", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3826027b-82d8-467d-9953-bc312d5e9b34", "sighting_of_ref": "indicator--cff971a9-b4d9-4815-9b7c-6ecc92b6a6ca", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05c1ed1f-e9db-4d18-8b4f-eaf68e09573e", "sighting_of_ref": "indicator--7e520c6f-2caf-4512-beef-7165f7433911", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec040666-89eb-443b-af31-e7121e4f8b3f", "sighting_of_ref": "indicator--8da70745-5438-4fbf-bdf5-d90a97222d17", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a3aefdf-d84d-4ca0-aac0-b636b63413ae", "sighting_of_ref": "indicator--464d7fa2-9abc-4e89-8b44-9e87e4fde2e6", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40a08d37-218a-4b25-ad17-b68eb44a1836", "sighting_of_ref": "indicator--e3a5fbb6-0253-463f-b664-dacabf62ea72", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe91f2e8-c027-4ccb-afca-19d7aff8f604", "sighting_of_ref": "indicator--73a8140c-6e02-4c60-8864-4e5cd0939506", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--660e145d-7446-4b02-8b22-3b3f86d351cc", "sighting_of_ref": "indicator--768e42ce-d003-4b27-8baa-4c0a2e0a93e9", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77083604-59ec-4218-a4e4-e740f0834bde", "sighting_of_ref": "indicator--4b05ca5e-2e4b-41a3-ac1f-c78cf88369b5", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65ca8c1a-0800-469b-abb0-9289e007cd36", "sighting_of_ref": "indicator--4ec22bf9-347f-4c83-ad84-e60a852e20d1", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09131010-bfa5-4e53-8560-b31559554a41", "sighting_of_ref": "indicator--4ec22bf9-347f-4c83-ad84-e60a852e20d1", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5b06cd3-eb78-426e-83a1-87af03b96ed4", "sighting_of_ref": "indicator--e16f73b2-cd8a-4f59-a5fe-d79fc34e70c1", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a39fb868-ec31-40a8-97f8-e173a4b4bfab", "sighting_of_ref": "indicator--6688fea5-99f6-4459-a603-a16a92deacd9", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cafc826e-2e0e-4877-ae06-fe55baa4e0a3", "sighting_of_ref": "indicator--71387ad4-6fba-4a5f-9d0e-6f70072cf434", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96fa9be2-fe10-435d-8588-e2a5ad8a41f8", "sighting_of_ref": "indicator--4bc5935a-8fe4-4b9f-89d9-eeb06e1ecc6d", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad2d8a4d-5928-4484-9f42-9ab0b306280d", "sighting_of_ref": "indicator--1f5e77bc-9a77-43e7-a252-951e105a359e", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13d41e1a-c488-4481-978c-7b9fba80c7e1", "sighting_of_ref": "indicator--13cb9f91-a114-43cf-b53e-3bf4c861c7ff", "where_sighted_refs": ["location--cc47317e-2c18-43a6-8938-dea748a56ad5"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24a2b945-bfa8-40be-94b9-f37c7bf6c17f", "sighting_of_ref": "indicator--4466f0f3-56c3-44cd-b9d7-d3f49ebc744c", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7b0be0b-15e0-4212-bee4-d62086176e59", "sighting_of_ref": "indicator--cf4db7c5-c0ef-42df-93f1-dadfee0b3c6c", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0fe35aa-0e72-41e1-b464-116dc4fa13d0", "sighting_of_ref": "indicator--799c273b-b99a-4a73-b372-1898b0da76d8", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1b57c25-f24d-458b-9784-b47b4e712194", "sighting_of_ref": "indicator--13e9fb15-4d99-46a3-8ded-fbf0fc4f8502", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24861e6a-932a-40f8-a597-c2a0878098de", "sighting_of_ref": "indicator--9277b9e7-48c6-4a38-8eff-f3a03bd199d5", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d57bdf8-2856-4830-9cd0-1a7cdb68084f", "sighting_of_ref": "indicator--956ab404-33d1-4c68-814b-265aebf105c0", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89967974-0fdb-457f-b5ad-178e2ce1be8c", "sighting_of_ref": "indicator--956ab404-33d1-4c68-814b-265aebf105c0", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--488e02a3-f29f-4dcc-b249-4e83936de8d7", "sighting_of_ref": "indicator--00d8ff06-7021-4d85-8289-4a34abd64410", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0c8fa36-d733-4c69-bf07-b86477d561c4", "sighting_of_ref": "indicator--0a66e042-91f1-4367-a51d-be4053c4dc8e", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cb6ddee-9e7f-4328-b93d-ff6f3060dc32", "sighting_of_ref": "indicator--95ccd6fe-f909-4e99-86cc-c0bc15f0c48e", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3f59a33-652f-4de0-85e7-a76f791c03e8", "sighting_of_ref": "indicator--95ccd6fe-f909-4e99-86cc-c0bc15f0c48e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--465cc5c3-68bf-4fa5-83c8-ac3c8883323a", "sighting_of_ref": "indicator--95ccd6fe-f909-4e99-86cc-c0bc15f0c48e", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--632a5b7a-eec0-435e-b0b0-ab187ec22c73", "sighting_of_ref": "indicator--03fe2572-34f2-47db-89eb-62b94d0465d1", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25a6f37f-7e91-4f19-8cf5-023f08030555", "sighting_of_ref": "indicator--4f121a6b-3b4a-450e-9738-89f1661dbfcb", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76a18058-b1c1-4d68-8724-9573f98af5df", "sighting_of_ref": "indicator--d326deba-a56f-4ef4-85c4-9603c84f0322", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f10672ec-e937-4960-a236-1db229daedff", "sighting_of_ref": "indicator--9e31f432-22e2-470f-8428-e7173a0ab64d", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bb9cddb-1453-4cd8-81ce-380a310056b3", "sighting_of_ref": "indicator--f38ab8d3-2938-4ff1-8fa1-b9c2e53eb1d1", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd3df556-ce6c-4f5b-9c41-5a1b1199b513", "sighting_of_ref": "indicator--f1566bd1-0980-4d43-837f-966da266e446", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6531eca-d742-4f82-a274-6bf1e0959904", "sighting_of_ref": "indicator--f1566bd1-0980-4d43-837f-966da266e446", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e252d5e-b56b-44b9-b20c-c56f2efc5365", "sighting_of_ref": "indicator--216e4dd6-a7b4-444c-ae9f-13dc5d8f1e29", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19eead32-657f-45e8-80a8-9eef495c1654", "sighting_of_ref": "indicator--0d33cf1c-3552-4457-8e70-eccb43be29e6", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdb6c8ef-d6a6-40d4-afa9-87fd78c44c62", "sighting_of_ref": "indicator--7c4eca40-ffdf-489a-9452-604265faa9fe", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8c4352b-732e-4d1e-b874-4af8788d36db", "sighting_of_ref": "indicator--01e21f6d-6698-45ed-a68a-cf87f980bb64", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0b3f067-e48b-40b6-89c6-3fe44ff5ee02", "sighting_of_ref": "indicator--e7f4624f-0fe5-41c4-b5ee-cf6f054fcf0e", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6520d3f9-e070-4e1f-8e84-73d538bf4cd8", "sighting_of_ref": "indicator--9e3351ce-0fdb-45d1-9ca8-ad89e20cbf39", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f712328-dd1d-494f-a735-2e176000a72d", "sighting_of_ref": "indicator--9dc46848-6cf3-4546-a00e-4ef049409fca", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67cc0a34-52b1-47cb-955f-74c58b659d51", "sighting_of_ref": "indicator--4cc8091a-39eb-4d11-afee-30d94a2ae792", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--322ac743-70ec-484b-a3ff-fa4dab17dfb1", "sighting_of_ref": "indicator--0f3ce12f-cf56-4c1d-9d04-348bd5702c67", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89c2d144-70be-4146-9223-89099db5224d", "sighting_of_ref": "indicator--90370f9d-a8b3-4483-8d17-a7e87d7bcd81", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--243d60d5-88f6-4ad2-9745-20f9b87b85a4", "sighting_of_ref": "indicator--e72be471-ed33-436f-909f-886b68c39f08", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89134ecb-ef76-4a49-a8fa-6fcc5b6b0bce", "sighting_of_ref": "indicator--57e115ae-127f-4e25-a4d5-ba020a0aa5ad", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98e1d3dd-7d1b-410e-be12-6a05013114cb", "sighting_of_ref": "indicator--51b254e9-dcf7-4b96-b02f-0bb6d5503912", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e707e4b-73e9-45a4-b429-51ed9f65806e", "sighting_of_ref": "indicator--1c4863e3-e3c5-4f8c-9d84-cb5d71ee4e76", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bca84f26-89cf-4eff-aa52-95fb7c5a248f", "sighting_of_ref": "indicator--bddf30bd-84f2-4a08-91d2-9a559f2cf36b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c3fa2d9-f4c5-40c4-a17c-7db3f650c9f1", "sighting_of_ref": "indicator--78023b5e-c073-4882-af05-845917f51a95", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a8e97cd-b1d4-425a-8854-b9581739fee3", "sighting_of_ref": "indicator--2de6dc78-4e7c-49f5-91f1-e7e73ba0f283", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba6a0635-aed4-4f21-a9a8-edd4f232b882", "sighting_of_ref": "indicator--f32a08cd-cbc1-4716-abb4-597ee87f7b7c", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--935c579c-f011-4629-b236-0e6906fbb6d8", "sighting_of_ref": "indicator--e4027212-d451-4546-8b83-636b16b71316", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8db5c5b-8f53-47f4-870c-64bc2ff26c72", "sighting_of_ref": "indicator--3c3a5dda-a469-42ac-85e2-8ac4417c70eb", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a2fecfa-0255-4af8-b947-6e2c2a3aa077", "sighting_of_ref": "indicator--d36ea88f-e475-4620-a26f-c175b8669867", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfe8bcb3-bcec-4fec-9e98-cdee682ceb1a", "sighting_of_ref": "indicator--2fba78ca-a8a5-4be1-bdfe-0db86d509485", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--797653dd-3e77-49e9-a6bf-07da69d9c602", "sighting_of_ref": "indicator--ac3c5573-2d1e-48b4-90e3-8e026b4f88e0", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3a76ca9-b136-4764-a1df-38f066ab286e", "sighting_of_ref": "indicator--44d8558e-07f4-4cfc-8572-e685b09c021f", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbfa550c-ee3c-42e6-b7b0-258180e2489a", "sighting_of_ref": "indicator--842a7e2d-3cc4-46fc-be36-42cd0ff3877d", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9290e828-18f6-489f-b74b-7cea7efcb152", "sighting_of_ref": "indicator--58d2484e-7cca-43e4-b9ac-2b27ab7c2618", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3d6d3f9-f52f-4443-866e-f9bff6096492", "sighting_of_ref": "indicator--87acb9ab-ba6e-4cfd-a3cf-291628c51a56", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dcdd65a-e4bf-49fe-a9be-e8cc619599df", "sighting_of_ref": "indicator--52ef1dc9-723e-4630-b51f-0fb410a6836d", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c20fba8-d034-4eef-b453-64ffda0413e8", "sighting_of_ref": "indicator--d7010a5a-d6da-4535-9647-7aed041fe80e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30390421-68b7-4fe2-8e14-d6b7e87fa211", "sighting_of_ref": "indicator--f5abfc15-11c1-4e96-8569-0fe059dc4dfa", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1589a5f3-bddb-4055-949d-f4e7ea550d97", "sighting_of_ref": "indicator--808e96ee-965d-457e-afcc-71880ea7781b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db1fb18a-4d64-4c84-b58b-5fb9312653ea", "sighting_of_ref": "indicator--518ba04a-952f-4ca3-b743-f1a7df4e6a23", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c24fcaf-9921-4842-a50a-b4efed4fc547", "sighting_of_ref": "indicator--3a486dfc-a7e1-43a8-944d-ad523705d260", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8d2d6f9-43ec-4bbb-9477-4c538941e771", "sighting_of_ref": "indicator--a1a8fcd3-5ef8-4627-8316-d175c7b42cc5", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0657bc8-481d-4775-bd7c-87c6c8c58481", "sighting_of_ref": "indicator--9795dda7-8d9b-4b40-bf08-4be04372d994", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af76c70c-5397-40b6-b16d-6a3d3fc22bcf", "sighting_of_ref": "indicator--61730939-b21d-488f-9dcc-01c5f77872c7", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bf4db8b-c03c-49db-aebe-264f70e32f29", "sighting_of_ref": "indicator--fe7d291e-c661-41f7-849a-566e5bb9d245", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a521a39b-6725-4918-908c-00957b577c5b", "sighting_of_ref": "indicator--4d703b33-bccb-4121-8745-e73927a61999", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5daa6fa0-1cfd-47a1-bef3-7f2684ba21bc", "sighting_of_ref": "indicator--98759f96-a5c9-4f50-b135-3f30ad217882", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--729dd5b1-a6d9-41d3-b42d-44def4c164e2", "sighting_of_ref": "indicator--1d468407-6d96-40eb-83b6-f136c284d0d0", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02c7c876-a2b3-4564-9b06-d46a4f0534f1", "sighting_of_ref": "indicator--f7ea2cbc-67cb-4b57-bd9e-639a85cc85e9", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94f736f1-94f0-4e4f-bc97-066fc732caf3", "sighting_of_ref": "indicator--909b7f2a-490b-4520-9bb0-6929d6f7bfec", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7e27437-e61f-4862-93c3-590682d32486", "sighting_of_ref": "indicator--b592d269-2ab0-47dd-9a4b-f7e3288377f0", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--276efb2f-a695-464b-8340-48b426010864", "sighting_of_ref": "indicator--88c176e9-a62f-4eb5-b838-c03e9f86207f", "where_sighted_refs": ["location--cc47317e-2c18-43a6-8938-dea748a56ad5"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2e569d4-c15b-48cb-b0a1-fdabeda665c2", "sighting_of_ref": "indicator--1d1e8359-214f-4f73-bd40-48e6d4dd770f", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f10b74f-ffed-4ea2-ba94-7150fe5f4664", "sighting_of_ref": "indicator--7f1e7b43-e808-4ceb-aaf3-779878258a14", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d2d4713-d2dc-4b59-b0dc-9a9d7db43cc0", "sighting_of_ref": "indicator--caeb2426-d397-434f-b91e-8428320a1ad5", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3344cf5-dc98-4679-a95d-ad8d4fe9aa25", "sighting_of_ref": "indicator--5ac56a2c-8a09-400e-8777-1c6090a6e6c0", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c071d40-99cc-4215-9adb-28701aece63c", "sighting_of_ref": "indicator--5ac56a2c-8a09-400e-8777-1c6090a6e6c0", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4893ad6-2f70-476d-9262-adac68c8fb5e", "sighting_of_ref": "indicator--490875b8-0f29-40c9-9f78-86de4ea9d2ba", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abb283ea-a33e-49e4-82c3-1c0ff93a2480", "sighting_of_ref": "indicator--5900b573-2d13-4edc-a479-6b88f0279001", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0acf3a9-206d-46ff-8655-61fb5d90c7a5", "sighting_of_ref": "indicator--fb322bc0-6025-46af-af28-e80bc5275687", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0204d27-6568-49f2-866b-d8305b82e516", "sighting_of_ref": "indicator--a71654a8-0451-4aa0-bdac-7dd255756caf", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5f04a47-a81d-4cb9-adf3-8ee4fbf08402", "sighting_of_ref": "indicator--f89fef59-5047-4ced-9976-2beadd7e4a30", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--068987e1-4a1e-43e0-9cfe-1acfd7ce6542", "sighting_of_ref": "indicator--0457f8a1-9920-47e6-923e-c9d37d53734d", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9815f4c-7a26-4023-85cc-e390cd06766e", "sighting_of_ref": "indicator--c3973e96-fb98-4f8a-8f8c-4a9313fb6b23", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26040da4-be4f-4d69-8b4d-f16760bb739c", "sighting_of_ref": "indicator--7a50c86a-1ff2-4fd3-a7b8-6db6e0a14dad", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbbeb2dd-7cd5-444c-9b57-9e2185c674f2", "sighting_of_ref": "indicator--d4441beb-9832-490c-83a4-0c3e72311fe1", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e659712f-c1ce-4649-8bac-98b31e11ec9d", "sighting_of_ref": "indicator--d4441beb-9832-490c-83a4-0c3e72311fe1", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dee6b370-46fe-4521-a022-dcd3f45a1fdb", "sighting_of_ref": "indicator--d4441beb-9832-490c-83a4-0c3e72311fe1", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82c0ae61-28e3-4d3b-b972-1cbee6896955", "sighting_of_ref": "indicator--6f6a1c4c-9c6a-45fe-899e-05df4e058768", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dd8f1a0-faa8-4cb1-a344-cf30e775ec48", "sighting_of_ref": "indicator--6f6a1c4c-9c6a-45fe-899e-05df4e058768", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c789a9f-2d86-4d7a-b801-ad3645cd1085", "sighting_of_ref": "indicator--038d528d-c399-4c70-ad4a-95737fc2c8ef", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22003811-22aa-4d08-936c-f2bbab6695ad", "sighting_of_ref": "indicator--038d528d-c399-4c70-ad4a-95737fc2c8ef", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58515985-c2a1-4c06-9996-731dce46fc07", "sighting_of_ref": "indicator--038d528d-c399-4c70-ad4a-95737fc2c8ef", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33e1c7d5-46c8-418b-9405-321bc3579fa7", "sighting_of_ref": "indicator--49669c1d-201d-402f-82c7-bdf03496e09c", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6afd4b8-d85a-471f-ab40-1d9a52a748b9", "sighting_of_ref": "indicator--bb2f4933-a8c8-4f6e-86c5-fba05d9a3fae", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6af7aab-5799-40ef-a80d-9faebfb7fb02", "sighting_of_ref": "indicator--087fb005-5f76-4985-a82f-c43dbbb89b6e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f259ebf3-6955-4ddc-bdc6-2d4863babc6b", "sighting_of_ref": "indicator--79899239-db72-472d-b343-d17cf80f6ffc", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99e118ed-6071-4341-bff7-5c80f18defd0", "sighting_of_ref": "indicator--70932f78-bbc0-49d1-b4a8-ff53d9fe6462", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a4b6a99-7325-4aeb-8dba-984e717d0f77", "sighting_of_ref": "indicator--70932f78-bbc0-49d1-b4a8-ff53d9fe6462", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f70b39c4-c352-434d-b059-beecf33036ba", "sighting_of_ref": "indicator--c229e986-4b01-4b21-aab6-22814700bc7f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dc935c1-fa9d-4643-8c53-f2777b1d6831", "sighting_of_ref": "indicator--6e6947af-26e3-4b71-b794-b8de127a33fc", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5544e0ed-1c0c-4ae9-8848-08e9de4f0198", "sighting_of_ref": "indicator--6e6947af-26e3-4b71-b794-b8de127a33fc", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98196e86-d8c3-4a69-9d4b-d99bb2886785", "sighting_of_ref": "indicator--67b94ca3-aa46-45c9-8b57-872ba11a17f1", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c127d2d-2392-466e-afd8-ab4a2af6c3cb", "sighting_of_ref": "indicator--02250828-7c50-4e94-9ffb-aea0dc56c826", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d76503ca-7b6e-468b-a554-e3129eb93a71", "sighting_of_ref": "indicator--6f06ad3b-8146-4a33-95be-1e276353c12e", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdc5452d-de68-4be8-8d60-fe247b2c7c60", "sighting_of_ref": "indicator--0fdef3dd-e3cd-4c07-9bdd-81f7227d2c74", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8501a34-d945-46fa-baf7-1a50c0ee407c", "sighting_of_ref": "indicator--392ad526-1ddd-4613-a910-32c0b1a7e6c9", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97c85267-e0ca-4240-b31d-69cc5067d36e", "sighting_of_ref": "indicator--6b08c677-378d-4f93-903d-55f937ff233d", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f376ce3d-bf6c-46c0-b6a6-d797fb9521a6", "sighting_of_ref": "indicator--6b08c677-378d-4f93-903d-55f937ff233d", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efffbcde-8f51-482b-8690-3450b23d763a", "sighting_of_ref": "indicator--6b08c677-378d-4f93-903d-55f937ff233d", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69aa8040-8610-4f30-a708-95014136aba9", "sighting_of_ref": "indicator--1d86abaa-4a77-4aeb-84ca-b8fcdf3311b8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cbed925-f19a-4c2a-82f5-ea3d0846464e", "sighting_of_ref": "indicator--d528f38d-a578-42bb-a0cc-31a07f785f79", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c0fc4ad-4fd5-4bdf-b879-7ec3d187df11", "sighting_of_ref": "indicator--b9d1f338-3269-4e4a-bf1f-73d1c70d9c74", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af051813-6473-4985-aa0f-7eac91b8acc5", "sighting_of_ref": "indicator--b3cbe0c6-e87d-4462-8f69-36ffd91d2a03", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77029664-9a7a-4869-ad97-f02f1b69952f", "sighting_of_ref": "indicator--cb6cab8d-71e5-448e-a5ff-88139399e203", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f79bf6c-0bf4-42a6-94cb-cf506ae156f3", "sighting_of_ref": "indicator--df2ff629-a372-4ef2-9dc0-faa53ad64cf5", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dc4a155-6a4c-4290-8c77-3dcb99097688", "sighting_of_ref": "indicator--acd6a37c-dba1-4673-a7fa-d23a0343c35b", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--724b6626-8800-4594-9bd6-393f93ad7b84", "sighting_of_ref": "indicator--88b90443-cab6-46dc-83dd-b45eb2839d27", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5edaa072-965b-4b59-bbe9-2a6b9802da54", "sighting_of_ref": "indicator--b1910e29-5aea-4671-9399-a29906d9ff80", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efa1cf64-63fb-4297-bd88-a0713f89bfe5", "sighting_of_ref": "indicator--cc4af55e-322f-40ec-96b0-a4631e58b2b5", "where_sighted_refs": ["location--cc47317e-2c18-43a6-8938-dea748a56ad5"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad2edb63-ee51-482e-a866-3c79bd83783d", "sighting_of_ref": "indicator--be8ca97f-6629-4c86-be6d-329cea0381e2", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62a258d3-8e07-4815-9674-a38948e55dd8", "sighting_of_ref": "indicator--08e88893-6aa5-4a52-be7b-7881f02f9760", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92770db4-7361-4ee3-8d53-587afbfc0d57", "sighting_of_ref": "indicator--6db2ecc7-afb7-4067-bfff-126efe0338c0", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b4cd1e5-4f0b-40ea-87d1-46a322da6ffe", "sighting_of_ref": "indicator--58504c36-bc16-4ee6-8676-bd73d7002c42", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afde3c50-3d78-4fd5-934c-3de68be9c975", "sighting_of_ref": "indicator--517c4786-a6a5-439e-8911-baa10bfb993a", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71bf9bb9-cb5a-4ccc-a2e0-59096f756fb3", "sighting_of_ref": "indicator--2fc6c201-e4d7-4578-bf3d-680d7fb5665b", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62254372-53f4-4325-919a-529cbd3e5139", "sighting_of_ref": "indicator--19d07883-a4bb-4577-9adf-6ca0931308ad", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc0047f3-4a73-4090-9da8-d6c21e468079", "sighting_of_ref": "indicator--353309ad-c848-4ce5-965d-d7e4a411c5cd", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7c80414-7e41-4f8f-8ba3-bd78888432c3", "sighting_of_ref": "indicator--80a85199-fab7-4609-b6a9-e013729d6c06", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cf67c03-f6e1-4497-bc7a-8251e1dd832e", "sighting_of_ref": "indicator--a4f1ed59-b391-47db-ad1b-f3782931e4e9", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--143577ef-0461-48e6-b5a5-f362f92c0c69", "sighting_of_ref": "indicator--e8aa067d-2bee-4163-aeba-f20e8bcf44be", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04baa466-8d53-4348-9c87-749d18a5c69c", "sighting_of_ref": "indicator--261086df-dd9f-4207-82a7-390e7d4c0451", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b301778-1339-4519-897e-8cb633809f3b", "sighting_of_ref": "indicator--fa27a925-c47c-4e7a-92b9-05b50b022633", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--526e6ddb-311b-4053-9196-eaf52805e902", "sighting_of_ref": "indicator--9bba31d5-5f68-4258-9a9d-ddc12457f768", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbec2ba4-3931-485e-9af8-d6c50914a9ca", "sighting_of_ref": "indicator--9bba31d5-5f68-4258-9a9d-ddc12457f768", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2e60677-7f51-48a8-9e74-209f19510625", "sighting_of_ref": "indicator--9bba31d5-5f68-4258-9a9d-ddc12457f768", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--244cdd36-abb9-4e36-836c-03bb3162b6ac", "sighting_of_ref": "indicator--14c56cdc-558a-43d1-b1db-b2bd4ccfadbd", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bece1fe0-be16-490f-8425-f5a587f60fc5", "sighting_of_ref": "indicator--14c56cdc-558a-43d1-b1db-b2bd4ccfadbd", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c1295e4-6f25-4c64-b69d-32458f46d317", "sighting_of_ref": "indicator--ffeaf2dc-9412-42a6-bc1e-568d9b10b7ed", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cca4a8a1-2bb8-439b-bc49-5d9bcc1cbd1c", "sighting_of_ref": "indicator--ffeaf2dc-9412-42a6-bc1e-568d9b10b7ed", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a21a5be-af63-4295-b882-ff69f0fafc03", "sighting_of_ref": "indicator--ffeaf2dc-9412-42a6-bc1e-568d9b10b7ed", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf6bf39a-d8b4-419e-be5b-6295ee4dfed0", "sighting_of_ref": "indicator--50cd559d-9078-4b8b-a10d-9f87324d9cb1", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8a12c45-4c57-4fe8-97ae-1575477fca4e", "sighting_of_ref": "indicator--50cd559d-9078-4b8b-a10d-9f87324d9cb1", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fcd990b-5851-46e3-ae71-be974f811e70", "sighting_of_ref": "indicator--50cd559d-9078-4b8b-a10d-9f87324d9cb1", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43a86335-2850-4c2a-942a-721f8e0c7783", "sighting_of_ref": "indicator--96122006-be61-407f-bda4-ce63317b73af", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3083963e-b788-40d2-a501-3003337e0e7e", "sighting_of_ref": "indicator--61427bad-773a-4f91-9534-e5600535bce5", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6909951-88b8-436a-a53d-be3155c527cc", "sighting_of_ref": "indicator--61427bad-773a-4f91-9534-e5600535bce5", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c4c7271-9e3e-434d-83e8-b69f21500611", "sighting_of_ref": "indicator--9f0417e7-82e5-4522-8baa-4bed63b5f5ad", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f092dc71-db60-49ec-b786-d588dcce0c80", "sighting_of_ref": "indicator--9f0417e7-82e5-4522-8baa-4bed63b5f5ad", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07690d6e-8b14-44d8-8e29-4773267b73c4", "sighting_of_ref": "indicator--e655b36e-e524-437f-ba31-b5acd2d4b1f7", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53a12715-360c-4901-a34b-9e5ad1ba2820", "sighting_of_ref": "indicator--e655b36e-e524-437f-ba31-b5acd2d4b1f7", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e87e3034-7c90-4ecf-ad42-5c71775d1592", "sighting_of_ref": "indicator--3266b255-94e2-41c4-b74f-7e61dfc99cbf", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83f3eca6-5a3a-40fc-935f-47bb24315c08", "sighting_of_ref": "indicator--3266b255-94e2-41c4-b74f-7e61dfc99cbf", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3289c07d-b32b-4b8e-9f18-e4ee28d0911f", "sighting_of_ref": "indicator--3266b255-94e2-41c4-b74f-7e61dfc99cbf", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e7dcc1d-61f6-445c-9c86-02344f8f815c", "sighting_of_ref": "indicator--a26121f2-9bc3-4551-9883-3c1723dcc0ad", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd3355ae-9fa4-4d60-a8a0-ef7d61d3b54f", "sighting_of_ref": "indicator--73c5f557-1c29-41e7-8fbb-2ba49b26a7b8", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee4497ca-5ae0-4a4b-9282-d8fa83902070", "sighting_of_ref": "indicator--73c5f557-1c29-41e7-8fbb-2ba49b26a7b8", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e35507e-d722-4bb5-ba8d-a27a946dbab3", "sighting_of_ref": "indicator--73c5f557-1c29-41e7-8fbb-2ba49b26a7b8", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d289b889-97c5-405a-93d1-e610554e8acf", "sighting_of_ref": "indicator--30e9e481-1a09-4589-95d6-a1a090e2972e", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cee375ce-25e1-49bd-890b-9e4c3f6791dc", "sighting_of_ref": "indicator--241d6d3c-468b-4ca1-920a-b133ef6e0313", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47555924-5375-4251-8d92-afb847ac081c", "sighting_of_ref": "indicator--241d6d3c-468b-4ca1-920a-b133ef6e0313", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22da46bc-4a11-4d42-865c-679023cbe1b5", "sighting_of_ref": "indicator--241d6d3c-468b-4ca1-920a-b133ef6e0313", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ce06928-b8b0-4abb-a7e8-efb552689f15", "sighting_of_ref": "indicator--134f2294-2a5b-4c12-8576-b7f124f832a2", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8edbf444-1dcc-40f6-8a8f-33047f2776e0", "sighting_of_ref": "indicator--134f2294-2a5b-4c12-8576-b7f124f832a2", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcd31938-8341-4b21-b249-23652e917912", "sighting_of_ref": "indicator--134f2294-2a5b-4c12-8576-b7f124f832a2", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19abd348-e1ac-40b7-9193-9ea225bd856f", "sighting_of_ref": "indicator--bc6e7196-68d9-4fdb-90d2-c32c4708cc66", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61240ee9-3ddc-4e6a-9f49-d9d2d4a6ae67", "sighting_of_ref": "indicator--91ff06da-f182-4741-8286-bc333f082ef6", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2f2a4b3-5c36-493d-9c8c-385b8fbe58ab", "sighting_of_ref": "indicator--91ff06da-f182-4741-8286-bc333f082ef6", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e8fb70a-216a-4878-8ee4-3483bfd9eaf7", "sighting_of_ref": "indicator--91ff06da-f182-4741-8286-bc333f082ef6", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba1f0530-2c5a-4dc8-a249-f9681219b47b", "sighting_of_ref": "indicator--dc1f6f2a-c8da-473c-a236-f0be202b2501", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa8abf44-3ce4-49c5-aab8-15a7c161a4ef", "sighting_of_ref": "indicator--dc1f6f2a-c8da-473c-a236-f0be202b2501", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c68a7646-317c-4cf3-9e98-bf3207386a75", "sighting_of_ref": "indicator--dc1f6f2a-c8da-473c-a236-f0be202b2501", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03847236-17f4-4f09-8dd0-92275b8c7ee1", "sighting_of_ref": "indicator--ec22654e-dfce-47f0-8437-06e3b49192af", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--836d47e8-aef1-4c55-9b19-1f909cbc6812", "sighting_of_ref": "indicator--ec22654e-dfce-47f0-8437-06e3b49192af", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--387b96e4-7a5d-4214-892f-e5615df942c1", "sighting_of_ref": "indicator--ec22654e-dfce-47f0-8437-06e3b49192af", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--221e387b-db66-4632-9ddc-424648885656", "sighting_of_ref": "indicator--4176b9dd-5d3c-4fc3-a23a-9a1dcaf16401", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b687a40-4285-46d7-8216-e44eaba0bbb5", "sighting_of_ref": "indicator--4176b9dd-5d3c-4fc3-a23a-9a1dcaf16401", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a04e7bad-b144-4b3d-85e7-ff6a6987108b", "sighting_of_ref": "indicator--7c5c551e-2369-46aa-ac96-9d0b2cd14b3a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81486378-4ea5-4d46-be0c-30fe96e5e51c", "sighting_of_ref": "indicator--99091fc8-cfe4-4f48-a0ca-64ac26647e45", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--521288f0-3355-4248-bb91-789754abc926", "sighting_of_ref": "indicator--b11307f5-d653-4227-8b4a-cc20cb18733e", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0da3126-f330-42f6-ae02-3fa5dfe93844", "sighting_of_ref": "indicator--b11307f5-d653-4227-8b4a-cc20cb18733e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f85607e0-e3e6-43fa-8596-983fe31e8e63", "sighting_of_ref": "indicator--b11307f5-d653-4227-8b4a-cc20cb18733e", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5f933aa-c4b4-4fe6-8f75-a8e895dec817", "sighting_of_ref": "indicator--966f0a1f-a6ce-4a4c-9833-54f173a16529", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3d3076d-d39b-49a9-ac9b-bb9323c033f8", "sighting_of_ref": "indicator--966f0a1f-a6ce-4a4c-9833-54f173a16529", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d05e2933-dfbd-4638-9a74-ce1b14433d0d", "sighting_of_ref": "indicator--966f0a1f-a6ce-4a4c-9833-54f173a16529", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29c7c1c6-0f5e-4b60-a02f-195a08eb587d", "sighting_of_ref": "indicator--f4075485-61b0-4fa8-b203-0faf492a05d0", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd88f6ba-84ca-4347-be46-7287d33624fe", "sighting_of_ref": "indicator--f4075485-61b0-4fa8-b203-0faf492a05d0", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c56af7c6-0c29-4884-b791-3185ab23186e", "sighting_of_ref": "indicator--6fad1a79-7aee-4ed9-be6a-c8aec5af8310", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f38bfb36-c268-4277-91b0-50e6494d6495", "sighting_of_ref": "indicator--6a5bd03c-0422-4642-8245-08646827ba3e", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb5e67cb-0d60-4c45-9a6e-db78058a1133", "sighting_of_ref": "indicator--7c005b27-c1dc-43da-ae79-0688cb5d4443", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf09b4fa-2896-482b-869b-e9b89ee55bbe", "sighting_of_ref": "indicator--297740b6-d222-49eb-ab2e-87bbc116cf99", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35106c8f-4024-46e6-b38f-c2186c22240d", "sighting_of_ref": "indicator--27766d95-27a6-48fa-9305-72c84509386f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfd6bb1b-dc03-4841-b07f-f2c5cb9d8671", "sighting_of_ref": "indicator--297e603d-0886-4dbd-869c-01f86138cc41", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7bc3abc-a0e7-44b8-8514-975bc6b90ffb", "sighting_of_ref": "indicator--62fd7b8e-6160-464f-afdf-95d264334f0e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3898e95b-ac9c-4a68-97c3-82b4fe70d3d2", "sighting_of_ref": "indicator--62fd7b8e-6160-464f-afdf-95d264334f0e", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--610f2673-fb4e-41bb-a5ba-23168a13f88e", "sighting_of_ref": "indicator--2ba93277-6039-4e32-804e-cf9ddcbe0c73", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2625916f-d378-4934-b41c-dbf1ce4424a5", "sighting_of_ref": "indicator--ec2c680d-7b9a-4a5a-9954-c835106dcfb7", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fefaf5d0-0195-49b2-8045-7bb6b8bbaa89", "sighting_of_ref": "indicator--7ffb2d06-6fa9-48dc-aa99-1e5840dba814", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f2afd3d-7351-489c-ba4e-7e27a1e40363", "sighting_of_ref": "indicator--779c7c92-59e5-4627-adff-f4d57efb6ab8", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81c62663-c330-47e1-b0bb-5c5f05bc24e8", "sighting_of_ref": "indicator--21cce790-6f66-471e-a03f-bfb4f2bd45b2", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc6dbe60-d123-405e-9105-1fbe3d9f3c26", "sighting_of_ref": "indicator--8429e8b3-b127-4662-806f-5fbb87d113b0", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f07ac0d-e81d-4391-a1a8-9f4219a2c462", "sighting_of_ref": "indicator--cfc97f62-ae96-4424-a71b-411d181a8f0d", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81bb424d-4e73-4301-af96-98407c1f3e85", "sighting_of_ref": "indicator--cfc97f62-ae96-4424-a71b-411d181a8f0d", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73bb1df6-03f8-46e3-8e3b-77fd53bf11b6", "sighting_of_ref": "indicator--ebcc1e86-5218-4248-ab32-ee6d30d4aab1", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93d27938-581a-42ff-be42-d729b06ef0a6", "sighting_of_ref": "indicator--7ee80998-e290-46a7-85ca-ff8ba7a06573", "where_sighted_refs": ["location--cc47317e-2c18-43a6-8938-dea748a56ad5"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f105a27d-4e65-497a-8ced-2077d6c30500", "sighting_of_ref": "indicator--680d7170-5ab6-4dee-9af9-f2b0049e99a8", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3728faa2-1cbf-4f46-9cce-060c7dc6c1f0", "sighting_of_ref": "indicator--08799733-9a84-4985-b771-adc0fca73fb4", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ad9b2a4-ab42-4bfa-ac19-e17028a5e5b2", "sighting_of_ref": "indicator--558c439f-fdb7-4f8e-884c-8038abacc260", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b72fb336-ddfa-4493-a21a-5585dd061d47", "sighting_of_ref": "indicator--c3267b23-d386-485d-ba85-231e5bff360c", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56c6f8ca-c4b2-407b-9054-53954044d555", "sighting_of_ref": "indicator--01e05774-a92b-4d28-ab8e-7f096d7fd3b1", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c686331d-4911-4844-a6b8-1ffc2f22bc58", "sighting_of_ref": "indicator--a29d90be-525a-43b7-b23b-a210cb4ed011", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39ceaf37-a1e1-4eea-b5e7-b7343a2c769f", "sighting_of_ref": "indicator--d736c018-2261-45c1-b54a-f0053bc59e95", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4585b8e9-5064-4ace-aa46-692f63bba4ce", "sighting_of_ref": "indicator--0fc364e3-b8cf-4873-bebe-d9501de9f68a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bd45047-e653-42bc-bd06-0fe0e9f78ed1", "sighting_of_ref": "indicator--ceeca1cd-5258-46b4-a5e8-50ff54157ead", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07f6c278-5ad4-47fe-beb6-b9bbe155f964", "sighting_of_ref": "indicator--fb8fd134-db31-4799-94d6-88e3b9f47cd2", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--291b1a74-5c80-4790-91c0-e4e427c9765b", "sighting_of_ref": "indicator--fb8fd134-db31-4799-94d6-88e3b9f47cd2", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--487036c5-0248-4574-b903-0683addef834", "sighting_of_ref": "indicator--fb8fd134-db31-4799-94d6-88e3b9f47cd2", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e9472ff-d5ce-4801-8193-935ef0f738f5", "sighting_of_ref": "indicator--946cd8df-fc05-4452-bd4e-df3688c2241f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ab5161b-df25-4bc6-8bd1-10c4f1c9572c", "sighting_of_ref": "indicator--100e0b06-ab7c-4bc8-9b65-3cf37fac2cb2", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60bf2184-02a6-433a-b0bd-eeedb50cb381", "sighting_of_ref": "indicator--c44beaef-1ab6-4bc8-8eb6-d2ba8dcda6d4", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3ec4bfc-71f2-45e1-905f-1ef17b981c19", "sighting_of_ref": "indicator--c8e2e14d-6120-4998-acd3-aac43bc7b5e8", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc8827ec-745b-4bf3-b09d-8995964e8f88", "sighting_of_ref": "indicator--c8e2e14d-6120-4998-acd3-aac43bc7b5e8", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcbcbb28-34a9-41bc-a073-3ac12d79bc83", "sighting_of_ref": "indicator--6afc956d-9111-4167-bfda-ce6073aaf542", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--548f2d25-bdd5-4c36-905f-526172812949", "sighting_of_ref": "indicator--626a47d8-ef1a-40ba-b3fb-b458cf03226b", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5907fb66-0290-4b7b-bd0e-27a4d16b1eb2", "sighting_of_ref": "indicator--ae37eafe-15bb-4c6e-91cc-b295c957d85e", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3e57363-6c1b-46c8-aa57-5adeff19940d", "sighting_of_ref": "indicator--056e2700-6a15-480e-baa1-adae4f1b2c48", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9985c6f1-f7ac-4759-8432-372f64ef0c9b", "sighting_of_ref": "indicator--12cfb7d5-f5e6-4779-8083-d8f3573b010e", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bb537e6-9e1f-4c4d-84d5-2ddcbe4a4c20", "sighting_of_ref": "indicator--dcfadc5a-7b88-4652-b10c-5e84e3f30900", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--907030bd-ae50-4c7b-80e9-bcaa92f0e1e4", "sighting_of_ref": "indicator--c7317f4e-05ad-486b-bf21-e4bd79845952", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98fe6cd3-1883-4eef-8cb2-eb4c470be093", "sighting_of_ref": "indicator--ad8df646-a5ea-4928-9587-959de970374a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c82f4671-7c99-44b2-bf97-0d69137f0a91", "sighting_of_ref": "indicator--5f2eda0e-d76a-462d-9e07-7a436ea7aada", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bae82f5d-f1ce-43c0-aa94-76654d055f8e", "sighting_of_ref": "indicator--a5ad1f99-5756-422a-82fd-17b04decabed", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--754c668a-87c3-4bae-a180-ae1091b2f228", "sighting_of_ref": "indicator--a1351db2-5c35-453d-ac8b-116f68f84ba8", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--238e0aab-680d-4fbd-bd44-1c3623c5204a", "sighting_of_ref": "indicator--2a31c636-cbcd-4a67-bcbd-5bee219926fc", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--279b501d-0e08-429d-a2b3-30d52356b6da", "sighting_of_ref": "indicator--bd3bd607-9493-4f07-9dd3-29d725b34dc5", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f6d77c5-0480-455f-992f-0d73ff913ee8", "sighting_of_ref": "indicator--5c4d8c94-050b-4896-b594-591b89493a38", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35665b19-9b95-4e4e-9cce-ed3dfaff58fc", "sighting_of_ref": "indicator--faabf62e-b30f-4e36-b3f6-2ec90109663d", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3075434b-df37-4138-bf90-5022f1bb357c", "sighting_of_ref": "indicator--d2152156-02fa-4c71-a70a-2b6935890ffc", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38c40d07-6c66-40c4-bc7e-a19374d5d42c", "sighting_of_ref": "indicator--d8af20ec-2987-4d40-bfd7-c5b7de96f2c5", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73c11a5c-3776-48b5-b18d-03a2f03d7051", "sighting_of_ref": "indicator--a40f41b3-0f1f-4e17-a40f-02499a99e054", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01da0f1c-12f5-4f84-92df-5ffb1e746186", "sighting_of_ref": "indicator--8f548598-07f8-4b16-8eea-42d5ddb1ce2e", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbaaf3fe-c9bc-4c76-958d-6a82217bf00e", "sighting_of_ref": "indicator--7303ad1d-82ed-4c49-b24e-c7d66a5c0024", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce85d16c-f445-431d-b99f-19b71236efb0", "sighting_of_ref": "indicator--7303ad1d-82ed-4c49-b24e-c7d66a5c0024", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ed4425d-e625-4e05-a590-7a2ae6e2cff6", "sighting_of_ref": "indicator--7303ad1d-82ed-4c49-b24e-c7d66a5c0024", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cd344d5-6306-4ac9-9584-5715060e1ad3", "sighting_of_ref": "indicator--0d933612-17a6-4a60-9b8b-e73cb15ac932", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--501155f6-566b-49e5-b74f-72e22cd5d720", "sighting_of_ref": "indicator--cc739008-c7be-46d4-bbfc-3f8054c83592", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9236bff-b257-476d-9340-2feea9c596c3", "sighting_of_ref": "indicator--c653620d-2f68-4d6d-bb29-436394d2b9df", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--586108f5-4605-4134-8b8e-ebd8207d2bad", "sighting_of_ref": "indicator--6b0d0cf4-fc07-4fb9-9905-92bf23bb0ea2", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60f14577-f311-445f-b629-4a5a0c18bb80", "sighting_of_ref": "indicator--162c568f-e906-4926-8436-659ab0e59350", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96520f6f-e83d-4e64-ae32-c4abcba870e0", "sighting_of_ref": "indicator--c7866b7b-9285-4359-b737-3cb9a75ec8fe", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95269ca3-9fe5-40c1-bb9f-458829cf82bc", "sighting_of_ref": "indicator--daea16dd-77f8-40ab-a4b0-2d1ed2c8b4ba", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92ff5c1b-12ed-47a8-a4fd-620216bb106e", "sighting_of_ref": "indicator--e97603f8-cb26-4362-8d83-95a841589217", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--155df2ce-a3d2-4389-8d7b-6314d1ecf011", "sighting_of_ref": "indicator--e97603f8-cb26-4362-8d83-95a841589217", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59c0a795-e704-4972-a757-06bebd62fadc", "sighting_of_ref": "indicator--3ba09c32-9f73-4fe2-a46f-7700b112e0bf", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe67361a-72c0-4fea-98ea-293ed7f11ed1", "sighting_of_ref": "indicator--3ba09c32-9f73-4fe2-a46f-7700b112e0bf", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5638f618-d170-42c8-8fdf-bc4974e857ba", "sighting_of_ref": "indicator--3ba09c32-9f73-4fe2-a46f-7700b112e0bf", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4874511b-1e89-4652-b1e1-aaf137304865", "sighting_of_ref": "indicator--0f8b3580-c7f9-4b2c-b9be-892c5ab125f7", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aeddae9e-848d-4da8-a997-694ec252a4af", "sighting_of_ref": "indicator--dbddb2eb-c1ff-441f-a43b-1b59a0068878", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65b0855b-d795-4a67-8169-edffd0d22e0d", "sighting_of_ref": "indicator--0e225c2b-0a8f-430b-adcb-4fc074d47a64", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9556310b-aa14-4ecd-a7e6-ef0f921837fa", "sighting_of_ref": "indicator--2d5c5421-fca0-4b73-8430-87f767251264", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cb54877-64c5-44d3-85fe-034fbfcc035b", "sighting_of_ref": "indicator--6a60de4c-e0cb-4120-aedf-ca3d319f8087", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--504234a6-8419-40e8-a01c-8a70a6d4c18d", "sighting_of_ref": "indicator--4d3bdcd0-b0cb-4561-ba17-685cefede9f1", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3dccd6f-bef7-48c0-b2b3-fef8c269cd5b", "sighting_of_ref": "indicator--25a044cd-c63f-43c7-8d5c-2063591287e3", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2b0fa7f-5fe4-441d-b0b5-9d1ab27a172b", "sighting_of_ref": "indicator--25a044cd-c63f-43c7-8d5c-2063591287e3", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5c3bec7-4ca4-4b8e-818a-cd74a899f442", "sighting_of_ref": "indicator--25a044cd-c63f-43c7-8d5c-2063591287e3", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db3ab252-87fb-41a2-a57a-e981b175ecd3", "sighting_of_ref": "indicator--4f01fb8c-e564-44a3-846f-2240de46e19f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e379e204-a80b-4f39-889e-149c91a7d419", "sighting_of_ref": "indicator--9fe80bba-d761-4319-93bc-91c00d4a5042", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dca1361-bac0-4f8c-81c2-fd1840d48422", "sighting_of_ref": "indicator--f5924435-eb30-4d2b-be55-03c2ca42f6e3", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--359bb9ec-fd22-4b4a-ad37-f13a8e356273", "sighting_of_ref": "indicator--f5924435-eb30-4d2b-be55-03c2ca42f6e3", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c5c8a7b-7de4-4a97-a254-e69ae1d6eb50", "sighting_of_ref": "indicator--7c1d8c28-f44e-4f68-8b60-38b1ab450e42", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3dc3f9a-2286-49f2-b7a2-beb25268294e", "sighting_of_ref": "indicator--d303b2e5-b2d3-40bf-b768-dd64335b3a8c", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d147e5c-3afc-489e-90fc-293115df4fc4", "sighting_of_ref": "indicator--89d9665b-3ee8-41cd-a9de-e4d0c66893d0", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--142ebe3b-e804-4366-9f97-9060f325a23b", "sighting_of_ref": "indicator--8fe7c14f-0036-4834-820e-7902f8fe5f5a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7d449d4-af8f-452d-8ec4-41b7e85529ca", "sighting_of_ref": "indicator--718606d7-fcda-42da-9163-1e0a0126c776", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79a3bd45-e557-458c-9420-e5668807b251", "sighting_of_ref": "indicator--c15fee04-911d-477f-ad46-0bd8bc9d8089", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65e2e5d9-e802-4f60-9e74-b3d963e50baa", "sighting_of_ref": "indicator--28fed2f7-b516-443a-938a-8dbb025ab4dd", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45b9ecc7-4977-4414-ba7e-f37521b19266", "sighting_of_ref": "indicator--28fed2f7-b516-443a-938a-8dbb025ab4dd", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44e8422d-a3ab-4be2-970e-dce0e36b2e54", "sighting_of_ref": "indicator--fd701408-1a91-46f7-a905-d2ce0e55dd50", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0862a63b-2e43-4b7f-8361-78ef5ff28814", "sighting_of_ref": "indicator--fd701408-1a91-46f7-a905-d2ce0e55dd50", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecf8995a-bed3-4020-85b9-d9452a634fc2", "sighting_of_ref": "indicator--fd701408-1a91-46f7-a905-d2ce0e55dd50", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29b975fc-8ffd-464f-ba65-8c061db8ea86", "sighting_of_ref": "indicator--dce1297d-85a9-4667-869e-8cbfe9d70c97", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e46ddd2b-c879-4166-8e7f-2f248a53d2b1", "sighting_of_ref": "indicator--dce1297d-85a9-4667-869e-8cbfe9d70c97", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f9cfa34-3d6e-4850-b623-7bfc9f4cf9e5", "sighting_of_ref": "indicator--2c75a90d-4762-4525-916a-5545466d21f3", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e96613ef-9d1d-49f8-9c4d-5a1769681b43", "sighting_of_ref": "indicator--2c75a90d-4762-4525-916a-5545466d21f3", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4990615d-5f17-4ce6-b0e9-b89a6c6f906e", "sighting_of_ref": "indicator--bcd25cd6-a779-4bf8-8799-eb2fe9a1583c", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74c40d91-6cdd-45fd-a9f3-2517e8b8a6be", "sighting_of_ref": "indicator--d2c91eb4-2ee7-40ae-8bbb-be64cc38a2ed", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9383ad94-bbc7-446e-954a-4c5c4a9d7781", "sighting_of_ref": "indicator--08167c90-e05a-484c-b1f0-783da50b4762", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d31b05eb-1a40-4eca-bc1a-1b256c1d7c06", "sighting_of_ref": "indicator--08167c90-e05a-484c-b1f0-783da50b4762", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15697a73-cbb8-402f-8b20-f1c08ee4671f", "sighting_of_ref": "indicator--0f233908-5c13-4241-ac5f-6860f39dc651", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a6ced85-165e-4bc4-ac0d-2f559d958246", "sighting_of_ref": "indicator--f8ec18fc-4774-451d-a08a-9cf975f4a5e1", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c741f9b3-7eeb-45fb-b166-da33c99ccb7c", "sighting_of_ref": "indicator--b51121b9-6ea0-419e-a72e-506a71e2bbb1", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e89ebf4-5f1a-4993-b7ff-ac4c6893c8be", "sighting_of_ref": "indicator--337793ca-b8aa-4a85-a5a1-58539ea324a5", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--836114ef-d26e-4d4f-ae75-055b9136410c", "sighting_of_ref": "indicator--34a6a8bc-aca3-4abc-bd81-ad6a09ff9233", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb099ee8-828b-455b-beba-4dae9eb638ec", "sighting_of_ref": "indicator--f4b3b82e-e37c-4e6c-a89a-061422862b89", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60831ddb-9781-4312-8695-593ab70123ab", "sighting_of_ref": "indicator--febbef9e-959c-4c80-b395-39b8be80a51b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32cc8944-6a8c-443a-85d9-f34451e19e3e", "sighting_of_ref": "indicator--8fdc1c66-a030-4457-803b-dacc42b60f2f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ca9b90a-ebc9-463d-961b-355ec7f36390", "sighting_of_ref": "indicator--8fdc1c66-a030-4457-803b-dacc42b60f2f", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9733d1af-c010-40fa-a515-9739fcaca280", "sighting_of_ref": "indicator--72aa4b30-32bb-4d4a-bca2-e54399fc4d49", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbc24818-6ab4-472e-ad3b-78b74f510f8f", "sighting_of_ref": "indicator--35806cb5-794d-4313-b352-ab774b39e8eb", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--346080f5-bcba-48ea-b2ba-cecdc7297603", "sighting_of_ref": "indicator--35806cb5-794d-4313-b352-ab774b39e8eb", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37c84151-1ab1-4a2b-899f-26e85234fdec", "sighting_of_ref": "indicator--4b2ed417-2cce-4ac0-a498-373213d72688", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d596713-91aa-4186-bc3a-3d8c2525b244", "sighting_of_ref": "indicator--0799c980-536b-4766-aa90-f5cfde27aadb", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--275c5d8b-54d4-4fb0-9973-2eec437d8463", "sighting_of_ref": "indicator--38fb15a4-50a4-45ee-8620-df3a5b62e53a", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2bfe98a-45fd-4094-a7fd-7947e8bbab61", "sighting_of_ref": "indicator--38fb15a4-50a4-45ee-8620-df3a5b62e53a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--616bc072-cb58-4ad4-bf70-6108ed9053d4", "sighting_of_ref": "indicator--e98a3f2a-2bd5-4bb3-aa39-2f983d8fdb8c", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42a1e99c-a130-4d6b-a36e-1d598b46d4b4", "sighting_of_ref": "indicator--69cd838d-6d4c-4298-86e5-e90dcb9cb66a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46f92de2-cee3-41c2-98c9-1f02c263a2d6", "sighting_of_ref": "indicator--10256a8c-0424-424e-9e52-8cd148dc6b7d", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--117f8d19-af52-4325-bfa5-f2d4f9ef1aa6", "sighting_of_ref": "indicator--b53b0762-fae7-4fa5-8b23-fcd8c503d847", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d1c99c6-cb60-4fe5-8b09-9185c7fc6f16", "sighting_of_ref": "indicator--e67da9ca-06fb-46bf-97a2-8421d55be849", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44e7994f-4f85-408d-95a2-7ead843c04c5", "sighting_of_ref": "indicator--e67da9ca-06fb-46bf-97a2-8421d55be849", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f78f8bb3-1e63-40d6-a529-3aacd23ada03", "sighting_of_ref": "indicator--fe701690-10d2-4adf-b257-fb03f4ee48e3", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dee94885-5db4-479d-9a33-dd1093d0b417", "sighting_of_ref": "indicator--df47be1d-c25d-4435-976e-e92771a776dc", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2921cbe5-5dc6-49a2-934a-5e8d444afc47", "sighting_of_ref": "indicator--37d37519-9997-49fb-86d9-ccdba8a1a12c", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0dd1eca-9e87-4d62-be6f-0820563ce3f8", "sighting_of_ref": "indicator--d9c9ce19-2a58-4e09-a6d1-a646e272ff3f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31fe7031-b4d9-49e9-b679-46a645004c10", "sighting_of_ref": "indicator--a8eb1e8c-7a49-474f-8a4d-01c2ab673007", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a119e11-a85f-4223-ac86-feb020105a2e", "sighting_of_ref": "indicator--8dda83e8-c518-4dbd-af91-84204d0b60f7", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a66fd37b-ce00-435f-9e40-39662569c3f3", "sighting_of_ref": "indicator--b8ec0526-08c9-459f-b11b-dcc148bf0029", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78fd31f0-3d39-4a88-80ec-b0c4735763c6", "sighting_of_ref": "indicator--fddfb770-8a0f-4518-b888-a1c7c3c0bd65", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e5cd475-0e3e-4da9-8e74-2fc7d674ed35", "sighting_of_ref": "indicator--2262766a-3007-4d46-aeec-48981c747bfb", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a6c579e-fdab-427f-946e-ce0bc5e4eff6", "sighting_of_ref": "indicator--99912d51-70b7-4bc6-b125-230a020e8bb8", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--149da851-ab19-44b4-ae51-95f0d282524e", "sighting_of_ref": "indicator--168b503b-c9d3-4484-93b0-73a83ff6750c", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4b6a1f3-5b57-444d-ae08-73df2cbb5c7c", "sighting_of_ref": "indicator--f52d6d0e-5182-4be5-986c-2f82d2523a0e", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--509e603e-1568-4f55-b5aa-56da5b4d7ade", "sighting_of_ref": "indicator--bbacdee2-46ed-4aeb-8ca6-b2f57a0ab1a5", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c03d9d17-e2f2-408e-b5bc-64143ca6b98d", "sighting_of_ref": "indicator--bbacdee2-46ed-4aeb-8ca6-b2f57a0ab1a5", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5927989-b97c-47e1-8ac0-a3107df89b29", "sighting_of_ref": "indicator--87e394f2-fbcb-4032-9b52-c2e2ab80648a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b9ad03b-c323-461e-9614-61bddd5b360a", "sighting_of_ref": "indicator--f98ecc46-fe1e-4936-8f1b-533c96eccf8b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aec86b08-95cc-49fa-9374-b5696ea9db36", "sighting_of_ref": "indicator--f98ecc46-fe1e-4936-8f1b-533c96eccf8b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd3aa34e-4d48-4643-83c0-5d65bc32568f", "sighting_of_ref": "indicator--4e18b12c-7793-4937-9803-1c7cdbd3cc0f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e251f94c-c6ec-4257-92f3-56468d129a58", "sighting_of_ref": "indicator--80a457ad-f181-4a75-bfae-2fbc265269e2", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa6d6010-459e-49b9-b102-a32a82619dff", "sighting_of_ref": "indicator--0fe84b91-357e-4f5d-875d-41de26b8c4a8", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e8c9130-6478-4c38-8f35-fd5c69cdd9da", "sighting_of_ref": "indicator--a0cd5b78-4805-4671-a3ac-d5cb271aaf22", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48dab1e9-9acf-4188-82b8-019de87d9c41", "sighting_of_ref": "indicator--f7aa096b-3aee-4edb-9f43-ad47433d900b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--337a4a82-d12a-43d7-8ecb-42d5e78c6ed7", "sighting_of_ref": "indicator--12e69ae8-68f1-4caf-8463-51353d1e6eb3", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1edd6b88-3676-4fd7-b7e3-c022a1757ca5", "sighting_of_ref": "indicator--af76326c-6357-479a-971f-5799b27e5cd4", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e67c2d8c-5d94-46ec-8913-dfb281d56112", "sighting_of_ref": "indicator--e9aa03ff-20eb-4aac-a012-25f4b3062920", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf9d7ddf-eed9-451c-8e77-6d92e458131e", "sighting_of_ref": "indicator--791761b0-2a18-4d52-bb7f-22f65cefbd2a", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a9f4375-1739-44f8-8ed8-92f6427e24c1", "sighting_of_ref": "indicator--6e1df27c-5360-4f8f-bd31-133ed4dd7a5e", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54fca79b-a674-4a7e-bf69-9f19c345c686", "sighting_of_ref": "indicator--6e1df27c-5360-4f8f-bd31-133ed4dd7a5e", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--968bc58e-d53d-4621-8e1d-9b0fe102a28e", "sighting_of_ref": "indicator--62a334f0-df90-4375-ac7f-96781344d465", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--944c59af-c0d9-4594-9677-51d1d41b94a2", "sighting_of_ref": "indicator--b1b54f87-2edb-4be9-84a2-36ae6f7de9fb", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7e8ec4a-aded-40ac-9cf5-396fe526c784", "sighting_of_ref": "indicator--4e0c477d-f9ea-4bf5-b4aa-2bd3cfd5b79e", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c1afa6c-e7be-4d03-bcce-891e2c9519db", "sighting_of_ref": "indicator--18bb4853-4d10-435b-b28a-452b26d02890", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97d6f93b-420d-4be2-9550-54cdcbe65c36", "sighting_of_ref": "indicator--d675cf6a-e6af-4a1a-acb2-a327342fb560", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6193a5ec-a267-4060-9edb-75084d85160b", "sighting_of_ref": "indicator--54d661ad-80ff-4091-a2ed-19434278d7dd", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39aee3df-40ac-46bf-9871-9b0956dca3a5", "sighting_of_ref": "indicator--0640ef13-f606-4a4c-910b-a4dff5d91dbf", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6a00ab9-b755-4bd8-b5b0-a2780bf96c4d", "sighting_of_ref": "indicator--f946bbbd-2416-4e83-8096-66e2e3f70b10", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08862d47-11a8-41e7-995e-fcd11418087f", "sighting_of_ref": "indicator--d36178b5-6332-4c9b-88ac-a9bff22109c2", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfc75eb8-1773-4eb5-b887-a1a85a96876f", "sighting_of_ref": "indicator--94f6fbb7-c078-41b9-bef1-56300b89de06", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a12cc97-b044-4b06-93f7-57ee76cf58d6", "sighting_of_ref": "indicator--aabf5d62-d87a-4341-8691-14e89ee36375", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e3dfd2b-acfc-40ac-85a5-c492af433976", "sighting_of_ref": "indicator--eb89d638-b036-4424-b250-467903ce6170", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7d2ce80-16ad-4bfd-bf0f-1aa173e6861a", "sighting_of_ref": "indicator--53c398f2-6bd1-481e-a521-5a44a1e85ae2", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11ad42f8-1d30-4035-99e0-2073d5bd0cbd", "sighting_of_ref": "indicator--45610b72-3b0c-46f3-92b3-60bed43abe1e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d955d70-a1d9-4d33-9c5c-c18c3a82c5f4", "sighting_of_ref": "indicator--730eccd0-ca76-40b5-afec-512ab6af300c", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc998777-dab8-4101-8c8d-8976bbc816dd", "sighting_of_ref": "indicator--26005e0e-cddb-4e1d-a8ec-8c982fad142c", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa3d363f-679f-4768-bc47-916796fe00ce", "sighting_of_ref": "indicator--3d4ff83b-72ae-4bf2-89a4-8b3b12eeb0cd", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a2e6753-57d3-4a12-86ca-bcb2a4e3bf15", "sighting_of_ref": "indicator--b4f9a53f-728e-4a96-b853-cb55c4663c37", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae4d63c3-8e9a-4eaf-bfbe-d51882c01858", "sighting_of_ref": "indicator--b4f9a53f-728e-4a96-b853-cb55c4663c37", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37583e24-bc41-4acd-8277-785e0d25c4d1", "sighting_of_ref": "indicator--18608e05-d51e-49e8-bb7d-97f8ebef39d1", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--163b79d7-1074-4c4b-93d0-05514959a483", "sighting_of_ref": "indicator--8ec72e71-a2d3-4a64-8ae0-d379dbb7181e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1283641d-6eb5-4f6c-a600-fdc053d7141c", "sighting_of_ref": "indicator--a3a9ee67-e18a-438c-86d3-1e7315e2c92b", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f79ec4c8-c6a4-4c1c-8593-544139640bdc", "sighting_of_ref": "indicator--f1a2e014-6b88-4b29-b24b-92903aaf2574", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec32b26a-e4f0-4f65-a0c2-4011e8be510a", "sighting_of_ref": "indicator--94a9d774-ec98-49ad-a9ff-1071208303b8", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a1003b2-288e-4663-a463-3afaf983171e", "sighting_of_ref": "indicator--460e5a7a-727c-40e4-a402-89a3fd845e7d", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cad81748-a690-4228-b196-618920855f42", "sighting_of_ref": "indicator--460e5a7a-727c-40e4-a402-89a3fd845e7d", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a83517fc-9ef6-4e1c-84b2-6590b34b0d5f", "sighting_of_ref": "indicator--d3c09ee4-49da-43fb-bd1c-631df49715fc", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93962d3d-16cf-4c85-b31a-22b035dbf28e", "sighting_of_ref": "indicator--e9d72cb7-f31a-4734-a46d-cc5f9750d8cd", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0e7abcd-82bc-4155-b7ef-cfc3099825f7", "sighting_of_ref": "indicator--d0853259-0eb9-4da8-94c1-7e942825262c", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0752e926-04f3-4192-9e29-9fb19dd30afc", "sighting_of_ref": "indicator--9bb32900-37c2-4c25-b400-b618962ca21a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6cf4fba-90f6-44f3-9ccb-d995bc642d50", "sighting_of_ref": "indicator--e69ba3d7-0eb4-41fa-9911-6503d5cfe454", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdbbeab6-9067-42e5-a408-8e4204a6ef68", "sighting_of_ref": "indicator--5886a890-cf3f-44c6-b658-15f898fedcd4", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d42f7004-51ca-4c4c-8486-49abb9f1ebfe", "sighting_of_ref": "indicator--5233b7c8-acd1-441e-a159-37ae5cac623f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59547432-2b82-4db8-b085-5d980c1f5927", "sighting_of_ref": "indicator--6a70dd5a-2e98-453a-922c-9d0313bc8dec", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1e0e0be-bc27-49cf-803a-3e760c24273f", "sighting_of_ref": "indicator--b72c3e65-c4b4-405b-9938-a218bc769475", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3a86d4d-d9f4-4337-a44b-cafc99e4995e", "sighting_of_ref": "indicator--48d79b02-df96-407f-87d3-47b49eb8c7ef", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87276383-242d-4aee-a03f-deb5a30fafc4", "sighting_of_ref": "indicator--fc68a7d0-94ae-4d35-b70a-5c736f8b9bea", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72e2b46b-430e-4b60-acef-a9c325bd1da1", "sighting_of_ref": "indicator--fc68a7d0-94ae-4d35-b70a-5c736f8b9bea", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf1e0d6a-7e38-4236-bb6e-384b51db979c", "sighting_of_ref": "indicator--5dcfd407-02e5-4ad8-97a1-29a9364a9778", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cffb1e30-ae90-4e01-a311-b8aa0b5496cc", "sighting_of_ref": "indicator--5dcfd407-02e5-4ad8-97a1-29a9364a9778", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--266b9ceb-04e7-4d50-933a-3175b3f83058", "sighting_of_ref": "indicator--5dcfd407-02e5-4ad8-97a1-29a9364a9778", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95dfc0de-56eb-4342-98d1-7ff4502dcdaf", "sighting_of_ref": "indicator--b3e888b1-7d3d-4e68-a001-449df1c6f5e4", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fe4d017-ff04-4daf-8650-4adec2049e4f", "sighting_of_ref": "indicator--1b8d8782-a84c-4813-a80a-d6943574bf47", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2137c6c8-1b2f-4b20-b6c7-72170a970662", "sighting_of_ref": "indicator--807b39b3-1cf6-4f7a-b068-389cadc88cd8", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d308db8-9a43-4c75-bc9a-2e4316e4f0ea", "sighting_of_ref": "indicator--6eb19f1a-350c-432b-97f5-2f36d6acec04", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa35e811-b89d-4055-9fa3-9d88cdb54d9e", "sighting_of_ref": "indicator--5e32d8b0-8ca7-4727-8ffd-5927747cf7c4", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62de8fe3-a058-4ef9-9a7a-a988ea68cafb", "sighting_of_ref": "indicator--62d02558-42bc-4a93-a3f7-76acaca42a5f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--619d53aa-d2bd-4ba0-8012-6ecb9d66cc05", "sighting_of_ref": "indicator--7384fa91-7454-41b2-acf6-7510626c57a1", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a72ba37-a73a-47fe-b6dd-18ea497baa78", "sighting_of_ref": "indicator--06f440dc-a3aa-401a-972e-e310582a6ac6", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3574eb16-bae0-45fc-bc8d-34e179824615", "sighting_of_ref": "indicator--45ac8280-cc4b-477c-a935-a228b637255f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d17a18a-ca82-422d-bd20-bbb36db1a79e", "sighting_of_ref": "indicator--311c98ab-6b5d-4c0f-83bc-cda2ec13eb69", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d172a255-861f-469d-97ad-2f755222c4f5", "sighting_of_ref": "indicator--8129a5d1-d015-46cb-a435-8a9ffc310990", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9328dca3-12fa-4c68-893d-51387d2c152c", "sighting_of_ref": "indicator--aae9827f-9e30-4002-b3a4-58823aacda0b", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ca47ed8-dc38-4b4a-9b77-100f861fdd13", "sighting_of_ref": "indicator--aae9827f-9e30-4002-b3a4-58823aacda0b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04df95fe-b535-4b77-bbfb-caa4c37de3c9", "sighting_of_ref": "indicator--ce50ccbf-9cef-494f-a23b-a1dc47612dac", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c488b1d-3648-45cf-85c7-aa3517ee823f", "sighting_of_ref": "indicator--ce50ccbf-9cef-494f-a23b-a1dc47612dac", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a219859-e7f2-4aac-8b00-81b1b5f7f2d9", "sighting_of_ref": "indicator--204f3da8-13c3-4179-9a2d-100e4c8425b8", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34667c25-6066-44b6-b1b1-18bd5427477d", "sighting_of_ref": "indicator--9cd733da-d3e4-4359-8663-3c83b42c84b1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14ff5bef-a4cd-435a-9f2b-508a2927ab21", "sighting_of_ref": "indicator--e0423f28-450d-4b52-9202-f4a1b134c4a5", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc6e9789-c72e-4344-a140-1428de1bdd16", "sighting_of_ref": "indicator--b103942b-d7f7-48c5-ba6c-ce0b57253d86", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccb91eff-24ec-4373-9b1a-76eeac613c40", "sighting_of_ref": "indicator--b103942b-d7f7-48c5-ba6c-ce0b57253d86", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baaeb3bc-29a8-4076-ad99-7fe32b7c20e7", "sighting_of_ref": "indicator--8dcd5a9f-970e-4352-8b8f-e116b5b40337", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab99e8b6-6f0a-49d6-be00-543455b7617c", "sighting_of_ref": "indicator--8dcd5a9f-970e-4352-8b8f-e116b5b40337", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--360dc3d5-8e35-46d0-8957-893532b08e3e", "sighting_of_ref": "indicator--d6e06c30-a911-409c-b882-80a742b48450", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91ac0cf3-db45-439b-8bf7-203168cce2e2", "sighting_of_ref": "indicator--252aad4e-af6f-4b8d-9291-d26c6eff44d2", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6db99527-3986-459f-85f7-25e6f89b4342", "sighting_of_ref": "indicator--aee15814-0353-49cf-97d2-d3c58929e66e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70db6189-f107-45fb-89b0-523f036f6628", "sighting_of_ref": "indicator--df85ff4f-56b0-4757-930d-bf58bd0890d9", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5661fa2c-9649-4cb2-9a76-f0b2448bf0ba", "sighting_of_ref": "indicator--df85ff4f-56b0-4757-930d-bf58bd0890d9", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dee7661a-8486-4ce2-a052-adad594fd47d", "sighting_of_ref": "indicator--7ef1b95a-8a88-486f-8867-a5a511173601", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0798463c-d4b7-4a46-a042-491b5e0c71a9", "sighting_of_ref": "indicator--7ef1b95a-8a88-486f-8867-a5a511173601", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8eb10e8a-b87d-4cc4-b4a6-69105c319426", "sighting_of_ref": "indicator--a65abcb5-7f04-4871-9501-a34835837952", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cb193f9-1eba-4b28-be9d-0043ad7cbfcd", "sighting_of_ref": "indicator--a65abcb5-7f04-4871-9501-a34835837952", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1895d6d-9893-4ffb-81fe-ade7020310e4", "sighting_of_ref": "indicator--60ad8d17-30e9-4c47-a454-f0359b62fee0", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8a7c146-6fc6-4a6e-8cec-502af4b90a7c", "sighting_of_ref": "indicator--60ad8d17-30e9-4c47-a454-f0359b62fee0", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3a1ad9c-91a9-4489-b50a-de84071db20a", "sighting_of_ref": "indicator--2ca39f80-55b5-4792-9da8-37212488d20f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01b8211f-3f9e-4423-8bc9-86fb703f37a1", "sighting_of_ref": "indicator--2ca39f80-55b5-4792-9da8-37212488d20f", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ad6995c-f170-4a26-86bc-b2ac05593621", "sighting_of_ref": "indicator--2ca39f80-55b5-4792-9da8-37212488d20f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1fae149-20a8-445b-8f8f-43fa77673f3c", "sighting_of_ref": "indicator--b81770db-30af-4b71-9957-3979fb40e7fb", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea11624e-243c-46a8-a44a-21a08c2869b1", "sighting_of_ref": "indicator--b81770db-30af-4b71-9957-3979fb40e7fb", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2ed605f-25d0-46b1-b443-f9a74c2e0fe7", "sighting_of_ref": "indicator--bb33a070-2bb3-4c6d-8255-340cd3912459", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f96fb61e-0aeb-42a6-abed-4f01ae1f1cd2", "sighting_of_ref": "indicator--bb33a070-2bb3-4c6d-8255-340cd3912459", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f83eb1b7-9fce-4951-b22c-57f1d04337d5", "sighting_of_ref": "indicator--dcd088e3-bd3b-4587-9757-bb5421cadc77", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8294e84c-d0c2-45f8-8ea4-35e1606af075", "sighting_of_ref": "indicator--806679fb-0990-43e3-aa6c-e52ea7128d77", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--680a5edd-6f3c-48a8-aadc-28ce323014ec", "sighting_of_ref": "indicator--806679fb-0990-43e3-aa6c-e52ea7128d77", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17ae942e-b916-4dad-afc2-6dff67c0274a", "sighting_of_ref": "indicator--91f2eacb-4f41-4e03-848d-3890bb61fef3", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da680b93-a33b-4488-961b-4ec1ee7eb20c", "sighting_of_ref": "indicator--5e023e66-431d-4223-94b3-d26cf3ef9dc2", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1689abbe-77cf-4c10-9177-ad2542ed9efd", "sighting_of_ref": "indicator--eeed18c4-8ae3-4afd-aaf1-0b0995e0e37f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ac8f363-6092-42cf-b25a-639cba42f130", "sighting_of_ref": "indicator--9575b20f-953b-4487-adf9-3cf29651a9a6", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4425bbc1-4af8-4415-9fbd-ef1afe296db0", "sighting_of_ref": "indicator--9575b20f-953b-4487-adf9-3cf29651a9a6", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4a4036b-9498-4466-922c-eb229a4afb39", "sighting_of_ref": "indicator--bfd61488-8fd8-4afc-9d2d-0d8e30957591", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc80d4ca-878f-4ae2-9583-4dd7bbfa00d7", "sighting_of_ref": "indicator--7ad24410-45d9-4c1a-9ee2-f5c1d9d5530c", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--907598ea-11c4-4cee-916d-24bb235dad13", "sighting_of_ref": "indicator--52ab0b28-fde4-4312-9939-585dad78f0c2", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3c3a4e0-0339-460f-aef9-bb3956e8204b", "sighting_of_ref": "indicator--52ab0b28-fde4-4312-9939-585dad78f0c2", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b904756-eb42-4045-bde2-729d92c3af15", "sighting_of_ref": "indicator--52ab0b28-fde4-4312-9939-585dad78f0c2", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--315da999-0315-463d-ae8f-289e30ce2618", "sighting_of_ref": "indicator--11ecd42a-8bb3-4d32-831b-88dea2bf6eb8", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b338c0bf-9bf2-468b-8fad-a46b4cb5f09a", "sighting_of_ref": "indicator--11ecd42a-8bb3-4d32-831b-88dea2bf6eb8", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc963723-e5e7-4660-89a9-86302e3f7187", "sighting_of_ref": "indicator--11ecd42a-8bb3-4d32-831b-88dea2bf6eb8", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--750b930b-d18f-4f23-855d-418b83ea55de", "sighting_of_ref": "indicator--3ae39f68-611a-4c73-b9d8-a20cc406dc02", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f833d81-f1b6-4e2d-97ce-76c69f5cc1d3", "sighting_of_ref": "indicator--3ae39f68-611a-4c73-b9d8-a20cc406dc02", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57ea692a-d07b-477b-8f31-c5fe8bf58850", "sighting_of_ref": "indicator--3ae39f68-611a-4c73-b9d8-a20cc406dc02", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cd25f9c-b30e-4f0f-bf97-c7a194cd3d43", "sighting_of_ref": "indicator--071ec3ec-5dbb-44e6-b6b7-540cc0f99385", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78ab105a-fe42-41ee-9d21-f159c99d26ff", "sighting_of_ref": "indicator--071ec3ec-5dbb-44e6-b6b7-540cc0f99385", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b7933a4-c242-4ef9-9c23-30eacece6ecc", "sighting_of_ref": "indicator--b94e8c27-2cc4-4a68-a26b-b02116b404e8", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7bdccb6-8d3b-46ff-86a9-8f8e23b69b1f", "sighting_of_ref": "indicator--444a0a87-0d4c-417c-83c9-2641f141d246", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69690983-b88d-47b5-b29d-3e9705170193", "sighting_of_ref": "indicator--528f4801-47a1-4ab8-80b6-98365bb74372", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08d0f749-80dc-4922-8c19-74ad0daba488", "sighting_of_ref": "indicator--2e7e7800-db83-4dac-93c1-a14abf9385dc", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d763fb4-2033-403e-a0a8-772e5778bf95", "sighting_of_ref": "indicator--361adfd9-762a-4195-a597-b04faf34000a", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f643c9f7-7cd8-4d9a-ab45-4af62db2b3b8", "sighting_of_ref": "indicator--361adfd9-762a-4195-a597-b04faf34000a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2fe17da-c42d-4c3a-a6ac-122b7d06be08", "sighting_of_ref": "indicator--361adfd9-762a-4195-a597-b04faf34000a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89605036-a925-4adb-87cf-0677a5bcb72b", "sighting_of_ref": "indicator--3076384b-c64c-4620-9eb4-6ee806dfd33a", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9901cb5-8043-441f-a42b-d3ed2efb676d", "sighting_of_ref": "indicator--3076384b-c64c-4620-9eb4-6ee806dfd33a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38d35b04-4f98-48f8-9764-7bf2ac5d38ff", "sighting_of_ref": "indicator--0c9b882e-ddeb-413a-8d49-b8546f592aa7", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33e6f42d-74a9-4323-a9b3-67ca20e6c63c", "sighting_of_ref": "indicator--b884aeb3-2687-46f9-a393-dedbb7d293d7", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2145c97c-6f3b-469c-8fa0-d2acaf8a73dc", "sighting_of_ref": "indicator--82e13786-9be4-4581-93e7-2920192f2c4d", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ca266bf-a3c1-4bf7-a86d-5b5cbb39c734", "sighting_of_ref": "indicator--529bd8e3-bf4f-4cdf-8dfe-ccca1ebf8b68", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf8fd354-e63f-47aa-9d38-d08969ae1669", "sighting_of_ref": "indicator--8a0c86f3-335b-42ba-9d93-c529023d62e1", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4d588c2-a120-4c6d-b8bd-37a660bfeed8", "sighting_of_ref": "indicator--8a0c86f3-335b-42ba-9d93-c529023d62e1", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1981575e-1dd3-4e0d-ba01-aaeabe02d3e6", "sighting_of_ref": "indicator--8a0c86f3-335b-42ba-9d93-c529023d62e1", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32f6fe75-f515-4f4c-996f-47453b9b7310", "sighting_of_ref": "indicator--c70df7b1-9538-4339-b7b3-505df493b9ec", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a81b991b-380e-4fcd-bc16-5b24d84baa75", "sighting_of_ref": "indicator--c70df7b1-9538-4339-b7b3-505df493b9ec", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf22e940-1836-4097-8ac0-563b5db0116b", "sighting_of_ref": "indicator--c70df7b1-9538-4339-b7b3-505df493b9ec", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2b0bea8-6ae6-4ba1-b842-bc3601560523", "sighting_of_ref": "indicator--eaee5c14-a1f2-4ab8-914b-56dd40d9a3f2", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce99af39-1785-4610-9ac1-0954a45e30ac", "sighting_of_ref": "indicator--eaee5c14-a1f2-4ab8-914b-56dd40d9a3f2", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb57e3b0-a0c5-4d3b-b551-4eb585fcadcc", "sighting_of_ref": "indicator--eaee5c14-a1f2-4ab8-914b-56dd40d9a3f2", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c20193e-01cc-4ee7-a30c-2147750037d0", "sighting_of_ref": "indicator--0d87e408-2c4c-4d27-926b-b1b1c7142b5c", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6440ceb5-d708-4c6a-add9-6807f2375d22", "sighting_of_ref": "indicator--fe677f09-9d56-4a83-84bb-506f4f880871", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1b9549b-9713-41e6-8e3c-8509b975ae8f", "sighting_of_ref": "indicator--fe677f09-9d56-4a83-84bb-506f4f880871", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a24a1afe-551a-49b0-9303-8c2d2e2d232b", "sighting_of_ref": "indicator--30209d76-feb1-4acd-95c8-8009d3a23c52", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f61d06ae-679c-4d6f-a428-47e88da91c80", "sighting_of_ref": "indicator--6c00396e-4843-4c3a-acf1-47a8bbb9a59e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c9b875c-6057-4c6d-8060-ba9ab1e89359", "sighting_of_ref": "indicator--4b658fd1-fb9f-4e5c-af74-4ff260b05ce5", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31689e46-664a-4271-800f-ea3c05fe58c9", "sighting_of_ref": "indicator--9c5275c8-e3be-4938-a171-f8d1e4eff0e4", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fcbf78b-b3e3-4a15-b6cd-fca461b6fe74", "sighting_of_ref": "indicator--310111e4-d4ac-42b7-b496-4c6050eb2bb2", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec4721ce-eec0-4361-a629-88a8eb9702e1", "sighting_of_ref": "indicator--db8cec5d-49e5-4714-bb72-3f9be00e1365", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56ad22db-f54f-4bfb-ac20-dc2e76dde043", "sighting_of_ref": "indicator--db8cec5d-49e5-4714-bb72-3f9be00e1365", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c155eba-6610-4ce5-8635-0bb40bf6c962", "sighting_of_ref": "indicator--ec762704-d927-4f91-9f9a-e45691f20a99", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cde0efe-b1f7-4cc6-8d8d-c2d5d94728be", "sighting_of_ref": "indicator--add900f3-cbef-44e5-a3be-78d5cfaf9918", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bc9754f-55d5-4648-9bd5-8bef912531aa", "sighting_of_ref": "indicator--5c6a2f31-f80e-4a3e-b725-9cb4ac1c7369", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76d3ff69-3b75-44da-8429-35ea0031ec61", "sighting_of_ref": "indicator--40736c60-3c44-4369-b3dd-4184e389762f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a24c5bd-5c85-4442-be00-ab35ecf366c7", "sighting_of_ref": "indicator--40736c60-3c44-4369-b3dd-4184e389762f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7d252e2-ee50-4e7a-b4ff-52793257ddc3", "sighting_of_ref": "indicator--d0ee5113-5699-4e48-aaf8-7074b431e267", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2647041-1f17-4b8e-84cf-f3eac040560a", "sighting_of_ref": "indicator--961db625-39b0-4dd4-a844-205437385dec", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee4141a8-c79d-44b3-bff2-f76e12a8c693", "sighting_of_ref": "indicator--961db625-39b0-4dd4-a844-205437385dec", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47ac3db3-7eaf-45ef-a09f-356d4d3b489f", "sighting_of_ref": "indicator--b7f31bbf-ebf8-45ec-883f-a8104b83e003", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2827fb6-5158-4695-b0d4-d4c1b8d7d332", "sighting_of_ref": "indicator--139a3658-8e49-483f-8e4b-5d901088fa5e", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd388788-7913-43f8-a580-2f391701adea", "sighting_of_ref": "indicator--6ab31201-73db-49be-9c04-8bb68144e851", "where_sighted_refs": ["location--cc47317e-2c18-43a6-8938-dea748a56ad5"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f145dc41-677d-4fe3-9068-46338140f842", "sighting_of_ref": "indicator--d505d833-43ad-4c93-8b19-4a4e8e11ef46", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--406cc382-0103-4342-9ee1-61ec7ae257e1", "sighting_of_ref": "indicator--4324f960-0b1b-4d06-91d0-1d0f0d0d89a1", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35d562b5-e549-4085-8c17-7a53ef969195", "sighting_of_ref": "indicator--af11a67f-e2fb-4840-96f4-900445e2aec8", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79674198-dc83-42ed-a2d5-c643a7bc0232", "sighting_of_ref": "indicator--a5cb73c9-1fd4-497c-a6cf-fd064487ebac", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--731a9936-3b21-44b2-9a4e-2125779f9a31", "sighting_of_ref": "indicator--a5cb73c9-1fd4-497c-a6cf-fd064487ebac", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f2ef5ba-55a9-45bf-a23f-4b0f67d9937d", "sighting_of_ref": "indicator--ece709fc-11d0-4e26-bdc3-37d7d0f49b82", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0e01a06-ae80-4eb3-aede-95da1f3b751e", "sighting_of_ref": "indicator--bea38052-5515-4b5e-8630-07679b2c02e8", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05cb067d-6415-446a-b748-24b795a2d334", "sighting_of_ref": "indicator--dd902a5c-8206-48b8-bd21-bfe68ed86b17", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c227407e-ac0c-48e9-a857-1d1e15ecd742", "sighting_of_ref": "indicator--94aed6d1-a382-4707-8450-8209caf6ddcc", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e1a0e5a-f4f2-4d50-9d2b-6c0305086dea", "sighting_of_ref": "indicator--e3c633b4-325e-44c9-bf46-5ccad3ecfafe", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f886aed-d738-49d1-b027-320e42ba820c", "sighting_of_ref": "indicator--e3c633b4-325e-44c9-bf46-5ccad3ecfafe", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c1f1691-86c6-4566-bd73-012c8b56768c", "sighting_of_ref": "indicator--98e36f77-d061-4f4a-a757-62bc818dfa84", "where_sighted_refs": ["location--cc47317e-2c18-43a6-8938-dea748a56ad5"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1532cb9-04f7-47d4-9d27-1068c4191f26", "sighting_of_ref": "indicator--785ad1a7-8d2a-4df6-826b-6bb4e7ea1b0f", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a6e7849-db9d-4cc3-807a-1716edb81a35", "sighting_of_ref": "indicator--d84977b3-308d-41a9-93f0-1d82e7dd2d80", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--396b64ce-4f9a-4df3-bfef-40af88b0bbbc", "sighting_of_ref": "indicator--10453024-c8e2-4d41-a71a-7b79f0367c70", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--812f197b-06b7-48eb-9592-a7443662fcc0", "sighting_of_ref": "indicator--36f4a759-4462-4319-93ec-2a76f27e6db1", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f478e178-aed8-4f0e-80fa-416e187aa158", "sighting_of_ref": "indicator--36f4a759-4462-4319-93ec-2a76f27e6db1", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89875d34-6af2-4e10-9d10-590da8c52fc2", "sighting_of_ref": "indicator--df92c2e7-7090-4995-a015-3762b979f9bf", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--066219ca-aa25-465e-be89-aba5457f3c6f", "sighting_of_ref": "indicator--c7f0d5cc-f8b9-412c-a417-88423722f5a9", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d02e5657-2c9d-4704-a96f-2581e9d68ef1", "sighting_of_ref": "indicator--6af6509b-0df3-4a3d-904c-cd8f38350a41", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--705f2090-79c7-4a04-9540-83efe248a8e5", "sighting_of_ref": "indicator--6af6509b-0df3-4a3d-904c-cd8f38350a41", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04b0b665-8049-409e-8c03-e1c83cfd7cfa", "sighting_of_ref": "indicator--0c846180-b8bb-4641-806c-e3211b83223b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f030b9bf-7051-4a3c-8e48-8ac265196548", "sighting_of_ref": "indicator--66be6180-5b6a-4c2a-9ab6-dd026712a05f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f1cccf2-3883-4975-bc92-f656d7a99be5", "sighting_of_ref": "indicator--9d5f1279-f5a1-4809-9656-7677244e55cc", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c889331-1320-4b3c-a2ae-bd0f17d10db6", "sighting_of_ref": "indicator--8d85336a-97d6-4719-8fc0-f7d7cd35f712", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e055d832-8942-43a4-a67f-c3d5c4dde8be", "sighting_of_ref": "indicator--8d85336a-97d6-4719-8fc0-f7d7cd35f712", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6f7e1b2-20c1-4d53-81ff-c1f37c74ca02", "sighting_of_ref": "indicator--8d85336a-97d6-4719-8fc0-f7d7cd35f712", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b2bdd7f-4d83-400f-9625-1166c887c429", "sighting_of_ref": "indicator--5ae9946b-8bb4-48e8-bc39-64de5632de86", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ff7e1d4-8fa7-4583-9546-6efbbd976337", "sighting_of_ref": "indicator--5336d149-602b-492d-a3f2-59cac10b5530", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e6b444b-126d-478f-988d-85d9f1df58eb", "sighting_of_ref": "indicator--bbd4dafc-6846-42b9-a230-f12c5ec00a0c", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8950adcd-d625-4a8d-b396-5ea57e7df5a7", "sighting_of_ref": "indicator--99100345-84db-45c8-92c0-1d4060a846d3", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7f5744d-1cdf-42e6-aae2-a12c0ca6d63e", "sighting_of_ref": "indicator--99100345-84db-45c8-92c0-1d4060a846d3", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--153ae08d-1409-4763-8edc-9c0277cbc356", "sighting_of_ref": "indicator--ccf1fe3b-212a-47ab-b035-3be264d3ea5d", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--786fab76-2b8a-4a08-aa36-91c6373967b2", "sighting_of_ref": "indicator--ccf1fe3b-212a-47ab-b035-3be264d3ea5d", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ef556bf-64b6-411d-869e-5f788c9a9259", "sighting_of_ref": "indicator--ccf1fe3b-212a-47ab-b035-3be264d3ea5d", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d170042-473e-453c-bae3-9328f1468e3e", "sighting_of_ref": "indicator--c1cdc627-8284-4d9b-86ed-31ecd6dffc40", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7ebead6-4aab-4428-9f12-381ec43e111f", "sighting_of_ref": "indicator--c1cdc627-8284-4d9b-86ed-31ecd6dffc40", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15ee2c86-004b-4691-99d2-ee80f6899acc", "sighting_of_ref": "indicator--c1cdc627-8284-4d9b-86ed-31ecd6dffc40", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f2d95d9-b292-4fd0-891d-c23a67bf67eb", "sighting_of_ref": "indicator--c1cdc627-8284-4d9b-86ed-31ecd6dffc40", "where_sighted_refs": ["location--cc47317e-2c18-43a6-8938-dea748a56ad5"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0813e20a-ccd2-47ad-96ad-4ffd165e8d57", "sighting_of_ref": "indicator--6b703e1b-b97f-4fbd-95b5-058f75dd7c0c", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c8cc29b-63c6-4e48-9127-629e8fffa917", "sighting_of_ref": "indicator--1642bd62-4a15-4005-aeb2-e1fb95f49195", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11fde6a6-6b60-4e14-bbd9-4e14dcb14244", "sighting_of_ref": "indicator--1642bd62-4a15-4005-aeb2-e1fb95f49195", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3aa7ded-5fb2-429d-8ff9-4833e8fc62a6", "sighting_of_ref": "indicator--36e0debf-226a-461e-b5f8-e47fdf92fae7", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04c0eaa7-137b-4246-8c07-e0fbdd94df5b", "sighting_of_ref": "indicator--df8efbd3-a00a-444f-8880-ffc294e663f7", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--daf2b821-b821-4b40-8020-f38d5f3c18be", "sighting_of_ref": "indicator--df8efbd3-a00a-444f-8880-ffc294e663f7", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59a9a26d-076a-452a-ab52-2a2e482cb669", "sighting_of_ref": "indicator--d42cd7c1-9aa1-4a48-9c79-069d4bc51427", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--847e60b9-4fa6-4c3f-8330-d0251373236b", "sighting_of_ref": "indicator--628b50f5-1ed4-4ff3-8521-96a700fc5c9f", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ce633a0-4f40-4491-8420-66ab95ddeffb", "sighting_of_ref": "indicator--31c61681-90fd-490a-a560-d1dc8f65f168", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d21075bd-e969-447f-a54a-388f6e2fe48f", "sighting_of_ref": "indicator--4bd15375-6b41-49d9-8896-53cc753acf3f", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a052687-8be0-4004-bc5a-d028913f88ae", "sighting_of_ref": "indicator--48fdf4a1-8419-4079-9646-4e2e448f56ad", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--878efd36-817d-4d5f-8ba2-4b4f2812e2ac", "sighting_of_ref": "indicator--48fdf4a1-8419-4079-9646-4e2e448f56ad", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ca164f6-24e6-4e4b-bc3b-d4ae323a26fe", "sighting_of_ref": "indicator--0e34cb59-df0c-402f-b9ca-473a29197665", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfd76dd7-e8b1-45a9-9896-ad1b6fd66229", "sighting_of_ref": "indicator--0e34cb59-df0c-402f-b9ca-473a29197665", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89ed3059-b587-4e5c-b96a-3e27815e05c9", "sighting_of_ref": "indicator--0d9698ad-0c70-405d-a3aa-0fd2ce802702", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dfaf52e-44fe-429d-81f1-232fe3389480", "sighting_of_ref": "indicator--0d9698ad-0c70-405d-a3aa-0fd2ce802702", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fed553b-4e3d-4622-a579-ca62664feccf", "sighting_of_ref": "indicator--0d9698ad-0c70-405d-a3aa-0fd2ce802702", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8967d505-3774-43c2-b48a-dd1070ee2093", "sighting_of_ref": "indicator--6373ef12-531a-4ab4-bc61-67d2adc75d24", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a34b69f-28e2-4de6-b851-08ad4efd2586", "sighting_of_ref": "indicator--356b9e26-3178-4d02-ae59-694cd344969e", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ff30985-3f83-4107-a902-d052af6fde2a", "sighting_of_ref": "indicator--86259bad-4a48-45ca-b488-e29a5d5f8c87", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5ebe679-1ec7-439c-b9a5-6a4e18f0ed5f", "sighting_of_ref": "indicator--a4c95ef3-41b1-4916-97a6-ce0b90872f19", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8500bd4-4076-4027-8476-27e8812ff1dc", "sighting_of_ref": "indicator--2bb1bb04-55a9-4c9e-be0a-e4237c066b53", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7820534-c16c-4bc8-badf-5af4247323e1", "sighting_of_ref": "indicator--2bb1bb04-55a9-4c9e-be0a-e4237c066b53", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acab6fc1-cf4e-4115-8f87-31c2454d1575", "sighting_of_ref": "indicator--2bb1bb04-55a9-4c9e-be0a-e4237c066b53", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cd5c0be-6da5-4fa6-a2bd-ada13397a204", "sighting_of_ref": "indicator--8dfc59be-825d-478b-8871-65e1e0616d77", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9e1d719-2657-4e6b-96aa-ad0e03e1897e", "sighting_of_ref": "indicator--8dfc59be-825d-478b-8871-65e1e0616d77", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f385f1bf-50d9-4f15-a9d4-d67aa68c1ee4", "sighting_of_ref": "indicator--c35b3e99-7d49-4dba-986f-5e865251ef9e", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67eb7e89-fe8c-41e3-a1dc-02d27be77d06", "sighting_of_ref": "indicator--c35b3e99-7d49-4dba-986f-5e865251ef9e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcf1ca42-1ec1-4309-af7c-a1e3724f8b42", "sighting_of_ref": "indicator--c35b3e99-7d49-4dba-986f-5e865251ef9e", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38a656f6-28db-46d9-b84d-af5484298b4b", "sighting_of_ref": "indicator--198b6f43-d3fa-49e0-9339-c07d82a8730a", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14916619-bf37-4796-8396-33643f44b5ff", "sighting_of_ref": "indicator--e396742a-5389-47b0-adc0-2dd79fdaf56d", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dcc60a8-0522-427a-8c17-1bda12074b57", "sighting_of_ref": "indicator--e396742a-5389-47b0-adc0-2dd79fdaf56d", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c760cd6-8218-4839-a04f-aaa43cdfac2c", "sighting_of_ref": "indicator--0364cb0b-2fa5-4186-b824-6f48962b1d1e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--264600ed-c540-4ddd-a78c-12993cc9b9a2", "sighting_of_ref": "indicator--ebba5bd3-d211-4a44-96e5-9f66ba458383", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--670142c4-7a3b-4292-9f0e-aac0eeb6f489", "sighting_of_ref": "indicator--8a500a59-7e6c-4a10-9795-f4e861d2a633", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8f00e27-2554-48c0-ae56-4d98a3259c0f", "sighting_of_ref": "indicator--a9c5acf8-e510-4976-94d5-b3a6f5368f20", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed3cdcce-01f9-4c50-b002-ea9e1a8ec204", "sighting_of_ref": "indicator--d683da46-d2e6-44bc-ab49-00e5063109c1", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fea8663-80b1-4010-86e6-99d2ee49d1df", "sighting_of_ref": "indicator--d683da46-d2e6-44bc-ab49-00e5063109c1", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd794fd9-934e-4fcb-bd4d-3f20d6552edd", "sighting_of_ref": "indicator--cf689e7e-515c-47fe-9e49-b8f3c159de75", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ee9c4db-513a-495e-a4cc-18264d928752", "sighting_of_ref": "indicator--7f7a6bf5-2825-40f6-af51-10ea71aa37c3", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--190a440c-b42b-4a06-bbdb-eaf3f872fae2", "sighting_of_ref": "indicator--5d757479-e854-45d1-993f-e952eecd2bdd", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--390ada54-e15b-4f4a-9751-bc6a7b3fa445", "sighting_of_ref": "indicator--5d757479-e854-45d1-993f-e952eecd2bdd", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecfa6bbc-9d44-4e10-81b7-c46cc621f579", "sighting_of_ref": "indicator--fbf7afa8-c09c-4ef4-bec0-8d59a35e4b04", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00cc2883-2fdb-4971-889a-809fe82dcd96", "sighting_of_ref": "indicator--fbf7afa8-c09c-4ef4-bec0-8d59a35e4b04", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64c4d136-3e00-4631-bc00-678c3493e36b", "sighting_of_ref": "indicator--fbf7afa8-c09c-4ef4-bec0-8d59a35e4b04", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ce0147a-1daf-48d2-9330-faecfa566b33", "sighting_of_ref": "indicator--32374d74-127b-494f-b76c-dc6107b5d16e", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--899cf79c-a000-40f7-b5d9-1699330fdfdb", "sighting_of_ref": "indicator--32374d74-127b-494f-b76c-dc6107b5d16e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d5b3f8b-0729-42ed-b869-702bcd253aa9", "sighting_of_ref": "indicator--32374d74-127b-494f-b76c-dc6107b5d16e", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d135aac0-9aa2-4bcb-9a92-37998685ba69", "sighting_of_ref": "indicator--4878efd9-95a9-41d7-ac0f-e3b3bd184bff", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcbb6508-70c0-493e-a4e2-f27e9859db71", "sighting_of_ref": "indicator--4878efd9-95a9-41d7-ac0f-e3b3bd184bff", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66081891-7dd4-4df1-8334-7eb000f0a796", "sighting_of_ref": "indicator--6343d7a3-a61f-424a-a16e-a2214a2e75cd", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5572441-8ad0-4d22-8af3-cce0852d1967", "sighting_of_ref": "indicator--8c5f779d-1561-4bf1-b85c-469d65ea7972", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--945ebf48-4ea5-437f-86ab-7850a0b8aab9", "sighting_of_ref": "indicator--8c5f779d-1561-4bf1-b85c-469d65ea7972", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c216908-6b3a-4381-8341-00ecb445f24e", "sighting_of_ref": "indicator--d35ce39a-c1bf-4aaf-a6c1-c83262856fae", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--040a8712-46f0-4d3b-ad35-28775c567c47", "sighting_of_ref": "indicator--d35ce39a-c1bf-4aaf-a6c1-c83262856fae", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--010014fb-2bf0-47c3-b51b-a22d17d1a0a7", "sighting_of_ref": "indicator--f1e7a815-f7e1-4ce0-bdc2-934979102ca8", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e054f2d-3761-4608-8830-d9f7411ead81", "sighting_of_ref": "indicator--044062e3-bc0d-4a7c-a459-e55a2f316e24", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--daff7c81-bf83-4c7c-acf6-3c7198680181", "sighting_of_ref": "indicator--044062e3-bc0d-4a7c-a459-e55a2f316e24", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9df66a04-7ab5-488f-a44e-2a5c00f87c08", "sighting_of_ref": "indicator--70313915-4e77-46a5-a5c7-41c56c76d2e8", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cecfa9e-ce05-47a0-98fa-ccb2de9e4acc", "sighting_of_ref": "indicator--6d8dcc01-ec6f-4925-aa2f-f766b2145791", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b49aa908-a061-4454-87e5-7610a8ccd5ec", "sighting_of_ref": "indicator--6d8dcc01-ec6f-4925-aa2f-f766b2145791", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11dae7cf-f0ad-48c5-bc06-f607d6d6092a", "sighting_of_ref": "indicator--9dcd0436-4fb4-477d-bf26-b64e79b4ea04", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc94a220-62b7-4ff9-ba59-ccb8682942a1", "sighting_of_ref": "indicator--f262376b-611c-46d7-8845-f203b453c48d", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f7a5bad-4201-42b6-9f68-73d18326df85", "sighting_of_ref": "indicator--f262376b-611c-46d7-8845-f203b453c48d", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8b9f5af-eff4-48ba-8901-71a13bdb923d", "sighting_of_ref": "indicator--f262376b-611c-46d7-8845-f203b453c48d", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58ed532f-91ca-4129-9b41-d3c16f018fbe", "sighting_of_ref": "indicator--19c8656a-c880-47c9-a250-f0c73d32a8cb", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ebe3964-14df-49e5-bcbe-75153f59977c", "sighting_of_ref": "indicator--19c8656a-c880-47c9-a250-f0c73d32a8cb", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b6c8b0e-ea04-440f-b4a2-56de272ec4d0", "sighting_of_ref": "indicator--19c8656a-c880-47c9-a250-f0c73d32a8cb", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11a0da9f-bfd5-4a0e-a61b-d584898c648e", "sighting_of_ref": "indicator--01956912-8232-4283-842a-6275ab39cd43", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69ae0838-0adc-4204-89af-5916f60adab4", "sighting_of_ref": "indicator--01956912-8232-4283-842a-6275ab39cd43", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bbd3e5f-d936-4231-a4e9-13193224c9cc", "sighting_of_ref": "indicator--01956912-8232-4283-842a-6275ab39cd43", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6db71f1c-a7ce-4f4b-b402-5866c39798d3", "sighting_of_ref": "indicator--99a2116a-af7b-4f75-b1e1-78dce07facb5", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06f3747f-091e-4010-9959-fb1299e786bc", "sighting_of_ref": "indicator--99a2116a-af7b-4f75-b1e1-78dce07facb5", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9046de0-221e-44e0-bfd7-d387c821313c", "sighting_of_ref": "indicator--99a2116a-af7b-4f75-b1e1-78dce07facb5", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7063d5d3-f6f0-45fe-bb90-1cc92b5bbaac", "sighting_of_ref": "indicator--815c8a1a-d6ae-41f9-ab71-4edba463ac18", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3792dd6-2378-4463-a4fa-adc587a417d1", "sighting_of_ref": "indicator--815c8a1a-d6ae-41f9-ab71-4edba463ac18", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24b79d07-3c22-4fc5-a5aa-ff947460d533", "sighting_of_ref": "indicator--815c8a1a-d6ae-41f9-ab71-4edba463ac18", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c11c6d40-c712-4291-8c5f-8049373c956b", "sighting_of_ref": "indicator--fbd3442d-968a-4543-8ff3-7f61d3811101", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95f6c55b-8672-4af8-a8be-916117051b8f", "sighting_of_ref": "indicator--fbd3442d-968a-4543-8ff3-7f61d3811101", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8868b34-0eff-4fee-ad38-930bf8a9ed68", "sighting_of_ref": "indicator--fbd3442d-968a-4543-8ff3-7f61d3811101", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e7dc7ad-f352-4720-8460-937336902118", "sighting_of_ref": "indicator--e5043720-d5c4-41e6-991d-56c363339fd0", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47a80ce5-6214-4542-9d96-2f9c9af87298", "sighting_of_ref": "indicator--e5043720-d5c4-41e6-991d-56c363339fd0", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88d96abf-06e7-43f8-9728-d073a97a75d3", "sighting_of_ref": "indicator--e5043720-d5c4-41e6-991d-56c363339fd0", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e9ebd6a-132c-4194-beed-ed73dcb81969", "sighting_of_ref": "indicator--9546a681-6256-430d-9234-2ac9828a5bf9", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--286d8ef1-1178-4fdd-a60a-fcb270e225fe", "sighting_of_ref": "indicator--9546a681-6256-430d-9234-2ac9828a5bf9", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d30cd1e-d4fb-4e0c-9f98-c80949d8fe7e", "sighting_of_ref": "indicator--9546a681-6256-430d-9234-2ac9828a5bf9", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40d9a545-a7d5-41fd-a30d-2a0e49fb3d9f", "sighting_of_ref": "indicator--4f995934-fce3-4db9-b2e4-bbe3c89bbf7b", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb422dbe-81cc-4798-b1a8-9807fb3b9671", "sighting_of_ref": "indicator--4f995934-fce3-4db9-b2e4-bbe3c89bbf7b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d9aa51a-760f-45b8-9dec-92420970f4a6", "sighting_of_ref": "indicator--4f995934-fce3-4db9-b2e4-bbe3c89bbf7b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20dd5953-e0a1-46f2-a1b9-6cb8c79f10f6", "sighting_of_ref": "indicator--b4b50ec5-ebd0-4b53-ad60-9012c8a58462", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65aba92a-9332-4943-b35e-9ede0ea14239", "sighting_of_ref": "indicator--b4b50ec5-ebd0-4b53-ad60-9012c8a58462", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c84d97fb-6327-466d-99d6-687ef62f3f93", "sighting_of_ref": "indicator--b4b50ec5-ebd0-4b53-ad60-9012c8a58462", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da211a8c-8382-4bad-96af-e4259ab01fa2", "sighting_of_ref": "indicator--ed891643-5b15-48a1-bd60-1144cf331a74", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0be98d93-eb33-4dd4-bf81-a90126eb987f", "sighting_of_ref": "indicator--ed891643-5b15-48a1-bd60-1144cf331a74", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cc4349b-2e4f-475c-854d-c308f689ee00", "sighting_of_ref": "indicator--ed891643-5b15-48a1-bd60-1144cf331a74", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e74bc3d9-03d7-4db3-a114-ec84e82f51fa", "sighting_of_ref": "indicator--d1d76766-a649-43ba-9297-f573c6f69645", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9553b15-fee8-4410-a58e-45aa158ca5f8", "sighting_of_ref": "indicator--d1d76766-a649-43ba-9297-f573c6f69645", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40c52172-46dd-4568-96c5-71005ce65668", "sighting_of_ref": "indicator--d1d76766-a649-43ba-9297-f573c6f69645", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fa0c8d4-e2ad-49a2-9caa-73580f6642eb", "sighting_of_ref": "indicator--ccca33dc-7154-4e83-9d63-d282b2b0b791", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a7bee21-9793-4b8d-8fc1-d3e1c5428c59", "sighting_of_ref": "indicator--ccca33dc-7154-4e83-9d63-d282b2b0b791", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--462047f3-e600-4274-ad4a-c8abda3f3508", "sighting_of_ref": "indicator--ccca33dc-7154-4e83-9d63-d282b2b0b791", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdd5762e-ceda-46fa-847c-8199538594d2", "sighting_of_ref": "indicator--62187c1a-74c1-4d82-81b2-39cd7668bb55", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--710b0a1b-a1b5-413f-bb06-e6149ccbf644", "sighting_of_ref": "indicator--62187c1a-74c1-4d82-81b2-39cd7668bb55", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa3a8a03-88c6-4182-9a68-2d2132060ea2", "sighting_of_ref": "indicator--62187c1a-74c1-4d82-81b2-39cd7668bb55", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f9a3500-442f-4f3b-99b5-f5497deadef9", "sighting_of_ref": "indicator--13b5651d-9f24-4ede-b0db-15caf567423b", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--646e2c3c-1e53-43ff-8890-e645160dd5d5", "sighting_of_ref": "indicator--13b5651d-9f24-4ede-b0db-15caf567423b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40f0a0a7-bfb2-4ffa-8f96-27f5bf235a28", "sighting_of_ref": "indicator--13b5651d-9f24-4ede-b0db-15caf567423b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b254bacb-e5ed-47c3-a796-c39c1507cac7", "sighting_of_ref": "indicator--b88fdaa9-01d4-414d-902b-e5c500ac7d50", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d835bf1-9f61-484d-a664-8ab0743f91f0", "sighting_of_ref": "indicator--b88fdaa9-01d4-414d-902b-e5c500ac7d50", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dd37483-e15c-45b1-b4f3-a6cb32b335af", "sighting_of_ref": "indicator--b88fdaa9-01d4-414d-902b-e5c500ac7d50", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5c18b21-6ac1-4e8e-8bfc-b5952922d074", "sighting_of_ref": "indicator--2a92fc00-3dc8-493f-a9ce-205a1f63448a", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c03cbadd-e5e7-4b31-8014-c488446df689", "sighting_of_ref": "indicator--2a92fc00-3dc8-493f-a9ce-205a1f63448a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19eed898-0815-436c-8b87-3aab8e53671c", "sighting_of_ref": "indicator--2a92fc00-3dc8-493f-a9ce-205a1f63448a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef5026aa-1a26-4017-8be8-e7afbd43da56", "sighting_of_ref": "indicator--9d640c8f-043a-4ecb-8766-7e338321682e", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e9c3f89-ea3c-4307-8617-c60c631cfe46", "sighting_of_ref": "indicator--9d640c8f-043a-4ecb-8766-7e338321682e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b575db6-a3e6-4284-874c-922bb7f96593", "sighting_of_ref": "indicator--9d640c8f-043a-4ecb-8766-7e338321682e", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99491daf-8a7e-4239-abb5-24d93d0e8ca8", "sighting_of_ref": "indicator--eb5a47cb-7374-42d8-9681-da009d3df8e8", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e066310-5127-4d51-9c5a-177cbc12f8a4", "sighting_of_ref": "indicator--eb5a47cb-7374-42d8-9681-da009d3df8e8", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b40de785-1e7a-4706-9973-9c4d9c9375bf", "sighting_of_ref": "indicator--eb5a47cb-7374-42d8-9681-da009d3df8e8", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa7a99b5-4f66-404f-b421-0bcf2ba4b087", "sighting_of_ref": "indicator--fe85b7e9-59bc-4f22-bd6f-557ec41ee186", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a29642f6-243b-438a-9a71-bbe4a23583c9", "sighting_of_ref": "indicator--fe85b7e9-59bc-4f22-bd6f-557ec41ee186", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72472eec-df25-4067-9940-c480bc12ce8e", "sighting_of_ref": "indicator--fe85b7e9-59bc-4f22-bd6f-557ec41ee186", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5c64313-91a8-4e1c-9c12-1f915f97d2b7", "sighting_of_ref": "indicator--e4d71757-d3d4-46ce-9667-f146531c8a51", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d044ebd-99fe-4f1b-90bf-32a676554cb4", "sighting_of_ref": "indicator--e4d71757-d3d4-46ce-9667-f146531c8a51", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d55bad95-1d67-4975-9029-5e6810db347d", "sighting_of_ref": "indicator--e4d71757-d3d4-46ce-9667-f146531c8a51", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a0359fc-0475-46e7-bf1d-2905b37c9a95", "sighting_of_ref": "indicator--7d9ac5d0-3f9d-45b4-9de5-9cd62684cc76", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b117ef95-0f38-429b-be91-9bf4cd70dad5", "sighting_of_ref": "indicator--8bc4b493-f71a-4dfb-bf7e-8954266dd80a", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c74cd86-11bb-42c6-8811-32fccae6c878", "sighting_of_ref": "indicator--ae43e164-73db-43b8-baaa-cf3ac5b83d67", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5273789f-92d7-4675-8e70-1703b2aa0aab", "sighting_of_ref": "indicator--5e9d45b8-d793-468c-87f3-8218e89f0b01", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25c5a402-aa0a-4bed-b0fa-900b2fb17cff", "sighting_of_ref": "indicator--17e154f5-d16a-4a0a-bc1a-5292a2a08bff", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3315555-e6aa-48a5-a831-e0443cf4a8b0", "sighting_of_ref": "indicator--17e154f5-d16a-4a0a-bc1a-5292a2a08bff", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33fc682f-ac43-4c5a-ad8a-cbfb8c238883", "sighting_of_ref": "indicator--17e154f5-d16a-4a0a-bc1a-5292a2a08bff", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58b766a2-cb97-4e6c-8752-7f724bc4fec2", "sighting_of_ref": "indicator--dcd42a7b-790f-48d6-a6da-f34dd5a2a2f6", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93394575-abeb-4015-b6b1-49ed9e991696", "sighting_of_ref": "indicator--dcd42a7b-790f-48d6-a6da-f34dd5a2a2f6", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6aa0a92-38b6-43c2-86a0-2d9d819c8943", "sighting_of_ref": "indicator--4f075762-0b01-4d9c-a61f-d5457061b41f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--525efe5b-7b96-4e6a-987f-38ed50c4a459", "sighting_of_ref": "indicator--4f075762-0b01-4d9c-a61f-d5457061b41f", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddb5e7d3-4093-4e72-88d5-5f9cd2a5efec", "sighting_of_ref": "indicator--a9586046-5180-44a0-b4cb-a5948c59d203", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9a75d73-0b70-454a-9b58-8be56ff89e0c", "sighting_of_ref": "indicator--fe4438e8-43a7-4339-8d1f-755e179c9a4e", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c015a41b-7172-453b-aae3-4c3a5284345d", "sighting_of_ref": "indicator--fe4438e8-43a7-4339-8d1f-755e179c9a4e", "where_sighted_refs": ["location--cc47317e-2c18-43a6-8938-dea748a56ad5"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--780201ea-a2f8-446e-b9f0-bc760f4ae12d", "sighting_of_ref": "indicator--5f2ff18b-9273-4549-9323-f3284bbec933", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a2479e7-8cd5-4ff4-b502-710437122a21", "sighting_of_ref": "indicator--5f2ff18b-9273-4549-9323-f3284bbec933", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4aaceda-a513-48db-9465-9121c2d55e0f", "sighting_of_ref": "indicator--5f2ff18b-9273-4549-9323-f3284bbec933", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ced786ef-628e-4434-ab18-5e2b03ad98e7", "sighting_of_ref": "indicator--29884931-c840-4bf8-abd0-de69be84b645", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f664ce4-7dd2-407d-8782-63c79c0d237a", "sighting_of_ref": "indicator--fbc419cf-7e06-4056-87c8-9868578c712a", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ab7ffdc-9600-41e0-a5b9-d865255fe697", "sighting_of_ref": "indicator--fbc419cf-7e06-4056-87c8-9868578c712a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db391fb7-c4a9-41a4-9708-c672146103f5", "sighting_of_ref": "indicator--fbc419cf-7e06-4056-87c8-9868578c712a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6038eccb-b2ca-449b-b661-eed7467698ae", "sighting_of_ref": "indicator--b2b5e54c-cf46-4134-8711-5f81e961ad5b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ae9284b-30fe-43bc-b883-567adde9115a", "sighting_of_ref": "indicator--32bbc33a-f874-4cff-aac4-47b777a62569", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa915f75-aa78-4f1d-9361-2eeb065ac18a", "sighting_of_ref": "indicator--32bbc33a-f874-4cff-aac4-47b777a62569", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--376d7b10-9555-47f0-81f8-ee99c3b1fa52", "sighting_of_ref": "indicator--3703135c-0088-4405-83d0-a5cf0db8ddf0", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6ca6882-90c5-4bbc-85b5-880f5cf98612", "sighting_of_ref": "indicator--3703135c-0088-4405-83d0-a5cf0db8ddf0", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ecdc7cc-defa-4034-b468-ae3f3782d902", "sighting_of_ref": "indicator--3703135c-0088-4405-83d0-a5cf0db8ddf0", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff210dae-5fae-444c-8d59-ba633cb429f1", "sighting_of_ref": "indicator--02148c02-73c3-4d4a-bf4b-f4e5f755e258", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e41203cc-bd99-4d90-8195-01785e6f5bc3", "sighting_of_ref": "indicator--02148c02-73c3-4d4a-bf4b-f4e5f755e258", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69656011-8977-4e7d-b76c-caa9819b7281", "sighting_of_ref": "indicator--58fa609a-23c4-4889-b0a6-d3259c3f5e48", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66d5f902-1c39-453e-bc06-17080e0d8d62", "sighting_of_ref": "indicator--58fa609a-23c4-4889-b0a6-d3259c3f5e48", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39f513b5-bfe4-4100-bb53-2eabf6983e0a", "sighting_of_ref": "indicator--313d5001-1c93-47c0-820c-0bb83dde3f87", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d966ec34-754d-45cb-90eb-db4675e0a3b1", "sighting_of_ref": "indicator--313d5001-1c93-47c0-820c-0bb83dde3f87", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f7a971c-5bf0-4125-ba6a-b2e7c4b22b64", "sighting_of_ref": "indicator--14347a4e-17a4-44d3-b0bc-c054a0ff1289", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3a3e9fb-6c8a-4c79-a577-01d7c8777463", "sighting_of_ref": "indicator--14347a4e-17a4-44d3-b0bc-c054a0ff1289", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--208d5b2e-e55d-457a-be23-0bd3d05f531f", "sighting_of_ref": "indicator--14347a4e-17a4-44d3-b0bc-c054a0ff1289", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a6aa386-5caf-47ba-bdae-9b7cd8419d30", "sighting_of_ref": "indicator--3e7ad8fb-7584-4bf2-84c9-8c67074d3727", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9e5d560-dc0a-481b-9582-261d0e04ec03", "sighting_of_ref": "indicator--0336ce97-f66d-4cb0-b456-619ec97bcc12", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8a3fff9-60df-403f-8551-330b2f802a16", "sighting_of_ref": "indicator--62f9b657-830c-4856-8996-1aac327fbd5e", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80a5d427-030a-40db-bcf0-f322bba2955b", "sighting_of_ref": "indicator--99053499-87fd-4b1d-b9fe-d35e95e3ae4f", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2fe8eb3-4045-4218-93b7-e6912d1f4a38", "sighting_of_ref": "indicator--1ecf74d9-c4ca-4b1b-8abd-5541ae43d176", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2385a401-3201-4423-8aa9-91876c8e0364", "sighting_of_ref": "indicator--aa4b5b92-eb9a-4842-a52b-73064d296418", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3748fb0-b9b5-4ae7-9af1-a3c0295a3745", "sighting_of_ref": "indicator--7a0018f5-abd3-4ec0-8047-c9cd96c39536", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca3ed31d-f67d-4736-94ec-b20f60297d43", "sighting_of_ref": "indicator--fadb7a5b-6de1-442d-b64c-e958a8bc84f7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6d43ff7-98fb-4e12-9429-41a63c9f253d", "sighting_of_ref": "indicator--31a2c8db-68d5-441c-870d-b6ebd446b92b", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d429b103-f2ae-4bc5-86be-50d80771b076", "sighting_of_ref": "indicator--31a2c8db-68d5-441c-870d-b6ebd446b92b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fc847e8-7305-4a18-93bd-73f7a8fddcbc", "sighting_of_ref": "indicator--31a2c8db-68d5-441c-870d-b6ebd446b92b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a29359f-3829-42d2-8af8-2cdd175c33c3", "sighting_of_ref": "indicator--f1e5ac9e-6617-445b-939f-f7ec365fb615", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72ea4b16-3eed-4c48-821d-89e7adc7fef8", "sighting_of_ref": "indicator--f1e5ac9e-6617-445b-939f-f7ec365fb615", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9ac89ae-e327-4492-acf8-553b1bd851a4", "sighting_of_ref": "indicator--f1e5ac9e-6617-445b-939f-f7ec365fb615", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dbaa854-e00d-4363-86d2-75a0c5d5e6cd", "sighting_of_ref": "indicator--8341ceda-0bd1-44b7-9bdc-617c9571e00a", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac85a749-d826-429c-a88d-6c17804bd734", "sighting_of_ref": "indicator--8341ceda-0bd1-44b7-9bdc-617c9571e00a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ee19af0-2d3c-47cc-bb19-ca192710c5f7", "sighting_of_ref": "indicator--8341ceda-0bd1-44b7-9bdc-617c9571e00a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73588d58-e01e-42a4-8501-93481166dd4d", "sighting_of_ref": "indicator--9bb1e43e-ae9d-4db0-9607-596c2d5056d4", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--842b797c-26cb-4dc8-8dc1-b61227cc2e0c", "sighting_of_ref": "indicator--a830ada7-fde2-4400-a89c-db540a30b30c", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3deda319-6285-4be8-80ee-30f6dc925360", "sighting_of_ref": "indicator--3c5e8285-20ea-4710-a75c-822766dd486f", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cbc5776-3797-4edf-902c-83e134d6ceca", "sighting_of_ref": "indicator--d07a2467-542c-4278-b1ee-2aca865e218e", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b928731-f2e7-4a79-803c-241254bc19f1", "sighting_of_ref": "indicator--d07a2467-542c-4278-b1ee-2aca865e218e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31769e14-5675-4a4b-a31c-73e1353099b4", "sighting_of_ref": "indicator--4cbb4a3c-4aae-46a4-968b-d1ee46ad7c64", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5eb1d95b-8215-4346-8893-f6170bf699b5", "sighting_of_ref": "indicator--4cbb4a3c-4aae-46a4-968b-d1ee46ad7c64", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21cf4074-83bc-463a-a369-86fcbd0b68a9", "sighting_of_ref": "indicator--bc8c6ec6-1b5f-401f-ba07-26a4f5d1a695", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b8eaecb-ca81-4d59-ab51-fd333d24fd6c", "sighting_of_ref": "indicator--bc8c6ec6-1b5f-401f-ba07-26a4f5d1a695", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19128240-2941-4176-968b-c2b65d094871", "sighting_of_ref": "indicator--ef1d00bb-93de-4364-93a5-3305623579ef", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4029f2a-4ad4-487c-b669-3c2bb3145b94", "sighting_of_ref": "indicator--ce2a8a71-b6fc-4577-9012-eb32fcb5e7ac", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24d2ebac-b2d5-4acf-af51-b8c2c1efe456", "sighting_of_ref": "indicator--22e9188f-06d3-4acc-a0bb-ac38ed64467b", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db1535b9-ddc7-48f7-9b1a-fa229e61e9df", "sighting_of_ref": "indicator--f699712f-69e0-4b6f-860d-52c7ceba1dba", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2a43165-6e0b-4866-992b-5cea24b0aea3", "sighting_of_ref": "indicator--f699712f-69e0-4b6f-860d-52c7ceba1dba", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98e28080-37dc-4986-8e04-3f7b4a6ff642", "sighting_of_ref": "indicator--f699712f-69e0-4b6f-860d-52c7ceba1dba", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7321017a-614d-4315-86cd-5b19fd0ce41a", "sighting_of_ref": "indicator--97021770-bbbd-494f-af69-0918725cb6b6", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba26708b-9cdb-4361-8637-c6e437cb71be", "sighting_of_ref": "indicator--97021770-bbbd-494f-af69-0918725cb6b6", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af488ec3-60b4-4668-8885-463c40e26b58", "sighting_of_ref": "indicator--67be3117-55b2-4097-b1e4-0534c12ffbe1", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89981985-a010-4648-ae10-252edee8dd75", "sighting_of_ref": "indicator--0dc4f3fe-39f3-4524-81e9-4b9bc71dbd65", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8efb0791-ae9a-4e46-baa7-825bfa51be4f", "sighting_of_ref": "indicator--0dc4f3fe-39f3-4524-81e9-4b9bc71dbd65", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--533059ef-4b1f-4669-a3d1-4671cb2014f0", "sighting_of_ref": "indicator--b03834ae-e4f5-4667-8a57-585c566dc395", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bb183e5-e217-4cc2-85dd-cfc363e8f189", "sighting_of_ref": "indicator--99cbbfb1-9933-457c-b9fa-e23c8298f330", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a3e706e-ca92-4289-a981-b66cd125b403", "sighting_of_ref": "indicator--bc162adc-6f7b-4a35-944f-73edc2d166df", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a01bb06-6227-4a78-9025-9f4411815d15", "sighting_of_ref": "indicator--657621a0-30c8-439a-be99-f4bcb5c73deb", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6c94877-5895-467c-b311-f2d2bdfb892e", "sighting_of_ref": "indicator--657621a0-30c8-439a-be99-f4bcb5c73deb", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbe4ba59-8012-4c0f-b33a-e186f57a79df", "sighting_of_ref": "indicator--d9f50de5-08cc-4b4b-a6d3-217d126dcc2d", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--225980d0-7fe8-4c9c-8df4-c938ced75841", "sighting_of_ref": "indicator--d9f50de5-08cc-4b4b-a6d3-217d126dcc2d", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f774ae3f-268f-4912-9a76-a71ed92460a1", "sighting_of_ref": "indicator--5b2d3f35-f4b2-4b6d-807a-8b3b52b859a8", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88a87b88-e123-4852-bc44-75619a9a9cb5", "sighting_of_ref": "indicator--5b2d3f35-f4b2-4b6d-807a-8b3b52b859a8", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2ee3021-32ea-4111-b432-ef925a9f597d", "sighting_of_ref": "indicator--5b2d3f35-f4b2-4b6d-807a-8b3b52b859a8", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3174c4b-b665-4560-bfb9-22212e959287", "sighting_of_ref": "indicator--039c6fdf-7b37-4566-8754-9966420fdeb8", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cb9db67-26d1-4ce3-8478-a73f34e0cdaf", "sighting_of_ref": "indicator--99d2cbde-cf55-4ea9-9dd3-4fda3d1713d6", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20e60401-d0d1-4cea-b1f2-e201f0be3b45", "sighting_of_ref": "indicator--99d2cbde-cf55-4ea9-9dd3-4fda3d1713d6", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dbc1e80-08bc-44e8-b046-3689b428bcae", "sighting_of_ref": "indicator--3df14a67-8b43-4a5d-81bf-9f686c046b0b", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42002522-a873-40bd-83e8-6eb85a6c9936", "sighting_of_ref": "indicator--3df14a67-8b43-4a5d-81bf-9f686c046b0b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bd23364-a85a-4fc1-be90-d56de3547afb", "sighting_of_ref": "indicator--3f0cb3aa-75cb-47e6-894f-8b67e30c4b4c", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e2e412d-873e-4bb8-ab1a-508e1a76ba4a", "sighting_of_ref": "indicator--3f0cb3aa-75cb-47e6-894f-8b67e30c4b4c", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e15125bf-fe5c-445f-b0cf-270cf730e046", "sighting_of_ref": "indicator--366be674-6e6f-47d6-a9a0-833c3fd4901b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7101be6b-f769-48b0-95aa-8c8340dd8e4b", "sighting_of_ref": "indicator--5a3205f0-00f9-4b84-9379-a3edd7b16c33", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cea5f4b8-4f2c-415b-a60b-058084b5d2bc", "sighting_of_ref": "indicator--5a3205f0-00f9-4b84-9379-a3edd7b16c33", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2945ae1-f805-43be-a1eb-2fa211845ca3", "sighting_of_ref": "indicator--89f83df3-2564-44d6-bcd7-157de9631640", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f9c796c-a37b-4e32-a801-e0331f1194f7", "sighting_of_ref": "indicator--5013f213-034e-4916-929b-2614d930b1d2", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99d0f355-4301-4daa-a65f-39c6b9e8664a", "sighting_of_ref": "indicator--b26d682b-3fe7-48bb-8640-82326fc019b5", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cdaceef-a22b-40f1-8caa-ddf7c1fbccd2", "sighting_of_ref": "indicator--96fe53c0-db59-4cff-b323-ec889e39f9c4", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40bda494-683a-42f1-bae1-c28d533a9d59", "sighting_of_ref": "indicator--96f1085a-1f48-45ab-8dd9-e32360f8a2df", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4b325fa-58ac-4d62-b961-e508c6dcc67f", "sighting_of_ref": "indicator--6e4d45bb-f007-4232-868b-2c4e6be2a7a3", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afdd91ef-d053-4a0b-b929-3a3d1890363a", "sighting_of_ref": "indicator--6e4d45bb-f007-4232-868b-2c4e6be2a7a3", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5564e16-3da2-4698-9ac9-1464b87ee258", "sighting_of_ref": "indicator--93822f48-7335-4e28-9f2a-4990d2c27073", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f9091ff-2900-41b0-8595-6f0fd23f2707", "sighting_of_ref": "indicator--93822f48-7335-4e28-9f2a-4990d2c27073", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb0020df-4306-444d-8311-b138c2264823", "sighting_of_ref": "indicator--e33f2329-6fbf-436a-8577-7b3de3746b26", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02ffc7c5-53b5-4a1f-bc79-9a5d4de6d0f6", "sighting_of_ref": "indicator--e33f2329-6fbf-436a-8577-7b3de3746b26", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cdc5cfd-7cdb-4375-a6fc-8f87e52c3618", "sighting_of_ref": "indicator--a1927dcd-e876-4875-a386-4a692ae3c0eb", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37283b23-fdce-4c5b-af1f-1e77fc826d2c", "sighting_of_ref": "indicator--a1927dcd-e876-4875-a386-4a692ae3c0eb", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7daf2a96-224e-4dec-a640-562290ace1a1", "sighting_of_ref": "indicator--9c9e52b6-61a8-4c84-aa9e-94e21cd1c7c8", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ff8cd65-7b54-4dcf-b2d3-0c7d7556e89f", "sighting_of_ref": "indicator--9c9e52b6-61a8-4c84-aa9e-94e21cd1c7c8", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df8c4bb5-ad57-4a86-98fa-63a18e14ebca", "sighting_of_ref": "indicator--13404ab8-ad4c-401e-b6d1-f9c295915d1c", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb644167-bc2f-46ba-a36c-768177b8e11b", "sighting_of_ref": "indicator--a763a449-6903-40dc-97a6-92408a5258b3", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd152470-9137-4f85-a503-eb12e3cb9501", "sighting_of_ref": "indicator--954bd56e-ced1-42ca-91fc-68a24fc734eb", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0f74870-7947-4e16-a07c-7d2ae2b49a48", "sighting_of_ref": "indicator--954bd56e-ced1-42ca-91fc-68a24fc734eb", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--708e1537-e328-43f7-a9d2-e9488dceebf2", "sighting_of_ref": "indicator--0ee56ff8-f297-4baf-82a5-368757f4cd92", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6fa9113-6bfb-453f-a41c-7b5927a5811b", "sighting_of_ref": "indicator--0ee56ff8-f297-4baf-82a5-368757f4cd92", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9d2dd54-a90e-4c2a-a3ec-a8905f3117a8", "sighting_of_ref": "indicator--630c56b5-eae8-4f54-86a6-13a3d49854d5", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fd78e9f-974e-47ed-81ec-aaffcddd4e26", "sighting_of_ref": "indicator--630c56b5-eae8-4f54-86a6-13a3d49854d5", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aca605a5-f167-4607-b6c8-900a087babdb", "sighting_of_ref": "indicator--6ca51073-3c83-4706-9132-a219656500ef", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44bbd23b-2747-4f29-9b48-bcca27a87949", "sighting_of_ref": "indicator--0e9483ba-fded-48f3-ac0f-11772a88d26b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--883fd689-b349-4578-a215-f29aaaf00144", "sighting_of_ref": "indicator--a0227685-5a1f-41e3-a06d-60402c63e236", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af9557b3-e480-4363-88d3-aba25070656f", "sighting_of_ref": "indicator--a0a6fd0c-b19d-4285-becb-f0accdbb82df", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aca9487c-eb89-4616-981a-046ebf22a85c", "sighting_of_ref": "indicator--633dd3ba-fe8a-47a6-9720-13a97e6c9a22", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6b4d5b4-284a-4990-82c8-a78260986d29", "sighting_of_ref": "indicator--633dd3ba-fe8a-47a6-9720-13a97e6c9a22", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f587ebd7-d8e0-434b-91af-3409bdc9a9d7", "sighting_of_ref": "indicator--633dd3ba-fe8a-47a6-9720-13a97e6c9a22", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ed29e25-dd1c-4a93-9e8e-e25097a5bc62", "sighting_of_ref": "indicator--b190e452-64da-4eae-a622-7946c784926a", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99587ff7-aee0-4785-b806-02b03d0d6179", "sighting_of_ref": "indicator--b190e452-64da-4eae-a622-7946c784926a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e52915b1-904d-4bfe-b726-560ec1e3bc59", "sighting_of_ref": "indicator--eb893bdf-7cc0-4ec7-a97d-ee257550345b", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7867690d-3009-4235-9d46-3e4dcc20311e", "sighting_of_ref": "indicator--eb893bdf-7cc0-4ec7-a97d-ee257550345b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3e17f1a-6702-42e6-b414-d54a0443c3eb", "sighting_of_ref": "indicator--eb893bdf-7cc0-4ec7-a97d-ee257550345b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a75a90ad-ccc9-4d11-9d95-8deefd48fa4b", "sighting_of_ref": "indicator--57e97f66-a56b-4839-8192-7aaa679030ab", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8259423-34a0-44e3-a1d6-61d30a337de3", "sighting_of_ref": "indicator--231106ba-6ad3-491d-ac44-48a71c4934fd", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70169647-8cfa-44db-8784-eb2d5c9e9282", "sighting_of_ref": "indicator--61eaf168-c192-4be0-963e-f88e0d78cb19", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f77b0b1e-a485-4f84-8706-a31b0a374958", "sighting_of_ref": "indicator--61eaf168-c192-4be0-963e-f88e0d78cb19", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7803325-3d09-449b-89b6-0e0ec5483cca", "sighting_of_ref": "indicator--8d874791-497f-4109-a7d3-99fc9995b2aa", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5440bee1-f1d4-4161-80df-e07eda802446", "sighting_of_ref": "indicator--3e2bcaad-910d-49b0-85c5-edf0aec5bf83", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45ed4dd2-5980-49da-bd90-a57fa56d4227", "sighting_of_ref": "indicator--746f5d10-96d2-4a20-ad54-8220ddddf805", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41ca735d-fb71-44fd-90df-ce7a8bc5c514", "sighting_of_ref": "indicator--c88d51bc-7c24-4c3b-9526-59c91794b578", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13cefb48-4938-48b1-8aa2-ae3c1252dcff", "sighting_of_ref": "indicator--61c2297e-91ca-4552-931b-6e73d494dd02", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--399df1e7-e2fb-4ce7-adb7-a698a4baec94", "sighting_of_ref": "indicator--0eac3a44-2c71-4b41-91e1-3e129757afbc", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--169b94c8-2f85-48e0-8fcc-d181b1020d40", "sighting_of_ref": "indicator--fcc15fe6-87f1-4379-8a87-6df41656f33f", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99bdd080-0c3d-4736-aaf1-5424be971d2a", "sighting_of_ref": "indicator--fcc15fe6-87f1-4379-8a87-6df41656f33f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--928f4f3c-14d7-4c6a-815d-ead244a7ef57", "sighting_of_ref": "indicator--b0c1f6bc-667e-43d6-91ce-f707fe118164", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0a32e3e-9f51-4677-9331-4c98ee815367", "sighting_of_ref": "indicator--06638bf2-8563-4c0b-9278-da607f82803b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e1c2d52-f389-45d5-af5c-43854143fc24", "sighting_of_ref": "indicator--06638bf2-8563-4c0b-9278-da607f82803b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ff5488c-15c3-41cf-a2ed-40e24c71cc75", "sighting_of_ref": "indicator--28342e81-30f1-4a6e-87ff-ccefa554ee05", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a926aae-067a-48ef-9300-e911340f2a5b", "sighting_of_ref": "indicator--21bcdb56-b45c-4a77-a0e6-b7a831ac3b82", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--974defb5-e953-407b-899a-b0df0896c00d", "sighting_of_ref": "indicator--80560d80-fc22-4e32-9753-52e5dc620ab1", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--454b865b-0002-4ab7-89ba-3ca475de6ff2", "sighting_of_ref": "indicator--80560d80-fc22-4e32-9753-52e5dc620ab1", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4157866a-3063-40c0-9f33-95633058dc5f", "sighting_of_ref": "indicator--80560d80-fc22-4e32-9753-52e5dc620ab1", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--833801d9-49ad-4c64-b5a6-3cf6240bd3ee", "sighting_of_ref": "indicator--983716c3-80c9-4515-b69e-84ee1a5e02dc", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--deb9fc4b-68f6-4372-a455-3cce7f58705c", "sighting_of_ref": "indicator--983716c3-80c9-4515-b69e-84ee1a5e02dc", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baa53739-b1a0-4387-8c49-3766ffb00340", "sighting_of_ref": "indicator--f41b88c8-a23a-4855-bd7d-f1752d93065c", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d53f24f8-2993-4b15-a011-467f78432599", "sighting_of_ref": "indicator--2e2ff780-8017-44b1-a49a-a3b78d686433", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7db5e7f7-0207-4d36-91bc-1b0a3466cdb9", "sighting_of_ref": "indicator--2e2ff780-8017-44b1-a49a-a3b78d686433", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d5b8e45-e93a-491f-bf60-eb01a04be291", "sighting_of_ref": "indicator--cf4e8252-cec9-4edd-9a6a-8521917acb42", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ae351ea-09de-4463-a6a0-128a95683d4b", "sighting_of_ref": "indicator--2d7aef16-2e00-4b05-9666-40d4cfc58da0", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--689f1e19-d3da-41cf-b65b-fe5d78841f2a", "sighting_of_ref": "indicator--7d513696-9049-4c58-9599-b35e6da312a8", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a45953a8-d2a7-4ad1-9465-25f16feae6ef", "sighting_of_ref": "indicator--7d513696-9049-4c58-9599-b35e6da312a8", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f38255b-ebe8-4b08-a6b9-a147c471eea5", "sighting_of_ref": "indicator--8974457e-b156-4c1d-8ac3-3058c12e8b6d", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12a0e059-956a-4550-b097-95f771584c66", "sighting_of_ref": "indicator--fe6a9cc9-1c28-4502-b1b9-a7f3f9838067", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af7dabf5-7e07-429f-9674-e006a03d6a6d", "sighting_of_ref": "indicator--fe6a9cc9-1c28-4502-b1b9-a7f3f9838067", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--275bec8f-517b-4983-a0fc-d866946fd41f", "sighting_of_ref": "indicator--19bacd76-7236-4fc7-98b6-f1c9e12f94f2", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aefc9476-c556-41f1-ac20-3a10d9037033", "sighting_of_ref": "indicator--19bacd76-7236-4fc7-98b6-f1c9e12f94f2", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ef12644-87c9-4259-b2e9-a6ad8d9fc2e4", "sighting_of_ref": "indicator--58d64d65-c06d-4ea4-b80a-f0b85d961d46", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fce89685-3dfc-4c5c-bff9-8c9cfc92d578", "sighting_of_ref": "indicator--be65e4f2-adc1-4838-8710-e027f87be9d8", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fe865ed-1fdc-419b-9cdc-48dacd207ad6", "sighting_of_ref": "indicator--002c0f0b-660a-475a-a489-2986b57c0401", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa6cac71-8f7c-4cf7-9eaf-10a93ca23e77", "sighting_of_ref": "indicator--667cdf96-750f-4005-8fb7-0e46ec2feada", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4aaa5fa2-2b1e-4fb3-b6ea-4eaa8ae4020c", "sighting_of_ref": "indicator--62c350a4-04fd-4850-8628-b1da60f3d39d", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1f12e0a-983e-49b4-a2ab-dde7949d81bd", "sighting_of_ref": "indicator--4e3a4002-58ed-4ab3-8613-a7edd5ad9f0b", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36b2872f-bf97-487d-bdc5-a5efc05694f8", "sighting_of_ref": "indicator--4e3a4002-58ed-4ab3-8613-a7edd5ad9f0b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68b573c3-8c21-468e-9e5d-c44e0cdd6915", "sighting_of_ref": "indicator--4e3a4002-58ed-4ab3-8613-a7edd5ad9f0b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fccd714-df96-4538-9988-7e3bd0e5fd31", "sighting_of_ref": "indicator--fb205340-3633-4af1-bf87-f07897a9e7c9", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12f308b0-2b34-456e-81e0-67fa11b4b9a1", "sighting_of_ref": "indicator--fb205340-3633-4af1-bf87-f07897a9e7c9", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b31b6856-4cc6-46ee-8d04-66a05563daac", "sighting_of_ref": "indicator--6881233a-8e06-495c-ac6a-804cbc96ac75", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12297c9f-4f60-4923-bcd1-6a7c18e905fd", "sighting_of_ref": "indicator--dea9c0ec-8df0-400d-878f-00b9f6711e60", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8df887ec-5656-4a5f-a510-f095e8125e4f", "sighting_of_ref": "indicator--dea9c0ec-8df0-400d-878f-00b9f6711e60", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d80ad868-d0c1-485e-8f7b-9d77b06b1cd0", "sighting_of_ref": "indicator--d995d413-6451-49b8-ba53-4ea7a65f4023", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce990fb3-cde3-4354-aeba-e6a17ba0a164", "sighting_of_ref": "indicator--6e8d3caf-3c20-4ca0-9f70-d3625b4a1095", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--370ac9f6-7def-4839-857f-ffaad9fbf316", "sighting_of_ref": "indicator--6e8d3caf-3c20-4ca0-9f70-d3625b4a1095", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2add31c5-fc63-4522-bcca-3890d29b8574", "sighting_of_ref": "indicator--a61b5bb6-20a8-4b36-9f0d-c126401528c8", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--637c0084-1a9e-4465-a0f7-20f3b22e8658", "sighting_of_ref": "indicator--a61b5bb6-20a8-4b36-9f0d-c126401528c8", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2fdbf3c-6a75-402c-ba93-e514b37eb43e", "sighting_of_ref": "indicator--e6df93f7-5743-46f5-a24c-e44b921d9ff9", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b65998b-05c2-4161-83fb-86ad8569e5c7", "sighting_of_ref": "indicator--575705d4-cea5-448a-9f8c-4bf44a35810b", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1169ed8-258e-4bbd-9f49-0c941054ed00", "sighting_of_ref": "indicator--575705d4-cea5-448a-9f8c-4bf44a35810b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7abad44f-bb80-4bc0-8a98-f454b3125a94", "sighting_of_ref": "indicator--1b3ab5b6-45ce-4f61-9655-975ef03ece26", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--837e3990-5e28-4c12-aa0c-9bf79cdbee62", "sighting_of_ref": "indicator--1b3ab5b6-45ce-4f61-9655-975ef03ece26", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac1aff77-c7dc-4432-aac8-06c386745177", "sighting_of_ref": "indicator--7a0000c0-cd09-4923-bae7-8fc608ef7ef5", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4dedbf8-19da-4fd8-b862-da9d8c8a9552", "sighting_of_ref": "indicator--7a0000c0-cd09-4923-bae7-8fc608ef7ef5", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--467e4010-cd7f-4297-b083-d1da7128ffdc", "sighting_of_ref": "indicator--42b03596-a37f-4636-8c84-6b35ac2e6155", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--609fe178-4140-495e-8e94-71426673b19b", "sighting_of_ref": "indicator--c63dd3ac-0a55-4486-bfab-46049b96478a", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abe3b549-fd72-4617-9d2c-7e83356c5a93", "sighting_of_ref": "indicator--84c60aa3-83ff-4189-a63c-fc6992c6a9e0", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--369c5157-0786-4e66-bd17-34f962946795", "sighting_of_ref": "indicator--84c60aa3-83ff-4189-a63c-fc6992c6a9e0", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b7dbf26-7346-41a7-8b66-cc6489646b42", "sighting_of_ref": "indicator--84c60aa3-83ff-4189-a63c-fc6992c6a9e0", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5138b368-9f24-4de8-b1f1-1ce8abd0e2a7", "sighting_of_ref": "indicator--2bcdb37b-f000-4cb6-8d03-012bdc7fda5d", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--855711d4-1de2-4f9e-b84b-129c0482a12f", "sighting_of_ref": "indicator--bed0fa45-aa64-4ddb-b111-3643363502b5", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0c4e5b7-c0a7-4a10-8b3f-810912367910", "sighting_of_ref": "indicator--4319d32f-a263-41ac-acc6-07ee26afc4e9", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88a87fa1-39ab-42f6-9469-716119f75ade", "sighting_of_ref": "indicator--26f3cd4b-e248-479f-9cc3-b32d9e145596", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba351db1-f1a4-4c27-98c4-8502047274ae", "sighting_of_ref": "indicator--bc3126c7-4264-465f-a243-bac924468cb8", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8896de2-07c8-48e9-8e2e-1cc4b11dc805", "sighting_of_ref": "indicator--bc3126c7-4264-465f-a243-bac924468cb8", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8de6b6e6-da91-4844-a6f8-010728a39e55", "sighting_of_ref": "indicator--02c79fcb-1279-47b8-8e51-d68a079c9eef", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5f9a5de-1ffe-4c18-9895-e8ee9da6d81d", "sighting_of_ref": "indicator--bb5d3e1a-721d-4b29-b0d3-a823b8390d65", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99ed5c09-a016-45ce-9a10-f166df90f1ce", "sighting_of_ref": "indicator--bb5d3e1a-721d-4b29-b0d3-a823b8390d65", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62cc9327-413f-428f-be8f-b3f59f78485c", "sighting_of_ref": "indicator--bb5d3e1a-721d-4b29-b0d3-a823b8390d65", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a70b5457-7120-410d-93ba-0b0350b25a0f", "sighting_of_ref": "indicator--8b85b98c-2ef2-476e-addf-63596894e502", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47d92581-fbc5-42bb-b1cb-7e13174b0d56", "sighting_of_ref": "indicator--8b85b98c-2ef2-476e-addf-63596894e502", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0557cb43-f3e4-4274-bad1-5d81b89f41b8", "sighting_of_ref": "indicator--752167ca-f80c-4425-aef5-2ec783bcf551", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0c1ca0e-fa3b-4755-bb35-0eef12150ddc", "sighting_of_ref": "indicator--c1893f1c-a643-449a-8565-af77f9f908c5", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a79275a-cd5a-4853-9158-cf37cea68822", "sighting_of_ref": "indicator--913faab6-b671-407a-92da-5a0fb7649e38", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70c8b5c8-3ee8-4fd4-a2ad-6e4e19fd141e", "sighting_of_ref": "indicator--bb0685ed-bbfb-4115-a22e-e8beca2d15eb", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--708a1e98-2739-4073-a588-098c466d286b", "sighting_of_ref": "indicator--b5819c8d-1620-468c-b609-4f5732646b16", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--211da506-6cf1-48d0-a71a-79acede17f76", "sighting_of_ref": "indicator--d27f1ac3-08ba-4166-a250-c6ae2556fb63", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab0c2805-6cc9-4dd5-9575-03c92a3d5f32", "sighting_of_ref": "indicator--586f2cdd-f60c-4759-9bca-b58aa0909cc3", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7899cd1a-b59b-4d16-a453-d41339ea113e", "sighting_of_ref": "indicator--8a21c4b2-e12d-47da-b6d9-9048fcee468e", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cfd98e7-aa4d-40d2-8810-b5ff0b3988ab", "sighting_of_ref": "indicator--8a21c4b2-e12d-47da-b6d9-9048fcee468e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94997ef5-d89b-4585-a206-46605c3a267e", "sighting_of_ref": "indicator--51f979c0-3fef-4334-bfaf-ea728f875b09", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1672bfa4-18fd-4425-8585-f905ecc7a918", "sighting_of_ref": "indicator--2d811aa4-75c9-41a6-a635-2b05b8f77550", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0a205ce-c5ec-4b83-bdf5-573900733c26", "sighting_of_ref": "indicator--4e91e404-c88c-4925-b6dc-8eb000311fc3", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a3dd4b4-8bab-4024-88ac-cc9ecd6e6c88", "sighting_of_ref": "indicator--4e91e404-c88c-4925-b6dc-8eb000311fc3", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--917c04b5-1afd-4d33-9b90-08e5f2c95fbe", "sighting_of_ref": "indicator--915f2c8f-5350-4394-b898-eaf4a7e95104", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7003438-9bb2-40d3-b173-670570883279", "sighting_of_ref": "indicator--5392a9fb-c613-4d64-a413-1f3792ed5e4e", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f30a1445-1b5f-4e97-ad25-7e8213f6c2aa", "sighting_of_ref": "indicator--5392a9fb-c613-4d64-a413-1f3792ed5e4e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86e34837-76e2-476a-acdf-260327c2c351", "sighting_of_ref": "indicator--ec7a46d9-17b1-4140-a54a-734c626fc4cd", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb5414d4-c2c5-440e-84e1-e4afb5c64111", "sighting_of_ref": "indicator--8d398a81-0cb7-451d-8702-bc54cfa4935e", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22cb65ac-4fcb-44db-967f-024f71edf6c4", "sighting_of_ref": "indicator--8d398a81-0cb7-451d-8702-bc54cfa4935e", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--838300d9-c37d-4e6d-8b66-b73db22197ef", "sighting_of_ref": "indicator--8abd879a-a144-4bd6-8878-5c00b41b9ae8", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d2f43c4-fe99-4d2b-a0c1-78e25c614657", "sighting_of_ref": "indicator--b15856d9-00c9-4b4d-8161-3e8e613de135", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6077a4f7-0cce-4197-8fc1-706fe8ee6e9b", "sighting_of_ref": "indicator--b15856d9-00c9-4b4d-8161-3e8e613de135", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45792b23-db09-4270-8ffb-e126dac41478", "sighting_of_ref": "indicator--3f9aca74-f249-4d5c-b341-ef7d79677b8c", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b4697f3-691c-4294-81ff-55b414bdeb0b", "sighting_of_ref": "indicator--4d8db6c2-6652-4f32-9e24-ff10ffdda3cb", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32f8b036-784a-4417-939f-3a26a5a72b27", "sighting_of_ref": "indicator--a13a177f-ece8-4d2c-89dc-1ee5ef71cbf5", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--836458ea-3760-455e-a8a4-4863b0c7786d", "sighting_of_ref": "indicator--a13a177f-ece8-4d2c-89dc-1ee5ef71cbf5", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dba44d4-d1aa-45f4-bcd7-13caf6330687", "sighting_of_ref": "indicator--a13a177f-ece8-4d2c-89dc-1ee5ef71cbf5", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62682482-2a0c-4212-9573-18b7c3dce184", "sighting_of_ref": "indicator--2732f4cb-3eda-4b83-96e6-8fbccd297efa", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8493fad4-900d-4910-bdcc-04f409e34888", "sighting_of_ref": "indicator--2732f4cb-3eda-4b83-96e6-8fbccd297efa", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82ab531c-2dd6-4d35-92d1-f7ee96e4124f", "sighting_of_ref": "indicator--2732f4cb-3eda-4b83-96e6-8fbccd297efa", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--067af7d3-c3ea-4660-aab1-e3a3b15af1d7", "sighting_of_ref": "indicator--513520c6-3da7-42e7-bf15-4496b402d534", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dba20fe2-17b1-4938-8365-e1fce7167393", "sighting_of_ref": "indicator--513520c6-3da7-42e7-bf15-4496b402d534", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84390026-3231-445c-9bd5-b5bf7a2de400", "sighting_of_ref": "indicator--f1d83707-4a4a-48fe-a8b9-51f4cabc2db7", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcac78e0-17fd-41f1-9f7e-13daf97a2094", "sighting_of_ref": "indicator--f1d83707-4a4a-48fe-a8b9-51f4cabc2db7", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f168420-3fa4-46a2-aff6-6070913ab8c2", "sighting_of_ref": "indicator--e616a013-c1f9-402f-968b-7641f6c93ba3", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2a278ed-84fd-4258-ab7b-b8199cd0d338", "sighting_of_ref": "indicator--5e894344-f30c-47a0-8f47-413ee6c16f48", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--028bc9d6-a8af-4083-9c82-e9a38528e123", "sighting_of_ref": "indicator--618dd797-3acc-4507-82ce-065f3c25a387", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--064987f0-a718-4e23-94af-c94be77b692f", "sighting_of_ref": "indicator--c9a03833-1c4d-4395-a4c7-b57f3d2b66b4", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05f03bcf-561f-4e4c-9dd7-5f385f4ac5e6", "sighting_of_ref": "indicator--6e3efcd4-f7be-4730-9126-a241342f8fb1", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5876d60-42e3-443b-9b0b-dedcb94eaa89", "sighting_of_ref": "indicator--fe0b9c9a-1447-469a-bdd9-cfe60ba13b46", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29c38a0c-bda6-4ade-bba8-abbe95122374", "sighting_of_ref": "indicator--5c0ec55e-9cb5-40b8-bd83-45f09fece394", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--816b844f-2715-46a4-b737-8ae8c9b9e4ca", "sighting_of_ref": "indicator--5b7619c1-cf82-49f7-b014-1bacf9934286", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20d9a28a-9594-4434-a6b2-91de902a9aec", "sighting_of_ref": "indicator--5b7619c1-cf82-49f7-b014-1bacf9934286", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e49ff88-6cd1-4452-814f-41a3116ad068", "sighting_of_ref": "indicator--5b7619c1-cf82-49f7-b014-1bacf9934286", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a76d7c8-fc4e-4658-9f21-23473fae9e47", "sighting_of_ref": "indicator--f28082cc-664e-4114-ab84-2ca721c1c4e3", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35a669f6-a979-474a-8bb2-dfe7da571981", "sighting_of_ref": "indicator--088b0922-9fcf-41d2-a370-448923c3e952", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ac49855-3ab1-4e04-bda7-4f226749d416", "sighting_of_ref": "indicator--088b0922-9fcf-41d2-a370-448923c3e952", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49f8b2d3-8ac8-406f-a86d-e11f6181fff4", "sighting_of_ref": "indicator--44182137-7c1f-487b-af68-ab942da56933", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6f86b7e-2ffd-4565-a43b-6624c2c6ab4f", "sighting_of_ref": "indicator--44182137-7c1f-487b-af68-ab942da56933", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6b50fe5-45ca-4f00-973f-b446b2950516", "sighting_of_ref": "indicator--972e607f-6a1d-4331-aea6-fc407c344654", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4843c75-37eb-490a-b8a9-3a22f6990537", "sighting_of_ref": "indicator--972e607f-6a1d-4331-aea6-fc407c344654", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acad6ed2-8148-4fb1-8056-5a17160d9dc0", "sighting_of_ref": "indicator--972e607f-6a1d-4331-aea6-fc407c344654", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a7e1304-5f99-43a9-8d16-9024f9ea230c", "sighting_of_ref": "indicator--4930ac0d-7cb8-4ae7-9616-fcaef04b956a", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e84188c9-6616-47c5-9b6d-11b86d01ac29", "sighting_of_ref": "indicator--d242ba1e-8d3e-4591-922f-17fd049e5523", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddb71a4f-0894-49c0-8b52-e0f3a6c0e3df", "sighting_of_ref": "indicator--d242ba1e-8d3e-4591-922f-17fd049e5523", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32fbf3b8-419c-4b69-92e9-16a0f464266d", "sighting_of_ref": "indicator--d242ba1e-8d3e-4591-922f-17fd049e5523", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e85cf52-7e28-41af-be8e-bd3a03459497", "sighting_of_ref": "indicator--b59768a6-a182-4dfd-9020-bc82ebdf3544", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cff8cdb0-bb71-47a1-977e-5f6cc226038e", "sighting_of_ref": "indicator--b59768a6-a182-4dfd-9020-bc82ebdf3544", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e08a80ca-6391-441a-aee7-41e02f3c4caf", "sighting_of_ref": "indicator--b59768a6-a182-4dfd-9020-bc82ebdf3544", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38f01490-c037-439d-bd56-62ee85b5f290", "sighting_of_ref": "indicator--347926ee-dc3f-4af7-a8f9-fdbac35c7a2e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47b2b076-f252-4b64-9d40-76b6ca04d4e2", "sighting_of_ref": "indicator--0dbd7111-8ea4-4608-a720-b0a7c052d6ea", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5bea359-e412-42d5-ad13-b52f1087cf5d", "sighting_of_ref": "indicator--996f4717-1b20-4828-bd4e-a26ef19709b8", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c4a1820-fd13-4a3f-8237-1cf6cb546f7b", "sighting_of_ref": "indicator--996f4717-1b20-4828-bd4e-a26ef19709b8", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8417c91-924b-4be1-a560-77fa186b4cbd", "sighting_of_ref": "indicator--17964f36-6cee-4cbe-8486-00f3c913afbb", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e49ffc56-7e13-4afc-8ba7-a29e051c9d7d", "sighting_of_ref": "indicator--effd7aa0-281b-4b96-9185-9926fe318542", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaf69869-1414-4f74-ba66-377df3c7c22a", "sighting_of_ref": "indicator--9c6f8303-11c8-4e91-b55c-0d0a9e37b262", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab741607-f538-4beb-ade8-6496971013bf", "sighting_of_ref": "indicator--bc72433c-c082-4eb5-83cf-9e48d651c37c", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c0c7d00-a15a-4e81-9e4f-deaf8d7ba890", "sighting_of_ref": "indicator--b8d8394a-9e7b-4ce8-ad45-e5a07bb5c133", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dad94fed-5325-4e5c-85e4-73303a44faf4", "sighting_of_ref": "indicator--b8d8394a-9e7b-4ce8-ad45-e5a07bb5c133", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe53564a-c860-461f-8a16-3f35ab9def81", "sighting_of_ref": "indicator--56c11ad6-ce22-4106-b924-04b5a2f0a782", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d867259-7418-403b-b295-84d89d2cd772", "sighting_of_ref": "indicator--56c11ad6-ce22-4106-b924-04b5a2f0a782", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c190784-8898-43a7-b474-bfc49d3db09d", "sighting_of_ref": "indicator--555f7b48-b250-4424-89e2-476658bc2f31", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc88915e-c6da-40d6-8f59-979119984f1e", "sighting_of_ref": "indicator--c58a2e0d-2cc3-4c11-b399-f342ff79383f", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05ffdfc0-9a31-4c9a-aa3d-2f863ad11ae9", "sighting_of_ref": "indicator--c58a2e0d-2cc3-4c11-b399-f342ff79383f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6510bce-c103-4d61-9826-bbeedb0a893d", "sighting_of_ref": "indicator--2f27eca7-69f2-42f6-b279-a4507a9e95ad", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47fea541-37ca-4f34-a545-534d891d0815", "sighting_of_ref": "indicator--26edc1a6-1944-4a91-80cc-742f9b90b1f0", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f72f92f-8ee7-4c67-a955-0fce1649e930", "sighting_of_ref": "indicator--8cc388e2-ab1a-4b4e-9bdc-1af96ec24782", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1796203c-f0e1-4719-bc4c-608c1086a40e", "sighting_of_ref": "indicator--9b8c0fca-baab-4be3-8c28-c710ff7bda6a", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93f10415-bd1f-4de8-b240-8fb0a6bd309e", "sighting_of_ref": "indicator--739440b1-26ad-4499-b9df-eafdee3450be", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61d4b3bf-5984-4a47-af79-4e5d8c613cb5", "sighting_of_ref": "indicator--3742da97-3933-41b5-8613-25425e188ad7", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d23f30c2-183c-4574-acaf-116492038939", "sighting_of_ref": "indicator--d9da82a5-c8bd-428f-b086-a35bc36ec55e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6990b58a-26e7-4002-92b9-b6fb5a5a43cd", "sighting_of_ref": "indicator--e6e65af5-d891-4445-af93-3322e946ea35", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4c0b641-51d6-4df0-8e92-ef588e70ebd9", "sighting_of_ref": "indicator--d18eff8d-b979-4f5d-aedc-294fddca06f8", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61d9c5a4-5f8e-4a43-9d1e-fdfde44d9454", "sighting_of_ref": "indicator--8b00068c-2657-4276-8601-973fb80f1b90", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e36b954-3279-496c-a6da-78dac3a13c61", "sighting_of_ref": "indicator--60f982f3-7b47-458b-957b-c0393d87e726", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18f1f025-0dbd-447b-a33c-94d2f406e892", "sighting_of_ref": "indicator--b057a04f-aa65-4cf2-aebe-bdf7563c239e", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4be26540-3246-48dd-9107-ccd2dc3af737", "sighting_of_ref": "indicator--8a04c145-9a69-416f-96b7-96a14ea1bf40", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fad1ee0b-b5cc-464f-8bb2-ade878062ba5", "sighting_of_ref": "indicator--0dbcdd39-0c25-4d30-baf5-59fc632c13b8", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cacfb6a8-6b11-4dc4-bd8b-c568882b1c44", "sighting_of_ref": "indicator--33125a8f-2ee0-457d-827f-587765811d1a", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08e10dd1-0a27-4b7e-bc31-30d24efc3f3c", "sighting_of_ref": "indicator--2584eade-e174-4a6e-80e3-d566829c1ffa", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d4fadfc-3c99-451b-b0dc-2b630eaefa1a", "sighting_of_ref": "indicator--214ec7ec-89dc-4e50-ab3d-2e5dddbb1660", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad55fd03-4810-45cd-a2ba-f22ea01775ef", "sighting_of_ref": "indicator--5b8ca41e-294a-4e15-b473-f0e2e813f2c2", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--550301f4-0dbf-4c93-bff8-43895045dace", "sighting_of_ref": "indicator--8d9a25e2-0894-4eb7-839d-cc1652040ff6", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d26c5e4-e843-4283-8314-e1354e5e70c0", "sighting_of_ref": "indicator--132dc66f-2431-4b88-96fc-33f776dd3ec4", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a8120ab-6071-4e67-832d-8099f5f9dda4", "sighting_of_ref": "indicator--cffd9dde-d3dd-4cbe-97bf-9b5fa30ceb30", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1543555b-29dd-4e73-8a2a-5c53418fc2fc", "sighting_of_ref": "indicator--51958640-2aec-40b5-a9d5-11f6414e2a29", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac54af70-2954-4774-b247-c72ac13c3e4f", "sighting_of_ref": "indicator--a9995a9a-f497-44bd-bd63-8f5b3a4b12d1", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34929ad2-37e6-484a-af9f-52d381975fd5", "sighting_of_ref": "indicator--a9995a9a-f497-44bd-bd63-8f5b3a4b12d1", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20b16f9d-2137-43bc-ac48-caf13dc594c5", "sighting_of_ref": "indicator--d978b5ef-8196-4bf4-8315-6ba68d288e05", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ce38c8c-e461-468d-a714-101048f089b9", "sighting_of_ref": "indicator--8068aeb1-e606-4ef1-8bfe-5b5ef1685836", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5d7883c-e30e-4895-b618-3101a26eef33", "sighting_of_ref": "indicator--45967273-b8b2-4a8d-b550-df7014cb6365", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65478a4a-6f73-4e64-9f7b-38d483eb8c51", "sighting_of_ref": "indicator--f61b7208-86bc-4242-976b-d52e8c1bec01", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d909505c-9b0c-4f73-b729-c61c1bc57d8f", "sighting_of_ref": "indicator--f2b8ecc6-e592-4b8d-a7ec-90f8b09763a2", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--286d6c98-03dc-4bff-bab4-4aadcddc2ddd", "sighting_of_ref": "indicator--f2b8ecc6-e592-4b8d-a7ec-90f8b09763a2", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ebd389b-68c7-4d21-89dd-e72ffe454911", "sighting_of_ref": "indicator--ef9efdf9-7681-48a6-a1f7-ff5ab7253900", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93f7e27f-c0cf-4aa6-bfe2-74f06c12e14d", "sighting_of_ref": "indicator--e8134056-b9ba-4e3e-b247-37c440e30b92", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9035f9e9-9682-4303-b001-4004883e5002", "sighting_of_ref": "indicator--81e27f7c-d641-4283-a395-3bbaca99ecf7", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa13e784-9790-434b-8a80-10ef3009dcdb", "sighting_of_ref": "indicator--d311d960-da3f-4b9f-95df-4cde77d4ecdf", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8265c321-071f-46e2-89b6-0cb7e1ddfb40", "sighting_of_ref": "indicator--8385d6fd-2e95-4046-8140-d05b5a24c0f1", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8b7d752-c336-43e5-bd92-42b7aab7d3d0", "sighting_of_ref": "indicator--3cb9f572-ba17-45bb-bb26-fac3d4d37df0", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f55baab-b4d4-41f1-bee6-57bb79f6472c", "sighting_of_ref": "indicator--7b266917-b1e3-4edf-a0a4-c655482bc34d", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24e2e136-c2a2-407d-b120-5e3ba6ca5675", "sighting_of_ref": "indicator--09822f8d-6ad3-4d29-a3ad-f89ee6130bf2", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec1fc911-099d-48b9-93be-e027607851ee", "sighting_of_ref": "indicator--ff04d79a-d305-4e53-83b0-b8397d8b3915", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4970efea-864c-4e67-98b6-a101559bb576", "sighting_of_ref": "indicator--7363f8b7-9884-4e16-bb2f-c972bf8b845d", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--639ee07e-49d8-42d6-a623-346f90bf5af5", "sighting_of_ref": "indicator--5dc6ba87-01f5-473d-aad6-4cb5621fb2fd", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d06d56c-5b21-45ba-bd47-380f127c315d", "sighting_of_ref": "indicator--069a6127-0ec7-4e84-a2f1-bd920d0baafe", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03c8df24-e4ab-48fd-8959-40b39e7709a3", "sighting_of_ref": "indicator--5f39be09-737c-4967-b71e-1c41c704b808", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc81d959-090c-491b-8412-8a764ea3d341", "sighting_of_ref": "indicator--f9acd7f8-fc67-48ac-b4eb-f1c0c8a9c6de", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--326d0c76-e6d0-43fc-8eea-7352e9e995b3", "sighting_of_ref": "indicator--96d57ae1-03ac-4f95-aa5a-a5b607343ef0", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--112b0d7a-fde7-4e81-a3cd-3f76f846ccf8", "sighting_of_ref": "indicator--2f4a0181-b5d4-4123-a4dc-c72b23dfd7c9", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a9545ea-4eeb-4ab3-9fea-afd76036714c", "sighting_of_ref": "indicator--3e648738-5270-45e3-b5f6-8061ba9f9df0", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b61a9ae-51b9-4702-9d30-c4c2524c5a93", "sighting_of_ref": "indicator--2340be34-d34b-47e9-bb4a-11aac16763ba", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b63724fc-a693-4701-b419-4f5a042a4f01", "sighting_of_ref": "indicator--d207f260-07bb-4e9b-a159-8464358be7c8", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbd79172-82f3-4638-811f-7030a85793b4", "sighting_of_ref": "indicator--588eb7aa-3e4d-41c5-af94-1d5a348bac04", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0eac7280-eaab-447b-b808-1f2fabd6cae2", "sighting_of_ref": "indicator--ef50ee6b-5854-4563-b633-a81548746ccc", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70a07d5d-7ad0-4957-8a12-c2282d9e6b24", "sighting_of_ref": "indicator--196ba061-fe13-459f-acf0-7ac4002dfe5f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7282bfb2-40a3-41d1-bc09-34cb4955a92b", "sighting_of_ref": "indicator--24e24c37-ad22-46dc-bc55-54b8ff661120", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8020832d-630b-41b8-8356-72b9d46502f2", "sighting_of_ref": "indicator--36a87803-ad08-47f9-816f-5a06f9236b38", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--423fa3a8-372b-4062-a8ee-c10b1ae04ef3", "sighting_of_ref": "indicator--8e5750ec-31c2-4e96-9544-95278590e8b1", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5b30321-f1d6-452a-a93e-8d4ead2aa12e", "sighting_of_ref": "indicator--13a61b3d-f1b0-46a9-8ac1-89215760f05e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbab47cf-9b87-476d-8b27-16218a96ba5b", "sighting_of_ref": "indicator--571c4b30-370e-4772-9191-bedbe9824301", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3684007-0eb5-4934-9d3e-764231c703c6", "sighting_of_ref": "indicator--75bfa908-f5ce-4ef9-be4a-edefeda4bf3a", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65997be9-0f4f-49aa-88c6-35ec696a8b7c", "sighting_of_ref": "indicator--75bfa908-f5ce-4ef9-be4a-edefeda4bf3a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cea29440-fa92-4482-a665-96e4d7f3dd09", "sighting_of_ref": "indicator--5c6ae41a-127a-46e3-bca5-6b12cf838ff0", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32ebd02f-9b00-475d-b657-91accd79ebc7", "sighting_of_ref": "indicator--5c6ae41a-127a-46e3-bca5-6b12cf838ff0", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acf7ca45-b6f2-4a0b-aa7f-697d1233c8d8", "sighting_of_ref": "indicator--4819af1b-b3ff-437b-b01b-f1ed1194619d", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3248b23-511b-4abf-8890-c920ad233843", "sighting_of_ref": "indicator--4819af1b-b3ff-437b-b01b-f1ed1194619d", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--486e8707-d613-4b76-a765-4786ccd8130b", "sighting_of_ref": "indicator--5e281cca-9aba-49e5-8cd8-0d6c3a915329", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bd63b9e-cd4b-4c96-bd14-90924d0ea7ae", "sighting_of_ref": "indicator--5e281cca-9aba-49e5-8cd8-0d6c3a915329", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58d30c5f-a48a-43a9-8170-2f90c82c64f0", "sighting_of_ref": "indicator--39740ce1-0f40-4239-8fb1-bdb99654e553", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72c1028a-a1ce-43ce-bfd8-33b482927f5b", "sighting_of_ref": "indicator--39740ce1-0f40-4239-8fb1-bdb99654e553", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01e7d03b-e3d4-4aa4-9fd6-871fade76077", "sighting_of_ref": "indicator--316e1ee8-8bd6-459e-8a1a-6efb8a890c73", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--454340fa-2698-40bf-bd9b-be12b37f3421", "sighting_of_ref": "indicator--5838b2b4-83b6-40d5-8af5-ebba443751fb", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e699cfa-a43a-4fa4-b3ff-029accf76537", "sighting_of_ref": "indicator--5838b2b4-83b6-40d5-8af5-ebba443751fb", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9514af7-f409-4ddc-8253-29d35c6cfe26", "sighting_of_ref": "indicator--f2cfcbcf-abf2-4a45-8032-a3ac2b2e63c5", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8bd4bf8-5f4d-4632-b612-f593ce32c656", "sighting_of_ref": "indicator--f2cfcbcf-abf2-4a45-8032-a3ac2b2e63c5", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5264ba8b-b21e-4ce8-b780-5acd3aa1f4a9", "sighting_of_ref": "indicator--582bbe60-6755-4c50-be59-59d77d13d502", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06d938e9-eb49-420a-9cb4-59f467ae3931", "sighting_of_ref": "indicator--582bbe60-6755-4c50-be59-59d77d13d502", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--787679cd-b927-4164-b3ed-0778a77aa4cb", "sighting_of_ref": "indicator--582bbe60-6755-4c50-be59-59d77d13d502", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e90ba955-c791-4a34-83ad-850815aceb92", "sighting_of_ref": "indicator--d03dce27-e6dc-4218-b8d0-7744a70d3119", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83db2e3c-342a-44c8-b737-2db9ee6240d7", "sighting_of_ref": "indicator--4aae07c8-abb8-4269-8da5-72b09ad17714", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df9ccda8-bd47-4587-854b-005304530dfc", "sighting_of_ref": "indicator--4aae07c8-abb8-4269-8da5-72b09ad17714", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0a1e3dc-fff3-4129-af4c-0d1287df72cd", "sighting_of_ref": "indicator--0def64d0-8b24-46f2-aa62-c27b78667417", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a95b727-ac9b-4a5f-8e0c-8074610a789d", "sighting_of_ref": "indicator--1479f3e8-47ac-4887-b3a4-2b182a81e885", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--656211ca-8e13-4f17-95e5-2fdb3f9a58a8", "sighting_of_ref": "indicator--eded5cb2-f5d4-458f-b863-fe3c055f8ddc", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a779e4e-9838-426e-9b38-f5c66ecbbbe6", "sighting_of_ref": "indicator--eded5cb2-f5d4-458f-b863-fe3c055f8ddc", "where_sighted_refs": ["location--cc47317e-2c18-43a6-8938-dea748a56ad5"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9de5c621-7813-4a28-8dd7-9e7a8b305cd8", "sighting_of_ref": "indicator--ff63a3bb-7331-463b-b94e-63f68cb92b1b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7615e637-092a-4438-ad8f-2c95322e9ab9", "sighting_of_ref": "indicator--3834749d-bd3a-442e-ab52-b522f9ab2180", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b1953ed-b537-40aa-92ce-fb1eda56b78c", "sighting_of_ref": "indicator--7a6a1ee5-8f98-416f-987b-45ab6c673d29", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16af158e-6e86-41d0-b005-2fcbc16e96ef", "sighting_of_ref": "indicator--7a6a1ee5-8f98-416f-987b-45ab6c673d29", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5808c4a1-2a7f-4c2a-b4e1-1a6a0917602a", "sighting_of_ref": "indicator--9fbb240b-b997-4a55-a58e-f00c7c3354b4", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96bdac99-0e9b-45b9-bca1-4d8d7565115d", "sighting_of_ref": "indicator--9fbb240b-b997-4a55-a58e-f00c7c3354b4", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07b6b3d6-d4e5-426f-bbaf-675717203cf8", "sighting_of_ref": "indicator--7b2ec929-75fd-489f-8dd6-6cfa7a66fbc9", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55254f76-49aa-4b3b-9408-ac6cb78dd5e9", "sighting_of_ref": "indicator--7b2ec929-75fd-489f-8dd6-6cfa7a66fbc9", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e90b18c2-1984-4925-be5a-4f15e8f9cf98", "sighting_of_ref": "indicator--7b2ec929-75fd-489f-8dd6-6cfa7a66fbc9", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf282afe-6cee-49de-81b2-ed629bbdf4cc", "sighting_of_ref": "indicator--74e128fc-6dcf-47bd-80bb-118560cdcfa2", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cdfe559-826b-4b95-8bf1-a19597e607ee", "sighting_of_ref": "indicator--8f34ff2f-08bf-40f5-bd86-28cce886f7bd", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6b21094-2548-42fe-88ac-93d7d6a54062", "sighting_of_ref": "indicator--26fcac20-d9a8-4b4c-b8e8-e36d4d0a9013", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fb3be06-aef2-4b4e-a724-9db9dadcafdc", "sighting_of_ref": "indicator--ea407b79-9741-4f23-8665-89b791482bf0", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53e9f0a8-515c-4fe2-8076-bd788c42e0af", "sighting_of_ref": "indicator--ea407b79-9741-4f23-8665-89b791482bf0", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dc0728c-65df-4919-9d82-81abce569b0c", "sighting_of_ref": "indicator--035ce2b5-c482-433e-bb71-4a828150342f", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39cb38d9-7584-4089-8ffc-19a3f166e47d", "sighting_of_ref": "indicator--035ce2b5-c482-433e-bb71-4a828150342f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ee6d916-6507-467d-b9be-98a5bd5d5f65", "sighting_of_ref": "indicator--3e44dc48-db3e-4069-aea8-6be10e6740c1", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64c9754c-93d0-4328-897d-f26cce0b1f1d", "sighting_of_ref": "indicator--fc07dcc4-6fbe-4ec8-9ee6-574f75f2084f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aebda7c9-f529-4847-9678-5cb2ede8640f", "sighting_of_ref": "indicator--fc07dcc4-6fbe-4ec8-9ee6-574f75f2084f", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc6823b7-d795-495d-bc0a-4403e5a0c143", "sighting_of_ref": "indicator--7e5df142-f14c-4c05-83e4-f8f012c08550", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0ecbc49-6a05-437d-8841-4a72ca256867", "sighting_of_ref": "indicator--7e5df142-f14c-4c05-83e4-f8f012c08550", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--605c4089-78c5-4a6e-98e4-2758717f25d7", "sighting_of_ref": "indicator--7d54046b-53be-4824-ac9a-84ead50cefc1", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a45ef3e3-f68b-4fd7-a592-b6aa0ab5e88f", "sighting_of_ref": "indicator--7d54046b-53be-4824-ac9a-84ead50cefc1", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c59b342-1505-4123-a23f-097e177657ad", "sighting_of_ref": "indicator--ad1e45d7-9c50-41fb-ab71-95b172ea0dd9", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05a39f0b-4fda-41ef-bf6f-04fdfdf938d7", "sighting_of_ref": "indicator--6a387ca0-6aba-45c5-81da-1198e849f60e", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28658452-99a2-490b-8976-ede6ef9c9931", "sighting_of_ref": "indicator--8da85945-8c49-4f1f-9f71-f718d8297c95", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdfa8522-3054-45ab-a6a8-068ef812b85d", "sighting_of_ref": "indicator--10b1fef9-b762-4090-8c28-39c5871f7bac", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3982ec50-eea4-4cd3-9b50-badf5732386b", "sighting_of_ref": "indicator--d185e457-4d20-4e2e-bfea-eac391be075f", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0a0bfb9-01ef-410e-8873-3c393a9980db", "sighting_of_ref": "indicator--30bb98e7-6da9-4168-8b3c-b3a9a0b4cfa4", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eaef1eca-f6aa-407c-8c6c-88006a6c04f8", "sighting_of_ref": "indicator--30bb98e7-6da9-4168-8b3c-b3a9a0b4cfa4", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d6c34df-d07e-4504-bae8-1a24b85a31c5", "sighting_of_ref": "indicator--30bb98e7-6da9-4168-8b3c-b3a9a0b4cfa4", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--deb10832-5e96-4369-8b85-7670e7104caa", "sighting_of_ref": "indicator--fcea57be-6d2f-4dbc-9ab7-1a202f14054b", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--636c3081-f4ce-4098-834c-1743815d16da", "sighting_of_ref": "indicator--fcea57be-6d2f-4dbc-9ab7-1a202f14054b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e47a4deb-a1a9-4bd4-8711-b784da4fac39", "sighting_of_ref": "indicator--fcea57be-6d2f-4dbc-9ab7-1a202f14054b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a76b280a-00d8-49a3-b8f7-e54f447cf97b", "sighting_of_ref": "indicator--71432531-ffc2-42ba-b601-42f51cd8cfa6", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--157abaa0-6ac8-4d53-9dad-af7014ebd9ed", "sighting_of_ref": "indicator--0d1f066c-8014-4ab8-b8b8-3957e45d640d", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30333db8-961c-450a-a968-b6fa3a905b63", "sighting_of_ref": "indicator--b50675fb-38f7-40f0-a221-86a203b4d46b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f208f73-c9e1-41e0-b6b8-fec9c4e16577", "sighting_of_ref": "indicator--ac6fb212-e667-4c05-87c5-b701a2563237", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6661a1c4-f1dc-4e27-aa1c-c3987e620095", "sighting_of_ref": "indicator--81875b2b-1aea-487e-af74-997a6b3008a4", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--068ec153-0274-43c7-803f-d93e4f2e13ca", "sighting_of_ref": "indicator--37500266-8052-4ace-9d12-83bd4179d9ee", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c29b1606-8047-46c0-af20-92c5d9905320", "sighting_of_ref": "indicator--faf94c5d-4e36-49a3-96f4-6fa1e6484abf", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3d38d40-d568-44f4-89b7-43a96256c5c9", "sighting_of_ref": "indicator--d7bd9d54-9258-4a37-a969-fea46b93f8a0", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53449d56-6a6b-406a-8216-5e9a018e4d3a", "sighting_of_ref": "indicator--9902771b-fa6f-4fb1-8593-66db6d3cad84", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a556158-94a1-4496-b103-a4e11e4744d2", "sighting_of_ref": "indicator--d1822f5b-7343-4332-b944-de40ab10536d", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf5e58b5-83f0-4bd0-89d6-7756682ce79f", "sighting_of_ref": "indicator--e1b3806b-4600-4c0d-b98d-354065284467", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0e1964e-3c63-44a5-8d4c-ce6b924f1d2a", "sighting_of_ref": "indicator--4347049e-12ad-4e54-951f-adfbafee583d", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49ab303f-31c9-4363-af2f-9732a273f4ba", "sighting_of_ref": "indicator--ee6398f3-6968-4f71-b875-d4b5d047c050", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--073f6048-58fd-4cd4-bf3e-ee54d1be9ffe", "sighting_of_ref": "indicator--ee6398f3-6968-4f71-b875-d4b5d047c050", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c64cde4-4b95-4254-8666-3908824b57ad", "sighting_of_ref": "indicator--00d7d009-146c-4c81-ae85-9bf16d914a9e", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d08d919b-104d-428c-8aa1-8c28ab19e5fd", "sighting_of_ref": "indicator--00d7d009-146c-4c81-ae85-9bf16d914a9e", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--828ffc4e-8787-47f8-8fe2-4f976ad2b240", "sighting_of_ref": "indicator--8c677ad4-a49c-4ce1-809a-1bec8f803f4a", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ab3ce2e-2fe1-4fd4-ba90-0f36c33e491d", "sighting_of_ref": "indicator--3eeaecb1-345b-4a06-8208-580a5438d650", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61ab6e9a-fd08-402c-8a1c-a58a55edae3e", "sighting_of_ref": "indicator--3eeaecb1-345b-4a06-8208-580a5438d650", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b232e5a-3c9c-43d9-88f8-15fb8b4ece8b", "sighting_of_ref": "indicator--b422d5c1-b241-4a4a-8de2-10b5be282302", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db992a6b-9162-4b62-9a44-5d91626f2968", "sighting_of_ref": "indicator--dda55a02-3499-45b5-b7d9-e244a620915d", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f5081bf-d2a1-44cc-84bf-c8371258e60d", "sighting_of_ref": "indicator--0fb172fc-9a64-48bd-9983-ee12ac341afb", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edd00bc6-3e61-4c9b-883b-acd12df7a824", "sighting_of_ref": "indicator--32ecf690-68b7-45b5-8f92-f6e3d3068864", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8653d55e-a49d-419d-84bb-5c667ad939ec", "sighting_of_ref": "indicator--3dd36156-32d5-4d4c-b7c6-a92df4ec4d4e", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e383c45-63ff-4f26-8cac-705d10e555f9", "sighting_of_ref": "indicator--7be817c4-675f-4299-8153-c623fe5d7b66", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b53ec7e6-56e9-4176-8ef6-cc6e2a607569", "sighting_of_ref": "indicator--7be817c4-675f-4299-8153-c623fe5d7b66", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9db0a6c3-29cd-44fb-ab0d-f696f05e9857", "sighting_of_ref": "indicator--022d046e-0c3e-4413-9194-5f5dab15feca", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79b13a3f-8c78-4354-bb3d-08a75742a2f4", "sighting_of_ref": "indicator--1dc796cd-3334-43fa-b495-855a7f7fef4e", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a3758ea-5cfd-4ebc-a6f2-e673397fbf12", "sighting_of_ref": "indicator--7ca85ccc-6156-4f80-8c78-53233512f4d0", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a6b637c-ca20-4e47-89ce-76fce133151b", "sighting_of_ref": "indicator--3e1a46bc-5468-4f7f-b29d-525eae897ce1", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c1818bd-5d8b-4f36-b3c6-2e9a72ff634f", "sighting_of_ref": "indicator--d644e04b-cb4f-4cb3-92c2-55257dffacec", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d4e503c-634c-44a6-8836-49c17dafc7a0", "sighting_of_ref": "indicator--58fca2ff-f687-4383-8f23-360c31a3d5bc", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee50625e-5026-441a-a03e-ed5c41bdd02c", "sighting_of_ref": "indicator--58fca2ff-f687-4383-8f23-360c31a3d5bc", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ecf0a48-0c00-497f-823f-73b0d890c74e", "sighting_of_ref": "indicator--f54d8218-361d-45e4-865b-831c7656a2fa", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a87cf79-feec-4e71-a9ed-e7fc4d8fe57e", "sighting_of_ref": "indicator--1e71589a-ede1-4cec-989b-0411e1cbd5b0", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cff23a47-45dd-4403-ab6d-108c12a7d884", "sighting_of_ref": "indicator--9058212e-8eba-4b94-9d1c-effebea8d9ff", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f338af2-81dd-4bc4-80de-f21b8bf9d4df", "sighting_of_ref": "indicator--9058212e-8eba-4b94-9d1c-effebea8d9ff", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a788e5db-46cc-4458-8b00-7c02e0bc44bf", "sighting_of_ref": "indicator--d7c00916-9fd2-4284-ae2b-0d35de24594f", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b8f3b5f-de0e-467f-b5ec-4ab61d5403dc", "sighting_of_ref": "indicator--d7c00916-9fd2-4284-ae2b-0d35de24594f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66b1a872-a329-4b0d-9318-b4f59a4f77b0", "sighting_of_ref": "indicator--eb79cd07-a7cc-4ece-901d-38479665cddf", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05b24165-c96f-407d-be40-fb4039569536", "sighting_of_ref": "indicator--134a313a-fe48-4d58-b551-bdf5b0004caf", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecc18b15-d31b-4366-8d25-18ab9eefcb2b", "sighting_of_ref": "indicator--134a313a-fe48-4d58-b551-bdf5b0004caf", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a314514a-6712-42b4-8802-e404a076d4dd", "sighting_of_ref": "indicator--134a313a-fe48-4d58-b551-bdf5b0004caf", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fd16304-83ba-449d-990a-5a5ccf39d4e5", "sighting_of_ref": "indicator--a1dc4e61-3d19-409f-8b13-b32ff6db41c7", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3420d3d6-3441-4970-a93e-b5d45143c389", "sighting_of_ref": "indicator--a9838eb0-0ce4-4b12-9751-1bffd0269328", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de2df29b-2ccc-42af-b7fa-4eee550154f6", "sighting_of_ref": "indicator--a9838eb0-0ce4-4b12-9751-1bffd0269328", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74c1511d-0c98-4eff-8363-c5dde77a62e3", "sighting_of_ref": "indicator--b9d3ce99-561f-4a27-90c9-0474cb01c1bf", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a1c8cc0-be84-460a-bc8a-833d38dbebed", "sighting_of_ref": "indicator--0bfd85bc-1041-4199-82d3-77403f448342", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5bc6a2d-4526-4482-9506-2a3ee3558024", "sighting_of_ref": "indicator--edbcede3-07ac-459a-bc74-65297a20b411", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--199accbf-b251-47f9-8483-be18ea48357b", "sighting_of_ref": "indicator--2ff4d6c4-1898-45fc-a125-41c3aac4b162", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee644986-002c-4001-866a-1b6d27c474e5", "sighting_of_ref": "indicator--2ff4d6c4-1898-45fc-a125-41c3aac4b162", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3de09e7-83a4-44d5-91b9-eb21a5e43499", "sighting_of_ref": "indicator--024403d7-a216-43d1-a641-026515cd620f", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--499f0799-ed80-4491-852e-d65ad8e34401", "sighting_of_ref": "indicator--024403d7-a216-43d1-a641-026515cd620f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df8aa474-570c-4921-bf87-85fdf62d95de", "sighting_of_ref": "indicator--63fd43c4-0606-4ad2-b0cb-a1fd356d7fe6", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d6cc81a-fc09-4715-93a2-d33586ca279c", "sighting_of_ref": "indicator--2619c235-8eb8-44d7-8f71-a1a1c95d613a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c82a076-8ec7-4a5f-8d36-2d5c2edebe2b", "sighting_of_ref": "indicator--d361d397-cf4d-4c6f-a854-e2acf082c87d", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15b6a790-c7f1-48be-8d20-20bcf41b10a1", "sighting_of_ref": "indicator--a8cc71d5-e945-451d-9719-34358dac7c31", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b74f86fc-572d-47dd-92d9-643ebcb7934a", "sighting_of_ref": "indicator--a3c8086a-029a-4133-85f6-2e5f85e8b6a3", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5978d446-d502-490a-9f12-44293e2a8f07", "sighting_of_ref": "indicator--0c80d658-7120-4f2d-b963-95fb87919a42", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1aac0830-67a4-4e70-b75b-903cc430e079", "sighting_of_ref": "indicator--27696aff-1f31-4cb8-af34-81f3e8536924", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--840b6efe-284b-4dc5-85b4-54fb22510f34", "sighting_of_ref": "indicator--d20ee372-6ae7-4d23-b421-83c97a6402b6", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16e2489a-dde6-46bd-98e7-f9088fbd272c", "sighting_of_ref": "indicator--46e2dc3d-a626-40a9-87f8-00dbf8f73e1a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e038f753-c11c-462c-8fa5-acba74b6c88d", "sighting_of_ref": "indicator--05e03a52-025d-4ebd-954d-6024cdf25059", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f487b23-0f61-4724-868b-c88993905f2b", "sighting_of_ref": "indicator--55335e4e-232c-4c85-9d92-03dc64ba0cf9", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29a9e554-31e3-4d65-b4c6-a59b292dc99f", "sighting_of_ref": "indicator--ce4303b9-5646-4c95-bfb8-1504f3fd0505", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4419e254-76b3-49c7-8846-fe78f22e36a6", "sighting_of_ref": "indicator--cd6a5780-eabe-4b5c-a2c8-9f3388eff868", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a445f97a-88bb-44e8-a23c-4c2cc9cd3da6", "sighting_of_ref": "indicator--cd6a5780-eabe-4b5c-a2c8-9f3388eff868", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--524c8baf-c6b6-4f7c-b7dc-409c5684032d", "sighting_of_ref": "indicator--cd6a5780-eabe-4b5c-a2c8-9f3388eff868", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b48856a-4753-42ec-a19f-1192f48f38b2", "sighting_of_ref": "indicator--a661be81-12ff-40c4-80f2-fda278a10ddf", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18423d49-2ee9-4777-9447-5da92b429397", "sighting_of_ref": "indicator--a72a26e1-0667-4e9c-be98-df0ab6e3ff53", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d25e6fc-c8d4-4475-a48e-9a704d11b6e1", "sighting_of_ref": "indicator--649ff0a0-2294-4dc7-b34d-0d562fbf6242", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8242ddb-3152-4b95-8d1a-8e1d9cfd6f59", "sighting_of_ref": "indicator--1480fffd-223b-4f04-81cb-fe8d241fc687", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67f14200-ca3c-4f81-9638-7bf90400b678", "sighting_of_ref": "indicator--3cc2d7c4-8ad5-409c-b921-9dcffd915d09", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f132527-e896-4121-8653-e10d9bfe81d0", "sighting_of_ref": "indicator--43210ff9-6f8b-4869-b65e-acc09f309fdb", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1ebdeb4-278e-4246-90df-a108f313ac50", "sighting_of_ref": "indicator--43210ff9-6f8b-4869-b65e-acc09f309fdb", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--446d5b05-d954-4d09-9c70-01f3b988eb60", "sighting_of_ref": "indicator--18d6c0c2-fe64-4a36-8db9-daf52ead1598", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--815009a1-7ac5-405e-bf18-3660bbf85bb4", "sighting_of_ref": "indicator--eb347dac-bf3d-41fc-88e0-cab001f2b643", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e80963c-f9ee-46fe-a6b4-4b821012a1b3", "sighting_of_ref": "indicator--67b1f3f1-5eb4-411e-8eb5-a3cf82f4a9db", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea54662b-f99f-44a9-ae35-e2421b91f2c4", "sighting_of_ref": "indicator--67b1f3f1-5eb4-411e-8eb5-a3cf82f4a9db", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4efe35fc-dab6-4157-b174-72f6070bdd18", "sighting_of_ref": "indicator--e7f33ad4-ddab-47c1-8c26-59b011ec4ec2", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a07cb631-257e-4d45-a45c-2fcfea6989f1", "sighting_of_ref": "indicator--6bb2bbe6-842c-4447-8be4-760ae8ef96d6", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--091643a6-37cd-416b-a7b6-b298955e2d0b", "sighting_of_ref": "indicator--b9272478-4bd4-4a19-baa7-c47a19d20411", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7a455d0-f3a8-45de-bda7-e202d5f14e22", "sighting_of_ref": "indicator--0579f89f-2468-42a4-8f20-59db5715467c", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce622d8b-27ee-4ea6-8c65-50bf6a779d3d", "sighting_of_ref": "indicator--d9b19e74-94b3-4fb5-844c-81a008d13136", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87097bfc-e878-4d40-8a41-3cdf25dcbe5d", "sighting_of_ref": "indicator--10b81bc1-dfda-4d4c-bb9c-fd5c95e44506", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--372767d5-9478-42e9-b682-fd590c2cf3fa", "sighting_of_ref": "indicator--10b81bc1-dfda-4d4c-bb9c-fd5c95e44506", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bad534da-2b88-404a-8db6-54da8c19f1f9", "sighting_of_ref": "indicator--25a3e2d8-e6c8-4be7-b464-f282e85b62bc", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c30cf73-9ada-4f05-a74b-fb7ed9b186fa", "sighting_of_ref": "indicator--83d39a27-b4cb-4289-bd09-b9d8d9e56c2c", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7490df7b-2e5a-4134-ae46-2de1faea9055", "sighting_of_ref": "indicator--0551bbc1-4492-4669-a814-be5928c48e07", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c1e8a16-e465-4cba-92cf-48ced01272fa", "sighting_of_ref": "indicator--6c875713-4c01-4804-a694-dd4b5f56f8b9", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1aeeb4c9-186e-4f73-82f7-7c2d9d2e1acf", "sighting_of_ref": "indicator--d33e91b3-51cf-432c-bf3d-7e8cb4301435", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a89dd41-3163-43a7-a2d0-2bc07b9f927b", "sighting_of_ref": "indicator--570b8c02-97d8-43a2-b01b-9b6a2755cfa5", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34fc502a-9b0a-4402-ad36-2769a2533eaa", "sighting_of_ref": "indicator--15f955df-1b4b-4c44-97b1-5bc7d78a604c", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba08606b-6f15-41b0-b1b1-a5ddfa6c7487", "sighting_of_ref": "indicator--2de9662c-17f0-4dd9-8aab-43b0e35c7e6c", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e7eb5ac-45b5-4477-9924-5b74216b9645", "sighting_of_ref": "indicator--43551a55-b06e-4268-b9d0-dd915f506d16", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--479c1fb4-4478-4383-b55a-e68069db8dd2", "sighting_of_ref": "indicator--43551a55-b06e-4268-b9d0-dd915f506d16", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84240f08-c75c-488f-9e31-7a76a073b10f", "sighting_of_ref": "indicator--64f29309-50ba-411d-8a87-a59ba910d96a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c81fcac3-5790-4627-90c7-0b134b5e8d26", "sighting_of_ref": "indicator--3f2b4415-f4d2-42fa-8df0-eac13288a8b9", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14ee28e7-dc1c-458e-ad13-36f548a9603f", "sighting_of_ref": "indicator--3f2b4415-f4d2-42fa-8df0-eac13288a8b9", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e54e0676-700f-402c-abff-805a04cd6272", "sighting_of_ref": "indicator--3f2b4415-f4d2-42fa-8df0-eac13288a8b9", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc9d891d-d43e-41c2-bd7f-a1bf600e6f62", "sighting_of_ref": "indicator--fc2ec6aa-f289-4106-8b87-b8db15f56b47", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adb0fca5-3188-4c2e-908e-b605d3e90147", "sighting_of_ref": "indicator--c06e8be5-a6cb-4a38-96a8-83d5321dab7f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--126fc444-1739-4899-beb9-b149bca01d3f", "sighting_of_ref": "indicator--c06e8be5-a6cb-4a38-96a8-83d5321dab7f", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fc1cd93-9627-4f33-865a-0c11de59d10a", "sighting_of_ref": "indicator--c06e8be5-a6cb-4a38-96a8-83d5321dab7f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0441ac2f-a589-4cca-bb80-f0613fc9c1be", "sighting_of_ref": "indicator--2ce03d52-c0ef-4f24-88e8-e1439da144fc", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec4f012a-8982-493a-848f-be9bda9438ae", "sighting_of_ref": "indicator--2ce03d52-c0ef-4f24-88e8-e1439da144fc", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be329938-0d1a-4d2d-9094-7c2a03ecf0b6", "sighting_of_ref": "indicator--2ce03d52-c0ef-4f24-88e8-e1439da144fc", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc813c68-d75c-48ba-98c7-e277aff08c62", "sighting_of_ref": "indicator--c3cf6d80-c7bc-4440-ac63-0552c59743d1", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffd236a6-485d-4fa3-953a-97edcb8967dd", "sighting_of_ref": "indicator--c3cf6d80-c7bc-4440-ac63-0552c59743d1", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efe069ef-ebee-4f18-8a60-208de65d2d69", "sighting_of_ref": "indicator--bac7fe7a-9039-4131-bad4-c0dbba70e000", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a161ede-8083-4123-b7e7-90c8a4842568", "sighting_of_ref": "indicator--e60ce254-06bf-4629-a57e-081f79170a06", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebc6c818-da2c-4220-9d83-877144425e91", "sighting_of_ref": "indicator--7498641c-39a4-4b93-94b1-2e111fed2c7b", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--275b3803-6d54-47eb-8dc7-c60b7a62fe3d", "sighting_of_ref": "indicator--7498641c-39a4-4b93-94b1-2e111fed2c7b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e69c32da-1c28-4c13-ab7a-8ddbd6c2c612", "sighting_of_ref": "indicator--7498641c-39a4-4b93-94b1-2e111fed2c7b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d318bea-5372-4b68-9ce8-6a304bc0c32c", "sighting_of_ref": "indicator--d1ccc037-98ae-48a1-9941-24652507b98e", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f734199c-82de-44e9-80c1-228fffc756e9", "sighting_of_ref": "indicator--d1ccc037-98ae-48a1-9941-24652507b98e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26f10d56-a94a-4ed3-8bea-c347308d1011", "sighting_of_ref": "indicator--bb9eac48-d102-42fd-8563-7f83d9fa57ea", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8aec253f-351e-4d6d-8c76-c9ee33db2be3", "sighting_of_ref": "indicator--753c8a22-e29c-402c-8f88-29bd4cc727e8", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2beae9ad-f997-4f2e-b611-511cf12c014f", "sighting_of_ref": "indicator--753c8a22-e29c-402c-8f88-29bd4cc727e8", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78ef0016-0ecb-4cfa-b952-db6ddb1958f1", "sighting_of_ref": "indicator--75ee7857-95fd-4f03-8d12-9c5b5d6120f4", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e1116c3-a12e-4946-97d7-33f66d762603", "sighting_of_ref": "indicator--75ee7857-95fd-4f03-8d12-9c5b5d6120f4", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--356d1a16-b8ac-4098-b4f4-71e39894fa8b", "sighting_of_ref": "indicator--058f5b54-7127-49c4-81e6-2e5c209a0528", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56031ba9-672e-432a-a798-2bfce4080a36", "sighting_of_ref": "indicator--058f5b54-7127-49c4-81e6-2e5c209a0528", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a244027b-8752-4bac-a6d7-7fcafe3d80ef", "sighting_of_ref": "indicator--81a5b85e-feac-4be7-a334-4240b537a4cb", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e5c599e-5b41-46a6-9c67-e60d0dd9b76f", "sighting_of_ref": "indicator--81a5b85e-feac-4be7-a334-4240b537a4cb", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1015c4b-8ed4-4410-87ff-4332c3346979", "sighting_of_ref": "indicator--81a5b85e-feac-4be7-a334-4240b537a4cb", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d02c463f-89aa-4206-824f-1007c0649232", "sighting_of_ref": "indicator--efe29767-73a1-4563-b884-8ddc7c3e0e9b", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d9b2a10-f78c-4638-b40e-20c8e3f22afa", "sighting_of_ref": "indicator--efe29767-73a1-4563-b884-8ddc7c3e0e9b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0599eec-00b8-4b40-b553-7ab30858d3b3", "sighting_of_ref": "indicator--efe29767-73a1-4563-b884-8ddc7c3e0e9b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d58e3c7e-f3c1-4835-b0c9-51d7589e6594", "sighting_of_ref": "indicator--c001e361-fe82-4596-b0c7-92a31b9adf56", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--257258cc-9580-41d7-a158-9bfcde5b9c02", "sighting_of_ref": "indicator--f9b0acd5-08c7-4bca-8884-3af909741898", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95b0e112-fbaa-492a-abeb-d7d4270b75fb", "sighting_of_ref": "indicator--f9b0acd5-08c7-4bca-8884-3af909741898", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b22ab93c-ff66-40f3-ab24-9f7460f2bbad", "sighting_of_ref": "indicator--f9b0acd5-08c7-4bca-8884-3af909741898", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4f60f87-d1ed-46aa-9bff-2a717f4a29b7", "sighting_of_ref": "indicator--d0936c10-285b-4378-a90b-542b6c417d64", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d10469d-8bf5-469e-bc36-79d8088fa138", "sighting_of_ref": "indicator--5293822d-4b51-44c7-a577-2b550011a55b", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61f07b14-abeb-4280-a2bb-40b8cfe0386c", "sighting_of_ref": "indicator--e8d9ed24-8fde-43b2-842f-4678802a370c", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--163c58fb-1dc6-4359-af9b-a46a933fdfbb", "sighting_of_ref": "indicator--e8d9ed24-8fde-43b2-842f-4678802a370c", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f37cb1bf-070b-43b1-8466-961af9095f45", "sighting_of_ref": "indicator--e8d9ed24-8fde-43b2-842f-4678802a370c", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--422df4d8-1231-4ba1-9480-ad3c53dcf85d", "sighting_of_ref": "indicator--ab24dec3-3918-45d8-ac5d-e35f29b09f2c", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d059a23-e630-4320-ac55-ce63e2c2cfb1", "sighting_of_ref": "indicator--92b97ef9-7bec-4626-91fd-bef01ba975bf", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3334914-cd23-4419-9574-04604e8a2e8f", "sighting_of_ref": "indicator--92b97ef9-7bec-4626-91fd-bef01ba975bf", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a99014a-dcdb-4653-8ba4-b4f0bc4d864c", "sighting_of_ref": "indicator--294574d5-8d34-46e8-bdc9-e960f76a5e88", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f87179bb-d6fc-44bf-bbb0-05b20d752c45", "sighting_of_ref": "indicator--294574d5-8d34-46e8-bdc9-e960f76a5e88", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5eba7945-6b95-46bb-bfae-3ce8972b028e", "sighting_of_ref": "indicator--294574d5-8d34-46e8-bdc9-e960f76a5e88", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52703e52-4257-42b2-a279-364f11b163f7", "sighting_of_ref": "indicator--8b6b9e95-ba16-4fe5-9395-63eda311c644", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e8720bf-be30-4ae9-b3c2-ebf632952253", "sighting_of_ref": "indicator--8b6b9e95-ba16-4fe5-9395-63eda311c644", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df354761-2048-4c19-9808-fc3e35a7d3bf", "sighting_of_ref": "indicator--8b6b9e95-ba16-4fe5-9395-63eda311c644", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fa9d101-9002-4fd7-bfa0-feea4f0e7f05", "sighting_of_ref": "indicator--f4f8c5c2-941e-4cd0-95d0-c2b3f3297389", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc47ef05-f03b-4958-82b9-82f4383eaf4c", "sighting_of_ref": "indicator--f66b6bcf-92e2-44c4-af80-937933226872", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--191dd056-8503-4236-8882-db725db655c5", "sighting_of_ref": "indicator--22f1a52d-96b8-443e-8252-912744b066b3", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e162037-e72e-4926-893d-e18d2b3d047b", "sighting_of_ref": "indicator--1902d378-8fe6-4d88-a8ab-f66d7d08f9b1", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--458983ac-914a-4f7b-a842-8dc06991e85c", "sighting_of_ref": "indicator--6ac57ace-fe50-417b-8022-10d807718b94", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cd406bd-9da8-4160-bee5-39dbcf78d059", "sighting_of_ref": "indicator--c1eb51fc-7eca-4c54-8470-a5e74c3bbfcc", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b17c3a5a-72b6-4819-a386-afa4f0681682", "sighting_of_ref": "indicator--53dfeb9e-b5c4-4b15-b8a1-506e033d9320", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d98bb15-75d4-4048-a421-65faa877a1a4", "sighting_of_ref": "indicator--53dfeb9e-b5c4-4b15-b8a1-506e033d9320", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--838acdbb-49ce-47aa-81fa-3999f52f7bd5", "sighting_of_ref": "indicator--53dfeb9e-b5c4-4b15-b8a1-506e033d9320", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cca9bfcd-40c5-46e6-a0fb-04de69a454f6", "sighting_of_ref": "indicator--ee1efa45-6e46-460b-aa1b-29828c8659d8", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6b9e46e-2a69-4496-9b11-2d110aa56aef", "sighting_of_ref": "indicator--0ce1d033-70c3-4e8e-8c87-df098cdc90f5", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afde7ab8-19df-4a90-814c-bd0262dc5271", "sighting_of_ref": "indicator--0ce1d033-70c3-4e8e-8c87-df098cdc90f5", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9f8a8ea-dc9d-4596-a424-4dd8159feac3", "sighting_of_ref": "indicator--0ce1d033-70c3-4e8e-8c87-df098cdc90f5", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9244fa5b-5527-46d1-8435-355ebb7619ec", "sighting_of_ref": "indicator--30344869-6a22-408d-bbdd-772abb0a144a", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c269e34d-5395-473c-986b-93e0d32eeea3", "sighting_of_ref": "indicator--30344869-6a22-408d-bbdd-772abb0a144a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6d4c15c-5dea-40ab-8f2a-99c6d3d6227a", "sighting_of_ref": "indicator--8b8553d7-0a7a-4597-9207-3a0113548846", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--969c8391-66f2-43ba-902d-ed8904ee2fc4", "sighting_of_ref": "indicator--2f54fe83-412d-4c12-8b87-c4c629e7778a", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b94adc3c-851d-400d-94b7-d595c7f9c4cc", "sighting_of_ref": "indicator--2f54fe83-412d-4c12-8b87-c4c629e7778a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b33809cf-d24c-48a2-83f1-158cfc564d6f", "sighting_of_ref": "indicator--2f54fe83-412d-4c12-8b87-c4c629e7778a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7482369-f177-4041-8b86-07d24dfae13b", "sighting_of_ref": "indicator--c1d53d5c-76c0-43d6-9eba-defca02130ed", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26bcbf9c-0683-4796-99ab-b4b58992cf52", "sighting_of_ref": "indicator--c1d53d5c-76c0-43d6-9eba-defca02130ed", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b747ac90-364f-453d-9845-c601c2cb4cfa", "sighting_of_ref": "indicator--c1d53d5c-76c0-43d6-9eba-defca02130ed", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1d194f2-0870-401a-8476-8481f8ac65ff", "sighting_of_ref": "indicator--a04969e7-0cfc-405d-9daf-a1525d8721ce", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27e6a911-2a37-4234-8546-af74135baefb", "sighting_of_ref": "indicator--a04969e7-0cfc-405d-9daf-a1525d8721ce", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ee1ee76-f438-481f-979c-acc011a1d14f", "sighting_of_ref": "indicator--a04969e7-0cfc-405d-9daf-a1525d8721ce", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22adadfc-982d-469b-b2e3-ea0a0bac0e6b", "sighting_of_ref": "indicator--76534f99-a1a3-4c05-88e3-82860f68d522", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d55ae575-3646-458b-92e4-5630ecd95999", "sighting_of_ref": "indicator--76534f99-a1a3-4c05-88e3-82860f68d522", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--848435db-cb28-47a8-87c4-7e0122dbcf2a", "sighting_of_ref": "indicator--8c191cc8-7dd9-4e3c-8a0c-c824304a55b7", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a93d0c4-0811-48a6-a60f-2ce03843be86", "sighting_of_ref": "indicator--fbe37a75-b211-4def-a46e-c736cc6321f3", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee2911be-248e-41b3-8073-1c9f88a2c0f4", "sighting_of_ref": "indicator--4a0791d2-87c8-45cf-94ce-2ebad7e4f061", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9a55ce2-6c85-4e2b-bce9-1a290a99abf0", "sighting_of_ref": "indicator--4a0791d2-87c8-45cf-94ce-2ebad7e4f061", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--678345f3-1e60-4c73-8585-7e92e202059f", "sighting_of_ref": "indicator--4a0791d2-87c8-45cf-94ce-2ebad7e4f061", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7342240c-fbd3-432c-9e9d-5ff3854381cd", "sighting_of_ref": "indicator--46a49c7a-7cb9-4033-ae0c-39fa17eac451", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc16baf8-a0aa-4cbc-9e4b-0141befddfba", "sighting_of_ref": "indicator--46a49c7a-7cb9-4033-ae0c-39fa17eac451", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cccf8c04-5732-4689-b2d4-71d87e139c2c", "sighting_of_ref": "indicator--46a49c7a-7cb9-4033-ae0c-39fa17eac451", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dd37417-5e79-4009-95cd-424bd9c036ac", "sighting_of_ref": "indicator--20608f46-c769-42e6-a980-bd0422cafaaa", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d515351-cf5e-4c9c-8b26-b8429946b4cd", "sighting_of_ref": "indicator--a1faddf9-b324-41a3-b876-7f43d563afd7", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76a6127d-4260-462d-be81-eb160c9d1389", "sighting_of_ref": "indicator--a1faddf9-b324-41a3-b876-7f43d563afd7", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4211e9da-ebc8-4dbd-9487-f517c6eb725b", "sighting_of_ref": "indicator--f25c1804-2260-4811-907d-fb46566eb978", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25995d2b-30bf-4192-aaa4-09033c0984d2", "sighting_of_ref": "indicator--31c20a2e-3c0b-43a2-9e79-816eeda2ae49", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--132969fa-abf2-4b70-94d7-2126fbdcaa3c", "sighting_of_ref": "indicator--0ee70acf-56bb-4d73-9dd0-54e392943ca0", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--811921c0-0e06-4063-a319-8d5c54d5ffbd", "sighting_of_ref": "indicator--0ee70acf-56bb-4d73-9dd0-54e392943ca0", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4fec19a-1857-4311-87fc-8a2a1565d2e4", "sighting_of_ref": "indicator--0ee70acf-56bb-4d73-9dd0-54e392943ca0", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d4fa52a-9bb8-448f-a551-17be05af30dd", "sighting_of_ref": "indicator--27c5b75b-b019-444d-8734-dad9f23e3e70", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3849be7-770d-4184-9233-91ddec2acc49", "sighting_of_ref": "indicator--1221ffa1-d0d2-4cff-a741-7110972d862f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5616d7d9-d676-4930-920c-fa0287a0ca8d", "sighting_of_ref": "indicator--a235232e-17dc-4a61-8079-4c6c9193cfbd", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7264814-1da5-416d-8aaf-93659bd2279f", "sighting_of_ref": "indicator--0e224dab-5d71-42f6-815c-a88009d7bbeb", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00f830e0-78ce-46d1-9f81-0d9ca49ece1b", "sighting_of_ref": "indicator--fee9c95e-ef8d-4c90-a897-52c96744cf63", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7380112-1bf7-4b51-abe2-4621e7b8fb8c", "sighting_of_ref": "indicator--fee9c95e-ef8d-4c90-a897-52c96744cf63", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c85dca04-9aae-4700-998d-616e619e05db", "sighting_of_ref": "indicator--4ad12f08-3504-40f8-ac89-abd60e42bf35", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98d22f76-7f79-4748-a3cf-4d1f8b13b471", "sighting_of_ref": "indicator--4ad12f08-3504-40f8-ac89-abd60e42bf35", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--280bbece-2302-407a-a8a1-cc667d19a78f", "sighting_of_ref": "indicator--4ad12f08-3504-40f8-ac89-abd60e42bf35", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28567e78-17f4-46ed-9b98-1d4cea9a822d", "sighting_of_ref": "indicator--2fe5637e-d8d1-413f-beef-4d81779c2c2a", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71dbff55-85f3-4286-b407-84a73e2ae0a9", "sighting_of_ref": "indicator--2fe5637e-d8d1-413f-beef-4d81779c2c2a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9802b7e-ba56-4254-8a35-395d9996b12c", "sighting_of_ref": "indicator--663ccf84-2962-4da5-81a4-95027c4830af", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02d5a1c8-e0f0-43c1-bf76-15157cdc23f8", "sighting_of_ref": "indicator--7a9a1186-ad63-42b2-9f00-9ef938afb90b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b6b06f3-14ca-476e-b790-c8f757093f0e", "sighting_of_ref": "indicator--5478bf11-9eb6-4d05-a924-ff4652075600", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab1949d8-9ff2-45f7-8bb4-687024fc181b", "sighting_of_ref": "indicator--651f3f27-67b0-42c6-8243-848c5d17dbed", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b10caac-ed82-4c3a-8c32-6babd572d228", "sighting_of_ref": "indicator--651f3f27-67b0-42c6-8243-848c5d17dbed", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0203ca46-9c9c-48fa-9edf-5e314617d351", "sighting_of_ref": "indicator--651f3f27-67b0-42c6-8243-848c5d17dbed", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a898721d-263c-4aa8-af36-498c9dae2e35", "sighting_of_ref": "indicator--5e5118f2-289c-4960-9808-8f72b5b5ab37", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3159b212-b351-4eb5-9100-017c13705ae1", "sighting_of_ref": "indicator--5e5118f2-289c-4960-9808-8f72b5b5ab37", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c97d7d38-effa-4908-9104-076adf05c976", "sighting_of_ref": "indicator--5e5118f2-289c-4960-9808-8f72b5b5ab37", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33de6be5-ea7f-4cb2-b41a-9bf9f72376d8", "sighting_of_ref": "indicator--01e1ad23-0c47-492b-9e78-f25879d6a59c", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--099c19b2-68df-4ea7-bfcf-f05391948372", "sighting_of_ref": "indicator--8222d42f-358c-455f-b616-bb0232082496", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30478357-8e84-4e9b-a747-f062da0b488b", "sighting_of_ref": "indicator--f40e75be-285e-4391-9e44-b98463ece00b", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10111e6d-0271-40f1-be97-7da889ea2d4d", "sighting_of_ref": "indicator--f40e75be-285e-4391-9e44-b98463ece00b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45b3ee83-41a0-4ba5-9710-0d26a7a8baf6", "sighting_of_ref": "indicator--7bdd5061-5b28-4488-bc72-1dae39c45597", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--062cbacc-d0a3-46d6-9ad1-258340e769d6", "sighting_of_ref": "indicator--7bdd5061-5b28-4488-bc72-1dae39c45597", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56e4b6a0-70f0-4040-9801-48f1263bf29f", "sighting_of_ref": "indicator--7bdd5061-5b28-4488-bc72-1dae39c45597", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d471ea0c-2bf8-4406-aaf1-d0cf5f8a5530", "sighting_of_ref": "indicator--3577df0c-434d-47df-9258-5ee425b4d6f7", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3aa2a1a0-d16d-47ea-8e65-59c2bbaaf881", "sighting_of_ref": "indicator--3577df0c-434d-47df-9258-5ee425b4d6f7", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16070beb-5c54-48eb-b9b3-03c977566cb5", "sighting_of_ref": "indicator--3577df0c-434d-47df-9258-5ee425b4d6f7", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16e19bc9-d87f-41ba-b378-bcea17e98987", "sighting_of_ref": "indicator--c3fed5cc-782f-42f4-ba8d-e5c98449c702", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acd64560-142b-4023-8170-8f2bbd45e956", "sighting_of_ref": "indicator--c3fed5cc-782f-42f4-ba8d-e5c98449c702", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5107a2bc-29d0-4858-8f7b-c20ded8cb483", "sighting_of_ref": "indicator--c3fed5cc-782f-42f4-ba8d-e5c98449c702", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff404d99-2c8d-418e-9fb4-e10e1fdd488a", "sighting_of_ref": "indicator--9d009f3f-8d91-4aa4-959e-d9386575ad62", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65cce038-62fe-4671-a949-d67a502d1285", "sighting_of_ref": "indicator--e528f127-110e-4f72-afd0-b84babbefde1", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcf629bd-26da-442f-807d-13d5d4e61d17", "sighting_of_ref": "indicator--662ddb8e-b4ac-416f-b86b-82ff6a58f7d4", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f78cb81c-1f59-43f9-9a42-ce733d0e0b29", "sighting_of_ref": "indicator--662ddb8e-b4ac-416f-b86b-82ff6a58f7d4", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07b14172-3639-4548-b0ac-913ae8f82dfb", "sighting_of_ref": "indicator--662ddb8e-b4ac-416f-b86b-82ff6a58f7d4", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c3e8789-e793-4682-9b27-c779248148d2", "sighting_of_ref": "indicator--41b9868f-74c1-4b61-bf3c-bb5ffb20f0af", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--087b8550-7f5f-4808-bdea-638010077af5", "sighting_of_ref": "indicator--ef4307df-755b-4b3c-b2bd-1d39ae7b3853", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b276ae61-0a71-41f2-bc79-fd1d80aade25", "sighting_of_ref": "indicator--b96c4341-760c-4d64-bfdc-27e7fa2d8807", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e84422b-d25e-4a99-b651-f0ac9765e15d", "sighting_of_ref": "indicator--6ea34555-f862-48ee-a840-c7fcbfe8694d", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d885ae0-f08e-4bc9-b9b6-0ad7348e47c9", "sighting_of_ref": "indicator--b69609d5-b186-4d58-a214-648173961d9b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--580ed36d-e48b-4f8c-aca0-266bfa8b4589", "sighting_of_ref": "indicator--b6db8175-bf52-4e85-8aae-99e77eb9114a", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f6b0669-2e16-4bf8-babf-799e5f8174ee", "sighting_of_ref": "indicator--952edb7d-1586-49b5-a27f-8bc344aa2360", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db2220d7-44bd-4f7e-9826-1d8c7f7d115a", "sighting_of_ref": "indicator--33b8e94b-13c3-48d2-a096-93caad1c4157", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85e752d5-b560-466f-8731-232cde1f0ada", "sighting_of_ref": "indicator--64649661-56fd-49be-b018-2a3e0b4284c8", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce53ed41-edd4-4eed-8def-13317823060d", "sighting_of_ref": "indicator--64649661-56fd-49be-b018-2a3e0b4284c8", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e6c9490-8e63-4593-b900-549dec529950", "sighting_of_ref": "indicator--ff47eb4f-5ca6-4e9d-acba-0c5f903ab80a", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62743f5b-853d-4338-8290-e04dd9ab2f8f", "sighting_of_ref": "indicator--ff47eb4f-5ca6-4e9d-acba-0c5f903ab80a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e812bc2-d4c2-4510-9240-52011b1bfbab", "sighting_of_ref": "indicator--ff47eb4f-5ca6-4e9d-acba-0c5f903ab80a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d67686b-aac0-41be-8c3b-2441254a8364", "sighting_of_ref": "indicator--dcff903a-fe58-423e-a651-5a006e3db666", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27086358-f830-4b14-bf46-c365fb39a810", "sighting_of_ref": "indicator--cbcfdd44-7e10-460a-98c0-48701b332995", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c157f0ef-cbe2-4035-a7ad-1db0c768226e", "sighting_of_ref": "indicator--af62b6df-d208-46cb-a3aa-8298e0fbce10", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5a4c67b-5440-4ec4-b0c1-142225d78abf", "sighting_of_ref": "indicator--af62b6df-d208-46cb-a3aa-8298e0fbce10", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dedd1af8-eb1a-4a4d-a07b-33ab14fb5a5c", "sighting_of_ref": "indicator--af62b6df-d208-46cb-a3aa-8298e0fbce10", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3dd93cc-9513-4914-a27e-e3d2c4e38e55", "sighting_of_ref": "indicator--68da790e-c497-4e73-aefd-1fdb966791e2", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de2528a0-360d-416a-9b19-42658b6bfcc8", "sighting_of_ref": "indicator--68da790e-c497-4e73-aefd-1fdb966791e2", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38dd7450-9a0e-4491-8c10-c559fdc1f445", "sighting_of_ref": "indicator--d1397c96-fa17-449f-baa6-235933fda8d3", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75d1722b-f659-4656-9045-be367bbc61b7", "sighting_of_ref": "indicator--971c4df1-d301-4c06-bc87-321b4ad0bf1f", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99f7ff0f-d90b-48e3-bf09-12a49878451a", "sighting_of_ref": "indicator--971c4df1-d301-4c06-bc87-321b4ad0bf1f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08aee353-acfc-44b6-a8c8-3bb69df673a2", "sighting_of_ref": "indicator--a519a47e-be84-4f37-a92e-208e15308690", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a9e181b-d1de-477a-883e-4c415524087d", "sighting_of_ref": "indicator--a519a47e-be84-4f37-a92e-208e15308690", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc71b3af-cbca-4877-a7d7-b5a696959711", "sighting_of_ref": "indicator--1dda5355-a31a-4c48-ab78-667a65d15c0e", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61ae98bc-61f1-4029-9954-df3fc649437b", "sighting_of_ref": "indicator--1dda5355-a31a-4c48-ab78-667a65d15c0e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23c02812-d583-4cee-9d84-d70852e486ac", "sighting_of_ref": "indicator--1dda5355-a31a-4c48-ab78-667a65d15c0e", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbf43d1d-ffe1-498e-93cd-b81d6f26ae47", "sighting_of_ref": "indicator--45ea4d9c-6557-4dfd-ba0d-c54ec61cbdb8", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e67dffe-0d7b-4787-b9d4-c1c9a2a6a9b0", "sighting_of_ref": "indicator--dc380f86-2b7c-4c56-8f80-d9942655bb16", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc0e4cc1-bbc2-4c64-aaf2-4c9a253bdfc8", "sighting_of_ref": "indicator--25a58ecd-1893-45be-b969-02c50c6d1053", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbff73e2-8ec6-4621-a46c-9cd45acacf3b", "sighting_of_ref": "indicator--25a58ecd-1893-45be-b969-02c50c6d1053", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--584d8c80-0bb7-4e18-a0bc-17657bd1a3d9", "sighting_of_ref": "indicator--65c69f83-6295-432d-be59-1861ee4a01a9", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e9fb8c7-1e9d-43e9-8ac5-07d1147c3dac", "sighting_of_ref": "indicator--65c69f83-6295-432d-be59-1861ee4a01a9", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19dfe9c1-1e2a-4bcb-89d9-f68ef772edec", "sighting_of_ref": "indicator--65c69f83-6295-432d-be59-1861ee4a01a9", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5427d85c-663e-4e38-b67a-b2bfbeb808c9", "sighting_of_ref": "indicator--a6b8df29-f8d6-4376-b6c2-4fca9a43a031", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c718656-833c-43c4-9fae-6b75e2d9fad8", "sighting_of_ref": "indicator--a6b8df29-f8d6-4376-b6c2-4fca9a43a031", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b281f063-2c85-4d49-8da2-029ce5d04ddf", "sighting_of_ref": "indicator--a52ee9f2-ceae-4384-b6d9-bb1e08baef22", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22bd7d14-542d-415f-b863-396a0458911b", "sighting_of_ref": "indicator--853b7b72-ea70-4c62-a8f5-99ddb62f95d8", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26f7b8e8-64ac-405f-82ec-0d4773373bdd", "sighting_of_ref": "indicator--0653ce48-0e8f-45cf-ab94-f1ec8f331e30", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6737e190-3413-46e7-923d-de4ed420ce8d", "sighting_of_ref": "indicator--0653ce48-0e8f-45cf-ab94-f1ec8f331e30", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--449c095f-1372-40e3-8c9e-3d50869e564d", "sighting_of_ref": "indicator--0653ce48-0e8f-45cf-ab94-f1ec8f331e30", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa9b6f2a-2388-40cc-8037-49458e7ce0a2", "sighting_of_ref": "indicator--caf73be8-51af-4312-9b09-a26c017ad1b7", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4557d75b-cfb4-4aea-9f56-2555d0e09b98", "sighting_of_ref": "indicator--3b4ce264-15f2-4d8c-8e8a-7c3c5b60a991", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--550960e6-8be9-40b9-b377-f29fdde65f56", "sighting_of_ref": "indicator--e7654a92-f87c-4f44-b3ed-7783c2eecf4d", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28e108a1-30b1-4526-af30-3c763bcb02c3", "sighting_of_ref": "indicator--4746ea07-85c8-42b7-8b8b-814b586d91f7", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cff4bb8-e9ad-47a6-b671-e7bc52ff97b4", "sighting_of_ref": "indicator--4746ea07-85c8-42b7-8b8b-814b586d91f7", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea4c2c12-fc3b-41a3-a1f3-0034e27233b2", "sighting_of_ref": "indicator--4746ea07-85c8-42b7-8b8b-814b586d91f7", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cdf092c-83ad-44fd-9cc6-90dd342c7244", "sighting_of_ref": "indicator--f94f0625-f7df-4a37-9f6d-0a5337f5d43a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--faec077a-8b0b-4625-86da-c032fdb9a59d", "sighting_of_ref": "indicator--2d59d4bf-c8de-4bb6-89a8-cf632b2fea15", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c809847b-5853-4a20-bb15-a1b69b9050f8", "sighting_of_ref": "indicator--2d59d4bf-c8de-4bb6-89a8-cf632b2fea15", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7990efe4-7a18-472c-89aa-0f1e4f377fec", "sighting_of_ref": "indicator--2d59d4bf-c8de-4bb6-89a8-cf632b2fea15", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47be19cd-0075-4733-a7dd-611fb43fbb95", "sighting_of_ref": "indicator--23a97bc2-b536-4f2f-99bd-1cfcf6fcef0f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d20967b-d262-4912-92e8-36617705688d", "sighting_of_ref": "indicator--f611d331-1942-4937-a8bb-7c7fefac1796", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--648b0aa2-dce8-465b-82e1-40bc7d93913f", "sighting_of_ref": "indicator--f611d331-1942-4937-a8bb-7c7fefac1796", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fba821a-159b-4cd7-b8f5-ab199b46af07", "sighting_of_ref": "indicator--f611d331-1942-4937-a8bb-7c7fefac1796", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16a6c9a3-df53-439e-bd38-11f5f150ca77", "sighting_of_ref": "indicator--18482516-2fc8-4fe1-b7dd-117b15a44c52", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f23ce75-1471-4e38-ac5e-5cdc221da6bc", "sighting_of_ref": "indicator--18482516-2fc8-4fe1-b7dd-117b15a44c52", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5420df4a-fc79-46dc-b061-d5bc3f222da9", "sighting_of_ref": "indicator--89061fa0-9a45-4cf5-ad59-ac3b2c2c28ca", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16467fd8-ca74-4343-b29c-0ff1bfb7b11b", "sighting_of_ref": "indicator--89061fa0-9a45-4cf5-ad59-ac3b2c2c28ca", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9408ffd2-f262-4569-9a88-7c083644162c", "sighting_of_ref": "indicator--89061fa0-9a45-4cf5-ad59-ac3b2c2c28ca", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6d7f125-af62-42fb-8c49-83f9fd9ac37f", "sighting_of_ref": "indicator--86005c94-00b5-4269-8f0e-8d7c8996dd37", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bd41657-d265-46e5-a67b-3159f6c67504", "sighting_of_ref": "indicator--86005c94-00b5-4269-8f0e-8d7c8996dd37", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbacd58f-206d-4e45-afb0-6154f98668d0", "sighting_of_ref": "indicator--86005c94-00b5-4269-8f0e-8d7c8996dd37", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68d311dd-305f-46c3-94d8-8a229c6c1d95", "sighting_of_ref": "indicator--0e25526c-6fd9-4344-b061-d8fcf72b3056", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61551900-1b95-48c5-a3af-710ac8c176e3", "sighting_of_ref": "indicator--0e25526c-6fd9-4344-b061-d8fcf72b3056", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45152258-8350-45bc-b565-1303d815d093", "sighting_of_ref": "indicator--0e25526c-6fd9-4344-b061-d8fcf72b3056", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9266e727-80df-45e2-bc9d-bd0a02d27118", "sighting_of_ref": "indicator--7985b8b1-de79-42fd-86dc-c46eda4358de", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b90b9b7e-01e9-436a-82b3-16db7390c3b2", "sighting_of_ref": "indicator--7985b8b1-de79-42fd-86dc-c46eda4358de", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ac3f57b-4651-47e4-93e3-ab41ded20127", "sighting_of_ref": "indicator--7985b8b1-de79-42fd-86dc-c46eda4358de", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a680cd3b-67e7-434c-bc37-04ff54495e19", "sighting_of_ref": "indicator--a6baafd9-2a8a-442a-975d-ab4befd0301b", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f638f34-5879-4af5-bcea-7c376ce6d67d", "sighting_of_ref": "indicator--2ee88f4f-30a3-4064-a8c0-929c6c766fde", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0be153f1-461c-44d7-a9fd-5e22e876f2d0", "sighting_of_ref": "indicator--2ee88f4f-30a3-4064-a8c0-929c6c766fde", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e3092ea-0af1-4380-9d22-a8458c9cc57c", "sighting_of_ref": "indicator--2ee88f4f-30a3-4064-a8c0-929c6c766fde", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae87a75c-c7ef-4113-85f4-865626d9eddc", "sighting_of_ref": "indicator--339daaaf-2670-489c-a8e7-87d4225d2735", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e60bdda3-fa5e-4d10-a13a-2aa62bfe59f3", "sighting_of_ref": "indicator--339daaaf-2670-489c-a8e7-87d4225d2735", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b78816dd-13e6-4f76-8b7f-50111d0a1e27", "sighting_of_ref": "indicator--339daaaf-2670-489c-a8e7-87d4225d2735", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5566ebc1-8fb0-49bc-8abd-4a0d7ddb5ffb", "sighting_of_ref": "indicator--2a10a28f-cc1c-476f-9d7d-0d02bc190e67", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2cbcabf-19aa-4d3e-9f07-29b041b5fec5", "sighting_of_ref": "indicator--0a00523e-38e5-4b7e-a606-50d3c8152e94", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e268ed4-9f37-438c-b9fd-ae8ac69ca20e", "sighting_of_ref": "indicator--0a00523e-38e5-4b7e-a606-50d3c8152e94", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--265f23ee-7f8a-4b5e-9ba8-b451be8d91d2", "sighting_of_ref": "indicator--0a00523e-38e5-4b7e-a606-50d3c8152e94", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--536da8c3-187d-480e-b5b6-70c49e56390c", "sighting_of_ref": "indicator--482b5132-a9bc-4ae8-a5e5-5bbeb459d5cd", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac4529b3-a6ba-4ac1-899f-623acc8771da", "sighting_of_ref": "indicator--482b5132-a9bc-4ae8-a5e5-5bbeb459d5cd", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a33095b2-1514-47c3-879b-8b27ea47d5e6", "sighting_of_ref": "indicator--ffad12e6-d8a5-4851-86df-f66329b67d27", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0805f8c5-b9ee-4b26-8444-2aa7d485108b", "sighting_of_ref": "indicator--ffad12e6-d8a5-4851-86df-f66329b67d27", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b8b4ff4-efab-4ed5-8d3c-7e2120365ca4", "sighting_of_ref": "indicator--a21e50e3-777c-4987-b17a-4dea01199a8e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32091a16-4e47-4624-b4bb-eb82c7df49e8", "sighting_of_ref": "indicator--a21e50e3-777c-4987-b17a-4dea01199a8e", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aba3a866-bb01-4d68-af37-e009548015b4", "sighting_of_ref": "indicator--282800c2-ad19-4263-a759-713a16df7b74", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dcc524e-374e-4902-b593-034ecce4c2c6", "sighting_of_ref": "indicator--282800c2-ad19-4263-a759-713a16df7b74", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c9213ec-76b5-4e3f-b93d-883463b6e769", "sighting_of_ref": "indicator--282800c2-ad19-4263-a759-713a16df7b74", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--517d655e-f8a4-4be2-a5bf-828274f81576", "sighting_of_ref": "indicator--4638fff6-d419-4d0a-a11d-c1090c57ed2c", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ff57cdb-6fd2-46ce-9edd-76606fc3dbd1", "sighting_of_ref": "indicator--48d59ec5-155b-4067-bca3-da1ca2773f4e", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa677e22-0f50-4a45-b0bd-4b67fba0beea", "sighting_of_ref": "indicator--48d59ec5-155b-4067-bca3-da1ca2773f4e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--294de89d-7786-45ec-a6e1-603df103179c", "sighting_of_ref": "indicator--48d59ec5-155b-4067-bca3-da1ca2773f4e", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--475223df-b674-46a4-a458-d5a590d8cdb4", "sighting_of_ref": "indicator--1a21ee14-85d1-478f-abae-7a5e18e914fa", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--539a5e22-ace4-492c-a4c7-e66aad248014", "sighting_of_ref": "indicator--1a21ee14-85d1-478f-abae-7a5e18e914fa", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bb9efef-be96-4972-b674-071dde273e1a", "sighting_of_ref": "indicator--1a21ee14-85d1-478f-abae-7a5e18e914fa", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9b330e8-0940-4fc6-bf93-b8a4176b0a4c", "sighting_of_ref": "indicator--ec84ddfe-1739-4be1-bdca-52505878a957", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4edca15f-6532-4dac-9554-87b9030af66a", "sighting_of_ref": "indicator--ec84ddfe-1739-4be1-bdca-52505878a957", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95e9d463-868d-4c87-b4a5-d48aaada7235", "sighting_of_ref": "indicator--ec84ddfe-1739-4be1-bdca-52505878a957", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d213577-857d-449c-b85f-cbc614daac86", "sighting_of_ref": "indicator--e35579c1-6a73-4533-a213-c2d071904f25", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02d10b14-9bee-4ce2-8558-f0b1a8ec2360", "sighting_of_ref": "indicator--e35579c1-6a73-4533-a213-c2d071904f25", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ce08c50-517c-45ea-95e3-e5e98c0ce643", "sighting_of_ref": "indicator--65c6b78e-28c1-450b-90eb-1671dfb1142c", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ba1e221-7d57-4ffa-959a-b32a129d2a55", "sighting_of_ref": "indicator--de64feb9-3093-44c1-a619-4a279d13ec39", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cb848fd-ca41-47ee-b5e0-59f4925e925d", "sighting_of_ref": "indicator--de64feb9-3093-44c1-a619-4a279d13ec39", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c7be5a4-7a84-4a31-91fa-8d8699b82f12", "sighting_of_ref": "indicator--77364422-5160-4774-9b24-cfe4b6d80e6b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8b1d026-7ad6-47fa-aebc-0a6e4ef4c2ad", "sighting_of_ref": "indicator--edd2ec40-a577-48d7-870d-864439105ff2", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--143a3460-cc87-4c27-8905-7359d043c76f", "sighting_of_ref": "indicator--edd2ec40-a577-48d7-870d-864439105ff2", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b7ee173-9c15-40b5-9064-13dc7936d096", "sighting_of_ref": "indicator--92884599-efe7-4a6b-9709-58fe892b2cec", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--303a4d1f-347c-4c40-99df-6b0a0284e80c", "sighting_of_ref": "indicator--396b0a18-b02a-49a2-a454-1f91e4c8a932", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2fddbca-c745-49f0-a401-c56680c8039b", "sighting_of_ref": "indicator--396b0a18-b02a-49a2-a454-1f91e4c8a932", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a3b3024-b7ca-4853-85ba-53ce2e4a4baf", "sighting_of_ref": "indicator--396b0a18-b02a-49a2-a454-1f91e4c8a932", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81b4297d-78ef-413e-a4ef-46f7f963d753", "sighting_of_ref": "indicator--f2fdb9e8-6df9-4f62-9bbf-fcf794e4a88b", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59f0e079-83ff-4b2d-9183-b662ad0ccc6f", "sighting_of_ref": "indicator--f2fdb9e8-6df9-4f62-9bbf-fcf794e4a88b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea31a2ab-7c20-48dd-9af5-f41bccab1eb0", "sighting_of_ref": "indicator--a3e5ed27-f62f-43a2-b815-b09db4b32630", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--465c66e1-39ca-47ad-9478-72860107c882", "sighting_of_ref": "indicator--a3e5ed27-f62f-43a2-b815-b09db4b32630", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ed53d2d-6070-4fcb-9216-7c35f6431442", "sighting_of_ref": "indicator--a3e5ed27-f62f-43a2-b815-b09db4b32630", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00d59943-727f-4660-a4e8-561485d8528c", "sighting_of_ref": "indicator--dc68043b-cd5b-4126-953e-572ed06e869b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--933938b9-c042-4c25-859d-f2c2857f2e4c", "sighting_of_ref": "indicator--f0324118-0a0e-4ad5-95e7-f9b52d8900ee", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a69b536c-08d0-4b9a-a2fb-e62f16928e77", "sighting_of_ref": "indicator--43931a4e-3303-46a2-8fa0-5e9a2ac7aa37", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed5a561f-e010-4af2-8595-ee729b0b7bdf", "sighting_of_ref": "indicator--357ee7b0-84e5-4e37-8ec5-510277f3a1f5", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06708b91-77a0-483d-abd4-677dc930fbfa", "sighting_of_ref": "indicator--7099014f-58bd-4447-823b-72866af92827", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5c3b585-0594-4165-a59f-4efb1415c334", "sighting_of_ref": "indicator--b0d97896-d589-4e9c-9b04-9fc861e26f9f", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ca9c985-d3c5-479c-8acb-091844f1b1d2", "sighting_of_ref": "indicator--f95db260-1db5-431a-a0bc-7fb27fb64f83", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c6ee69c-6f20-4243-abe5-c8cb4baf26ed", "sighting_of_ref": "indicator--67acff7b-3ed9-4408-a250-9e781aa7125c", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2eb53c0c-171d-4dbe-91bd-885ce000b463", "sighting_of_ref": "indicator--67acff7b-3ed9-4408-a250-9e781aa7125c", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a755639-5bee-43ab-a78f-eecf903f57c9", "sighting_of_ref": "indicator--e2478b67-0efe-4e4d-9e2e-532f2556ae42", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bbf46d0-5dfe-42e0-a4c4-4863f08a8f58", "sighting_of_ref": "indicator--e2478b67-0efe-4e4d-9e2e-532f2556ae42", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1a81341-d3f7-45a3-83d2-d5e20492e171", "sighting_of_ref": "indicator--28d2365c-a7f4-4160-989e-55e161f01667", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1695627e-ff65-40cf-9486-e7f229d40ac6", "sighting_of_ref": "indicator--28d2365c-a7f4-4160-989e-55e161f01667", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e66d6505-08ec-4be1-81a5-ccd0a644379b", "sighting_of_ref": "indicator--28d2365c-a7f4-4160-989e-55e161f01667", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88de14d5-a3a3-40b2-b348-ed58c91c7ebc", "sighting_of_ref": "indicator--2b333955-e2cb-4f88-b0a6-c7f7519c31be", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71a1fc6a-2c0c-422b-b63b-149e31ad0800", "sighting_of_ref": "indicator--2b333955-e2cb-4f88-b0a6-c7f7519c31be", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9917bf7-bf45-4ee9-b89f-1f3c8fa0089e", "sighting_of_ref": "indicator--830f80ff-e6d6-46a3-9e1c-5020d48863de", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a64e4cef-fd90-4b3e-a2d4-d2e40afe8e01", "sighting_of_ref": "indicator--b429034d-4154-4056-8943-473ad2005794", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5539482-41c6-45b1-b148-14c320a4f54d", "sighting_of_ref": "indicator--b429034d-4154-4056-8943-473ad2005794", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b8055a8-2da3-4005-83c6-25ce3ac9dd35", "sighting_of_ref": "indicator--cac0dd54-abf9-4a5d-8062-bf15c105af9b", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c231f0b-bbef-47f6-8d7f-9319a8103dc7", "sighting_of_ref": "indicator--cac0dd54-abf9-4a5d-8062-bf15c105af9b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1b8724b-7cc4-4117-a915-a468119e651b", "sighting_of_ref": "indicator--cac0dd54-abf9-4a5d-8062-bf15c105af9b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bacb98ba-19e1-439d-b43b-c9d183b53485", "sighting_of_ref": "indicator--b3ace1a7-286c-40cc-a8f1-5ee5d9b612b8", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdb4acae-49b9-4bb4-a51d-6a2677ad7f6a", "sighting_of_ref": "indicator--b3ace1a7-286c-40cc-a8f1-5ee5d9b612b8", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dda50314-8dc1-422e-b23d-dfd0741b8bcd", "sighting_of_ref": "indicator--b3ace1a7-286c-40cc-a8f1-5ee5d9b612b8", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df8924f6-5de4-407c-889d-3eaa77a75bea", "sighting_of_ref": "indicator--b4bd2576-d4e3-4237-bc68-d2afe8603162", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3519661-9544-4e82-acd0-7f8c0a074ed0", "sighting_of_ref": "indicator--b4bd2576-d4e3-4237-bc68-d2afe8603162", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8ebac55-a538-424c-960b-9c4efab992a6", "sighting_of_ref": "indicator--160c67b5-2da7-4b95-82b6-369a018fba51", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f073084-2d1c-48b5-83bf-271a88919cee", "sighting_of_ref": "indicator--d7a6a071-fe06-45ec-a886-e103b6d263bf", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ff3f16a-60d1-4ed6-94a5-e3dead46e660", "sighting_of_ref": "indicator--d7a6a071-fe06-45ec-a886-e103b6d263bf", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6006b0e6-2d96-4c02-8b95-99e747c5f5a4", "sighting_of_ref": "indicator--201990d4-58dd-42f8-bcdb-36091993d3b8", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a4afd09-8736-4a99-9d32-636d47d50ad9", "sighting_of_ref": "indicator--201990d4-58dd-42f8-bcdb-36091993d3b8", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--228e420d-b81a-4ece-8bfa-9fc17284f0b6", "sighting_of_ref": "indicator--201990d4-58dd-42f8-bcdb-36091993d3b8", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75ba9579-da49-4a9b-9ecf-51d73955548b", "sighting_of_ref": "indicator--cd8af4a2-7e0d-4bcc-8be4-94e4cd78278c", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb6c46d6-01da-463d-bdbe-7031867bc729", "sighting_of_ref": "indicator--cd8af4a2-7e0d-4bcc-8be4-94e4cd78278c", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6521557-1f69-4f23-a96c-fee09de4eac0", "sighting_of_ref": "indicator--cd8af4a2-7e0d-4bcc-8be4-94e4cd78278c", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bb6820c-e278-4183-8d72-600b99b99667", "sighting_of_ref": "indicator--d04da712-3cbd-43ad-ae1c-8770e1145b08", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6a27830-6f24-4911-9a5f-d85f5b7a7266", "sighting_of_ref": "indicator--297506eb-92e6-4523-bd23-b58960fd9b9a", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4da2e07-40f6-4411-8273-43e87bf95832", "sighting_of_ref": "indicator--521714eb-c46d-4416-82c6-3a3ffb1618ee", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--110cf469-4640-4851-8b66-136048b3580f", "sighting_of_ref": "indicator--4d64a9ed-e400-43d1-af16-fce062403a69", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a71e13f6-0181-41b9-91e7-1b13edf2ded8", "sighting_of_ref": "indicator--4d64a9ed-e400-43d1-af16-fce062403a69", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7f22220-ab81-4f6e-8d15-ad07837b1f66", "sighting_of_ref": "indicator--a3f6b589-e781-4705-ba77-dd00dfaaa059", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fe4d60c-0611-4919-8a31-f39fc2792b1d", "sighting_of_ref": "indicator--c81458ca-a5b2-4e75-be91-892262dc238c", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dedb426-adcd-41de-9473-720cfaddf0c6", "sighting_of_ref": "indicator--c81458ca-a5b2-4e75-be91-892262dc238c", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92c9be3d-b42d-4a8a-b21b-3db032b822bd", "sighting_of_ref": "indicator--c81458ca-a5b2-4e75-be91-892262dc238c", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48696175-39e4-4430-98f3-13af500a5518", "sighting_of_ref": "indicator--e112d7b4-1ac2-40d3-9190-1bc694ea22a6", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f1e9f1f-0f13-493a-8d8f-32598795390f", "sighting_of_ref": "indicator--8a11a7d7-d1ec-4f63-93ad-5754e5170f59", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--567e99c2-6d70-498b-ace4-a25e1ecd91bb", "sighting_of_ref": "indicator--3f90fb5c-2394-4c88-8ef2-11aa2af1e659", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf6c6bb5-306d-41df-a572-8bed376471c7", "sighting_of_ref": "indicator--919a925d-4ccb-479b-b10a-f692159d1230", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f1f0e05-354b-4df3-8c31-c92db740d0b2", "sighting_of_ref": "indicator--919a925d-4ccb-479b-b10a-f692159d1230", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--177d930d-2731-46b6-a82b-7d43fbab6fd9", "sighting_of_ref": "indicator--919a925d-4ccb-479b-b10a-f692159d1230", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5028500c-7a88-4626-882d-b28bdcac5e72", "sighting_of_ref": "indicator--5bab0b58-e2cd-4bcd-b61c-ae6f9178565b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe434851-ed74-4b4e-b3cf-38a5eaa16827", "sighting_of_ref": "indicator--3a809a98-d4c5-4070-b501-4efb78f9009e", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5c58d6e-d34a-46e1-a8a7-593e787d3aef", "sighting_of_ref": "indicator--6c25224a-2a19-40af-bcbc-aed01990d1c3", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63643200-9f59-40aa-aab4-222016ae3561", "sighting_of_ref": "indicator--aee5b5b5-d6ca-4846-86f0-05b455909108", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--782d9265-8b75-4648-bad0-18dab14d2a15", "sighting_of_ref": "indicator--0a0f7f42-d9bf-42d2-becf-2db5cd25e55b", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4951a16e-2dad-491c-996d-667c103d13f3", "sighting_of_ref": "indicator--b85b0cfc-b7e8-4ed9-8c5e-328f2d87ef17", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2c2f53b-4f8b-486d-ae1d-3e19e275efa0", "sighting_of_ref": "indicator--b85b0cfc-b7e8-4ed9-8c5e-328f2d87ef17", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91083551-3ef6-4d51-a600-81c47798a870", "sighting_of_ref": "indicator--bc7a492c-893c-4e4d-9052-7df8e037d30a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6414b73-8897-4d07-bd90-364a04f35be5", "sighting_of_ref": "indicator--529c437e-d15b-4a9f-9a86-9f890c377505", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe4b5ad3-52d7-4809-abac-21b398d7e453", "sighting_of_ref": "indicator--529c437e-d15b-4a9f-9a86-9f890c377505", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2eb9f972-c32d-48d5-805a-93f99b40691d", "sighting_of_ref": "indicator--529c437e-d15b-4a9f-9a86-9f890c377505", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a092537-461b-4367-af31-7416d4cb59a4", "sighting_of_ref": "indicator--5ef49c03-0c56-4c6a-94be-5f3e0028aead", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dddd997-a621-4f38-80ed-d2224ec5b685", "sighting_of_ref": "indicator--5ef49c03-0c56-4c6a-94be-5f3e0028aead", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26f65987-f7eb-45b4-a958-891f7396e2e1", "sighting_of_ref": "indicator--5ef49c03-0c56-4c6a-94be-5f3e0028aead", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b91123d-a483-4399-9169-cd9cbcadbbfa", "sighting_of_ref": "indicator--b72e5049-3c67-4122-8812-3c460b6deb44", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd47aef7-5ad2-49cc-b482-07c25b73fd0e", "sighting_of_ref": "indicator--b72e5049-3c67-4122-8812-3c460b6deb44", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--534aff52-0189-4614-b1d2-f2a3856c97c4", "sighting_of_ref": "indicator--b72e5049-3c67-4122-8812-3c460b6deb44", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24616369-55f1-4212-9618-6cfe745ab078", "sighting_of_ref": "indicator--a40798fc-7f8a-4143-bcbc-7ccffa772d08", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38cdf284-0d20-4b4c-818d-87cc4a68f72e", "sighting_of_ref": "indicator--a40798fc-7f8a-4143-bcbc-7ccffa772d08", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87b5111a-78e3-496a-82f8-889c29427147", "sighting_of_ref": "indicator--a40798fc-7f8a-4143-bcbc-7ccffa772d08", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2563987-5036-4078-89cd-aa17171e2085", "sighting_of_ref": "indicator--11f3fece-05bb-46c3-a339-4bcb31e83ff6", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8be93c5-50eb-4849-96ad-30323a1436f6", "sighting_of_ref": "indicator--2cadb6da-7f9c-4295-b1ed-0f69d366e000", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec604f81-4b74-420f-989f-bbee519b0ee1", "sighting_of_ref": "indicator--6c4ff9d5-f029-4984-9edb-a43a07d72b1c", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75fd2a37-0f8e-4ba5-a3e6-96f17f261b1d", "sighting_of_ref": "indicator--5ba8ace6-dafc-4ba7-a362-cd80a7513590", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31407b9d-4bcb-4fd9-b9e7-660fc6fbce44", "sighting_of_ref": "indicator--cab20d90-3170-488a-8be3-f8d984f65fdc", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ef82ad8-01a5-49b2-ad62-23357d50c4ee", "sighting_of_ref": "indicator--cab20d90-3170-488a-8be3-f8d984f65fdc", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2702ed7-a419-463a-a779-7e33538c521d", "sighting_of_ref": "indicator--cab20d90-3170-488a-8be3-f8d984f65fdc", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7999f332-71c6-4e91-b984-5afbaa00572f", "sighting_of_ref": "indicator--78e1c046-c0bf-4e00-b2e5-4a0a2f09c144", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c557f62-98ed-49a3-9f6e-30971d52ce62", "sighting_of_ref": "indicator--78e1c046-c0bf-4e00-b2e5-4a0a2f09c144", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec0c4482-394a-43bc-ab42-769306937c48", "sighting_of_ref": "indicator--cc2c9b06-801f-4f71-bc56-1b9ceb4a26c0", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b517d98-4a8a-4dff-9221-c22fcedc3d25", "sighting_of_ref": "indicator--d22c2ee1-d366-4e82-9280-524344dcba17", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--706e5d62-5c56-46ff-b303-a7f529c05fef", "sighting_of_ref": "indicator--d8860cb8-fe5f-4661-977a-83183ae93513", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eeca5708-b3eb-44b3-a631-7796a349483d", "sighting_of_ref": "indicator--d8860cb8-fe5f-4661-977a-83183ae93513", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9ef8be1-3ed8-4372-8cba-adad94836f71", "sighting_of_ref": "indicator--b43d679a-335c-45bd-8ef9-f47e1b8cd437", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8596c9b1-0540-4890-8109-607287249c1d", "sighting_of_ref": "indicator--b43d679a-335c-45bd-8ef9-f47e1b8cd437", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12df8614-4a81-4096-9bab-1d838d064d7c", "sighting_of_ref": "indicator--318be8d8-bb32-436e-aaa8-d056ff1121c1", "where_sighted_refs": ["location--cc47317e-2c18-43a6-8938-dea748a56ad5"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--969da007-330b-4d29-92bb-28a71458905c", "sighting_of_ref": "indicator--87affd6c-e0b3-48ed-a43a-dc2377bbc8d5", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64cac20c-9c71-4400-a41b-871849e1d73b", "sighting_of_ref": "indicator--87affd6c-e0b3-48ed-a43a-dc2377bbc8d5", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e208de74-824d-4f0c-a32a-b67cd0af8373", "sighting_of_ref": "indicator--87affd6c-e0b3-48ed-a43a-dc2377bbc8d5", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b2b10f6-0a68-488f-985e-83ef27c952a5", "sighting_of_ref": "indicator--38ac0695-4ef0-45e7-bf93-b66503d7744f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ac0be6c-7a98-482b-b2d5-c56890ac586a", "sighting_of_ref": "indicator--38ac0695-4ef0-45e7-bf93-b66503d7744f", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0aa8f1bc-ba61-4fae-92e5-38a0151514d8", "sighting_of_ref": "indicator--38ac0695-4ef0-45e7-bf93-b66503d7744f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43f85c4c-8350-4579-9ea9-8ff14c23a46f", "sighting_of_ref": "indicator--a29d3fb2-6bfc-40e8-8882-9919719379cc", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcad4442-b58e-4c2d-93f3-562009844155", "sighting_of_ref": "indicator--733955fc-bd9f-4fcc-81a8-b46009f947a6", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e204bc1a-32dc-476c-88fc-77a559c39ea1", "sighting_of_ref": "indicator--1538293c-1fc8-4a96-9696-7294ee2d2478", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d58a19d-40ef-4a2d-b4a1-0f6d14023dd8", "sighting_of_ref": "indicator--1538293c-1fc8-4a96-9696-7294ee2d2478", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dc3011d-0de4-4d55-8fcd-b07a761d90a7", "sighting_of_ref": "indicator--51755924-a2e0-4ef6-b90e-0ddd43666c56", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cab4fc6e-e6fd-4968-a9e6-50cdf025c937", "sighting_of_ref": "indicator--55c5f284-d486-48ea-a3d8-1ae0d9ca3a8c", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c646161b-36d5-4fdd-90fc-d34fe2dc5a27", "sighting_of_ref": "indicator--664de9cd-46ce-4a31-92e7-b621b78c7192", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b954af48-af7d-4780-8f2b-da51a03a0fc3", "sighting_of_ref": "indicator--664de9cd-46ce-4a31-92e7-b621b78c7192", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d63742f7-673b-421f-aba6-62c4b4f62425", "sighting_of_ref": "indicator--f16bbe33-5565-4c91-b46d-cb23a3161c04", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--069794db-2962-4e37-8354-064f4f6b74b1", "sighting_of_ref": "indicator--cbd61edb-b67c-43fc-8230-09fb230b9392", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b41d453-5e81-420e-97cc-45124fafe2f8", "sighting_of_ref": "indicator--ce4b82db-5cb1-4de7-beb9-222c297f925d", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7723c5e6-34d3-4799-9ab6-ace7c8af921a", "sighting_of_ref": "indicator--9993a0af-1664-46c2-b88c-1599baa8174f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--faf52eeb-5b70-482b-a383-8cb075977acc", "sighting_of_ref": "indicator--29fb4bca-377c-4681-9b85-b07edd367203", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20c4e0eb-3be8-4d28-ab76-fac6bdca28db", "sighting_of_ref": "indicator--3839d4ac-6a5c-4483-b21c-b32d2194d4e5", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f8c7fad-6f50-4b63-95b2-e9c4b61d675c", "sighting_of_ref": "indicator--3839d4ac-6a5c-4483-b21c-b32d2194d4e5", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d07561f-144b-41f0-a4dc-1f826be06471", "sighting_of_ref": "indicator--6b593125-4257-4ccc-9d32-4ed8099cc8c6", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dee54a4-3d31-4be6-a4a5-7f8fd52baf1d", "sighting_of_ref": "indicator--6b593125-4257-4ccc-9d32-4ed8099cc8c6", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be9763b6-fe32-4ae0-bbe5-8af1d34352be", "sighting_of_ref": "indicator--cbb3f415-76a8-417e-87e7-fb49d5dd3e9b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9450c9ba-000f-42d1-8e37-dabbc6aba438", "sighting_of_ref": "indicator--cbb3f415-76a8-417e-87e7-fb49d5dd3e9b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c3c9dcc-6052-48bf-820d-418b851570ce", "sighting_of_ref": "indicator--473a7853-ccff-4bf3-a65e-520c4a69d317", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0cf0d24-ea41-46ce-96fe-a2ef39abca9b", "sighting_of_ref": "indicator--473a7853-ccff-4bf3-a65e-520c4a69d317", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ba96c8d-96b6-4b5b-8cde-aee6cd266c04", "sighting_of_ref": "indicator--473a7853-ccff-4bf3-a65e-520c4a69d317", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bcaf02c-9f99-49e7-93dc-0ffb161c89a1", "sighting_of_ref": "indicator--bb75f0a0-a478-480f-9ca1-f0e432628c62", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3951a07b-0bb8-42a8-b9c3-1c24edd49844", "sighting_of_ref": "indicator--bb75f0a0-a478-480f-9ca1-f0e432628c62", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81fb6e35-b1af-4545-a3cb-0f2729c039ad", "sighting_of_ref": "indicator--bb75f0a0-a478-480f-9ca1-f0e432628c62", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d75ce025-6443-4073-89aa-d9c6f2686130", "sighting_of_ref": "indicator--0a558a42-d59b-4e93-aeb3-b3448c6fb17a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e8c6b5b-8aaa-45c8-bf75-54f1fea52f1e", "sighting_of_ref": "indicator--445810e6-f5de-4550-8f48-8f4671387a00", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--384513fb-87fd-481f-90a8-589f29a83107", "sighting_of_ref": "indicator--445810e6-f5de-4550-8f48-8f4671387a00", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c87ef18f-fcf9-4e0d-848c-6973fb519f86", "sighting_of_ref": "indicator--445810e6-f5de-4550-8f48-8f4671387a00", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc9535bb-2682-4898-bc22-e77ca286c1ec", "sighting_of_ref": "indicator--373d2bab-d791-4b77-ab6f-bfe061ae2f46", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75270e6c-3461-42bd-a2e2-7329d7db9c3d", "sighting_of_ref": "indicator--088e00df-c64a-4ff9-b541-3d7d788b6eb1", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccf08b36-e3bb-48f1-8606-72607810fec5", "sighting_of_ref": "indicator--55e22ba7-e922-4f7d-8fe2-345cdad7247b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60178cc3-050f-4804-bcbb-b5109a2e64c4", "sighting_of_ref": "indicator--66599b5c-a803-446d-a48d-7d11b872a9a6", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7cda097-175f-4afc-9379-01bdcf226207", "sighting_of_ref": "indicator--9c627764-fec4-4e3b-9338-a246d9a7a083", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f02d0dcb-95d7-4e61-ab94-5cd9c93bde3e", "sighting_of_ref": "indicator--003101e8-22d1-4dd2-b7ca-604e3d8477ae", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45cfead5-16d6-4c5d-8c38-895d9933bc23", "sighting_of_ref": "indicator--a4bdbd28-826b-49ef-9743-80d7c9c25a7d", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4eb2ccd-1756-43d1-92ee-d4205e24c381", "sighting_of_ref": "indicator--a4bdbd28-826b-49ef-9743-80d7c9c25a7d", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a70951a-e603-42de-8e6b-dea30c667efd", "sighting_of_ref": "indicator--a4bdbd28-826b-49ef-9743-80d7c9c25a7d", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d87e81f1-7932-4afa-a537-49fb624cd94f", "sighting_of_ref": "indicator--5a86cd4f-0e1d-4b30-9808-a511ce74a7e2", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--706342d3-4314-437d-9784-d825e1a29bd0", "sighting_of_ref": "indicator--5a86cd4f-0e1d-4b30-9808-a511ce74a7e2", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdee0f93-e9eb-4d2f-9ff5-2e4b3f9c457f", "sighting_of_ref": "indicator--5a86cd4f-0e1d-4b30-9808-a511ce74a7e2", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7e0740e-4f07-4113-9aaa-7244b59e990e", "sighting_of_ref": "indicator--fa58e80e-6c09-4e47-8097-a921c3303dbe", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3c32f55-2701-4241-947d-1d351e0ce12b", "sighting_of_ref": "indicator--fa58e80e-6c09-4e47-8097-a921c3303dbe", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be5bbce3-7ffb-4912-a593-c8c9d0623477", "sighting_of_ref": "indicator--a11beeca-4df0-46bf-9cb9-32d64e7febcb", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8ff3a6a-818a-4d05-89c0-44a910007190", "sighting_of_ref": "indicator--acaeff38-3a15-4b42-9505-ba96247fbd14", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef27fc43-2680-43c7-8b94-6c4c3be45e1e", "sighting_of_ref": "indicator--7b32e740-ccb9-42da-a9e2-29aacc20987f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--054b81e2-d94b-4187-8032-d6dddd48d258", "sighting_of_ref": "indicator--7b32e740-ccb9-42da-a9e2-29aacc20987f", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a08eb7d9-1bba-4fcf-aa80-d7627295d0e6", "sighting_of_ref": "indicator--7b32e740-ccb9-42da-a9e2-29aacc20987f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c327862a-9d28-42eb-b66b-7246dbe66ab5", "sighting_of_ref": "indicator--c7e5a023-66cc-4729-a0e4-065ce0b2c67c", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a033b109-89d1-4563-a1b3-d606619b5917", "sighting_of_ref": "indicator--cf314525-f8fb-47fc-9267-f5c37936dff7", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05a6d015-bafd-407b-898d-2c565087f351", "sighting_of_ref": "indicator--7df133e6-29d8-48bc-a1f8-a7e21c57a84d", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6412341-0b20-43a0-8ec2-5a6554471a21", "sighting_of_ref": "indicator--3f04fc79-a085-4553-81fb-229c72bb64fc", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--019d44a2-1636-40f2-87f9-f8b3032d9a02", "sighting_of_ref": "indicator--3f04fc79-a085-4553-81fb-229c72bb64fc", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68ec92c2-514e-4f70-b0cc-ab57fafd3998", "sighting_of_ref": "indicator--f6328932-88fb-4d76-a54f-203a175b6f15", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06f0728f-6740-4a76-98dd-7c64e2aba40e", "sighting_of_ref": "indicator--8abaeabd-fb91-4859-bc1f-71d21f989044", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aeb3bac3-3ce8-492f-b354-0c0b509d6fe6", "sighting_of_ref": "indicator--8abaeabd-fb91-4859-bc1f-71d21f989044", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83c1b3f0-d2fa-46e4-9949-d7cd0cbd99fa", "sighting_of_ref": "indicator--8b05895f-cffe-4fcd-b2ea-6afde404f648", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b879d5b-d1fe-46e1-a896-325be4614aec", "sighting_of_ref": "indicator--d8f46cb8-ec0b-4a62-88c0-915fd5644a52", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4609f13e-2437-4e0b-905a-0b3828f0fa61", "sighting_of_ref": "indicator--5ca7d05e-99b6-4f23-8ac6-ab406ae8ff09", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e49ac27-caf1-42df-a16d-af9181e1cab7", "sighting_of_ref": "indicator--5ca7d05e-99b6-4f23-8ac6-ab406ae8ff09", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4ebfa14-9705-4621-89b6-812149f49049", "sighting_of_ref": "indicator--73e96728-9f45-44b1-ad50-df025f12f4d3", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--631809c8-79bc-428c-99f0-6cae3a62f4eb", "sighting_of_ref": "indicator--d3cdc167-95fe-4e13-a02d-4663bda33732", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--478972bb-469f-4cc7-bd6d-769e9e8182c6", "sighting_of_ref": "indicator--86463d6b-cc6a-4e69-8244-4ad71b69d6e6", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c22c7ad3-7baa-4093-97d5-09e579ac3d65", "sighting_of_ref": "indicator--a611c7ab-76c0-4e60-8a62-79a2567efd03", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2daa7380-3290-4719-a0d2-287868b065e3", "sighting_of_ref": "indicator--9695e6b8-fa77-483a-b5e1-da359bed4a09", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--776622e2-4d80-46ef-9a67-38b64f7a070a", "sighting_of_ref": "indicator--33080c7d-98ef-4b7f-8703-3b53581b289a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43d02578-47fb-4d31-abf9-70d3b69bfc29", "sighting_of_ref": "indicator--bab183c8-e0fb-4a1b-80b8-6f24077de517", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b37c5228-cf66-46ea-81ef-8f7924f53547", "sighting_of_ref": "indicator--bab183c8-e0fb-4a1b-80b8-6f24077de517", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7d3a2bb-ac0c-452a-8035-af4eb4cdebbb", "sighting_of_ref": "indicator--da6c1a28-914f-4830-9269-13286351a81a", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1043a3f6-a43e-4f1e-8012-2838df5a636a", "sighting_of_ref": "indicator--b326dafa-b67b-49b9-b9c2-a65147d3e1d0", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11452c0e-3ae4-42a1-be2c-85cb9f45d5da", "sighting_of_ref": "indicator--6d3a9982-d2bc-4aab-b2b9-797d6c47bc7b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfe23484-5ed9-49fd-a3b4-56dbe29ca071", "sighting_of_ref": "indicator--21c18641-f717-41cb-b9fe-fe70115e2134", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea584516-d857-4a80-8d5e-4bdcb11a34e8", "sighting_of_ref": "indicator--7ac10d18-bb21-4ce5-8aa8-ca1e66689de3", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4a31e9f-1940-484b-8142-3cc94dcfb85d", "sighting_of_ref": "indicator--11b7bed0-33e6-4242-b9d5-6364c94a3bf9", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56fc9a6d-15da-4c46-a917-52451308c3c3", "sighting_of_ref": "indicator--0f63026e-429d-4c97-9772-d906b51d1a82", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b201899a-c5d4-4669-9c10-1c06b40af1f3", "sighting_of_ref": "indicator--b835b743-d428-4538-b63b-ed7693ddba15", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63601e7e-6d62-4f0c-866f-9ad80f290a53", "sighting_of_ref": "indicator--b835b743-d428-4538-b63b-ed7693ddba15", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d774e9c-b09b-4b3c-a915-0cf26e1055a2", "sighting_of_ref": "indicator--41784abf-c6b9-4fd3-b7b7-51147fa1b450", "where_sighted_refs": ["location--cc47317e-2c18-43a6-8938-dea748a56ad5"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49c6eea0-0a12-4a0e-9db5-7f8bdf28ebbd", "sighting_of_ref": "indicator--9a8ded13-5f31-4261-8c04-1d45a57b9bee", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42fd0617-e93b-4ce9-ac0c-4762df854c89", "sighting_of_ref": "indicator--f0be593b-a012-4d26-9a88-3d1b7a71be1a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd779d2a-118a-47c0-bc0a-3432e2e603a0", "sighting_of_ref": "indicator--a0ce9f45-e9bb-44fd-a36c-44f2f58285de", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4afc0001-9913-4af9-87fc-160b9324f135", "sighting_of_ref": "indicator--a5012160-2949-4357-b27e-e1df90c11bff", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6bb483e-0044-4e70-b33f-e042745ad12d", "sighting_of_ref": "indicator--c576299b-c359-4fb6-9874-ecebd6ea9c88", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad3985ca-1ac8-47f4-b87f-e4fdf8def1c9", "sighting_of_ref": "indicator--c576299b-c359-4fb6-9874-ecebd6ea9c88", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4683c9d-70d3-4b91-988d-aa5467ac5aee", "sighting_of_ref": "indicator--252853aa-7271-412a-8f44-caaa79ca8600", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54f29947-ead4-4ce8-b5df-27c8dc4bdef7", "sighting_of_ref": "indicator--252853aa-7271-412a-8f44-caaa79ca8600", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b899cf9-7007-4561-8efd-a34033fbd3b5", "sighting_of_ref": "indicator--e060253b-6685-4f64-b562-02e6ff24651f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55fcf34c-129c-482f-b33f-aab6b761f2e9", "sighting_of_ref": "indicator--0b32c50d-a8d5-45e0-ba0f-63b74745c10f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4d3c588-f16c-4b03-8253-98fbf20eee32", "sighting_of_ref": "indicator--300d1559-1e23-4c62-8d85-b2a7d36d4cae", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce2e0f47-1350-4f3e-8231-e444053b562f", "sighting_of_ref": "indicator--8e916bfa-f719-4009-b6e7-3a04ca1e4d36", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64d004d8-8f0f-4eba-ba51-29df126290b7", "sighting_of_ref": "indicator--646e49a7-ac2b-422a-8693-4e7bd79c5a0f", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75758c2d-4c37-4045-b5b9-5c1468a6ee91", "sighting_of_ref": "indicator--09a5155b-146e-457f-a1cd-16d49f34abce", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a21b08c-9e01-4acc-9e86-f2bdd1003542", "sighting_of_ref": "indicator--09a5155b-146e-457f-a1cd-16d49f34abce", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec8bf7d9-9758-4076-905f-bbd3f7ebf1be", "sighting_of_ref": "indicator--edc485ee-9918-4306-a347-b55e4ac89935", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a119575a-6030-4794-bec9-00f23319948e", "sighting_of_ref": "indicator--9ca62517-9cf2-4583-9f4a-3adfa4902338", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6082c3f9-2396-4fd5-b863-3d08e1c2f2f8", "sighting_of_ref": "indicator--2c284ff9-1eca-4a9f-b1d3-ac93b8248bac", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6019bcc-cd78-46a5-ab2f-0b28b60f5dd9", "sighting_of_ref": "indicator--2c284ff9-1eca-4a9f-b1d3-ac93b8248bac", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43586747-7206-49e7-8b1c-0cd3c0d99cdf", "sighting_of_ref": "indicator--2c284ff9-1eca-4a9f-b1d3-ac93b8248bac", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcadd847-ab9e-4c3d-b68c-1cefe85519db", "sighting_of_ref": "indicator--05f2ea4a-2bb3-447a-9c86-f74f73f15751", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--025b7e0b-3830-427e-9291-b356736113c2", "sighting_of_ref": "indicator--b8638a1b-edf1-4341-8e6d-059d2bba4224", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36afec0a-a40f-42e9-8661-2f633b8039ec", "sighting_of_ref": "indicator--4323cb63-d4ce-490a-848d-c20ac7616da8", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37a91bdb-58e7-435a-95f7-608512088725", "sighting_of_ref": "indicator--68f24d2b-c523-4470-9e7e-d4c933932417", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f416d2a3-96bf-41b4-a7dc-c40460e59772", "sighting_of_ref": "indicator--4a9d9a15-e510-4462-900f-8df22fc21bc8", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cf74b24-9f99-4ec0-af08-f73c863dfb48", "sighting_of_ref": "indicator--3d4bc432-6b37-43b1-a70a-5be91d840621", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d58202d-e5b4-47a1-86ec-168c0cc7db66", "sighting_of_ref": "indicator--3d4bc432-6b37-43b1-a70a-5be91d840621", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec37f660-7399-43c0-8051-5034e655dd0d", "sighting_of_ref": "indicator--25f0f942-6e80-4b70-8307-0f10b04bcc01", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ca64937-414e-44d4-82bd-c983443a73c8", "sighting_of_ref": "indicator--7326c957-0d93-4e18-ad40-261edfdb3055", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dc387fe-5d2a-4e41-8895-520471fe86ee", "sighting_of_ref": "indicator--0bbb7bc3-26f2-473a-aeaa-43d2e4e4c893", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01f40273-7706-4a4f-9156-ae89375b5f0b", "sighting_of_ref": "indicator--266c9a08-f5f4-44d1-a8f0-da8dd6b4f25c", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2701bf1b-5833-4096-99bb-3af972d85e38", "sighting_of_ref": "indicator--266c9a08-f5f4-44d1-a8f0-da8dd6b4f25c", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0788fd29-e812-4e93-b79c-515974c1750f", "sighting_of_ref": "indicator--1c29cfdb-8cb6-49aa-a237-fdc82f197ea5", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaf06191-46ec-4b20-b92f-fc2b44a6345b", "sighting_of_ref": "indicator--1e0f10d3-c695-4e65-bd4c-130f4964b82d", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0334c596-7e2b-451d-9c55-0cc58810b894", "sighting_of_ref": "indicator--6331cb33-023a-48af-b54a-d334f8b3afb4", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4fc3803-3e73-4b93-afa3-15890d4c4c89", "sighting_of_ref": "indicator--2d47f3e8-a28c-4a4b-bc0e-e514b825d1ff", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1175a1c0-382f-40c8-83e2-9f7d1680043e", "sighting_of_ref": "indicator--2d47f3e8-a28c-4a4b-bc0e-e514b825d1ff", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--396009b2-6b8c-4ff0-8fd1-25b24d6f3cbe", "sighting_of_ref": "indicator--5b2d543a-a197-4895-8bf0-2ce3d65409c3", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad16f9fe-cde6-4080-9ac7-1a0cdef6cd9f", "sighting_of_ref": "indicator--5b2d543a-a197-4895-8bf0-2ce3d65409c3", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--203637f0-236d-4905-bd05-f1b20592d321", "sighting_of_ref": "indicator--fdb3204b-5690-430d-9562-317ebd1d54e7", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86c116a6-3bcd-4f26-8f02-0063ac6814ed", "sighting_of_ref": "indicator--220c12ea-1bf3-4cb1-9b96-1a15008b9b6d", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57604279-8c37-446c-8fdd-4e3e1872025b", "sighting_of_ref": "indicator--cbf88d72-52bd-4b94-bddd-7d1e0d8e5172", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3a8b9e0-3a35-452f-b893-d631f5d6cb24", "sighting_of_ref": "indicator--1eeb6c27-d892-4380-b70a-76f2f33dfca8", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ad1f7ee-3f02-45d0-8e6f-3ef37760a16f", "sighting_of_ref": "indicator--312ca1c8-1d6c-4385-9f32-c04231b59bd9", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b893b3df-aac0-4993-9a51-6462d1246727", "sighting_of_ref": "indicator--f0222b9e-1a4e-43a6-8664-3e2f98ac2d61", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--322e6262-e477-44ed-bcc0-55b3827a1734", "sighting_of_ref": "indicator--b172c2a7-17f7-4df2-b6b7-8b9ce4039c64", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4715a7f6-db45-482e-8099-2b70d672a47d", "sighting_of_ref": "indicator--b172c2a7-17f7-4df2-b6b7-8b9ce4039c64", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c811848-368e-4558-a410-c3999c883cba", "sighting_of_ref": "indicator--b6c8a94c-7ed6-4de8-ad57-9c659963da9d", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19282ab7-ee3d-4f23-b2b9-ea173e15132c", "sighting_of_ref": "indicator--a37a1b6d-7b4a-42ec-b2f5-35c333fb9246", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47e02b68-e4cf-46c2-95eb-fb26e66d40f2", "sighting_of_ref": "indicator--39acf386-db9c-41ca-a853-1a73047b9bc4", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb836e8b-7603-4279-8140-4ec11fb109d4", "sighting_of_ref": "indicator--39acf386-db9c-41ca-a853-1a73047b9bc4", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08ed4c3e-1e7e-4931-92d8-7fb31cdd95f6", "sighting_of_ref": "indicator--5f2cc872-007e-4271-a016-04324d555267", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c26cec42-f624-4d1d-a5fb-50d3049e269b", "sighting_of_ref": "indicator--5f2cc872-007e-4271-a016-04324d555267", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e3117a4-73d3-4e83-abb7-3a7118f53c41", "sighting_of_ref": "indicator--493782ea-3367-4ead-a5a7-b277720c5f7a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33eeb718-f756-456f-87c3-3b546f4e2e22", "sighting_of_ref": "indicator--0d9400bc-6175-48dd-a2fa-8b2e0e2af8a2", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dcd476f-bde2-4ef7-a23a-c4144b47f793", "sighting_of_ref": "indicator--0d9400bc-6175-48dd-a2fa-8b2e0e2af8a2", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d796490-44e6-47e6-9cab-82178dc20ce9", "sighting_of_ref": "indicator--b9b85269-ece6-45fa-bf43-3f0933d67d33", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0e36ca4-db64-4183-a8b0-b4f37f411b54", "sighting_of_ref": "indicator--1c2040f5-ac9a-488c-9e73-19fd272941fe", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6034a3fe-26ae-496b-b414-1f90cd1f74fa", "sighting_of_ref": "indicator--1c2040f5-ac9a-488c-9e73-19fd272941fe", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7942312f-47e9-432d-9afd-2a08ba470014", "sighting_of_ref": "indicator--69891323-fc0a-4019-ada0-bee8dacec532", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1bab034-d98a-4730-96be-65b8a2612a6e", "sighting_of_ref": "indicator--2ce76cbb-3c60-4c30-8468-a31f5bb32ff3", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96591e58-8dfb-4594-bd22-85b47f4fd24d", "sighting_of_ref": "indicator--2129f8a3-16b4-4e8c-adcc-a7df425136cf", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6570f0a3-52ed-4403-a011-09fc3bfc6d76", "sighting_of_ref": "indicator--83e0a48c-45b2-4049-81c4-135bdc1dc37b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eec4bc29-3ec5-477f-8f18-2dc43190c994", "sighting_of_ref": "indicator--c7aa16bf-3a32-4d49-8d19-b298e470bbb0", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--feb60a1d-4558-43a1-8083-280b6afc5471", "sighting_of_ref": "indicator--296b039a-0465-4052-aacd-d0865282fab7", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2350698d-a31a-4c6b-9452-3242c1107e45", "sighting_of_ref": "indicator--761581e7-ce8b-40bf-9c90-0f236f4066df", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d81db688-ca6a-489b-b1f6-38ef3caccbd7", "sighting_of_ref": "indicator--80c7ad68-6828-4c25-b63e-f6e66257a311", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84566f27-ab94-4c24-9993-b11881142b9e", "sighting_of_ref": "indicator--80c7ad68-6828-4c25-b63e-f6e66257a311", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc7fd770-04c4-4334-ab5e-984594086cb3", "sighting_of_ref": "indicator--0a1f2cad-a86c-4efc-91e6-dd6f8322498f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07950bf4-a058-440c-bff1-7feb2c102f1c", "sighting_of_ref": "indicator--d5d2a4d1-4e4a-4d76-bc05-596bbbbe170d", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a913f278-e2a9-46ed-bc8d-0b88358a087b", "sighting_of_ref": "indicator--d5d2a4d1-4e4a-4d76-bc05-596bbbbe170d", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--667b7e5a-ff91-4488-8f2f-cebf2ca578d4", "sighting_of_ref": "indicator--2c34d976-d096-4a55-9f2e-c1228dcc69dd", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cdb2926-8215-4876-bde5-1ce7de44a40b", "sighting_of_ref": "indicator--2c34d976-d096-4a55-9f2e-c1228dcc69dd", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d6d7cd3-f52a-4639-a44e-1ff868e1f1c9", "sighting_of_ref": "indicator--93b4fe93-6eec-4e1c-83c2-77a3ff928332", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e7543a7-38af-4131-978d-d37dad0a3557", "sighting_of_ref": "indicator--93b4fe93-6eec-4e1c-83c2-77a3ff928332", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a74bc17b-e689-40c5-aa10-f02afc09dd2e", "sighting_of_ref": "indicator--4a5e050f-9b06-4b42-97c1-987d87342778", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--438dec9d-75db-42b5-9ccc-c072b19e30d0", "sighting_of_ref": "indicator--4a5e050f-9b06-4b42-97c1-987d87342778", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3fd710e-d6eb-4389-b64c-88ed8beac111", "sighting_of_ref": "indicator--4a5e050f-9b06-4b42-97c1-987d87342778", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cf4dff7-2106-493c-9d69-5e12f97aca13", "sighting_of_ref": "indicator--e95424e4-0f1c-4aba-be10-ed479afe1ad0", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a9b1823-935f-4953-a05a-c7d6353a594d", "sighting_of_ref": "indicator--e95424e4-0f1c-4aba-be10-ed479afe1ad0", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef74c9b3-0477-4273-a161-a44262f42f44", "sighting_of_ref": "indicator--a7f19dd4-9c8b-43c5-bc3f-054b903d7a49", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa43242c-25f5-4a0c-9896-1cc439ed2167", "sighting_of_ref": "indicator--1a7e4321-744c-418c-a7a7-87ffd391f555", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbf486a3-10df-4c9a-af3a-a2db63f2d95c", "sighting_of_ref": "indicator--b90d89f5-0dd8-4cf8-a542-9b08453187ee", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ead0f462-da94-4690-985e-30ee60c453f1", "sighting_of_ref": "indicator--fa6c99e2-d641-48a5-8706-157590078c25", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af8abe5f-fea0-43d3-960c-23694ee5cfab", "sighting_of_ref": "indicator--a859054a-2920-485d-8ece-b4bb13da3200", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd8b4f6b-e118-4160-b72f-ef23dc2dc12e", "sighting_of_ref": "indicator--0f196a0a-6e9d-4e56-910f-04dee93255e4", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c99b3efe-7b70-447d-bf88-94c1140ca4dd", "sighting_of_ref": "indicator--0f196a0a-6e9d-4e56-910f-04dee93255e4", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3114921-73e7-475c-a371-1e92f23da247", "sighting_of_ref": "indicator--0d459426-fb28-44c1-8786-6c051da87f0a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab7dfdbc-b836-4bff-9b9d-32ae1f045ee5", "sighting_of_ref": "indicator--b3a6ff57-ee0b-4772-a110-34158df251bf", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a67f2a8-86b7-4866-a6fb-d85bbd14d281", "sighting_of_ref": "indicator--b3a6ff57-ee0b-4772-a110-34158df251bf", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cae811fe-df7a-4692-91b6-a70b47aad8b6", "sighting_of_ref": "indicator--9d8812b3-6c56-47ff-8c67-2e404bbceb13", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e7ebc42-8883-4f20-9aa7-ec64bd9c31be", "sighting_of_ref": "indicator--9d26afb1-75b2-4c85-bf14-130e31fd032c", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90808217-730a-4700-8e11-ffcf331a68f7", "sighting_of_ref": "indicator--938c2a3f-dea4-48f8-8acd-75bd602e6a1e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02369b39-bec7-424c-a5d1-6e9923b2f312", "sighting_of_ref": "indicator--938c2a3f-dea4-48f8-8acd-75bd602e6a1e", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce0062f9-b72b-4db6-91a1-0aae0b8e8e79", "sighting_of_ref": "indicator--8bdcb9eb-9e1a-456b-9871-3f5de023b6d4", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bbf9af6-572a-4cfb-bc4d-807690857c1a", "sighting_of_ref": "indicator--1b9b12d8-56f4-4d5e-9f6c-47eaddca8085", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8eba97b0-fa68-43c4-8864-c4ce83701b67", "sighting_of_ref": "indicator--1b9b12d8-56f4-4d5e-9f6c-47eaddca8085", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54da3deb-af94-4dc4-8b8f-72f7a337f8f3", "sighting_of_ref": "indicator--147c4e5b-70b4-4b6f-8ff1-4e43186ce3be", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28d79bf4-2092-4e8c-8061-c454c0948061", "sighting_of_ref": "indicator--5d963748-9a2a-4f01-b4f8-d5e43d5fd721", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb4bfe89-b8e3-418b-9e3c-1f1a9355146d", "sighting_of_ref": "indicator--5d963748-9a2a-4f01-b4f8-d5e43d5fd721", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e6b16ff-e5e1-4cd6-b3ce-4c29782c2dc0", "sighting_of_ref": "indicator--feabbb3d-dd99-4bb0-81c2-bf10794ef85a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e3a7eef-5cd3-4e98-a3ff-4936da2bef16", "sighting_of_ref": "indicator--ccc62de6-9d03-4fc0-a3b7-1309d28dda27", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8ef9acd-1580-4c76-965e-913010bb1382", "sighting_of_ref": "indicator--93c61565-95b0-4448-8a9b-fd0a71cf6858", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c5a4f4b-7464-4e89-bb0e-45e9c849f685", "sighting_of_ref": "indicator--93c61565-95b0-4448-8a9b-fd0a71cf6858", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db1a3d87-643e-40fe-82b6-c511280137d5", "sighting_of_ref": "indicator--adcbf623-bacd-42ff-9546-ec932fa7d88f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2e6c4f0-5431-4200-9458-3e40957a38b5", "sighting_of_ref": "indicator--026541ae-b624-45c7-8a80-972e7aba4957", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3d49a35-b023-49c9-bbce-0c5fe581a75d", "sighting_of_ref": "indicator--026541ae-b624-45c7-8a80-972e7aba4957", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--410512a2-b110-4727-85d2-d162e625ea88", "sighting_of_ref": "indicator--249d3b0d-f1ae-4daa-b52d-710157310d77", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a5fe9c7-c6c1-4b07-905f-439726d2d2ae", "sighting_of_ref": "indicator--0afcba22-023e-4218-9183-3c3cc1132792", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cc537ac-c0fa-4c51-adec-38e30bfce786", "sighting_of_ref": "indicator--4a73f089-6aa8-4b9d-80f3-0fa4cc8c2438", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d5fbf3a-4639-42fd-88f5-907cf117a611", "sighting_of_ref": "indicator--d5f93389-7e8a-407c-b7fd-7c9b74aff577", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ded7dc0-9f3f-4919-82e4-f75845e2c630", "sighting_of_ref": "indicator--d5f93389-7e8a-407c-b7fd-7c9b74aff577", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b237caef-fdc7-4925-b8c1-d743707c57b5", "sighting_of_ref": "indicator--68b9e14e-4765-4492-8a71-c5bb27a71c0a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf578688-d865-4a4f-b9b5-f31d0b91ca27", "sighting_of_ref": "indicator--4e0d706b-8809-4f18-8794-bce370adb278", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3d826a7-8ddc-4f68-b346-b37d8b3c6881", "sighting_of_ref": "indicator--5ac24b00-95b7-45b9-ba34-b2fda0ede299", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--077d7673-3062-4b86-8d8f-05ae973f0e14", "sighting_of_ref": "indicator--5ac24b00-95b7-45b9-ba34-b2fda0ede299", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91a837e9-fc50-4625-a0e9-6a4b23cf1620", "sighting_of_ref": "indicator--a00d7dd5-0fb5-4210-972a-2644835a952a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--386921fa-1123-4f32-bca6-4bf2b75f5987", "sighting_of_ref": "indicator--a00d7dd5-0fb5-4210-972a-2644835a952a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a7d7432-803c-4205-ac55-4b8a43bd612e", "sighting_of_ref": "indicator--015b332f-f5eb-4ecf-baaa-1de873dd5c08", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0333479c-9d99-4fcc-9bf2-d7fe34cd0c9d", "sighting_of_ref": "indicator--015b332f-f5eb-4ecf-baaa-1de873dd5c08", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94a2405a-4ecc-4bee-9342-9ac38fc5e09d", "sighting_of_ref": "indicator--6b4de648-fb99-4597-b5cb-c46977616614", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e689d476-0211-418b-a789-ed8620e86769", "sighting_of_ref": "indicator--df544356-8ae6-4523-89d1-43f0f4255577", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2cab6e3-6825-4873-b4fd-e16315fa4ff4", "sighting_of_ref": "indicator--df544356-8ae6-4523-89d1-43f0f4255577", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c36abe45-c9a5-48bc-a9cc-9aa986c95440", "sighting_of_ref": "indicator--df544356-8ae6-4523-89d1-43f0f4255577", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64b9d587-a940-499c-a3a8-6a7dd45c411f", "sighting_of_ref": "indicator--09c690de-c338-4988-9d22-11ea8b0b4255", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44cad91a-babf-4221-9176-49878b4a657d", "sighting_of_ref": "indicator--f9b88669-69ac-4054-9582-78b2bb732242", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ef85733-230e-47a3-9edf-0f544a9c632f", "sighting_of_ref": "indicator--3a957aba-33f4-4650-9e94-f5967751bb42", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7335e8ad-047d-423e-8b1f-45c1f55047b4", "sighting_of_ref": "indicator--d9990042-5a27-4388-ba27-0cb69d829188", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6b04ecd-89af-4667-8c41-20b5a4de94a7", "sighting_of_ref": "indicator--f0a8bc35-af4a-40ad-b66c-bc9962fb11b5", "where_sighted_refs": ["location--cc47317e-2c18-43a6-8938-dea748a56ad5"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ec5b8ab-dad7-4f44-a8b9-7e6631e91054", "sighting_of_ref": "indicator--fa5c2f0f-150a-474c-8c69-8e2518dfafc9", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d12acff-be4c-48eb-92bb-de9e526eddf3", "sighting_of_ref": "indicator--3abd843f-d78d-427b-b2c6-6892ce1b9c4e", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d07e2e7d-eb68-43ad-9f35-7c576350e5d9", "sighting_of_ref": "indicator--5150ca22-deac-4596-aef8-c37cc8415c66", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94c34f85-8732-4dff-8b06-3bc8fecb4b03", "sighting_of_ref": "indicator--8a0d933d-4865-4442-87f1-f0fcb32ab56d", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99982c74-a1fd-4c7f-8a5d-734049baf450", "sighting_of_ref": "indicator--8a0d933d-4865-4442-87f1-f0fcb32ab56d", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce944314-7c10-4fb6-932f-abae39dba64e", "sighting_of_ref": "indicator--e3aa7642-cafb-4bb7-83c0-1b8c4b3b1496", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27ed91c8-8971-4298-b225-cc6f27e61c59", "sighting_of_ref": "indicator--e3aa7642-cafb-4bb7-83c0-1b8c4b3b1496", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4828f182-0be8-4f58-895f-aaa0f6ef902a", "sighting_of_ref": "indicator--5d886b09-e9b7-465e-b925-38ddf5b84e5a", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5cecf67-e09f-41aa-aea1-dbcc1d36f550", "sighting_of_ref": "indicator--036d35d2-5a6b-4b6d-8efa-321eba50c1b0", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d795f60c-fa2f-4dcd-b76a-0e49e65d5a07", "sighting_of_ref": "indicator--36efc57e-fa64-4e3e-844b-8c928c17a41a", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--076b4d5a-de8f-4d20-b460-adff99e02a55", "sighting_of_ref": "indicator--36efc57e-fa64-4e3e-844b-8c928c17a41a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18914c5f-3704-466f-969f-95f0e3792045", "sighting_of_ref": "indicator--ba835bd2-31b8-4f07-ad51-dba779da8d1c", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab42a9ce-65aa-42fb-8da7-1ea015d2456b", "sighting_of_ref": "indicator--ba835bd2-31b8-4f07-ad51-dba779da8d1c", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1c60dac-55ce-4cf2-9dc7-641256559816", "sighting_of_ref": "indicator--5535a70c-c36d-4004-921e-9a9ffc998a9b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61702123-8df1-4f18-8a9f-a3984e026286", "sighting_of_ref": "indicator--5040c58c-1247-4339-ae92-b50020ec87d0", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46f9db5a-e1f0-4406-bfbd-98faa5316e27", "sighting_of_ref": "indicator--b81b0760-f607-4b33-8810-a376382ba8e3", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fda355f-2864-4f9a-9e66-a59d75c0b250", "sighting_of_ref": "indicator--b81b0760-f607-4b33-8810-a376382ba8e3", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91bde29e-f0c6-449d-be17-334fa4b08a5e", "sighting_of_ref": "indicator--b81b0760-f607-4b33-8810-a376382ba8e3", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1184f4d-6a6f-4191-aed6-8954da8e95c3", "sighting_of_ref": "indicator--96f20927-8022-41c0-9728-cab2fcd5c20b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83e95a3a-2706-4d2e-83c3-fc3ae9a701f3", "sighting_of_ref": "indicator--2f98e8f5-b307-47c5-8a19-bd563a9ebe60", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2748d38a-f26e-4877-8ed9-58045d83dde5", "sighting_of_ref": "indicator--0544602e-5e7f-46e6-b53c-4290416135c5", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76718da2-6047-4185-847f-c96384c85e44", "sighting_of_ref": "indicator--97f41dcc-eca4-481a-8746-1f2f725e5176", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdbf9cff-87b3-4751-b5fc-8c2bd453dceb", "sighting_of_ref": "indicator--b311ce16-9025-4aa9-a505-5116a05038c0", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a00ee634-9b3a-49ec-bf2e-25e3e831cca4", "sighting_of_ref": "indicator--3d2c57ef-8cb1-42a9-b5b4-452d7ccab96c", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b5da567-b064-4629-83fc-cedd209f8aff", "sighting_of_ref": "indicator--3d2c57ef-8cb1-42a9-b5b4-452d7ccab96c", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07d362bc-59ec-4997-b7a9-3d4864e5ace7", "sighting_of_ref": "indicator--c388f504-8a03-472a-940f-94aee0d96fab", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36c32136-8e8f-4d82-8b4b-cf58e639028c", "sighting_of_ref": "indicator--87f56625-bb2f-4fdc-8876-8c5d36113590", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5099b35-d791-4aca-9524-f10c8906de27", "sighting_of_ref": "indicator--ac87a48f-4776-40c1-a5df-4220fcfafcc7", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff6c0766-5662-4555-8af1-390dce3f36a9", "sighting_of_ref": "indicator--ac87a48f-4776-40c1-a5df-4220fcfafcc7", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12a9b383-71ff-45d0-8c01-55450c98cee8", "sighting_of_ref": "indicator--4d05adc3-7373-4956-aa54-f110ddc8aa5d", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abacfa29-9891-473f-b571-60f717342c71", "sighting_of_ref": "indicator--0750d162-3408-45ad-9809-07961b4cf62a", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56fa6f28-aa92-4d94-8356-94e8054332b1", "sighting_of_ref": "indicator--3039646f-5d2d-45b4-b65c-f8d455f8e915", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c49b35ca-eeeb-4395-890f-cf40e97a5372", "sighting_of_ref": "indicator--3039646f-5d2d-45b4-b65c-f8d455f8e915", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f12a9b5-daf0-41fb-9d9c-3379ac79220a", "sighting_of_ref": "indicator--971b9ff0-5241-42c1-af98-06829d5a002e", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d141f81d-4970-4a37-87f5-57d61abd0771", "sighting_of_ref": "indicator--72ba4603-1f6b-4b2b-8787-048d629ac163", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b85fca0-7559-4954-a406-0de1bc78e03f", "sighting_of_ref": "indicator--26808f61-69e1-4dc0-8212-f30ba1b05dc5", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3221329a-4da2-4599-9159-251bf2520bad", "sighting_of_ref": "indicator--26808f61-69e1-4dc0-8212-f30ba1b05dc5", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2bc1345-7b97-4bca-b0d3-1f0e431bf379", "sighting_of_ref": "indicator--379327f4-b240-4fd1-b8fe-4da359e22936", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82891538-36bb-4fe6-af68-1e44da8d6d7c", "sighting_of_ref": "indicator--0b42205f-fd27-4a84-950b-342a7824e55e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc8a6ac7-8c6f-4e13-92a1-9b48725f6b83", "sighting_of_ref": "indicator--67f5c8e5-a075-4476-b5f9-801a98a26eef", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16f62681-129a-4059-9d0f-88e46713be02", "sighting_of_ref": "indicator--3f804fb5-0828-4342-abc8-61a5d081454a", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e74e0681-6f2c-400d-9b32-87f6bfc9abeb", "sighting_of_ref": "indicator--7f94f659-6aac-4366-81c1-ef2b693460db", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f939c0f7-74b4-4884-8aff-a3638facf8c9", "sighting_of_ref": "indicator--ebe36bd5-8289-43b0-ad15-7d555deeddbe", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2d0853a-f289-4c09-bd49-de194fab15a5", "sighting_of_ref": "indicator--156e5481-25c2-4c11-ac1d-a456c0e1df1a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95360883-bc16-4a58-b9e2-a1ee9ebd9cd4", "sighting_of_ref": "indicator--156e5481-25c2-4c11-ac1d-a456c0e1df1a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9abab4a3-defd-4549-a624-22c819279c40", "sighting_of_ref": "indicator--dc1d9e25-fbdf-4091-bb51-717b92bc5627", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18be23e2-3857-4609-98c7-e4fc27c4b902", "sighting_of_ref": "indicator--ea9be8a7-e289-41c2-b5f1-5ddc9634bdbe", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cf93c61-06db-4382-bcf2-8a17ce98abba", "sighting_of_ref": "indicator--24f8403b-5116-4198-b2ad-c69a56cae5c6", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19483e4d-2835-4666-8cec-eb82f5983e6f", "sighting_of_ref": "indicator--24f8403b-5116-4198-b2ad-c69a56cae5c6", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4557016-0e40-4cd2-a17f-3d2727e89660", "sighting_of_ref": "indicator--c5d1d0fa-aa21-4c5f-bdcd-a437b9de6c57", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ecf6707-6998-467c-b2f5-3a023ce8fadc", "sighting_of_ref": "indicator--c5d1d0fa-aa21-4c5f-bdcd-a437b9de6c57", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02fc601f-9645-4dd3-ac4a-d32be7bc2882", "sighting_of_ref": "indicator--5855c87e-d604-4142-bbe1-703b0fa0e7f4", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86e5e5e6-9390-4fe1-bcec-ec6e5ccc4c1b", "sighting_of_ref": "indicator--5855c87e-d604-4142-bbe1-703b0fa0e7f4", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f615aaa2-1b51-4089-93a2-152431dbf57c", "sighting_of_ref": "indicator--d1fa7b40-2852-4b68-9ac8-6ce00668a0de", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6de0779-83b5-436c-bc97-9160cdf48266", "sighting_of_ref": "indicator--d1fa7b40-2852-4b68-9ac8-6ce00668a0de", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72775d3c-ec90-4b08-94a3-211212047a10", "sighting_of_ref": "indicator--5dca760a-1e8b-402e-a98d-1523a76d9868", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ad7f8f5-e7e1-46f2-985d-cd13e463b3fd", "sighting_of_ref": "indicator--5dca760a-1e8b-402e-a98d-1523a76d9868", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24fbd441-0254-4db4-9f9b-a35cc2c13a5a", "sighting_of_ref": "indicator--8bec4faa-da0b-4fcd-a63e-fe91accc60c4", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea7b470c-3d27-426d-a84d-9eccf9da0355", "sighting_of_ref": "indicator--8bec4faa-da0b-4fcd-a63e-fe91accc60c4", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c57c6b3-1654-4780-a681-150695ddeaf4", "sighting_of_ref": "indicator--8bec4faa-da0b-4fcd-a63e-fe91accc60c4", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80c226f7-3c5e-4fb6-9910-4ff7cdbf3bb3", "sighting_of_ref": "indicator--ef1faf65-e1e9-4e40-89d4-e95b33472ef2", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3583e491-3cd8-4ea0-b8f1-42949af86afb", "sighting_of_ref": "indicator--5320fdb8-279b-433f-9832-939817a04b2b", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5642f8d1-6688-4a0b-b1ce-6cf67b6857de", "sighting_of_ref": "indicator--5320fdb8-279b-433f-9832-939817a04b2b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3faab0a9-c123-4793-b0f7-b94a1c9c56f1", "sighting_of_ref": "indicator--0dc1d2a7-3ca9-48f9-8e80-5e35f0c1c778", "where_sighted_refs": ["location--cc47317e-2c18-43a6-8938-dea748a56ad5"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2482c4fd-b183-4ff4-8836-fb41f8b891ae", "sighting_of_ref": "indicator--545019b4-30e0-4058-badc-cbafe3573c74", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac0adac4-2569-4684-999f-7fc85e7af4da", "sighting_of_ref": "indicator--fe896045-81b5-4b3c-a015-654c07f5c598", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--003e3e3b-ac9f-42e5-928b-a087ff5b3ccc", "sighting_of_ref": "indicator--fe896045-81b5-4b3c-a015-654c07f5c598", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e6538e7-5a5e-438c-a9b3-323017d1a5ca", "sighting_of_ref": "indicator--0529d4db-6e80-403c-893f-b9ba70009708", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6544216e-c5ab-46bb-9dfc-454fe3cced96", "sighting_of_ref": "indicator--0529d4db-6e80-403c-893f-b9ba70009708", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69533357-ee8d-49ec-a13d-b5698ff1cbbe", "sighting_of_ref": "indicator--5c732fdd-bc91-4287-9514-d25c3459b08d", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--544d77de-18b6-4668-bbc3-8fd5478d7522", "sighting_of_ref": "indicator--5c732fdd-bc91-4287-9514-d25c3459b08d", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd14bf8e-f419-4daa-968b-c9c2e6e3ba26", "sighting_of_ref": "indicator--79a7c91e-cbb1-4056-ab4a-46a505238348", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e09a0e1-6294-460d-95a7-f515d1a098d6", "sighting_of_ref": "indicator--e512ee4a-9225-428f-bfa0-f11cdf89e460", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--971dcffd-61cf-4d5a-a4f9-0670c4a7af7c", "sighting_of_ref": "indicator--e512ee4a-9225-428f-bfa0-f11cdf89e460", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0fc44a9-478c-4793-98b9-56efdd2ebf26", "sighting_of_ref": "indicator--4ee96823-4ed3-4caa-9d8f-59df8b400ab4", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa2c88c4-5afe-4473-9b04-a915af569e7c", "sighting_of_ref": "indicator--4ee96823-4ed3-4caa-9d8f-59df8b400ab4", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0616c0b-faed-4032-b8c7-c37f9446e2a3", "sighting_of_ref": "indicator--4edd8ff7-6f8a-416e-a7f6-95e303a90944", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bf9d973-edf6-4991-8aec-97ecccf77176", "sighting_of_ref": "indicator--4edd8ff7-6f8a-416e-a7f6-95e303a90944", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68a38327-873f-40b5-9fd1-3ee9ef3eb661", "sighting_of_ref": "indicator--ff9a3230-cd49-4200-add4-39c16b222640", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53a97fe3-177e-4121-aa24-5d424f50cb3c", "sighting_of_ref": "indicator--680bdde0-45d2-462a-9185-8fe2bd46bdc4", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8514d3f8-1b33-4f80-9f82-7c5b22f28cdd", "sighting_of_ref": "indicator--680bdde0-45d2-462a-9185-8fe2bd46bdc4", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87c04416-56ac-4078-9417-887128c6d3b7", "sighting_of_ref": "indicator--a316ef52-71c7-4a61-bb26-ca5a3bbb3d74", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e7bf38c-e18d-4cf6-b38d-08090215469d", "sighting_of_ref": "indicator--a316ef52-71c7-4a61-bb26-ca5a3bbb3d74", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3acff17d-5c2d-41d9-9f32-ccd8a956c6ff", "sighting_of_ref": "indicator--4b8c489b-adb4-434c-ab5f-2429acc65ec5", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--502a8c02-eb37-4c33-9e0f-ba7b8c94122d", "sighting_of_ref": "indicator--4b8c489b-adb4-434c-ab5f-2429acc65ec5", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0b08fbd-53a4-4f6a-85c9-f1b6625fb2ec", "sighting_of_ref": "indicator--77371b21-7a9f-4a13-90ff-825fcd419f82", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f0b151a-2f30-4506-82c9-b0218d2ba178", "sighting_of_ref": "indicator--77371b21-7a9f-4a13-90ff-825fcd419f82", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e00b4fa1-a50c-429f-86ac-15144f769442", "sighting_of_ref": "indicator--9bcbb90c-d41d-4188-8c34-56628947e979", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c403874-97b3-4b71-ab6a-ed6e5e7b9db4", "sighting_of_ref": "indicator--9bcbb90c-d41d-4188-8c34-56628947e979", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44cbdfbd-78a1-49f6-8c5d-366b65ef6b2f", "sighting_of_ref": "indicator--ae0f7c8d-096d-4d7e-9555-aad3ec95e7ed", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca4e600f-7a5a-45ca-a8e2-61d069502a45", "sighting_of_ref": "indicator--dbd3cfc7-708a-4410-a7d1-d7c8740a975f", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3aa627d-5f76-480b-8549-d643172868c6", "sighting_of_ref": "indicator--dbd3cfc7-708a-4410-a7d1-d7c8740a975f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d87ab23-607e-4438-a2d3-c9f058149a9a", "sighting_of_ref": "indicator--50ab0d8e-7361-4d2d-a69e-11e8598d51dd", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5d5c952-d4bc-4df3-aa63-5ba62fa94cc5", "sighting_of_ref": "indicator--50ab0d8e-7361-4d2d-a69e-11e8598d51dd", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dff0f2c-ffd9-4a92-b4b9-78e6d12dd4d0", "sighting_of_ref": "indicator--03133773-a595-4ee1-979a-0e925b3f637c", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a398bae-474f-4dbd-8236-d8c4dcea2d44", "sighting_of_ref": "indicator--9fe8c0de-2a0e-4953-bfa2-71fb1600d0da", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6cf9c7b-c03e-4b30-b838-09a948e7da13", "sighting_of_ref": "indicator--842f263c-a2a4-4d34-86c9-a9b933f58653", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59222d42-018d-4c42-b120-903e230f884a", "sighting_of_ref": "indicator--842f263c-a2a4-4d34-86c9-a9b933f58653", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0b59143-2dde-4ef1-9dfa-984f5d1f5afa", "sighting_of_ref": "indicator--bca88ceb-b334-4a05-9817-52ded793a8b7", "where_sighted_refs": ["location--cc47317e-2c18-43a6-8938-dea748a56ad5"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b653cb5-9d09-486a-b362-66b4d3ff88c6", "sighting_of_ref": "indicator--71a00f72-f779-4843-bea4-cb5ae1956fae", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5f75269-328d-4667-b6c1-417c6b893c64", "sighting_of_ref": "indicator--71a00f72-f779-4843-bea4-cb5ae1956fae", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e19428fb-22ec-4f99-95fd-4f7d46dc7568", "sighting_of_ref": "indicator--bc524948-2515-46a0-902c-aa8b6b4c2fe7", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--510ae520-9409-4997-a3a8-64969b1fa6f9", "sighting_of_ref": "indicator--bc524948-2515-46a0-902c-aa8b6b4c2fe7", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be26338e-0f47-4845-b0ec-80fc1d2b4dac", "sighting_of_ref": "indicator--11b66287-0f41-4b2e-8cf5-5ee39de2309a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95f29f4f-b429-43f5-928e-2c0e5d78aac6", "sighting_of_ref": "indicator--e18f6af6-c54c-44e4-baad-f48f8ee1b2ae", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--893bf315-aca8-451c-a562-a2d9c2aa1baf", "sighting_of_ref": "indicator--e18f6af6-c54c-44e4-baad-f48f8ee1b2ae", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c97d9dfe-b26b-4bb8-8576-b691eaecf5e6", "sighting_of_ref": "indicator--56b8b6cc-e6d9-43ef-8eef-9b81a5e2c6f5", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f7aa4a1-a0d3-4415-bc0a-29c065f8e4c4", "sighting_of_ref": "indicator--56b8b6cc-e6d9-43ef-8eef-9b81a5e2c6f5", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe8d4c73-772a-4d0c-96e8-1a1d5596833d", "sighting_of_ref": "indicator--b9a5453a-6411-426e-b3cd-3f60c90e54e3", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec6f36fc-d774-40f0-a711-0bd477dbf2d5", "sighting_of_ref": "indicator--c3c2870a-d3d0-4440-957e-0a726fe17744", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae816512-61c8-4374-83d8-a10672db3d32", "sighting_of_ref": "indicator--c3c2870a-d3d0-4440-957e-0a726fe17744", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bbe5924-ec0e-45df-80e3-ff0ef46766b3", "sighting_of_ref": "indicator--6cd74310-37ac-4fdb-9396-6da799bc5aab", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--919e3a2c-bcba-468d-bb4c-745dc43dc4e7", "sighting_of_ref": "indicator--182a3271-10ec-44f4-b051-6c66538211a6", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ed7b8c0-e969-4522-b9a1-f975c5547edd", "sighting_of_ref": "indicator--c4a747fd-f981-496a-9334-14e7c0514dda", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c77ec03-7049-47d9-a875-c37fe0f7cc40", "sighting_of_ref": "indicator--c4a747fd-f981-496a-9334-14e7c0514dda", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c4724c8-66d9-40b5-9d4b-20325759e09e", "sighting_of_ref": "indicator--c4a747fd-f981-496a-9334-14e7c0514dda", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63386170-bc73-459f-98f8-143bdb36b60d", "sighting_of_ref": "indicator--78c42679-8935-439d-a2bd-d6f4f9b18f0c", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e42816f-7016-4346-b62b-a1533ad4e6be", "sighting_of_ref": "indicator--ff72e911-26d0-4e30-8a15-91ebb87b13e3", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f13fe67-dacd-4f77-9497-9a68aef10675", "sighting_of_ref": "indicator--72d60272-3bfd-4c4c-834e-f8c171ce7253", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e506b164-29f5-4527-a749-0fdb42a6cb9a", "sighting_of_ref": "indicator--fe7bbe83-5d3d-4e63-82bd-e4a498b5cf12", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41ce49b8-84ab-4282-b143-1e019aa25ea0", "sighting_of_ref": "indicator--ffac7b1d-0148-4908-af7f-3ecd6afc35d2", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2808885-8f25-45c1-9c5b-e5f9c13b1dfe", "sighting_of_ref": "indicator--67ab1614-7718-48bf-a63c-2e9cfe1774a6", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6aef04ca-13b7-42aa-8022-28374f94ddbd", "sighting_of_ref": "indicator--06ebac7a-8b00-4118-af2c-f0171b13a4c3", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9583b404-e559-41a8-af49-d2cbb2217ace", "sighting_of_ref": "indicator--6bb8dad1-0f9f-40f1-88e5-3f13afd83de4", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f46c50bd-671b-4ea8-80bd-d0e94a33c3f3", "sighting_of_ref": "indicator--c62c3cac-9db6-4642-9202-96a9021115e7", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88576b4f-5a01-4675-9ee4-494e562e8a93", "sighting_of_ref": "indicator--a6c797e8-f89d-42a2-9d41-b1772030c995", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2464e4cc-c428-4292-8c56-6cd8cf7f0184", "sighting_of_ref": "indicator--8a55819f-c27f-4382-a87d-960a57b8aee5", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68dc3d63-1de8-463a-9153-bda749859478", "sighting_of_ref": "indicator--5d4a4e0c-d964-4ac9-8644-dea259e26261", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19cd4652-a1fc-4bbd-9e76-2b81c7dad8f1", "sighting_of_ref": "indicator--c961a6cb-99a1-43b9-b91d-7be16d64118d", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b34561f-ded6-4691-85d4-f036478b9bf5", "sighting_of_ref": "indicator--c961a6cb-99a1-43b9-b91d-7be16d64118d", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--844c4346-9376-4e64-a44f-8781f7d72ac2", "sighting_of_ref": "indicator--e1f2250f-6dd9-4d22-9d54-5e05b4ce93c1", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78862a57-2820-4eb0-aa02-66fcf8eb5780", "sighting_of_ref": "indicator--7dea94dd-d9e6-4cc4-9a2d-5f138e5505c1", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c311eba-66c6-4a1c-941c-12addbb8da53", "sighting_of_ref": "indicator--27d2d23e-3363-4239-b7b2-daaccb3d489a", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1c430dc-0053-4cc6-82f2-3c862e20e17e", "sighting_of_ref": "indicator--6dbd2f5b-c827-4f6a-93f8-eae25219678b", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45674bc2-24ca-41b7-97fa-07e60b1befd1", "sighting_of_ref": "indicator--6dbd2f5b-c827-4f6a-93f8-eae25219678b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3c81e88-3e3f-489e-8bea-362a996d6f30", "sighting_of_ref": "indicator--33892c6d-b9fa-4582-a903-2814dba93044", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a14aca4-17e8-44c1-9da6-cc3e2d22a956", "sighting_of_ref": "indicator--e29ef5b3-7246-45b6-9b07-b496a0eafc47", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe66826a-4d96-443f-b599-0a878851bd2a", "sighting_of_ref": "indicator--10238c98-dc37-474e-8432-207fcecb1aef", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ddb86f5-f009-4aeb-bff5-faafa2547d3b", "sighting_of_ref": "indicator--a70be611-858a-4d83-bbcb-0e65e9bc4454", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db9e8663-b4ac-4953-a896-6de509843d6f", "sighting_of_ref": "indicator--0f4f3443-b18a-4cc4-b329-e9c41da15709", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd6bda71-a833-4a90-bb57-5adb9faad710", "sighting_of_ref": "indicator--4e7986a7-64e4-4cc4-bfe0-bcae50105108", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c09f7168-68bd-4842-9fa1-ea5265c94b3b", "sighting_of_ref": "indicator--11aeb3ec-7038-4c98-beed-668c9f0c1972", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--401cea75-528c-49eb-85d8-c23299e41824", "sighting_of_ref": "indicator--70d31986-d4d6-4d12-82a3-82ee76eb2d99", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69997d56-8436-4e96-ac2b-a54ea3d17ba0", "sighting_of_ref": "indicator--4482a00b-9b8f-4934-8231-b87fc21dbe94", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fca9f3e-2254-4049-9b23-132a44a51a36", "sighting_of_ref": "indicator--46a222bb-b1de-47a3-9788-8f20dc1b21e0", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa8f98dc-d88f-4301-88cd-b2862046403b", "sighting_of_ref": "indicator--0a862b6e-1199-4f39-b835-30945d0f1e52", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75c51fef-cccd-4d82-a19a-67e05a786436", "sighting_of_ref": "indicator--f238681e-b548-4bf6-acfe-94b16eb82ce0", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4e61d0e-06a7-426f-b325-23822e702437", "sighting_of_ref": "indicator--004a1367-bbb3-4021-a205-3f9114e1988c", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1fceb4c-93bb-48de-946d-85145b489ad7", "sighting_of_ref": "indicator--c65264c2-9ec9-420f-a2a5-4884862e248a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--135e5125-5a03-40cf-92f0-55826b815d26", "sighting_of_ref": "indicator--06682adb-22e1-4e45-96f4-f41761f8c5c1", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--641ea305-dfc1-4a8d-8d59-d17481415947", "sighting_of_ref": "indicator--9f550fd0-1496-4a06-91ed-b227959e73b2", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--126d65e6-a2c4-427b-a41f-bd181e4dfad1", "sighting_of_ref": "indicator--74775abc-5005-4c61-b708-357989f3aaf2", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47e4c282-20ed-4b68-b289-0dce80ba936f", "sighting_of_ref": "indicator--74775abc-5005-4c61-b708-357989f3aaf2", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de5904a3-d383-4597-8c4d-7801f0289da1", "sighting_of_ref": "indicator--a5c0068c-c790-49ee-8432-93c13a0bb251", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a53bb79a-5c10-4221-aadb-442b720455e4", "sighting_of_ref": "indicator--b5891e5d-b69d-446a-a60a-82110035a5f5", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ca8bd02-db4a-40f4-9a0d-9047a1516737", "sighting_of_ref": "indicator--eb932356-26a2-4523-ab81-be7db76b11d3", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7d50c30-931f-4c5a-9dc4-324d89312c73", "sighting_of_ref": "indicator--f6e5764e-8f61-41cb-a47b-dc24f20753b7", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de157374-d5c5-40ff-aa8a-c23cea5ecaf5", "sighting_of_ref": "indicator--70e04ee9-8b4c-4925-89f2-9433c0bf1d6e", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a3b6b6d-2188-4fcb-886b-6cebbbe5a1b7", "sighting_of_ref": "indicator--91153919-54d1-436f-a86f-13ce7341cc4e", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41a83774-b770-4893-a213-731b96d8f5af", "sighting_of_ref": "indicator--6b384f96-e163-4be1-a3f4-b464d037dbec", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a1670eb-986e-4afd-af53-62e78df3ab06", "sighting_of_ref": "indicator--6b384f96-e163-4be1-a3f4-b464d037dbec", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6e038b6-bf42-4401-8fae-409be43927f2", "sighting_of_ref": "indicator--66c1c6c5-9122-41e0-b5aa-641b73d40026", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe1b7d6e-0777-4c2a-b954-d68cc6995f62", "sighting_of_ref": "indicator--e6c27593-1784-4490-8a96-ec16ae0e5b8e", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ca810b5-5799-4046-87f0-24675cd8dece", "sighting_of_ref": "indicator--e6c27593-1784-4490-8a96-ec16ae0e5b8e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cda57be-ecd1-4ef1-9ca9-728ac75e3d13", "sighting_of_ref": "indicator--e6c27593-1784-4490-8a96-ec16ae0e5b8e", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72a6b390-c4d9-4eac-8189-850a4937cd45", "sighting_of_ref": "indicator--a5c243e5-805f-4444-b465-ef7d7dfa2644", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0596bf30-4c9f-47e0-9330-54d26fa073db", "sighting_of_ref": "indicator--07e54501-501b-4740-a33b-24c0c960d711", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92389ba4-2586-4203-b577-49e6c8f9fc8f", "sighting_of_ref": "indicator--07e54501-501b-4740-a33b-24c0c960d711", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6d085ef-fb05-416b-9f2f-54addb4ae406", "sighting_of_ref": "indicator--b83d0e90-61fd-4139-8d3d-b4075748c93b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97fff89f-fb97-4e6b-beb3-e9a6878cb0fb", "sighting_of_ref": "indicator--7018df25-6357-496a-b5dd-619909bfc0bf", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64778f53-f6f0-4987-884a-14b7690c4190", "sighting_of_ref": "indicator--541facd4-ade0-4a92-92c6-597519c75a12", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa20fa24-6d7b-4b73-97ca-629620668408", "sighting_of_ref": "indicator--ff2c7cfb-fde4-44c4-b8e3-719fe786ff19", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8182f8f-ab14-4299-8d18-e5ea97ac61b8", "sighting_of_ref": "indicator--b7e4c9af-5f20-4ef6-ba46-d5926564bdd4", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5317b1e3-ee94-4b86-b4c0-5a0f2b3e0ca5", "sighting_of_ref": "indicator--0d473d36-15d2-411e-8b72-e27e7e27ae0d", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--813f0617-eb44-40d0-989e-5b40157fb194", "sighting_of_ref": "indicator--2a73a49e-4b58-4a00-973f-bfee55cd51ae", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70283bc4-7a2d-44d9-8409-a31d6fe34a8d", "sighting_of_ref": "indicator--80f9d3d3-0593-4dc1-b9d5-2a5111b9d7e6", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74daa154-98fd-47bf-bbc5-f44cae605110", "sighting_of_ref": "indicator--111221b3-197a-4b50-b36d-cc486f34544d", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a327a0d8-b776-423e-8612-a8a888ecae5b", "sighting_of_ref": "indicator--5d64f1e4-e5ca-47b1-a9fa-31a313e55704", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--150e9a91-db76-4031-8b4b-86440a0ee691", "sighting_of_ref": "indicator--5d64f1e4-e5ca-47b1-a9fa-31a313e55704", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69693256-40c9-4a36-8374-afbf5a0b3149", "sighting_of_ref": "indicator--5266d8c1-e68d-40cc-8082-eddda9880287", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--172863cc-ad2d-4b2f-9b01-a4e57385270a", "sighting_of_ref": "indicator--b32e9acc-6428-47b6-b273-ecfe6a9ef331", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a27039f5-70cc-4821-9109-fc276924e530", "sighting_of_ref": "indicator--88762892-6e5c-4e35-9d1e-124a1ddf7060", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f35f45ce-24e8-4d28-8f80-d26452370053", "sighting_of_ref": "indicator--b1c1df6b-c043-4270-b637-5934bf44e4be", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74061e74-7c27-4701-af11-34a026ab283b", "sighting_of_ref": "indicator--b3685a1c-849d-4070-99dd-e0be7241af8b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12aa0670-940c-471e-a57f-02d82bf352eb", "sighting_of_ref": "indicator--27220df7-9e0e-41c6-a3ee-19fea5e8ee23", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21da5295-8ca4-46b9-8af3-01c4c2d632b8", "sighting_of_ref": "indicator--892b6742-6218-4ef7-a53d-f378149543cb", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23f41677-51c1-4997-af5c-da59b6c9d885", "sighting_of_ref": "indicator--889c9a9c-888a-4c9a-931e-6bb6caaa93a5", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47ed9328-c11f-4e51-8da9-6648036f2f3b", "sighting_of_ref": "indicator--e29e33c1-a1ef-4715-9dfd-7557d1fd82fe", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b96eaf69-9426-462d-9777-a98208be0b73", "sighting_of_ref": "indicator--8f8d5ee6-687d-4908-aa2a-d8af7fa5b9be", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d3ce02c-d636-4af6-8ddd-e58a0d6cfa61", "sighting_of_ref": "indicator--ecb3a4fb-5e77-4ff6-baed-5e5ce05c73da", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baa5466a-9ae8-454a-8e1b-a72d24e14617", "sighting_of_ref": "indicator--4c06db5a-147b-4b9f-802c-58932787d197", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b92f5d9-30f9-4724-afa0-0235a45536aa", "sighting_of_ref": "indicator--d6b03a9f-4951-4b9a-90a5-5d45f1976508", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b925107d-f8b9-4875-9c05-8671c3625b57", "sighting_of_ref": "indicator--5963fcb0-5126-4fa0-a120-73918355fa70", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e95d0e89-0058-40ae-9a9b-8108a8883f4f", "sighting_of_ref": "indicator--f92568e5-7634-436b-b382-64067c3c1b9a", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bb9d830-b012-4ed2-a4b9-9020303fa277", "sighting_of_ref": "indicator--9c805ed6-0738-444d-ab80-0ddc1896854c", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--190b091a-2c4a-4bbb-8e8f-7e76b32c94e9", "sighting_of_ref": "indicator--53a5a5c3-3df0-423e-a3d8-f674ad92675b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--631dc4a1-6f2d-4eee-aaf9-b017cb544d62", "sighting_of_ref": "indicator--6c0baf3e-f0b4-478f-8fcf-7de010427bec", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa4d8132-bf37-45f8-89c9-4e3e272cb305", "sighting_of_ref": "indicator--51fa608e-7348-4106-b821-5b7c9f858d42", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c1f194f-aff3-46ed-9043-28498f425c79", "sighting_of_ref": "indicator--2cadf921-856c-48d7-b964-b17caf35f15c", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61ab81bf-29de-4dd4-add0-dd0f7da67408", "sighting_of_ref": "indicator--a7a5c69c-6409-4b53-9e53-a4d44dbcde9e", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d847ead-cd4b-47e9-9e26-9c4dcd77c5ec", "sighting_of_ref": "indicator--3210e73d-1521-4e91-b455-72b9761df169", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--626e54bd-5265-4459-a629-ede711f866f6", "sighting_of_ref": "indicator--23fde0ae-bcb7-4ab2-ac0c-e3a2ae914e8e", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa8bfdc8-21ca-470a-8916-99b9f79260f0", "sighting_of_ref": "indicator--469cdf5a-5339-47f8-92ef-0e168a2d26ba", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffd2cbec-5a65-4658-b4e3-2e41be7b6644", "sighting_of_ref": "indicator--6237b6f5-49ee-4ba6-b374-0008167fb399", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99a54b75-a87e-4b89-8854-fa8413d75596", "sighting_of_ref": "indicator--d0884884-26d3-4110-8ef7-27db1450932d", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e00aa97-ce95-49ab-b82f-5de012cb626f", "sighting_of_ref": "indicator--d0884884-26d3-4110-8ef7-27db1450932d", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39529445-61d2-4b34-80dc-adf4c0a7ecf7", "sighting_of_ref": "indicator--790f2b91-be27-4f19-baab-8fd202fbc8de", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a1e4152-0de7-4fe7-9568-370dc30a0860", "sighting_of_ref": "indicator--b3ae2f28-6f05-4e18-ab5b-38f0f57fbbc0", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfc3c58a-565b-414c-92f0-54d3951c722e", "sighting_of_ref": "indicator--5954490b-dfe9-4cd4-bf8c-ba839e0c9b09", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e54c48d-c25b-4b10-a73b-265b3acf1b72", "sighting_of_ref": "indicator--0641e828-1370-4da7-af00-7d9590f8dc53", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6985bf95-5801-4ff3-9e5a-297db3a121ee", "sighting_of_ref": "indicator--ba65419e-d188-4cd7-9f9d-80bfcbc0681d", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5731df36-d76a-4fd1-9a38-677012e3e819", "sighting_of_ref": "indicator--ba65419e-d188-4cd7-9f9d-80bfcbc0681d", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c718defd-af9b-4fb3-9860-726df0595c4b", "sighting_of_ref": "indicator--9ea06f93-c9f5-47a2-ad91-6e5f157105e4", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72984ae9-aaff-4b13-bd25-12d425e853be", "sighting_of_ref": "indicator--b94b4633-0ef1-4308-9719-f1d33a76a4d6", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbb107c9-83a1-4219-88a1-bf731ddcf277", "sighting_of_ref": "indicator--31e320c6-9789-4c56-9b8c-3b5fc2957f24", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0629eab-eace-40d2-ab2e-8cec2f2fcee5", "sighting_of_ref": "indicator--640c9fcf-78b0-4d90-8418-db7021aa4b21", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d994f67-2391-401e-82a6-6bdbc089d7c3", "sighting_of_ref": "indicator--0d7b5dd9-a83c-4973-8662-01f281d04d4e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b2282e1-cd74-44f2-a80d-e202b61e7e6c", "sighting_of_ref": "indicator--450ca267-77cf-4135-ae9b-0d4365949d22", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2282581d-c83e-4de9-898e-730418631512", "sighting_of_ref": "indicator--d26c81f5-fd4a-4857-a347-4faf37482c56", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24013413-d573-4ff0-8d73-58d214787bec", "sighting_of_ref": "indicator--9801baac-c0eb-4d25-9798-968f937632a1", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f28f0d2-8c79-4535-a4ed-c39545cb3a17", "sighting_of_ref": "indicator--0f8682fb-4524-4fd7-8077-cd6405f022a6", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7a5716c-c715-4f60-8203-d756b203c58b", "sighting_of_ref": "indicator--0f8682fb-4524-4fd7-8077-cd6405f022a6", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90e796b7-69a6-4560-8e54-9a0842d17d5f", "sighting_of_ref": "indicator--431564d4-c038-4cb4-99e2-53bbd6260084", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3715836f-c3a8-448a-b18a-5c88c25e0488", "sighting_of_ref": "indicator--5ce1a179-7382-4c0a-892c-cff3c6e3513d", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1d83a9a-68e3-4016-9836-5123dd744dfc", "sighting_of_ref": "indicator--e3277e17-1678-4096-8542-9b89739f0980", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fef7cd4-8335-4271-9ca9-7b71e70645b9", "sighting_of_ref": "indicator--055b0968-24ab-42d4-93eb-651d294b9dec", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--666e50b3-9112-4bef-b3ec-777556af1739", "sighting_of_ref": "indicator--cadb22c9-5cbd-42b0-8a98-778b484cdef5", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5a37521-5fc6-4112-a80f-2b9e7043cfd3", "sighting_of_ref": "indicator--0f50234f-c15b-45d1-8f49-cc91c934d0e9", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be06b57b-12f3-40b1-8103-9aef662bd6a5", "sighting_of_ref": "indicator--0f50234f-c15b-45d1-8f49-cc91c934d0e9", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ea557dd-7b8a-4de7-8f45-ecb92a0e2cc7", "sighting_of_ref": "indicator--d35906c4-e2e9-4c85-924f-e57e1a1357b9", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--453bfa19-39be-4b97-8630-dcddb2fa380d", "sighting_of_ref": "indicator--83f6904a-7614-44b7-9bfd-4bff96b71f4b", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ce78b4d-937a-4205-b65f-dee0287a85b4", "sighting_of_ref": "indicator--3b8622f6-4291-484f-ae9f-4edaf30a018e", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e85fe670-7ef4-4870-b4b8-906b70847e0c", "sighting_of_ref": "indicator--e1e1b5dc-665b-4713-a3e9-771e4652af72", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79a074aa-cd52-481d-9624-2f0dccb43311", "sighting_of_ref": "indicator--ff4764ff-6058-40f8-b4c8-1c665d8bc4af", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47d38d48-5c2a-4c95-ac9e-77c2c8ce7927", "sighting_of_ref": "indicator--f5f8e228-6b12-498d-9456-25324080bb8a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1237de5-0e9a-4221-85a3-01f54330b99b", "sighting_of_ref": "indicator--aed57ae2-8985-4dcf-833a-42951e40ad41", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2587b9ec-52ea-4b14-83cd-a8a6787bcf75", "sighting_of_ref": "indicator--43a8c626-8377-4f3d-9ff8-ae7e7c3b5b4d", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--696e44c6-98b5-4800-a7ae-42bceb699293", "sighting_of_ref": "indicator--51c8f1f2-7ae6-4fec-a0db-46ad5b35c094", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50c466a0-7696-4713-9481-207dad884794", "sighting_of_ref": "indicator--bc423c7f-fd25-4382-9cce-8c29d59c1c1e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a81cdf16-5e2e-4ad8-a6bb-5d22f98b39fe", "sighting_of_ref": "indicator--f90da525-f338-4fd7-9374-6a4e47207751", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f73df1d-ba0b-498d-bc5c-b2069bbe66cb", "sighting_of_ref": "indicator--8beb82ec-60ab-4c1c-b09b-7179c5705747", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f43274e-d55e-40a7-8d97-dc1a00e09c30", "sighting_of_ref": "indicator--3944c074-0c92-47ad-8908-382effdc2fa7", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--929ccec6-c351-4da0-b82d-d10035424876", "sighting_of_ref": "indicator--5fbaa86a-c90a-439c-ac33-e9fdc2df1d81", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99f9112d-5ab6-4e3e-8204-4e37e7967eda", "sighting_of_ref": "indicator--5fbaa86a-c90a-439c-ac33-e9fdc2df1d81", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82ecc30a-6856-4fc2-95de-6cd19b968ddc", "sighting_of_ref": "indicator--5fbaa86a-c90a-439c-ac33-e9fdc2df1d81", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85aff26d-3e04-45f2-8d79-edf69be8fb34", "sighting_of_ref": "indicator--9824bd04-97cd-4614-9017-5a5bcd5fcb91", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--274080f0-bb01-4af2-acd1-c2a6984b4de9", "sighting_of_ref": "indicator--ecf4efa9-9c4c-4a44-bc2b-c429cf9aa7cf", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0212567-ed2f-49c8-ae98-fd18e762eae5", "sighting_of_ref": "indicator--516c6a23-4a74-452f-bb6b-29935c0c5743", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--faf6552f-13fc-4419-b32f-bae9879c2497", "sighting_of_ref": "indicator--0d5c74a1-8b45-4a0c-b9cb-e068b0a036e7", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5209966-d4d4-4d33-9c9c-4448863abfb2", "sighting_of_ref": "indicator--47997d26-974e-46bf-be2b-35fe215cfe43", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--995a4154-1e2d-4966-bab0-ceb5c537551d", "sighting_of_ref": "indicator--47997d26-974e-46bf-be2b-35fe215cfe43", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed7c3a56-bd50-43f7-a24f-e8c27a576f49", "sighting_of_ref": "indicator--32b17adb-22a6-43e4-a21c-4452067d06fa", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7285209a-dc90-4110-a4dd-8cabc882308f", "sighting_of_ref": "indicator--32b17adb-22a6-43e4-a21c-4452067d06fa", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c174276-2af1-452f-9b3a-350601778e98", "sighting_of_ref": "indicator--4618aa89-2278-44c1-9ff0-2fda09b07920", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3aad893f-88e1-483b-8eef-f323eacc221d", "sighting_of_ref": "indicator--84ecf088-0859-4eda-9d7f-26351168c93d", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--286c5d23-f469-4b0a-878b-0ac3418b02fe", "sighting_of_ref": "indicator--8eca05b8-a01b-4ee6-bdb2-ab7c6d0378c9", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0eff7708-f3ca-46ba-9705-cdc1e31907ff", "sighting_of_ref": "indicator--83981fc6-fc5b-4033-b5fd-51003db44f9c", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--293bfdfc-2d19-42b4-b988-70b295b2d4b9", "sighting_of_ref": "indicator--ce881c67-2335-4f0e-9dfc-0cfd8534edeb", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17ba02d8-a69f-4fb1-9945-d3064a1e5658", "sighting_of_ref": "indicator--ce881c67-2335-4f0e-9dfc-0cfd8534edeb", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0464f9b-a615-4a0b-8cd9-cf574dd1cb5f", "sighting_of_ref": "indicator--e2bb1d58-5619-4969-8f67-5ac77d905323", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eee9ceed-05ff-49b1-97e9-040ca2432077", "sighting_of_ref": "indicator--404752a6-f67d-4455-8057-a880eed4f4d2", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74e09a46-e8b6-4139-af9b-654625884e8a", "sighting_of_ref": "indicator--86334749-d2b7-461f-9d64-b3662070169b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--411ed8b0-09e9-47c6-a209-159a9e6927fe", "sighting_of_ref": "indicator--a4781fde-215a-436b-98e8-bfef6f470315", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88519451-9408-4ac0-af7d-0d758579854e", "sighting_of_ref": "indicator--39a4893b-f5ea-4cc2-a0b4-69062fd5309c", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b4ec5ef-3410-4e1c-87b2-4a32f14646fc", "sighting_of_ref": "indicator--fc1de712-0e45-4d2e-963c-983411aab45c", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9de02d8-a07e-4f57-b19c-4145b4ce70c4", "sighting_of_ref": "indicator--c96f685a-e8c5-417e-8dca-f8e3421cdcb6", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be79d4bc-f349-4f0e-9290-4a317aef0c9c", "sighting_of_ref": "indicator--c96f685a-e8c5-417e-8dca-f8e3421cdcb6", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edd52fd4-1c2d-4df7-b9f8-dd06a0786a34", "sighting_of_ref": "indicator--3818e985-3897-4f38-8f99-058a06539da9", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69e1ec1d-9243-4027-a505-29227409ef84", "sighting_of_ref": "indicator--e69a3491-2163-4117-ac19-95c7b9c40c0d", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5672c5b0-7ae4-4da0-a731-2f7d175c5032", "sighting_of_ref": "indicator--e69a3491-2163-4117-ac19-95c7b9c40c0d", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e9e4f12-b609-46c6-85d5-8e2002d87507", "sighting_of_ref": "indicator--040bb94f-5c49-4993-b540-2f1e5068aecf", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07c8ea2b-5def-4d7d-b2c2-be7aca7bdded", "sighting_of_ref": "indicator--4169901c-3edd-4552-96ba-a21abb7cb78c", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--547c04a6-f9db-48d7-88f6-0f9d1f38eb4d", "sighting_of_ref": "indicator--4169901c-3edd-4552-96ba-a21abb7cb78c", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--792c1ee4-cacd-4e78-a44d-eb2a2634256e", "sighting_of_ref": "indicator--4169901c-3edd-4552-96ba-a21abb7cb78c", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24a39793-8327-4c2e-be2a-e4e639cdc1e6", "sighting_of_ref": "indicator--17638cf9-283b-4836-afc7-a183cda7e667", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09ba9aeb-6b99-4064-a79b-f78c621794fc", "sighting_of_ref": "indicator--24bdc1dc-b0ac-4acf-9230-3378a1c0e74a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a18c439d-8624-480e-99b0-49e2e50abf39", "sighting_of_ref": "indicator--317cbb86-6112-4bb6-80ad-b9990968b125", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5354a79f-22f9-4f38-82e6-64d7a6140dea", "sighting_of_ref": "indicator--517332d0-24dd-49cf-b3cf-c37adb194d1a", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0389c429-4270-4c3c-a8e0-98ffb996c1ba", "sighting_of_ref": "indicator--517332d0-24dd-49cf-b3cf-c37adb194d1a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3fa411c-0d72-49ce-ae82-a5f57f9fd966", "sighting_of_ref": "indicator--85c05dd0-a8b0-4c5a-958c-4d8d25bda9ba", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64639d63-e662-4193-88a9-5e13e4b985d1", "sighting_of_ref": "indicator--09b1d469-5957-4b41-8e2b-ddc76f737481", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--353fce50-9e67-4cd4-aeef-47f862c618db", "sighting_of_ref": "indicator--09b1d469-5957-4b41-8e2b-ddc76f737481", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--477adf24-2e4e-4cf0-a621-4c5c1a30406a", "sighting_of_ref": "indicator--c75336a3-8b41-45e7-af51-679d329c81b2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9dec065-87de-49d6-a265-81ded22b5d24", "sighting_of_ref": "indicator--b9284df3-bc3a-44bb-b15b-80ce9570b07e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8229d55-63d9-4ff9-9554-a7979383d0c8", "sighting_of_ref": "indicator--54520923-09ea-43c2-882c-a554370cf9fa", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f97e618c-56d1-443b-bc29-88aa9eab23b7", "sighting_of_ref": "indicator--54520923-09ea-43c2-882c-a554370cf9fa", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--becf6356-bcb9-44d8-9dae-bf5ec58540cd", "sighting_of_ref": "indicator--db22a7c3-003c-41b9-a032-8a341fc49e38", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0eca3e56-267c-420b-beb0-28d8eec3c811", "sighting_of_ref": "indicator--f39f3b58-4122-4ce2-88bb-c294f2b3dd43", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30935954-0d01-451f-8aab-7cc7df20f1d9", "sighting_of_ref": "indicator--ebe7b682-2736-46cd-8e5c-bbfc9748b6bc", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78b9379f-82db-4ed0-811e-e0bd938d95a7", "sighting_of_ref": "indicator--40145d45-9a98-4848-b4a9-56db930eaf5e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--363c7ea6-b527-460c-b65a-dcc8c8fb9790", "sighting_of_ref": "indicator--8b0deb14-df77-47d6-a4ce-6e9dc0b9a511", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--557f6a28-f9a1-437a-8cb3-9b8c4812ffe7", "sighting_of_ref": "indicator--8f3cb481-2a50-48b0-a664-6c5647a4d9b6", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--401e654a-3d46-427b-b0fa-4f03c9a24b40", "sighting_of_ref": "indicator--4f72b3a3-6a4b-4281-82e3-7adcc2de072f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7db9cc0-3c2c-4b96-99fd-7e5cf8a699ec", "sighting_of_ref": "indicator--59cf2b32-9b0b-467a-89a4-75f0d10e9ba3", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41805cec-b640-4951-8dd2-31120858b38a", "sighting_of_ref": "indicator--bbf05d4a-0314-4438-9505-d5cfcc3217fa", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a17315df-a0c2-403e-9ad8-0c7c1a9e854f", "sighting_of_ref": "indicator--bbf05d4a-0314-4438-9505-d5cfcc3217fa", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fa653d8-6c76-47cc-925b-2424e040ee4c", "sighting_of_ref": "indicator--522ae093-5016-43fa-bfc8-1cee6814db0e", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--183c58b9-8900-4fd6-817f-619f76532d7e", "sighting_of_ref": "indicator--eafbd67c-fdde-44a6-8fdf-80e5dc0206a2", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d952e4b-6147-4842-b737-b5689101c5fd", "sighting_of_ref": "indicator--7f0a1857-4203-4ae9-8ca8-78f5baa7806b", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8d1f900-42f9-4b27-84ee-1087d41b7044", "sighting_of_ref": "indicator--cd690b08-2c72-4566-8621-a5184832c614", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e41d402-2fbd-45bb-88d1-653216a4f79a", "sighting_of_ref": "indicator--cd690b08-2c72-4566-8621-a5184832c614", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82c0f53d-61bf-49fc-8149-da5b9f4344e0", "sighting_of_ref": "indicator--ba657614-1863-4c79-bc99-3d1bfcbec31c", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--822bd87d-2ed4-4fce-9054-fc9f0da34939", "sighting_of_ref": "indicator--57fa8a99-e4fe-41b7-b2a8-277c7594be23", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b0350e0-a0d5-419f-9347-d373ac8175a6", "sighting_of_ref": "indicator--57fa8a99-e4fe-41b7-b2a8-277c7594be23", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9ec3d6f-4451-466a-985a-e33d57351165", "sighting_of_ref": "indicator--71052906-aafb-466f-b549-58c61d5fe8b4", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59602734-3b17-43d9-9fb8-1751f356affb", "sighting_of_ref": "indicator--71052906-aafb-466f-b549-58c61d5fe8b4", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e588acf8-c130-464a-a16b-e8d2a292304c", "sighting_of_ref": "indicator--71052906-aafb-466f-b549-58c61d5fe8b4", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb65d423-44b5-4497-8d44-05b35d82b174", "sighting_of_ref": "indicator--6d8773d4-14ec-4b0d-87b1-3cbcb4119b44", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3a2ccac-9a61-4ef6-9071-f4cdc53d75b5", "sighting_of_ref": "indicator--aa9d4c7a-b268-43d9-a5bf-1b0592cb4c4a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9b4a64f-0565-4f57-8415-fc0928be1939", "sighting_of_ref": "indicator--aafeadc8-11f3-4a85-ac6c-f8c6de9b3343", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46281a8d-affc-455a-8816-15d1879bf692", "sighting_of_ref": "indicator--ead26e93-d160-479d-a24a-9b5641b8bc53", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ad59d32-5679-41e0-a081-d84eaf62373e", "sighting_of_ref": "indicator--7e0562fe-60f3-4e6e-be77-e65acfdb69f4", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05e49926-685d-4a56-80e4-a92f17db5a42", "sighting_of_ref": "indicator--ca181057-2f0a-4080-b80b-8f3d692b5dc5", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da4a1bf6-5003-43e5-8680-a16b9625b93a", "sighting_of_ref": "indicator--c801fddc-195d-4eb9-84cd-5093d6ad5aa9", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--777d8405-a48f-4aea-87ed-a5225799f50b", "sighting_of_ref": "indicator--c801fddc-195d-4eb9-84cd-5093d6ad5aa9", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7145a5c-e6f1-49c4-960d-fe17c626fcc6", "sighting_of_ref": "indicator--5f2bb23a-1fda-4b8a-83d3-ab0758901daa", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c1b0960-831c-4b86-9bf8-4d33f909b6ac", "sighting_of_ref": "indicator--5f2bb23a-1fda-4b8a-83d3-ab0758901daa", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5092fd00-34fd-44c0-b84e-007d9bdb3790", "sighting_of_ref": "indicator--f7472785-d6ee-453f-8947-7c5a51d49f33", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20c598a3-4c89-42e2-b67f-65ddf402f7cb", "sighting_of_ref": "indicator--a72a0010-d043-4f4c-9fc9-ec30eacb8f34", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2310499a-7b94-42a8-b41a-4eefcecad763", "sighting_of_ref": "indicator--1b9da328-be95-4f4f-9299-5a55582d82d0", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46e503a7-eaca-44ba-bca8-f9c093830c70", "sighting_of_ref": "indicator--1b9da328-be95-4f4f-9299-5a55582d82d0", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30b619a7-f5f6-4b46-9c88-93d4781b6e38", "sighting_of_ref": "indicator--5eac4463-0c10-4b85-bea7-e19aad3caec2", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cf50dd1-ce47-45d5-bdc1-e22625c466ce", "sighting_of_ref": "indicator--18f98ca4-c8b6-41a2-86d7-6f42d212bfa4", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--caf9987c-2e27-485c-9698-3449477b58c8", "sighting_of_ref": "indicator--cd5e33e1-59bb-46c2-a571-f5fdb36a009f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca66e43d-d720-438e-9b6f-7d19d86ec264", "sighting_of_ref": "indicator--70d70f98-3a0a-4254-b23d-9a23bc3d51f0", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d06a182d-315a-4b1a-9feb-107feb4ee43a", "sighting_of_ref": "indicator--d024b93b-d1dc-4753-9ca7-d9cefadb853e", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d37f6df-bfb3-4180-9ab3-74c45baa3f37", "sighting_of_ref": "indicator--d024b93b-d1dc-4753-9ca7-d9cefadb853e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03d15574-67ee-436f-8504-ea3a40f830ca", "sighting_of_ref": "indicator--d024b93b-d1dc-4753-9ca7-d9cefadb853e", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1b6c510-9a80-49e6-a1a5-adcbb19918d3", "sighting_of_ref": "indicator--b5a43ccf-785b-4498-9ec6-8f856d823151", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d216af13-71a5-4e40-bb07-c11b8a91eaea", "sighting_of_ref": "indicator--b5a43ccf-785b-4498-9ec6-8f856d823151", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--142e2933-25e5-4145-ae81-ebad023fee51", "sighting_of_ref": "indicator--b5a43ccf-785b-4498-9ec6-8f856d823151", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--628931dc-3a43-4c8a-b575-195644604d7f", "sighting_of_ref": "indicator--61ae91d2-dacf-41c4-9330-59411527999e", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f152a05-9527-44a7-bed6-311a2c0970a2", "sighting_of_ref": "indicator--61ae91d2-dacf-41c4-9330-59411527999e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--045fe2cc-aae1-4899-834a-c21b01d170ea", "sighting_of_ref": "indicator--61ae91d2-dacf-41c4-9330-59411527999e", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e06efdb-1231-49a7-98fc-231cba6f05bc", "sighting_of_ref": "indicator--1ff23d73-1c05-425d-874e-a5939836397a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3237e64-d92e-4a17-8ebc-172b26afa8b4", "sighting_of_ref": "indicator--14da5c2d-3381-496f-98fc-f4a11e7bcf79", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d540a6b-4dbc-461f-89b1-89fcbb6c51d1", "sighting_of_ref": "indicator--1b71747b-57b2-4120-aa85-07910c618f56", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--728850dc-7591-4666-a4ed-8a4ed15fb97e", "sighting_of_ref": "indicator--abeb1ccd-7a96-4d23-b711-66c54857afa4", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b41d9dd-cbb6-42c1-a3d2-0f094789821f", "sighting_of_ref": "indicator--abeb1ccd-7a96-4d23-b711-66c54857afa4", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24985841-be72-497f-98c5-24e9479d18be", "sighting_of_ref": "indicator--dd32d9e0-78f3-46b2-a368-23a768f29346", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56f6d8ad-23b4-4913-a7a7-aff0df3bf994", "sighting_of_ref": "indicator--dd32d9e0-78f3-46b2-a368-23a768f29346", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c638692-a8a0-46c2-aadf-ac68f14dec77", "sighting_of_ref": "indicator--dd32d9e0-78f3-46b2-a368-23a768f29346", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe05a0f2-45d2-4faf-970f-5aaa646ca975", "sighting_of_ref": "indicator--9f7528c5-61ae-46eb-a53c-da5829c67b7f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e08f8706-9443-473d-abf1-dfcf21500e06", "sighting_of_ref": "indicator--536337e3-0acd-42ea-9b85-69aa75dee700", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0970656-401f-4309-8017-5c91be135225", "sighting_of_ref": "indicator--d778e8b9-13b2-4a28-9b72-df20f37efbf8", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01639061-cd76-4f57-a636-bf03521c488c", "sighting_of_ref": "indicator--04c540c6-7d84-46a1-a7ed-acde2f7f0f29", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bd74423-ea53-4a3c-a10c-39ed458c69ca", "sighting_of_ref": "indicator--5706eba8-06b0-4b70-a8de-bb1a6ad82d3d", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d4a812e-4f71-4763-848b-90f8bc3ca7a6", "sighting_of_ref": "indicator--1834dde9-f665-465c-adfd-598f4ea90119", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b235a3a-f53e-4cc1-9dfd-88c433245fec", "sighting_of_ref": "indicator--1834dde9-f665-465c-adfd-598f4ea90119", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f8ade87-4b9c-446e-812c-d285cf04c0c9", "sighting_of_ref": "indicator--377b1e71-41d3-4855-b63e-cf1afabd75d6", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dd23484-ba31-4e7c-a59f-da3ff057bfcd", "sighting_of_ref": "indicator--377b1e71-41d3-4855-b63e-cf1afabd75d6", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f0dd81c-2361-4602-bda4-f4346e0c1160", "sighting_of_ref": "indicator--377b1e71-41d3-4855-b63e-cf1afabd75d6", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42efd7b8-b31d-43b1-b2fc-fbe43ad3ea42", "sighting_of_ref": "indicator--2306e3d8-68d2-4e48-b682-cdb44160c318", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c19a202-30e8-4ecc-b691-82649f7fc4cb", "sighting_of_ref": "indicator--107dac8a-102c-4e05-941e-9bbb16e7733c", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04b8b074-3fd2-4d6b-8f7c-292c9d0bf592", "sighting_of_ref": "indicator--107dac8a-102c-4e05-941e-9bbb16e7733c", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33ee2590-21b0-450d-9ebf-d4b2733f6191", "sighting_of_ref": "indicator--17f3f0b9-01e4-47be-b852-0712aeebfba4", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4df7b3e5-096e-4ea4-8957-e40f5a8bc434", "sighting_of_ref": "indicator--f50ef41c-38b1-4287-92cb-d7e31fc60cee", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ba84d17-20f0-4798-bd15-31d623b69ea6", "sighting_of_ref": "indicator--cc62cfa7-344b-4092-95ba-0495a11d8fc5", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50ff1e95-addc-412d-97d0-989ce7d2300f", "sighting_of_ref": "indicator--cc62cfa7-344b-4092-95ba-0495a11d8fc5", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3ceba80-ef11-4352-aefe-eda652ab8414", "sighting_of_ref": "indicator--cc62cfa7-344b-4092-95ba-0495a11d8fc5", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b3f4abe-e463-4d6e-a820-7711c1cfb4ea", "sighting_of_ref": "indicator--a0e72ff4-57a3-4d9c-afb5-42370312b40b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2d438ef-c662-43a4-b164-639c4428558b", "sighting_of_ref": "indicator--9a16bbe3-9836-44ae-9952-7fd96a5553b1", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f79b145a-87b6-44a2-956f-70f73295b40d", "sighting_of_ref": "indicator--4d4bd099-474c-42e2-a34c-e0c217e561f4", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13e4e22c-1422-49cb-814d-669b20114dde", "sighting_of_ref": "indicator--51b20a47-fe3c-4f19-adc8-ab30548af5e7", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75264aa5-81e8-45b6-9439-c6bf868340fa", "sighting_of_ref": "indicator--51b20a47-fe3c-4f19-adc8-ab30548af5e7", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b8301d7-b7dd-4b03-b3e0-870219f58916", "sighting_of_ref": "indicator--cdf4e9d2-910f-4a5c-8ef5-ed97d86ccd3d", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64533998-ff60-4ec1-bfd0-3d7c26d6ac70", "sighting_of_ref": "indicator--cdf4e9d2-910f-4a5c-8ef5-ed97d86ccd3d", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--072299a0-c610-4b8b-be1a-9dac322fc8ca", "sighting_of_ref": "indicator--cdf4e9d2-910f-4a5c-8ef5-ed97d86ccd3d", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73778c9d-424e-4b08-846b-8d63d6837080", "sighting_of_ref": "indicator--6854d4ed-432b-4e75-81c4-1a70a57ac90a", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--851737ed-1c26-4671-93a7-f6b86f064c5f", "sighting_of_ref": "indicator--6854d4ed-432b-4e75-81c4-1a70a57ac90a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7baf75fc-f8f1-446e-808c-a3e9124c8171", "sighting_of_ref": "indicator--3f380547-9c93-4151-886b-07d385829e09", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9fa55e6-e515-4be0-af57-0bd335a683f6", "sighting_of_ref": "indicator--3f380547-9c93-4151-886b-07d385829e09", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd545b1d-80c2-47ce-a96d-01d741a99e94", "sighting_of_ref": "indicator--3f380547-9c93-4151-886b-07d385829e09", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bc86d9a-3669-46a8-9d7e-03a79785e5f7", "sighting_of_ref": "indicator--ebcc20f6-736a-4a14-b314-4e9f2bdc1ca6", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3ec88af-0537-42b3-89b3-0b222382b1fa", "sighting_of_ref": "indicator--877a3d15-9d8d-45ac-a5df-d14e90a6b57f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--901eaa67-0b8c-4d30-9042-91f1a045d8b8", "sighting_of_ref": "indicator--3ed36fb4-9fbc-4de8-96e8-e15cbbf98c9e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8acbe540-fcc3-4379-b4c6-d2f820bfa826", "sighting_of_ref": "indicator--f6af9f5c-ae68-4f8b-91a6-4e307fe2ff68", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ecf3299-cbeb-4ad2-8a31-4b515057e62d", "sighting_of_ref": "indicator--fcea42da-09e6-4a28-a6e6-2344505d1a2f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0149d492-61a5-4ac1-b544-d92375d37106", "sighting_of_ref": "indicator--fcea42da-09e6-4a28-a6e6-2344505d1a2f", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8907c063-42d6-4616-b7cb-3658b8fe4338", "sighting_of_ref": "indicator--65b8f95f-5b75-41ab-8dd6-b2235fadab6c", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58cc0d05-73da-4bfb-9f19-5afe49cca6ce", "sighting_of_ref": "indicator--65b8f95f-5b75-41ab-8dd6-b2235fadab6c", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab209f45-4f35-42f0-a922-e578ee2ecf3b", "sighting_of_ref": "indicator--8f826c16-10b0-4402-bb3b-2dbfafe04e20", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f55feed-373d-4536-a645-f1d020b1cd9b", "sighting_of_ref": "indicator--8f826c16-10b0-4402-bb3b-2dbfafe04e20", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d7e0aee-2b32-4ac8-882c-317290320368", "sighting_of_ref": "indicator--94342cd0-9a05-41fb-ab0f-04844f7a1f93", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93305448-10d0-474d-90b6-3ef1b698a4cf", "sighting_of_ref": "indicator--9e01a446-9ef7-4762-84ca-8a952f3fead9", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86e0727b-a06a-452b-af66-bff919c9124d", "sighting_of_ref": "indicator--907b4c14-9628-4755-b03a-0fc6a8d8eb0b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3310eb48-8bb0-4f1e-81cd-fb071995be61", "sighting_of_ref": "indicator--2b1db6da-5450-4c7f-a663-74cab2d24ede", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4288118-af8f-4d12-876f-1ae637244ea7", "sighting_of_ref": "indicator--37535129-f9f8-4e7b-9c6a-5109c87614f6", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32297f7a-887d-470c-a3d1-1cb57774024f", "sighting_of_ref": "indicator--37535129-f9f8-4e7b-9c6a-5109c87614f6", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87519271-ee64-4051-9feb-461b3b8b389d", "sighting_of_ref": "indicator--2d29a863-a276-4e4b-aae3-40def432cad8", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b777056c-15e7-4237-8d48-11a9d1a180e0", "sighting_of_ref": "indicator--2d29a863-a276-4e4b-aae3-40def432cad8", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--184b363b-e283-4db3-914c-58f5e849907d", "sighting_of_ref": "indicator--2d29a863-a276-4e4b-aae3-40def432cad8", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a00c058-1351-43ce-8390-5827dc9eb926", "sighting_of_ref": "indicator--a407f8e0-3649-4771-aa51-3366d25b2591", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0f00ce9-fbd6-4ae9-bd08-6dbb05bfe53e", "sighting_of_ref": "indicator--a407f8e0-3649-4771-aa51-3366d25b2591", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6d2418d-99d7-4d68-80d2-37323c25a497", "sighting_of_ref": "indicator--a407f8e0-3649-4771-aa51-3366d25b2591", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8d95891-6539-4a54-85c8-380137dcc6bd", "sighting_of_ref": "indicator--bbbcf036-1ea9-41cf-b5d5-48397a937ed0", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a0d8f18-3bda-46b9-a306-5e0b88cadc7a", "sighting_of_ref": "indicator--bbbcf036-1ea9-41cf-b5d5-48397a937ed0", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e6c970c-55ea-427d-b1c3-822331739d8f", "sighting_of_ref": "indicator--bbbcf036-1ea9-41cf-b5d5-48397a937ed0", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25f8ce59-6263-4d09-b53c-610ea77ed079", "sighting_of_ref": "indicator--47554c22-17bd-4f34-b445-256b8d5448eb", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6473e79-79dd-4346-94dd-9f54071b739b", "sighting_of_ref": "indicator--47554c22-17bd-4f34-b445-256b8d5448eb", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--567aec8b-826f-4df7-afb8-023b0a8f983c", "sighting_of_ref": "indicator--d709d045-7e67-4b7e-a518-3f0f384883a8", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ff02c1f-0e98-4de2-bc70-488e0a40cdec", "sighting_of_ref": "indicator--f8debc81-8259-4000-ab31-273348ac3db6", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b9b7365-4584-44ec-854f-7334a0d891c2", "sighting_of_ref": "indicator--73197d79-f3da-44bd-b726-a524e9f40a33", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19d5f388-9b32-4ace-9704-bb0c2870968d", "sighting_of_ref": "indicator--e1e36eee-95d2-4e3b-b8ea-4e658c3c649c", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c88fc6b8-66b3-4a67-8051-a3d6fa1dcfa1", "sighting_of_ref": "indicator--61c48f6f-be3e-4585-95d5-5f00d988e321", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91865bf6-8e65-4d30-a16c-2887f65eb8ec", "sighting_of_ref": "indicator--bf8fb6c7-fb37-4823-b469-bc1e4f6e176d", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0a729da-b98c-4c49-a90f-ffd2e3a7ecab", "sighting_of_ref": "indicator--bf8fb6c7-fb37-4823-b469-bc1e4f6e176d", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6350b798-68ce-4483-bb43-07e16e8fa979", "sighting_of_ref": "indicator--d1018f93-a35a-4517-be55-e6ec3010628e", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3d6f7f5-8425-4911-a0b6-b0f2a8e137b0", "sighting_of_ref": "indicator--0d4e42ee-2261-41df-b813-78331fe589fd", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fc21b9b-a451-44eb-9c86-fc7214b7853d", "sighting_of_ref": "indicator--0d4e42ee-2261-41df-b813-78331fe589fd", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f02f32b-d7f0-40e6-b0de-71720ea10a5f", "sighting_of_ref": "indicator--80fc5065-ab06-411a-b983-4f2a079a2712", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--693147c5-9596-49a1-be1d-83cd11c2227a", "sighting_of_ref": "indicator--09bd5d50-2674-4577-b211-946d33ab4128", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d2204a9-2862-410f-96da-10b2189884b3", "sighting_of_ref": "indicator--09bd5d50-2674-4577-b211-946d33ab4128", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e35b86fe-ad5e-42a9-8daa-90ff70579130", "sighting_of_ref": "indicator--09bd5d50-2674-4577-b211-946d33ab4128", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--caf74665-5564-4d90-ae05-2895e8f0e9c2", "sighting_of_ref": "indicator--f72d9a0d-12a3-47fa-a739-7dea8a849a97", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7e80ff7-1d8a-4a70-b4c1-033efc600d5b", "sighting_of_ref": "indicator--f72d9a0d-12a3-47fa-a739-7dea8a849a97", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f24e41a5-785a-4e10-853b-d568964dd1a3", "sighting_of_ref": "indicator--f72d9a0d-12a3-47fa-a739-7dea8a849a97", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52201d4b-70de-4f21-958a-fafadd7d186f", "sighting_of_ref": "indicator--fa279eac-36f1-42e4-a205-24b97361feec", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4602185-0f1b-4dd9-918e-1196f16a39d9", "sighting_of_ref": "indicator--73f1b6ae-5bfa-4cfb-9ae7-78d01f7bf8cb", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26c2733e-8701-4da4-92c6-e4904bb6ea51", "sighting_of_ref": "indicator--73f1b6ae-5bfa-4cfb-9ae7-78d01f7bf8cb", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3444fc65-b110-49ac-89d4-702a0482247c", "sighting_of_ref": "indicator--f06d0831-f57b-4f7e-aa17-364112b47c6b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b201d41d-4a40-477b-966f-b0bb8f452862", "sighting_of_ref": "indicator--954ef32a-ebe2-4938-abcb-591f8f19bfef", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6128bde9-60d5-458b-b825-38e397c1ac0d", "sighting_of_ref": "indicator--185abd9b-40ee-4aea-87d4-22d636d4e35c", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1f1e190-c946-4299-b021-1b6600dd459e", "sighting_of_ref": "indicator--2fb372a9-22fd-47a1-ba8f-98ca5184fe2b", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d715108-5f92-444c-9210-d6bf0ee48e87", "sighting_of_ref": "indicator--83207f9d-6728-4208-b174-d4efdb65c44f", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--051313bb-9fa2-4a21-b611-1ea017b383a3", "sighting_of_ref": "indicator--1a54c9c5-8752-42b4-81a5-f9887ebbbd8e", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b87a324-c256-43e2-8d5c-387dbc09c36d", "sighting_of_ref": "indicator--1a54c9c5-8752-42b4-81a5-f9887ebbbd8e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a9c21ef-f011-49f3-b8a8-df0f930335f0", "sighting_of_ref": "indicator--5cd5b5c9-9c2e-4030-a72e-7d31b9859beb", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8a164b7-98cf-484a-ae38-0130ad51c58f", "sighting_of_ref": "indicator--5cd5b5c9-9c2e-4030-a72e-7d31b9859beb", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22695e09-1006-4462-a2ce-0e2bacfa4103", "sighting_of_ref": "indicator--6b7ac1ac-fb59-4d0d-bded-6241432c7a1c", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--078e96a9-985f-4d98-8f91-c1999317c49d", "sighting_of_ref": "indicator--b85b3414-846e-44c8-bd7a-402a7b409b55", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bf44c17-4826-4ede-852d-6b6e4758a456", "sighting_of_ref": "indicator--f2f339e7-c000-45f6-b1ee-3e9e9b4c48d2", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c01adc47-4520-418b-ab46-b89db970b245", "sighting_of_ref": "indicator--f2f339e7-c000-45f6-b1ee-3e9e9b4c48d2", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3913218f-937f-4b6c-8415-fdeeef121273", "sighting_of_ref": "indicator--4092920e-9410-4e28-9757-e7377e38ae78", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99e6853c-cf9b-40bd-a87c-407ccc8d82cf", "sighting_of_ref": "indicator--f1006570-7d45-438d-bd79-c33b6c31ae04", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1bad24a-55ea-4a8b-a6e4-73146aba4519", "sighting_of_ref": "indicator--f1006570-7d45-438d-bd79-c33b6c31ae04", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0286ee18-bedf-479f-88a6-8269c897c852", "sighting_of_ref": "indicator--6b72990f-e2f6-45b4-943c-a82231645ba6", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dfbcd14-8af1-4d0a-8bc6-237f1d388783", "sighting_of_ref": "indicator--c687746c-6910-4d6a-bd7c-c1b0d976517c", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e75fbca7-ca02-47b0-9529-ad88d76f7080", "sighting_of_ref": "indicator--25ac29c8-78e2-4892-904c-1f3372f16acf", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72a93c43-44e6-4256-a0a6-196100391d4f", "sighting_of_ref": "indicator--59279396-ebdb-477a-8e63-29fcc4b665ce", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f27b18eb-f7fb-4e59-93c8-905407fe50a4", "sighting_of_ref": "indicator--56feab40-db7c-4b9f-ae05-a9ae428809fc", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69d4d2a0-1800-4935-aa7b-c8c9f0f53082", "sighting_of_ref": "indicator--56feab40-db7c-4b9f-ae05-a9ae428809fc", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd1793e8-a4ee-4e74-b644-848674026e1e", "sighting_of_ref": "indicator--56feab40-db7c-4b9f-ae05-a9ae428809fc", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a552cb7-3872-41ad-b904-e7a2f9185215", "sighting_of_ref": "indicator--4ad61a6c-2c6f-4b68-8c26-e576cbe09ed6", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--403d80ea-a32a-452e-a690-4d6e770082f8", "sighting_of_ref": "indicator--4ad61a6c-2c6f-4b68-8c26-e576cbe09ed6", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d9f8536-aa50-4b6b-b72f-2f06ddd375ea", "sighting_of_ref": "indicator--d3f8e1a9-106d-44a8-befd-41e36c828dca", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--456d05d2-c45b-4882-855a-d2042d718c54", "sighting_of_ref": "indicator--8106d03b-e42d-452f-a2d2-80ee7afe1d79", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b3077d9-9ed5-4d89-99f6-320c3c90a15f", "sighting_of_ref": "indicator--77afbbe2-144d-474b-b39e-706347b6fe87", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8af65750-f03d-4d31-87ac-6c3d8b01e400", "sighting_of_ref": "indicator--77afbbe2-144d-474b-b39e-706347b6fe87", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e1b2b90-f234-4b18-b8c5-6134f72a84fe", "sighting_of_ref": "indicator--d5337715-41ee-4b20-8a1c-f8635c47bb4d", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ce406c1-c945-4845-931a-2213f5cebcee", "sighting_of_ref": "indicator--317e679c-f148-4d18-ae07-4c6670f426db", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f100474-4f75-4f22-9496-931259476c9e", "sighting_of_ref": "indicator--34f0fefa-c57b-45f8-99d6-135b937a1efc", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--876dc45a-d9b7-4839-b0b0-17049c3f3e54", "sighting_of_ref": "indicator--34f0fefa-c57b-45f8-99d6-135b937a1efc", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--099c0420-1c01-49bb-9579-592fc9d0bbd1", "sighting_of_ref": "indicator--91fc10d0-c20f-4381-b0e5-64694614d4c8", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67b71330-b2c2-4ba3-b708-a6ced57c3757", "sighting_of_ref": "indicator--91fc10d0-c20f-4381-b0e5-64694614d4c8", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5799238e-c48c-4c8f-9c37-8ad974a27186", "sighting_of_ref": "indicator--91fc10d0-c20f-4381-b0e5-64694614d4c8", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--429f0157-7e8d-4b2f-86a7-00bbf3a45130", "sighting_of_ref": "indicator--610505d9-8ceb-4a53-8209-35ec0ceb1f61", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08a7c859-2ef0-434f-83d5-a1d6b7175477", "sighting_of_ref": "indicator--c7f0d34d-af52-4e84-9018-7cfe1f861e01", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--596ce804-6bad-4de5-9986-667718764037", "sighting_of_ref": "indicator--1b628772-1bae-4b8e-a7a7-638380e8c77f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e6b623b-9a51-4b5d-a851-3a250787a8d0", "sighting_of_ref": "indicator--1b628772-1bae-4b8e-a7a7-638380e8c77f", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73812e24-f60d-4442-b158-28741c27380e", "sighting_of_ref": "indicator--dc589368-2511-4eae-90a1-f4432c60869f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--871322ef-86c8-4b7f-a4cd-90ab60f4a9d5", "sighting_of_ref": "indicator--dc589368-2511-4eae-90a1-f4432c60869f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26d8c532-67b2-4468-b7a5-a2ef8bc18b31", "sighting_of_ref": "indicator--ddd64080-4dab-41ce-b584-e102ea6cb15b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--caa7933b-7c8a-41ef-854f-12ea353a4548", "sighting_of_ref": "indicator--534adba9-b76e-4583-90a8-d47b91968bbe", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bd7cf13-aac3-427a-92cf-b7b909acda4d", "sighting_of_ref": "indicator--e43c67c6-94c1-4394-8d88-bd7a55412008", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08759afa-ba22-4e7f-96ee-dafcaf93096f", "sighting_of_ref": "indicator--e515e052-3a87-4477-b2ce-f1e4d4791148", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1425914-d834-4151-8074-651853947f71", "sighting_of_ref": "indicator--ca3525a2-f62d-4c4d-a7fb-2ea838b9da6a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aae84aca-ce48-4b70-af8a-81d320003c72", "sighting_of_ref": "indicator--d55ef9a7-bcaf-4b88-b694-a62366dd3749", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0486ce30-c875-4be9-b134-00e2c44c726e", "sighting_of_ref": "indicator--d55ef9a7-bcaf-4b88-b694-a62366dd3749", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4ae1e8b-d4b7-4c4f-b0a6-1a56f018af1a", "sighting_of_ref": "indicator--ebd285b8-6b66-4e41-81f2-154d65376f45", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f44ba850-e3f4-458b-ae6c-5519ae50d976", "sighting_of_ref": "indicator--ebd285b8-6b66-4e41-81f2-154d65376f45", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e075b67-49cb-42c5-b15d-5d46b2896ae8", "sighting_of_ref": "indicator--d75c16d5-0836-44f1-bf04-f2fa8bab3676", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a96324cc-190b-4e87-8ac8-39cfde41cd62", "sighting_of_ref": "indicator--b99fc310-bdac-4c3b-9e60-e6416913e98c", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a175bd6-a940-41b2-b5b8-dd5154a595ba", "sighting_of_ref": "indicator--cab282f8-d96a-4bf0-a451-fa8d47f2268f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95bfabc2-3a90-412b-84c8-5f3344272562", "sighting_of_ref": "indicator--98c59dc2-03ac-46d1-ad7b-0c78c936e4a3", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a920ba9-8cd8-480f-afe4-843850fc5657", "sighting_of_ref": "indicator--2669b54f-e9ea-47e9-844b-002d07013640", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5822c2b0-f9d7-4106-92c6-6c561d10e3a0", "sighting_of_ref": "indicator--2669b54f-e9ea-47e9-844b-002d07013640", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0342c918-6d67-4557-9be5-7b1514553c7a", "sighting_of_ref": "indicator--28df8ef0-efda-4eda-95c6-f164ab185b4b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--220b5db3-0c15-4ca4-a28e-728d2321beb9", "sighting_of_ref": "indicator--c0dbfcd1-f368-47fc-84b0-7fd39cb83386", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1892a07-4fcb-4eb9-b314-814ad1c048b0", "sighting_of_ref": "indicator--d96c717e-a4d4-4427-a081-9a6d5349bb86", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28a0296a-4536-4e08-8a23-97fc9fd1ae79", "sighting_of_ref": "indicator--c9d0dfd9-e332-401b-9ecb-0933cde0f060", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99b114f8-38cb-470d-8041-25f0df154e13", "sighting_of_ref": "indicator--c9d0dfd9-e332-401b-9ecb-0933cde0f060", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fef71451-53e6-431f-9f3f-634f8330de2f", "sighting_of_ref": "indicator--11a9cc7a-87f9-46ac-a03a-22fc8e174069", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac20ec2a-14aa-488a-a82c-cc8ef2f8e6a1", "sighting_of_ref": "indicator--349a8365-d121-4157-a098-c9e6fbd102a7", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--400faeb5-e76f-4254-b2e9-9188f8ba8ede", "sighting_of_ref": "indicator--349a8365-d121-4157-a098-c9e6fbd102a7", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7666ecb-9422-4ed4-ac10-37c55ff30158", "sighting_of_ref": "indicator--a65e5f98-e265-4f65-9520-3e3b9cefed4e", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70e92d8f-2939-4c63-bdc7-406d6f501c3d", "sighting_of_ref": "indicator--7fa92ed7-8ad9-4393-bc04-7e947769f896", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c98ca472-f330-45f3-a0f3-94d9b87e5560", "sighting_of_ref": "indicator--d40f69bd-5763-40d5-8940-f34bb2ad305b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b95954bb-57a6-45a3-90b4-f0bb418bfc17", "sighting_of_ref": "indicator--93efcd3f-1ad7-48ff-96e8-0f2d67198285", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b47f6d0-1ced-408e-bc3d-7bd2902e54da", "sighting_of_ref": "indicator--93efcd3f-1ad7-48ff-96e8-0f2d67198285", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4937bf2-d64b-43b6-8b27-e02641c74af0", "sighting_of_ref": "indicator--3ad470c7-7003-4fc6-9f65-5be629075494", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12759ed4-aff5-43b4-8319-f92481ac1e84", "sighting_of_ref": "indicator--b3fec520-e0a1-41fc-93d2-a24d27024e91", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0de4c6a-6445-48a8-b413-cf267c8c908c", "sighting_of_ref": "indicator--2474bf29-7d65-4de4-b3e8-583a92cb1d46", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--282426f0-8ce8-45be-a90c-670e4debfbcd", "sighting_of_ref": "indicator--5a1a188f-cf45-46d2-8bd3-cf6cc634df7e", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e18e3aa4-03d1-47a3-9262-614bee057319", "sighting_of_ref": "indicator--f0419f02-e008-4ba9-ab4f-ef260eee1f61", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb291f56-8da4-4340-a4c9-1b6a7ddd237d", "sighting_of_ref": "indicator--ff9de8a2-dd17-45b1-9726-2f613cfd0cc6", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07d48ab5-de8b-4c48-8b30-25b1883ed95b", "sighting_of_ref": "indicator--ff9de8a2-dd17-45b1-9726-2f613cfd0cc6", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74455d28-0097-4766-bf2d-c4ea1b3891c0", "sighting_of_ref": "indicator--ff9de8a2-dd17-45b1-9726-2f613cfd0cc6", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1224890b-bd01-41c0-b180-b77b67061bcb", "sighting_of_ref": "indicator--5b2c7845-eca6-4516-99d1-9c545e12f960", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80129818-4184-48b5-af90-63dfe5f642bf", "sighting_of_ref": "indicator--03077877-9363-4f82-9a28-65599cb56076", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f570c0b6-1aef-4389-87e5-47bf13baa5db", "sighting_of_ref": "indicator--13e29c2d-4b7b-44ec-8026-c7c6453f5127", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0e10a44-7a5f-4174-a906-080a7fda22dc", "sighting_of_ref": "indicator--13e29c2d-4b7b-44ec-8026-c7c6453f5127", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a022b7b-5ddc-452c-a640-cc6fe0443b50", "sighting_of_ref": "indicator--0f775253-59cc-42fd-b296-0fb03725d830", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85cbe9e2-dc41-4bc4-ad1e-dd63ae66237e", "sighting_of_ref": "indicator--0f775253-59cc-42fd-b296-0fb03725d830", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e4d44e8-a76f-4915-bea8-c652624e3350", "sighting_of_ref": "indicator--01d979de-6034-4525-9b11-2635a429af72", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d603f85c-1bfc-4553-b140-7bd78537686c", "sighting_of_ref": "indicator--290f1e66-0025-4586-9353-db939016898e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26880ad6-7aa5-4475-b4d3-1f88cced1bb9", "sighting_of_ref": "indicator--290f1e66-0025-4586-9353-db939016898e", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fce2a47-3cb7-45e8-8e8c-92b0b6bacf00", "sighting_of_ref": "indicator--bf2e92b9-ae36-4444-aa5f-eea80826c0bd", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e45e436f-c445-42d6-8809-36c0b8da6ce2", "sighting_of_ref": "indicator--ed065016-33df-40f2-90f7-145a9196fdd7", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bdcd7fe-c56f-48f2-a387-52046b9fbd6b", "sighting_of_ref": "indicator--2e3782b5-5985-49fe-9591-fd7a70327689", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a564e9c4-ca27-49e9-9cbc-77277e4fdb20", "sighting_of_ref": "indicator--7d2b9937-405b-47c0-8eba-7603e083ed93", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed0f85cd-8890-4f23-ab83-eaba97f5333e", "sighting_of_ref": "indicator--f3ec6e04-f91e-46e9-bbad-9b8ed1a54de1", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c9f88b2-79a7-4c21-9331-e38676abe0ee", "sighting_of_ref": "indicator--28f70ea0-c12e-48fa-88f8-f59b2af06b45", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--338b4c01-4524-4654-a592-806ed1bd02e6", "sighting_of_ref": "indicator--28f70ea0-c12e-48fa-88f8-f59b2af06b45", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78908edb-ba1d-48c1-93e1-7324127121bb", "sighting_of_ref": "indicator--46cffb20-4f55-48be-a057-e440ccb00f79", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2a88792-be1e-45f0-a60c-72317d046fc8", "sighting_of_ref": "indicator--6bf56f7d-902c-49ed-b21e-d81608af8d25", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43e47288-fdb4-4c3e-9faf-edaa4b6eeaac", "sighting_of_ref": "indicator--e64fa299-58ac-41ba-974b-92155f113047", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f67dd7a6-318c-443f-9ef8-6cf0a6750683", "sighting_of_ref": "indicator--e64fa299-58ac-41ba-974b-92155f113047", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcf3d0a0-9818-4a61-baaf-90dda6f5113e", "sighting_of_ref": "indicator--9dfe9296-bb8d-411f-9386-8fd6c4797264", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8841912-45c8-437d-9705-0abf45ca88c7", "sighting_of_ref": "indicator--9dfe9296-bb8d-411f-9386-8fd6c4797264", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffb0f769-d388-48ae-821d-a24f48833823", "sighting_of_ref": "indicator--053209df-2775-4316-9b32-19ca46598ee8", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f82a1a0-0375-4800-8279-4037f27db0bf", "sighting_of_ref": "indicator--4d73a27d-e152-4ad0-9eae-940985721392", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4d0ebcb-d300-42d1-80e1-2d54abe584b8", "sighting_of_ref": "indicator--4d73a27d-e152-4ad0-9eae-940985721392", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54de1aee-c782-4e5d-be7b-ec5c9022da2a", "sighting_of_ref": "indicator--d4abe877-80d5-4d47-9af0-ae74ab499aa4", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c1fc788-07ad-4078-a9f9-0e84ba6ecf7c", "sighting_of_ref": "indicator--ab1366ad-9577-44a7-9a0e-84f9f7fab1a4", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51e67666-df4d-400b-b1ae-e5224a8230d1", "sighting_of_ref": "indicator--65a8e5f1-bf84-4578-8565-b482ddceda75", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfdf809e-776b-4729-b144-2807b4586a3f", "sighting_of_ref": "indicator--518ad1b2-31c6-46d5-bc00-fef7f39c41b9", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86ae274f-92b4-47f0-a706-637cc1429ad0", "sighting_of_ref": "indicator--518ad1b2-31c6-46d5-bc00-fef7f39c41b9", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4165f24-2a19-42aa-9fe2-5402cc01e7be", "sighting_of_ref": "indicator--518ad1b2-31c6-46d5-bc00-fef7f39c41b9", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77b108f0-3544-4e5b-91dc-58a01458aef2", "sighting_of_ref": "indicator--3f05cb26-dec7-455e-a6be-29371d34535a", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62c8e2de-f9e3-4049-8fc2-2c0360939277", "sighting_of_ref": "indicator--3f05cb26-dec7-455e-a6be-29371d34535a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36a9e099-29ab-4985-8f69-4d933402c113", "sighting_of_ref": "indicator--3f05cb26-dec7-455e-a6be-29371d34535a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6431dd34-8d18-434d-9fb4-ae7c9cbce596", "sighting_of_ref": "indicator--9d08539c-cf17-4ffa-b006-687e0907e5cd", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78c0cd85-3b9a-43d1-97c0-38c8895bd66a", "sighting_of_ref": "indicator--9d08539c-cf17-4ffa-b006-687e0907e5cd", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--574e3537-6b06-4133-b8cb-cd5469a5844f", "sighting_of_ref": "indicator--9d08539c-cf17-4ffa-b006-687e0907e5cd", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69b72440-caa7-40aa-b802-aa9d8a32fe5f", "sighting_of_ref": "indicator--5fc825e0-76fb-4e39-8dbe-81165f49e152", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--701e7811-cce9-4bd7-8519-a10d84243f1e", "sighting_of_ref": "indicator--efa8158d-3f68-4cad-a5e7-5f20c33debb4", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14fea11e-b4cc-400f-a538-b48e5d072515", "sighting_of_ref": "indicator--03e17917-2841-4a38-8a92-bf3a0a036b01", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f4da7eb-5a52-4b98-a16b-09da6076a948", "sighting_of_ref": "indicator--0defbadb-167e-4810-b074-3e490dc43283", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d61dc7e-99f8-42a5-92c5-e10ef30e10de", "sighting_of_ref": "indicator--95104d5d-f230-48b8-9643-25b04ee76eed", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb64546e-74f7-4d7d-9228-29a8db02840f", "sighting_of_ref": "indicator--95104d5d-f230-48b8-9643-25b04ee76eed", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edda6ee9-0cfb-4bbd-b8b0-b98b1937dcc7", "sighting_of_ref": "indicator--95104d5d-f230-48b8-9643-25b04ee76eed", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--097dee51-bf26-488e-9434-9e3a47d7987c", "sighting_of_ref": "indicator--a4de84cd-0e61-4883-86a8-5956ef4db170", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c01c4616-14f2-4ecf-bec5-723c15b85b0e", "sighting_of_ref": "indicator--a4de84cd-0e61-4883-86a8-5956ef4db170", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0578bab1-c342-4b44-bdce-a1606c684c07", "sighting_of_ref": "indicator--a8adf705-ee92-45f9-8307-5c1d9c5106e2", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40d5bef1-7614-40fb-843d-6d208f9fce50", "sighting_of_ref": "indicator--a8adf705-ee92-45f9-8307-5c1d9c5106e2", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e7c2d3c-0207-4bda-b5d1-425ee6ca906e", "sighting_of_ref": "indicator--a8adf705-ee92-45f9-8307-5c1d9c5106e2", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--139823b0-1a68-4070-9cd6-92c52ceeb3b5", "sighting_of_ref": "indicator--273afd9b-3fcf-4b87-9f86-065d74fa62a8", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46fb3b5d-8f1b-4625-9208-558c3062842d", "sighting_of_ref": "indicator--273afd9b-3fcf-4b87-9f86-065d74fa62a8", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e02402a0-c137-4c2a-8188-80292495fd16", "sighting_of_ref": "indicator--3f2998b1-d7ff-4f42-9374-2315ad5bee82", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e857e1c4-969b-4b8c-8e15-fa6048fafae3", "sighting_of_ref": "indicator--3f2998b1-d7ff-4f42-9374-2315ad5bee82", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b383f46f-77e4-439e-85b9-fb8e81227900", "sighting_of_ref": "indicator--aad3ddfe-2494-47fc-b8f0-3b482764c155", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3318542-75cc-466e-a3ab-4072905d013c", "sighting_of_ref": "indicator--aad3ddfe-2494-47fc-b8f0-3b482764c155", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7ba8f5d-c469-43b6-b090-84e6d4ed0c5d", "sighting_of_ref": "indicator--aad3ddfe-2494-47fc-b8f0-3b482764c155", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1e37ed8-be83-43c2-9b20-9980d01be972", "sighting_of_ref": "indicator--4d1b60dd-f5bd-45bd-ad79-6231ebdfb63b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e939d36-f934-4174-be7a-662925ecb847", "sighting_of_ref": "indicator--1e372599-6f6e-450c-9945-e4cfba1da18f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c9c3d50-c396-4be6-a392-561a9d9cf0b4", "sighting_of_ref": "indicator--975ec3f8-7231-4db8-80ab-757fb5597c86", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5358b3cb-410b-43fc-be27-267c4a3be301", "sighting_of_ref": "indicator--62eedb7f-76da-4794-9883-daf1fae77724", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1af6e2e7-af92-4ed5-a159-fa72376ce77e", "sighting_of_ref": "indicator--c0f3a28e-cdc1-436c-8070-7002f1198a86", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b99027d-4e6a-48a9-b1df-644e8d113762", "sighting_of_ref": "indicator--87d71b1a-78a0-42b5-89a9-27923e203e56", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e71597ab-fde4-4bae-b2eb-57335a4ccece", "sighting_of_ref": "indicator--e20fa5e5-e9fd-4993-a156-91391b7897e9", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d339ef19-f839-46cc-bc8e-df36e635b86c", "sighting_of_ref": "indicator--fb431ec2-81dc-4ad1-aeff-1fbc651642ca", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f9ae59e-f5ca-4c0f-813d-84a2200144e2", "sighting_of_ref": "indicator--3c6c2eb5-2cf8-4604-aa79-99e84f2a0b5a", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c3dc9c9-f965-4320-9365-bd6494ce5a68", "sighting_of_ref": "indicator--e6f73e1d-7d61-4685-afba-7aa916b665f9", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef7977af-d5d0-41e2-9ed3-6e034bb632b2", "sighting_of_ref": "indicator--e6f73e1d-7d61-4685-afba-7aa916b665f9", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd21375e-3cee-46a8-a1cf-66f3c3a72070", "sighting_of_ref": "indicator--e6f73e1d-7d61-4685-afba-7aa916b665f9", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40658129-8caf-4ecb-a116-749d9cb6b182", "sighting_of_ref": "indicator--abacc21a-0381-4eff-9e71-22eb0ecb7e1f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bff7c5f4-9b8f-4665-a88d-e0e1e5083fea", "sighting_of_ref": "indicator--abacc21a-0381-4eff-9e71-22eb0ecb7e1f", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db13db74-1814-4106-94dc-bb05dbb976ea", "sighting_of_ref": "indicator--abacc21a-0381-4eff-9e71-22eb0ecb7e1f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--964985c1-6487-4511-a28b-3f00126a9a34", "sighting_of_ref": "indicator--bebcee76-8a7a-4d1e-8bf4-3ebaffd4413a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7afbddf6-902c-45ac-a323-18534ffc6d3c", "sighting_of_ref": "indicator--6273f20c-6178-4ca5-86c2-c8d8bc48994d", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--944f8caf-5e00-49e6-ad9b-4bb5e8b1ec97", "sighting_of_ref": "indicator--6273f20c-6178-4ca5-86c2-c8d8bc48994d", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00264f6d-684b-4956-9b41-6b2d53aa8e9c", "sighting_of_ref": "indicator--e2ecbd90-4398-4146-aa8e-dd6fb7ae32ef", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c3ef945-7eed-4241-aedb-7a348398493d", "sighting_of_ref": "indicator--cb6aaead-32d5-4eca-a7a5-83afb86bd7bb", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db097c29-5f7f-40da-aae7-ab7ab35bde4d", "sighting_of_ref": "indicator--bf6b1ae4-b3be-4667-9eda-720c75c2edca", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--885792cc-4773-492e-a587-dabc5248edaa", "sighting_of_ref": "indicator--d63b4d05-9671-4d12-ae35-ce34fc729760", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53547ff5-37c9-4405-8a42-9acf3ac290f8", "sighting_of_ref": "indicator--d63b4d05-9671-4d12-ae35-ce34fc729760", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b8978db-f0d4-4e7f-b0c3-61f215e26be5", "sighting_of_ref": "indicator--635a6a66-4e63-4b37-84b3-a7fac20d46f5", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09eff772-72fe-46e7-91c1-dd9748da9c27", "sighting_of_ref": "indicator--635a6a66-4e63-4b37-84b3-a7fac20d46f5", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--492fab21-68aa-4d92-8900-e879a16c7efe", "sighting_of_ref": "indicator--06bcf366-3961-4ea7-b99e-13bff6dfe56b", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a6117e9-2bef-4080-8b5c-b52789cfcc0f", "sighting_of_ref": "indicator--0bd65bac-e9e5-4ffc-a0ba-0f87612f2ac0", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be5c9c44-910b-4f57-be09-fbb83ec7cd3f", "sighting_of_ref": "indicator--0bd65bac-e9e5-4ffc-a0ba-0f87612f2ac0", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--565a36d0-0a11-48d5-bd30-923d4e23f8ed", "sighting_of_ref": "indicator--16c2d5e5-db90-4668-a4a2-797e2eab28b1", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f047c2a7-f56d-4606-a810-9ba1408a16ff", "sighting_of_ref": "indicator--16c2d5e5-db90-4668-a4a2-797e2eab28b1", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2999ace4-7dff-4eb1-b8eb-626e3c8d4cfb", "sighting_of_ref": "indicator--98c89e2e-d5f6-4dc2-a6c9-4572f36a076c", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--141116c9-bfa6-4c16-be30-4594d2f2e303", "sighting_of_ref": "indicator--7cbc403f-d6b8-4827-8045-44346f02c123", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b75afa0c-5eec-4d43-b871-d10e1a56ce85", "sighting_of_ref": "indicator--7cbc403f-d6b8-4827-8045-44346f02c123", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7479747-6a7d-4bd9-92a3-3df92b3a4d76", "sighting_of_ref": "indicator--4fbede46-03bf-4c0a-abea-1c65cc05e7ce", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26e073d8-64ad-4f41-b42f-ea111727f3b0", "sighting_of_ref": "indicator--f61b1636-4153-45fd-9b3b-4138cb260fdd", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--038feb52-5215-4e28-bc6a-de608b80f6a0", "sighting_of_ref": "indicator--f61b1636-4153-45fd-9b3b-4138cb260fdd", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--646812e2-6ecd-4aa8-89f4-150f012baad2", "sighting_of_ref": "indicator--2b308521-90ac-42df-a087-aa8b0d784a8b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--447018a3-c576-4244-a1b8-c74e9227f203", "sighting_of_ref": "indicator--2b308521-90ac-42df-a087-aa8b0d784a8b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4363cdc2-a991-4877-9b72-1047c47a1507", "sighting_of_ref": "indicator--5c04a5fe-3b43-4147-8cb0-8f2eeee4f8c2", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca1c3ba3-aea1-4b57-9aaa-9cdf8a7a48fb", "sighting_of_ref": "indicator--835394c5-fd6d-4139-b70b-60e45e9e379d", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ea500c7-2b75-46ea-980a-84e3adb1e826", "sighting_of_ref": "indicator--043a3b2f-4dda-4e4e-80a9-ed34f8c9f676", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7aa2453-d448-4a72-b17a-9b75d757b0b3", "sighting_of_ref": "indicator--30a90339-86bd-48fa-a4e3-562c70e79606", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dc3c5c2-68f2-469c-af28-01f9737a1a92", "sighting_of_ref": "indicator--bc686cff-35a2-4b30-8e04-7ea5514258f4", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bb984e7-43e4-419f-8dbc-69c84b81333d", "sighting_of_ref": "indicator--63d8dc28-68a6-4ea9-a884-e74e409e2df8", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42bff1e7-f3fe-4b62-b8b4-b38ec1e76865", "sighting_of_ref": "indicator--63d8dc28-68a6-4ea9-a884-e74e409e2df8", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b1a7391-c94b-40c4-bc98-64b9d2729b7d", "sighting_of_ref": "indicator--b60f57ab-5922-4297-9060-055606d7b5ad", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--642c4366-e819-4692-8e74-eb381d743884", "sighting_of_ref": "indicator--b60f57ab-5922-4297-9060-055606d7b5ad", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3dba224-7c96-4177-969e-2ffc326079dd", "sighting_of_ref": "indicator--752dff6a-c77e-43f6-9f9b-4604cdd5f1bb", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06e70d35-c6cc-4fc9-8035-e05489383881", "sighting_of_ref": "indicator--1ac44984-cd8b-484b-ba54-cf1601c180fa", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d31386aa-10a5-4412-a35e-c57f6ab0cf96", "sighting_of_ref": "indicator--87bf317a-98a0-4694-b37e-879ac6891164", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b82a9d90-cb10-4d31-b055-1787747c3d53", "sighting_of_ref": "indicator--a93f282a-32db-4f23-924f-f4e41b6104e4", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ef523cf-f4d8-48d5-b2d8-0e740fc12851", "sighting_of_ref": "indicator--a93f282a-32db-4f23-924f-f4e41b6104e4", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ecbda54-2dc3-40db-b138-d562ec9fb695", "sighting_of_ref": "indicator--9fcd40bb-f4bb-4f2a-9285-ba283a253b96", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--697d179b-0452-41ff-9f24-fd2a72984473", "sighting_of_ref": "indicator--dd877dea-618c-493b-bb36-a1579b1e3fd3", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e30ac998-9cb5-4297-8bf1-ef7b7805dbde", "sighting_of_ref": "indicator--dd877dea-618c-493b-bb36-a1579b1e3fd3", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--842cffc7-61e6-4e9e-b8bf-43190fc7e5c7", "sighting_of_ref": "indicator--8327557f-371c-4525-b625-a51442dc9123", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1fdbf14-8b20-4ce6-9502-8dfcf94c3ebd", "sighting_of_ref": "indicator--256a086c-24f7-432d-ac0c-ab2c4ba486dd", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25df8066-fa5b-437e-8e7d-f5180a8f2dea", "sighting_of_ref": "indicator--256a086c-24f7-432d-ac0c-ab2c4ba486dd", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--259a96af-2943-42d5-b0f0-04611fd07334", "sighting_of_ref": "indicator--256a086c-24f7-432d-ac0c-ab2c4ba486dd", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0520a23-d550-4e4f-9c98-d004b5549297", "sighting_of_ref": "indicator--68496eef-ae01-4a4c-9ac2-a1932b68931c", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f8310c1-2cc0-4023-ada1-b764cfe66468", "sighting_of_ref": "indicator--68496eef-ae01-4a4c-9ac2-a1932b68931c", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--598c82a7-341f-48b3-b0ae-62756e657f3a", "sighting_of_ref": "indicator--68496eef-ae01-4a4c-9ac2-a1932b68931c", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86fb976d-1e09-4e80-afb0-b293f454cbc4", "sighting_of_ref": "indicator--1f63c7c4-1758-4bc6-bf36-b8da1b42beae", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6bc5a83-48c4-427a-9249-6ae612e1a56a", "sighting_of_ref": "indicator--b8068f2d-6756-442c-8f41-52f8069b5943", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff7aa576-aabc-44eb-ba94-9f23a3688ab5", "sighting_of_ref": "indicator--4c6e31f8-79b4-440d-9d68-4c052d9c36d5", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54d2ebdb-dae9-49c3-af3b-1abcf66a043b", "sighting_of_ref": "indicator--c748c035-48e4-4c13-8eaa-866312cfb75f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5d501b5-beb9-45a0-917e-f42ec81fa6cd", "sighting_of_ref": "indicator--c748c035-48e4-4c13-8eaa-866312cfb75f", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5106872-0339-4a3a-be22-a6e3de43c6ff", "sighting_of_ref": "indicator--c748c035-48e4-4c13-8eaa-866312cfb75f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--739f84b4-9593-4489-9cd1-b7f62455ab88", "sighting_of_ref": "indicator--537c7f71-61b4-40d8-9784-5033a20317e9", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68ecb574-e367-4f5b-889d-79a4efb51a81", "sighting_of_ref": "indicator--243f8352-e76e-4fd7-bad8-41d3eb2ab7bd", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6196fb9-2724-40d4-93d6-115b44e5c945", "sighting_of_ref": "indicator--243f8352-e76e-4fd7-bad8-41d3eb2ab7bd", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81981854-268e-4880-ae2b-55466afbb1d8", "sighting_of_ref": "indicator--243f8352-e76e-4fd7-bad8-41d3eb2ab7bd", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9042e82-35bd-48e1-b1d3-0363db5a1243", "sighting_of_ref": "indicator--b8260f62-1e70-45e7-837b-a5092e0247b1", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93bd8b03-4cf9-4d28-93d2-346e95486f6d", "sighting_of_ref": "indicator--e0d8a6df-5be1-4e03-ba14-2f1de8ee2652", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb84f5f3-b526-4bd9-97d2-36025ad415cd", "sighting_of_ref": "indicator--a04a8598-3ac7-4550-bd64-99657d5fe09f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c24a80e-13af-4521-b824-1f94783ca014", "sighting_of_ref": "indicator--a04a8598-3ac7-4550-bd64-99657d5fe09f", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b57b7cd7-b11a-49d9-bb4f-89ba532b1971", "sighting_of_ref": "indicator--a04a8598-3ac7-4550-bd64-99657d5fe09f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6680ea58-db3c-4064-966d-ae15ac57ba6b", "sighting_of_ref": "indicator--6a65b599-a785-431c-988f-742280e6606b", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6377c895-88b3-4332-92bf-b0e6faa869b6", "sighting_of_ref": "indicator--035cd731-c71f-4d1a-820b-d7c41ae4b118", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2016a129-bc44-484a-b1d4-6eab419ec503", "sighting_of_ref": "indicator--cf34826a-5514-4be1-9fce-51cff61fd7f7", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1d0d1a6-3a98-42fe-91cc-89bdeb6b52ca", "sighting_of_ref": "indicator--cf34826a-5514-4be1-9fce-51cff61fd7f7", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d546d2b5-ff7e-42bb-9a98-bb251c9e1d81", "sighting_of_ref": "indicator--895081ec-5f22-4562-9246-dd4483763c9b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7e046a4-d6a4-4a11-9520-cfbe96cc84ac", "sighting_of_ref": "indicator--9d4294bf-0e82-4ca3-ba58-4b7ed8cc9783", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8796c98-b3bc-42f0-82e1-1c89e9c6549f", "sighting_of_ref": "indicator--9d4294bf-0e82-4ca3-ba58-4b7ed8cc9783", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--406fae40-576f-4150-bbe8-14706a060726", "sighting_of_ref": "indicator--769fa130-2751-40b5-a8d0-a39a8c6cdeb0", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afd9e886-d14b-4945-928a-6265d9f886f6", "sighting_of_ref": "indicator--769fa130-2751-40b5-a8d0-a39a8c6cdeb0", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8941b87d-4f12-4975-bc90-9e44067eff82", "sighting_of_ref": "indicator--a73d4c65-166a-417e-b617-f179f9667c4a", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53e0f455-53eb-40be-98d7-78b5909f7f3f", "sighting_of_ref": "indicator--a73d4c65-166a-417e-b617-f179f9667c4a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--968147ef-12f6-4698-a3ba-f7541f92810f", "sighting_of_ref": "indicator--a73d4c65-166a-417e-b617-f179f9667c4a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51f9e1b1-57d6-4ba5-8389-7b19816c9089", "sighting_of_ref": "indicator--8f565da7-b270-4ccf-a054-5211f38f0c68", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36f9c730-0a90-4313-9760-8e63f98f1f6a", "sighting_of_ref": "indicator--8f565da7-b270-4ccf-a054-5211f38f0c68", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9af483f1-633f-40d9-8af8-dbab988d37e5", "sighting_of_ref": "indicator--2115f424-0462-4f56-a528-c901224e94d7", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20cf075f-5532-4918-bcbd-0d90a70bfc75", "sighting_of_ref": "indicator--2115f424-0462-4f56-a528-c901224e94d7", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df51b751-fb2b-45e1-bee0-5c81c1430b43", "sighting_of_ref": "indicator--f3a33c2b-d6c7-4f0a-9442-5ed687ed8cf9", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e4b48c0-e18a-42b7-aa8d-002fb0c6ba6c", "sighting_of_ref": "indicator--76edffe0-8e78-4264-91e6-6fb94aa3e935", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc454855-5daf-4ce3-a299-e8f4ce756ab9", "sighting_of_ref": "indicator--76edffe0-8e78-4264-91e6-6fb94aa3e935", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce72b1fb-28fb-4140-a49f-631837f36480", "sighting_of_ref": "indicator--76edffe0-8e78-4264-91e6-6fb94aa3e935", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--104567c7-2a0a-4b24-b4c3-85d4f37a1a99", "sighting_of_ref": "indicator--c72d7716-2cdf-4c76-8087-3a0b31f15e44", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52cc1022-2685-449a-9871-3c0ef1bf73d3", "sighting_of_ref": "indicator--c72d7716-2cdf-4c76-8087-3a0b31f15e44", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dbfa60b-950f-45c8-bd67-ac93bf16e161", "sighting_of_ref": "indicator--c72d7716-2cdf-4c76-8087-3a0b31f15e44", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16275d5b-2512-4a5f-b1f9-ae2989881713", "sighting_of_ref": "indicator--66ad4cc5-1282-45d3-ad04-a89f106fc4a5", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad29080b-1d3c-4b24-9c28-32abbe92b3d7", "sighting_of_ref": "indicator--66ad4cc5-1282-45d3-ad04-a89f106fc4a5", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d45067d8-45ff-4279-8987-93d20d503f1e", "sighting_of_ref": "indicator--46b8dc94-333b-4ae8-90f2-5e0976277d80", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6281bdb-1dd6-4f2d-a315-46bea20e9511", "sighting_of_ref": "indicator--883af3ab-7631-44e4-abf2-6540b16a271b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3b749ac-4a12-462a-8f3f-0c46be90c6fd", "sighting_of_ref": "indicator--507b699c-363b-40e6-b8bc-9eb947544862", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0172b676-4c8a-4b4e-ad78-cf50fe9034c0", "sighting_of_ref": "indicator--507b699c-363b-40e6-b8bc-9eb947544862", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06190beb-8f43-4aa4-bfb2-d753c0e642cc", "sighting_of_ref": "indicator--b50257ad-3949-44c1-9cb0-abe43f348e27", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fa786b1-cbdb-42d7-9e25-48a88a380798", "sighting_of_ref": "indicator--b50257ad-3949-44c1-9cb0-abe43f348e27", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be8213ca-6f1e-4ee8-a47b-47f08b60dad6", "sighting_of_ref": "indicator--b50257ad-3949-44c1-9cb0-abe43f348e27", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40e6160a-8b05-4671-bdd9-fd3242ae94cb", "sighting_of_ref": "indicator--3bafb9a4-912c-4622-a5a5-07ebdd014330", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdfd115e-2464-4b14-9e26-eb8ade32c122", "sighting_of_ref": "indicator--3bafb9a4-912c-4622-a5a5-07ebdd014330", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61641595-2b82-472c-9b41-ac27746dbe1b", "sighting_of_ref": "indicator--3bafb9a4-912c-4622-a5a5-07ebdd014330", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ae297ac-912a-4f89-b97f-3e2d0e65fed1", "sighting_of_ref": "indicator--5f47a2a1-5f48-427d-b4bf-0f2c0838464c", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d79e860-87bf-4067-a113-69f42159de7e", "sighting_of_ref": "indicator--d01f8d4f-c04d-41d2-ad11-60580ce75a6d", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b84319a-cdb7-4ed0-b4d3-5bd0e3fe8bf5", "sighting_of_ref": "indicator--d01f8d4f-c04d-41d2-ad11-60580ce75a6d", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9a63509-88ff-4af9-84b2-cc6cb5f4fddd", "sighting_of_ref": "indicator--596f7434-941a-48f3-b040-3eb377f14e25", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d6d0a64-49ea-4a13-984f-541206eb45c4", "sighting_of_ref": "indicator--596f7434-941a-48f3-b040-3eb377f14e25", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f94e6e2e-5488-42ff-8a01-c0c945ab7f15", "sighting_of_ref": "indicator--596f7434-941a-48f3-b040-3eb377f14e25", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--319fdb9c-4d90-49e0-913e-cddaa98b6f62", "sighting_of_ref": "indicator--6ed67a39-0741-43c3-8cc1-cbf745f359dd", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae9dc819-8716-4d0c-9eac-fd8377a52f70", "sighting_of_ref": "indicator--6ed67a39-0741-43c3-8cc1-cbf745f359dd", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--595e62de-425c-4fc1-984b-5d122bae6d67", "sighting_of_ref": "indicator--19535d82-0242-416f-b5ff-c97cf7ed8b0e", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--729ef884-c832-4547-80fc-61ec49263ad2", "sighting_of_ref": "indicator--2846c195-cf7c-4203-97d2-fd7186eb821a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--959713f9-331b-4077-b4af-0ce34d4a1271", "sighting_of_ref": "indicator--2846c195-cf7c-4203-97d2-fd7186eb821a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--019fb692-1303-4467-8e3a-67d2580518d3", "sighting_of_ref": "indicator--033aae8f-2e0f-4eca-8617-a97be03bc7ea", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bc0cba6-0d0d-4214-a89c-1655f5acc103", "sighting_of_ref": "indicator--033aae8f-2e0f-4eca-8617-a97be03bc7ea", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--371cb4c6-9952-4d08-a0a6-483eefcf1d2b", "sighting_of_ref": "indicator--033aae8f-2e0f-4eca-8617-a97be03bc7ea", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaf49798-8b9b-4262-a97d-261daf384514", "sighting_of_ref": "indicator--851db56c-eb3c-4f20-ba92-0ea09c5144f8", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f0aaddd-7624-4fdf-be6f-98347b02be1a", "sighting_of_ref": "indicator--23bfce54-c8eb-4e2b-8a1a-1de08fcd6fe3", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78afece1-96dd-409d-9e7f-10eecc15dbd1", "sighting_of_ref": "indicator--23bfce54-c8eb-4e2b-8a1a-1de08fcd6fe3", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4399662-3a2e-4c3c-a26e-8409c1dbb84a", "sighting_of_ref": "indicator--23bfce54-c8eb-4e2b-8a1a-1de08fcd6fe3", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--defe8f19-4411-4056-9ace-08ad8276208d", "sighting_of_ref": "indicator--a4c707c7-7aa2-49c3-9148-616eb8c27d50", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bf6184e-2be4-42e1-b24f-542aa830afe5", "sighting_of_ref": "indicator--a4c707c7-7aa2-49c3-9148-616eb8c27d50", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a645818-4f01-4b5f-aa74-eabe37ed1c1c", "sighting_of_ref": "indicator--a4c707c7-7aa2-49c3-9148-616eb8c27d50", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19283534-a9b4-4637-8e63-fbd631d7db79", "sighting_of_ref": "indicator--f892da00-423a-40df-a8ec-a73f93137837", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb43f3d6-1592-435c-bef6-3f7c24a536ea", "sighting_of_ref": "indicator--224098e0-8741-4575-9b32-0c2ebcc96a79", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--954c10b5-10b7-462b-a5ba-947cb2bcef84", "sighting_of_ref": "indicator--21f14ba4-0c0b-4ab4-a59c-88bbdbf40e86", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00f081f4-2721-4780-b4c5-99ee88ed1bb8", "sighting_of_ref": "indicator--d17001c9-6ad4-45ea-84be-23f88c59acc0", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e63b8c0b-dd7d-439e-822d-1c1870713f5e", "sighting_of_ref": "indicator--d17001c9-6ad4-45ea-84be-23f88c59acc0", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ed1726f-ab04-4442-a865-c318c1bc9fd1", "sighting_of_ref": "indicator--7804a70a-57d2-4d8c-a3e6-a66d2139aebe", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b983406f-7634-453e-9b31-29f9f34a1056", "sighting_of_ref": "indicator--6278cc69-9f0c-4222-ac28-de3252be1265", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a050577c-e904-4fa4-bcea-e62dabe2f58d", "sighting_of_ref": "indicator--c02ca1c1-8107-4db4-9081-dee231ff1526", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4aaa508e-880a-471b-8bd8-f0338917be78", "sighting_of_ref": "indicator--3e9d12a8-427c-40ce-8a86-e16bee311a25", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7ea1c53-b0c3-473c-91cf-248cf045ed0d", "sighting_of_ref": "indicator--a098dbf8-e8d1-428b-816c-74910ff1aefb", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72951f37-1b39-4483-b36e-db3e2802e976", "sighting_of_ref": "indicator--107543a8-d1d9-4b75-85e3-478edada666c", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a687534a-8541-41c4-b451-d11eb63f8919", "sighting_of_ref": "indicator--74fba084-b508-4070-b671-e5ef51520367", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--282794ea-5be0-4c10-906b-ece5cf1f1e59", "sighting_of_ref": "indicator--74fba084-b508-4070-b671-e5ef51520367", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36baffa4-c1eb-4d9c-8410-6b68d1597ae2", "sighting_of_ref": "indicator--6b4b438a-2eab-4dd9-a6bf-1ad4392f4298", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b111984a-95a5-4f18-9958-f8f2254fe547", "sighting_of_ref": "indicator--6866bfb1-d82b-436c-baea-7a270d725f6c", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7634455c-4bc6-498e-92df-48c43f4beea5", "sighting_of_ref": "indicator--cffcf6eb-83ed-4424-ae15-0b4031968ede", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83984be7-52f0-4bee-befc-9d3a31378d73", "sighting_of_ref": "indicator--cb167f97-ff05-497d-9d7c-2a1966e01cc6", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a823a2c-0870-44d1-9489-cd85cca66378", "sighting_of_ref": "indicator--cb167f97-ff05-497d-9d7c-2a1966e01cc6", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ef09e4e-ed3b-4dfb-89d3-f1a2b7b6cd22", "sighting_of_ref": "indicator--35151728-fb9c-4068-9335-b7325104f834", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b7f9658-e6d5-4f5b-9ca8-d0e6a6f965ba", "sighting_of_ref": "indicator--3d854c43-8099-4b2e-ae79-b61ecea4f364", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b52c270-6cda-4e8f-ae0f-e84e7a653298", "sighting_of_ref": "indicator--3d854c43-8099-4b2e-ae79-b61ecea4f364", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bb8c828-f035-415b-96b6-26588a83faa8", "sighting_of_ref": "indicator--6cfc9b18-7b2b-4174-b657-8c2027cfecd2", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3861f48-d0bf-4323-b194-5bbf986a12e4", "sighting_of_ref": "indicator--6cfc9b18-7b2b-4174-b657-8c2027cfecd2", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1166455b-4e9a-40ff-b4da-0e98527f0a7f", "sighting_of_ref": "indicator--06db7a7e-3d03-45ec-9ff1-b6b829c0ea2c", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b30aab70-2d74-4e22-849c-b7aa7a93d019", "sighting_of_ref": "indicator--f2f53dd3-e58e-4055-a8e1-09502c294966", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9a1b358-62aa-4d8a-8c9b-83d37b32b7f4", "sighting_of_ref": "indicator--5b05703c-dcc5-47e9-936b-d11c8e9bcf85", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7334b33d-e99d-4e07-aa28-f1ea76f74b67", "sighting_of_ref": "indicator--ca3dbc45-7936-4bbe-bcaf-b0504c052407", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8860e316-cf08-4f32-b7db-a7d3337daa06", "sighting_of_ref": "indicator--c2d47eed-bd2c-414d-a99e-5c4af537fdd7", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80d76b93-403f-4af4-b7bf-a176eb2117d8", "sighting_of_ref": "indicator--b12a14f6-f0cc-48d9-a67a-34703e0f77a6", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09496135-1183-49cd-acd5-d1072e11c074", "sighting_of_ref": "indicator--b12a14f6-f0cc-48d9-a67a-34703e0f77a6", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a77a4769-57ff-4677-97bc-c55065f2a696", "sighting_of_ref": "indicator--9e7c1682-252d-446e-b46d-0c70f0b20856", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30352ad2-1b98-4044-888d-9f770a4b3a46", "sighting_of_ref": "indicator--9e7c1682-252d-446e-b46d-0c70f0b20856", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--736c7c13-99aa-416e-9174-614f077c3946", "sighting_of_ref": "indicator--5a4926bf-7cc8-40e1-945b-e27c3f1605e9", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe45762c-895c-48de-88aa-743cd6b96767", "sighting_of_ref": "indicator--5a4926bf-7cc8-40e1-945b-e27c3f1605e9", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c886fafa-7b5f-4f65-af4f-5cc6462f7f2d", "sighting_of_ref": "indicator--f82b0347-1478-4763-ae9a-010ef143f23c", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80c958aa-2ccc-4568-9ae1-0ea10309bb72", "sighting_of_ref": "indicator--368fb969-01ef-4db6-9d9e-a1a68d1f8ed0", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--560d5209-61d7-4ccd-9c68-b9ccf51f319a", "sighting_of_ref": "indicator--0e290bd4-7d38-43de-a45c-850fa5b535d4", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68b48cfb-f7c2-4f90-b8b6-ccb39c60cb80", "sighting_of_ref": "indicator--4acad0a0-f51a-41c8-867a-d0169f52bbdb", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--923c20c9-6b4e-485f-9278-12f005c3cd14", "sighting_of_ref": "indicator--4acad0a0-f51a-41c8-867a-d0169f52bbdb", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d29ed0a9-b236-4122-a6ad-23df0e7cb828", "sighting_of_ref": "indicator--48de57e2-2610-49bf-8df4-59a16570e0c1", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a080850-7cf9-4ea7-b757-56bf481dcafd", "sighting_of_ref": "indicator--48de57e2-2610-49bf-8df4-59a16570e0c1", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71bfcb43-bafc-402a-b25e-b23538c42c89", "sighting_of_ref": "indicator--1f2bd483-6918-4732-afd0-f8408ad42fe5", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ca5f052-a184-48bd-86a3-36bd86046a93", "sighting_of_ref": "indicator--1f2bd483-6918-4732-afd0-f8408ad42fe5", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8edcd139-4d6f-425e-9a68-9ee9706b3114", "sighting_of_ref": "indicator--1f2bd483-6918-4732-afd0-f8408ad42fe5", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--647d8278-0c69-4f0b-afbf-4e5e4c448b65", "sighting_of_ref": "indicator--46332803-52fe-4462-95d4-b697c88ceb62", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28eacc43-43a5-4bdd-bb0c-59af51cb996c", "sighting_of_ref": "indicator--2b798db4-b722-4aaf-8858-51960491a52a", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--081b7e26-3338-49d3-b5ea-03a2aacd9eea", "sighting_of_ref": "indicator--c814808f-0217-48ba-933c-ecf071a1b873", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--652c5a73-d9cc-4c02-b0fb-970823e4d238", "sighting_of_ref": "indicator--3d502fbc-018f-44b7-a6db-f404593177ee", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b44b08e-05de-46a2-81a2-4afaf778cfa3", "sighting_of_ref": "indicator--3d502fbc-018f-44b7-a6db-f404593177ee", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--089a0699-c548-4993-96e7-dd4dcbf45b5c", "sighting_of_ref": "indicator--57d6f3cf-0376-40fc-8688-399d6ea97381", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b9c762e-67d7-42fb-8434-ab45cdcff6e3", "sighting_of_ref": "indicator--2ffaca34-71ca-404c-b995-ae60d958c13a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28f08b12-1ac3-4af5-adec-af89e0dce37e", "sighting_of_ref": "indicator--2ffaca34-71ca-404c-b995-ae60d958c13a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dac20d10-41c9-4c02-b608-8c2285eb1be9", "sighting_of_ref": "indicator--cc6c7d43-c436-4c4e-ad4d-138817baffd6", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eee56f3c-06ef-4515-8263-4fe35de29517", "sighting_of_ref": "indicator--4dd3a28a-43d9-4378-9faa-7295acbe08c5", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0eb97f27-92df-46f4-bee0-94df89e32608", "sighting_of_ref": "indicator--014c1141-62d3-44ae-ab43-04ef4caaa1f5", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fe22e59-ff7d-4f26-b73a-002e50c82b87", "sighting_of_ref": "indicator--014c1141-62d3-44ae-ab43-04ef4caaa1f5", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d393e42f-5486-4d5f-8d9c-47daa5e4d77c", "sighting_of_ref": "indicator--e4beff35-4e85-4165-93bc-a8990c072052", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74ed72d0-f39a-40eb-8e81-a5cc34f596ff", "sighting_of_ref": "indicator--2ced8ce6-439a-40cc-8c6f-b5c4b03343e0", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17091f26-bd84-42f4-b024-baaf2df89ea0", "sighting_of_ref": "indicator--521883fb-c5f5-4118-87ff-1a4640c0c3f4", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d70d4f16-889a-4ddc-9108-a626390e2326", "sighting_of_ref": "indicator--521883fb-c5f5-4118-87ff-1a4640c0c3f4", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c69012e-d270-463e-afff-d5015855984f", "sighting_of_ref": "indicator--521883fb-c5f5-4118-87ff-1a4640c0c3f4", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5851714c-af96-435f-9e5a-c666fa90a525", "sighting_of_ref": "indicator--803c9e98-3f9f-45f6-8093-fcbb377b5d8a", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47eeee63-49d7-4d57-99b3-1d78bd0f6f2f", "sighting_of_ref": "indicator--5e63bbc4-b166-4f42-8663-1b0d13d6a5f1", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96da1888-c2c1-46fb-969c-37fe35b279c2", "sighting_of_ref": "indicator--c7dd70ad-1069-4614-ab22-eec0c05a73ed", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b631323e-f11a-40f9-ad0d-5b1e8573ffbd", "sighting_of_ref": "indicator--a5f73b06-a841-4392-b7bc-8d423ada9bb3", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c3cf8b3-965f-4deb-a6e6-86a7a4a83d41", "sighting_of_ref": "indicator--5a8c5c1e-0086-497e-9bb3-1df4537871c5", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbded623-b6db-48bf-b1f4-7e4ff36fa817", "sighting_of_ref": "indicator--5a8c5c1e-0086-497e-9bb3-1df4537871c5", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b7c23ee-c2a2-40e1-ba21-bc9a2dbf7659", "sighting_of_ref": "indicator--5a8c5c1e-0086-497e-9bb3-1df4537871c5", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3d03bfe-d4a8-4515-b8ff-199b63336a35", "sighting_of_ref": "indicator--3750993b-3054-4697-a3ed-208712e8de84", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ee4dbde-4e5f-4254-b7db-be1fb054d329", "sighting_of_ref": "indicator--730bc91b-cfb1-4ba8-9a9f-0501d3e19fd7", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac45241e-7ef4-4863-b35a-7ab2e2b38693", "sighting_of_ref": "indicator--9c8bf1a9-8e90-4a88-afa0-79d6ddcdafdc", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21ec7bdf-72ed-4c55-a4b8-83ccafd6f9f8", "sighting_of_ref": "indicator--dd69a7d8-f442-4400-8c6d-b94c7f4afbf6", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56dfc468-8935-4385-ab96-bbd8ee5a1f3b", "sighting_of_ref": "indicator--04a17bd1-777c-45be-b84e-7a91e18e6f08", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d8f537f-f9ac-4636-be2d-e75f67c2c2ba", "sighting_of_ref": "indicator--b6341df8-d612-4705-bb22-495fddd5d2c2", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b03ea88-d5e6-4654-86ca-4923e8b81272", "sighting_of_ref": "indicator--2a14e23b-92fe-4279-bcfd-e8bb6604722a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b61c688-4e7b-4a5e-9619-b4d374ae2e97", "sighting_of_ref": "indicator--2a14e23b-92fe-4279-bcfd-e8bb6604722a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32c11bd0-9be9-4583-991f-c5560fdf30a6", "sighting_of_ref": "indicator--7ef991f8-80bd-43a5-a04c-1499223b3e36", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ab02375-96be-476d-9553-5f6e02dc509b", "sighting_of_ref": "indicator--6c296b1d-c5bb-4ef4-b775-489e43105e8c", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8685e57b-2190-471e-b838-3322e05a8d47", "sighting_of_ref": "indicator--6c296b1d-c5bb-4ef4-b775-489e43105e8c", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efcfce83-9f59-4c7c-b973-8dbb73df7553", "sighting_of_ref": "indicator--6caf3a9c-2e1b-4547-807a-be5a243706fd", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf79c7c7-57a2-465a-b7c4-bff4ac0bdab7", "sighting_of_ref": "indicator--6caf3a9c-2e1b-4547-807a-be5a243706fd", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--662d8f9b-49f6-44ae-9fcd-dd3bf8cfb6eb", "sighting_of_ref": "indicator--6caf3a9c-2e1b-4547-807a-be5a243706fd", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c13233e2-60fb-413f-986c-5e1cfe9982b6", "sighting_of_ref": "indicator--f609737e-e027-477c-a622-2287251df3b5", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94b26dbf-730c-4ebf-a759-ee9e96324da9", "sighting_of_ref": "indicator--f609737e-e027-477c-a622-2287251df3b5", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4e6d321-51bb-4541-9868-aa3a485454dd", "sighting_of_ref": "indicator--f609737e-e027-477c-a622-2287251df3b5", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abe0cf1e-3291-4540-a33f-ff40e7377041", "sighting_of_ref": "indicator--6d9a3340-3f85-4a45-b4df-fcac3bd1fb9a", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce14b9b9-412e-4e37-9578-3d79344de512", "sighting_of_ref": "indicator--6d9a3340-3f85-4a45-b4df-fcac3bd1fb9a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc96e38e-17dc-47ad-8ed5-5ff81f2b5152", "sighting_of_ref": "indicator--6d9a3340-3f85-4a45-b4df-fcac3bd1fb9a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d39d8ba1-6c11-4b2d-9966-82889b7e5d25", "sighting_of_ref": "indicator--3ba6666f-4f8f-42a7-bf8c-b247f28cf8a7", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--377234f3-299d-4233-bd5e-ab8795bee03e", "sighting_of_ref": "indicator--3ba6666f-4f8f-42a7-bf8c-b247f28cf8a7", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--618c2459-71ac-45ad-aa8f-e86bc818e587", "sighting_of_ref": "indicator--3ba6666f-4f8f-42a7-bf8c-b247f28cf8a7", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c556776c-fcf8-4308-b63f-41fbd1cdaeac", "sighting_of_ref": "indicator--e152ee48-b882-43bb-a3d3-75bf01a9da9e", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1e62219-9339-4cfa-9eff-19abc700380b", "sighting_of_ref": "indicator--e152ee48-b882-43bb-a3d3-75bf01a9da9e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f5a97ad-c862-4410-872f-32b550e06a0d", "sighting_of_ref": "indicator--e152ee48-b882-43bb-a3d3-75bf01a9da9e", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21d25cd6-9da8-4218-8f9b-979ee6ea6b73", "sighting_of_ref": "indicator--3a3b1756-a4ec-410e-bf24-735c586bdd5d", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a72ffaf0-a240-4317-b6d2-a83876531f56", "sighting_of_ref": "indicator--3a3b1756-a4ec-410e-bf24-735c586bdd5d", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a04bfb59-2210-4ccb-9708-e26725c7b4f8", "sighting_of_ref": "indicator--3a3b1756-a4ec-410e-bf24-735c586bdd5d", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b15466f3-7606-4b53-87db-0ad1f52c03fc", "sighting_of_ref": "indicator--e6589402-570c-4372-a013-6fbe1ff946ca", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e26785c7-f2a8-4989-a7a3-4779c53f34e4", "sighting_of_ref": "indicator--e6589402-570c-4372-a013-6fbe1ff946ca", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33bbb95c-334c-4f9d-bf66-22d594236981", "sighting_of_ref": "indicator--e6589402-570c-4372-a013-6fbe1ff946ca", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2463fd24-e761-49b3-baf7-e1794be2c00d", "sighting_of_ref": "indicator--868c266a-659c-422e-a340-98c5fc37e35f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10f4ced8-dc6a-46f1-91cb-159633c4368f", "sighting_of_ref": "indicator--868c266a-659c-422e-a340-98c5fc37e35f", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--845617c1-8234-44a8-938e-34f03d1f83a6", "sighting_of_ref": "indicator--868c266a-659c-422e-a340-98c5fc37e35f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acaad3ad-0e45-4ba9-849a-a3af84a0faac", "sighting_of_ref": "indicator--4bdba5e7-ee8b-4fdd-b28c-927f226f252e", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80b4d19c-4bf7-44d1-a8c6-3bb4fc3c75d3", "sighting_of_ref": "indicator--4bdba5e7-ee8b-4fdd-b28c-927f226f252e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40eff51c-71c8-4dec-bd9c-e3b8477226a6", "sighting_of_ref": "indicator--a988dcfd-c2ed-458c-a3b8-444f4fc82815", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a05eb846-591e-4a5c-93e8-161c11a77e1c", "sighting_of_ref": "indicator--a988dcfd-c2ed-458c-a3b8-444f4fc82815", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b781474-80a7-413a-90c4-45a268ebae94", "sighting_of_ref": "indicator--54d63812-262d-4137-b5bd-d544fe36bda4", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3d183b5-d135-4e89-91fc-e297f5105e59", "sighting_of_ref": "indicator--54d63812-262d-4137-b5bd-d544fe36bda4", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--594abd8d-49db-4f6d-bcc1-dee9272052c8", "sighting_of_ref": "indicator--39cbc3df-a25b-44f9-a714-b261c3e8cb74", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27b0f9f4-106f-442f-b1ff-7ca784331975", "sighting_of_ref": "indicator--39cbc3df-a25b-44f9-a714-b261c3e8cb74", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef0f04f8-3459-4364-a353-43a9ff42da16", "sighting_of_ref": "indicator--39cbc3df-a25b-44f9-a714-b261c3e8cb74", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--447593b1-4c64-4a89-a170-38dff379279b", "sighting_of_ref": "indicator--a4c32112-e4c0-49c8-8b5f-b5e668e7a48f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cd759e8-26e1-474f-b25e-86289424451b", "sighting_of_ref": "indicator--a4c32112-e4c0-49c8-8b5f-b5e668e7a48f", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d5ec762-0ee8-4991-84b9-490d8e967144", "sighting_of_ref": "indicator--a4c32112-e4c0-49c8-8b5f-b5e668e7a48f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79fa39a3-a911-41dc-a4a7-2f463e0d7826", "sighting_of_ref": "indicator--c0c6b756-06b5-4a4d-b261-2a17cabbdefc", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12177e60-dd99-4f21-aae4-d29fbdbe6d20", "sighting_of_ref": "indicator--c0c6b756-06b5-4a4d-b261-2a17cabbdefc", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--664dfe86-ec0f-47f3-880f-854a2815b234", "sighting_of_ref": "indicator--c0c6b756-06b5-4a4d-b261-2a17cabbdefc", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56438323-a3f7-4def-b6a7-e66f845a1adf", "sighting_of_ref": "indicator--54657a30-89f1-4f8f-bc6f-06716c2118ed", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4af376d-de10-4d52-9517-cb4ce6816adf", "sighting_of_ref": "indicator--54657a30-89f1-4f8f-bc6f-06716c2118ed", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03014b27-8460-49cf-a393-19e40ebe83c9", "sighting_of_ref": "indicator--54657a30-89f1-4f8f-bc6f-06716c2118ed", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--097f85ab-476b-40a8-b6d9-6741b86a68f7", "sighting_of_ref": "indicator--5ab4bd4a-bee1-46a3-bd66-fcb3defca66b", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd31881d-bdda-468a-948f-0ec95a8f1dda", "sighting_of_ref": "indicator--5ab4bd4a-bee1-46a3-bd66-fcb3defca66b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78b035f1-d255-4e80-881a-ee9b56c86a20", "sighting_of_ref": "indicator--5ab4bd4a-bee1-46a3-bd66-fcb3defca66b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--faa524c3-92dc-49e1-a517-46a1abde0b50", "sighting_of_ref": "indicator--1fb802b4-fdf0-47f7-8be8-3fe383952b19", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81b981f6-c705-411e-b071-cd0893c770db", "sighting_of_ref": "indicator--8c80dbc2-923d-418a-bd4c-dcc80b499efd", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb66d4b4-0853-4893-8d33-8151fd3d41d7", "sighting_of_ref": "indicator--52c8410a-5fdf-4cad-a941-5427dc6e0ba8", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95cc5ef2-6332-4fb2-a1b0-17ff52684d12", "sighting_of_ref": "indicator--be5b72d1-19b8-4dc8-b958-2946f4fec874", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c4f0bb1-2a2a-4531-8971-147cb5390e09", "sighting_of_ref": "indicator--c44cb218-75b3-42e7-8ef2-27f45c69fcb5", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d7fe79f-3fb5-487a-87c2-717b369c30c3", "sighting_of_ref": "indicator--19386b6c-47e8-4df4-a887-9d51eb0a288b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--866a8c41-59fd-481c-be5a-34d964d7cbfb", "sighting_of_ref": "indicator--733e73ac-68e1-4850-aed4-96d56c0c64f1", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdf5ee71-b4d6-4d41-b76a-2f3dfffc3aac", "sighting_of_ref": "indicator--e102b1e4-3c65-4a0a-93ce-ba464584e181", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63c69a45-3c72-4506-99a2-8f24ba7dc082", "sighting_of_ref": "indicator--96d4cb6d-0ece-42ba-a1b6-04a2b2196ce0", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ada8e68-7058-4417-a386-f83dc6955561", "sighting_of_ref": "indicator--ae15b4f3-32ef-4e5d-9dee-23842f636b2e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45a23b76-34fe-4aa2-9128-a4a112dc087e", "sighting_of_ref": "indicator--49a48a48-9bdd-4bbd-a145-f6b3139067a8", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30c35796-2831-4c13-87d9-10e26ca6c9aa", "sighting_of_ref": "indicator--88042c5a-61c8-4a6e-9264-b1b19e1b932f", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f699b12f-7c42-4a68-a8f3-7442ce495b25", "sighting_of_ref": "indicator--786436d6-86a2-42b9-ab04-b46ac3a2032d", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c786e76-fe67-4246-bd43-33e8e560104e", "sighting_of_ref": "indicator--ad77d9a6-a2d6-461b-b5bc-04d0190a3ff6", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9009e700-a070-4822-963e-2f1e4b0be2ca", "sighting_of_ref": "indicator--75051c6a-2586-44b3-aa40-d32d63df08a9", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa5520ad-2616-42c5-af3b-0691ef9498ba", "sighting_of_ref": "indicator--dd6c6f1a-824b-42bb-980d-9c9190d20199", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2fc0bda-4714-4539-a3bd-6e67359c4cd6", "sighting_of_ref": "indicator--c9ca5b2c-8807-4172-b907-af2385c9aa36", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a3caa0c-90d8-4c4d-8fbe-b431972e65ea", "sighting_of_ref": "indicator--c9ca5b2c-8807-4172-b907-af2385c9aa36", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76feb237-aa02-4cb1-9168-e93e3ac4c6fb", "sighting_of_ref": "indicator--c9ca5b2c-8807-4172-b907-af2385c9aa36", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0aa24b97-8abb-4411-b55f-ca26352c2686", "sighting_of_ref": "indicator--751c87e9-f533-47af-b3b5-58d308ef86e2", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2977eaf-de41-4be2-bac5-d202a3e2a28d", "sighting_of_ref": "indicator--2d2db520-0e80-4653-85bc-f6e7049abdbf", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e9857a8-e6c0-41d8-bf47-34b6e507215c", "sighting_of_ref": "indicator--a4eb4c98-1812-4520-b97c-c6ecf7e32aae", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--547ae882-e2ab-40fb-b3b6-42dd89aa1952", "sighting_of_ref": "indicator--a4eb4c98-1812-4520-b97c-c6ecf7e32aae", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc072b9c-ab09-483e-84c4-f14e166eed24", "sighting_of_ref": "indicator--2b36c56d-c964-4e3b-a12f-50ad65c479f7", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50292fef-6b66-47fb-939d-b5871ae18d1d", "sighting_of_ref": "indicator--2b36c56d-c964-4e3b-a12f-50ad65c479f7", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c719bda8-e51e-421e-a7c1-9f867004c0c6", "sighting_of_ref": "indicator--16625def-26b2-4987-bd14-3dc23b8063bd", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf5bc69f-5f56-4235-a875-66d0d73c4558", "sighting_of_ref": "indicator--a1061cad-58a2-403d-9ebb-ba3a6c1dc156", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61edda0b-b35b-4850-9a33-5c5c22f2932f", "sighting_of_ref": "indicator--2ea480e3-a479-41ab-bdec-0d977b13aea3", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cabf2f4-ac39-417c-bb06-7df711abbdbc", "sighting_of_ref": "indicator--2ea480e3-a479-41ab-bdec-0d977b13aea3", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da7bd4aa-9164-4504-b932-ed86391f5366", "sighting_of_ref": "indicator--e194cb74-9f16-40aa-81f7-73c76fbd035f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a847b979-a697-4203-a1f0-72727373351d", "sighting_of_ref": "indicator--15080a3a-2591-4c12-88dc-9576cd8ce2a7", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f0d0f89-b0f7-4f63-891e-bcecc9c5cfa6", "sighting_of_ref": "indicator--1fa0ef96-9634-4f0e-9bdd-f3e16efbe7cc", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c80ed030-4ee2-4200-8982-36cce98823b2", "sighting_of_ref": "indicator--0dfa76e1-7716-4180-b292-69a89117ecc6", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0eb79257-91f2-4a51-bf66-8d56231ee259", "sighting_of_ref": "indicator--0dfa76e1-7716-4180-b292-69a89117ecc6", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1456e8f5-6414-40db-9d22-e9ba2c0d8551", "sighting_of_ref": "indicator--0dfa76e1-7716-4180-b292-69a89117ecc6", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9eda87bd-36a5-469a-8875-b4b5ecabb24d", "sighting_of_ref": "indicator--0f8b451d-8908-486d-ab5a-21490d69fc8f", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b088c645-bccf-42c4-a275-8046c841fea6", "sighting_of_ref": "indicator--0f8b451d-8908-486d-ab5a-21490d69fc8f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16fceefb-1ca3-4aeb-a4b6-677548cbfc88", "sighting_of_ref": "indicator--61b90f8f-32f3-40b5-8934-fd415a65a577", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e0e4072-8ec3-40e4-907a-4be6d1d96647", "sighting_of_ref": "indicator--61b90f8f-32f3-40b5-8934-fd415a65a577", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aef42453-dc0f-4a7d-8149-0c8acf4b1336", "sighting_of_ref": "indicator--3de77e64-37c8-4b02-a581-aefb87a2e4a9", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d177b11-817c-49ca-97da-fb0e29cb3c34", "sighting_of_ref": "indicator--3de77e64-37c8-4b02-a581-aefb87a2e4a9", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64666819-1e75-4916-aa3b-e70791912a2d", "sighting_of_ref": "indicator--dba2513f-257a-4233-b74b-cddaf2f77f3c", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b87ab94-a75a-412b-9d8f-59616535f017", "sighting_of_ref": "indicator--dba2513f-257a-4233-b74b-cddaf2f77f3c", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1426b6f-d6ac-41c1-8841-f1667c713aac", "sighting_of_ref": "indicator--f0b65fab-af3c-4602-a14c-e91a5f43ef33", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44ccbe2f-656e-46b5-b0d4-0e6c0122a02d", "sighting_of_ref": "indicator--f0b65fab-af3c-4602-a14c-e91a5f43ef33", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f51b2a2-6f87-4250-9468-fe5d7cadba98", "sighting_of_ref": "indicator--37f722e5-74c9-4f97-9241-14bc879ad2f7", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e5af6d6-be33-45f1-af27-28051911f6e1", "sighting_of_ref": "indicator--42895850-0aa9-4dbc-ad24-5e0577cfd59a", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--802714fe-ccd3-488a-a956-0498a1d66003", "sighting_of_ref": "indicator--42895850-0aa9-4dbc-ad24-5e0577cfd59a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ff47cdb-6d88-4e4e-9b8e-68040da466c2", "sighting_of_ref": "indicator--42895850-0aa9-4dbc-ad24-5e0577cfd59a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2baadd1c-f175-463e-8d11-a5e5ee8beadf", "sighting_of_ref": "indicator--fc3d56be-82b3-438e-b812-b30087c9bfee", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--accc50ed-ceaf-4419-9da6-7db14e26a422", "sighting_of_ref": "indicator--0e2ade49-1af3-4ed9-8ef1-e9e6404e480b", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d60565d-51b6-4da3-80ea-108b1cd86a92", "sighting_of_ref": "indicator--0e2ade49-1af3-4ed9-8ef1-e9e6404e480b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4b20164-823d-4dd2-96fe-20d3ddbd4db8", "sighting_of_ref": "indicator--0e2ade49-1af3-4ed9-8ef1-e9e6404e480b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a7a4c7a-8a65-41ff-b9aa-ad7f494d2460", "sighting_of_ref": "indicator--43a725f7-a5ba-423c-9f7a-ace9a6de7761", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d910172d-2feb-45f1-bc18-f437db6d3571", "sighting_of_ref": "indicator--43a725f7-a5ba-423c-9f7a-ace9a6de7761", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15b24d98-97b8-4c42-8ea4-cfe1f75e1d58", "sighting_of_ref": "indicator--920e864a-29ff-479e-879c-6bdca3233847", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0bd196d-42c4-4e71-95fb-95c864840ef6", "sighting_of_ref": "indicator--920e864a-29ff-479e-879c-6bdca3233847", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e9fb015-bab0-4176-919a-a46045397ca6", "sighting_of_ref": "indicator--35249323-0633-4237-ab28-204d8988ee4b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bf29531-6da8-432d-be7f-7f0549f961f9", "sighting_of_ref": "indicator--50ea6a00-80d5-42aa-b926-2db851215b7e", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abfd91b8-fa74-434b-ad01-4bf8abaab94a", "sighting_of_ref": "indicator--50ea6a00-80d5-42aa-b926-2db851215b7e", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ada22631-be81-42cc-bd22-8621ce8a3236", "sighting_of_ref": "indicator--397b7f87-6deb-4314-9fee-69ec79a41904", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e8232f1-df72-493e-aee6-408fc8dae976", "sighting_of_ref": "indicator--397b7f87-6deb-4314-9fee-69ec79a41904", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00e16140-8393-4719-87c7-9315819912c3", "sighting_of_ref": "indicator--808fa9df-f630-4db2-811b-65f1ff2a9628", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f76c1126-1b79-4eb0-b0ac-282c93c2e548", "sighting_of_ref": "indicator--a50101d5-f78f-47b8-b936-6c79190dfe43", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef6c45d3-8280-407f-8cba-b42f36ab60c9", "sighting_of_ref": "indicator--6b96db7a-6ca9-4d7d-a859-2b577978d2f5", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6e54c85-0ec2-403f-9ad7-c256833a9a52", "sighting_of_ref": "indicator--a3f130e7-24ab-42a3-88de-dee3c09f719f", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc8b094c-ea80-4605-a92f-5fa16daf93ad", "sighting_of_ref": "indicator--a3f130e7-24ab-42a3-88de-dee3c09f719f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbaf8961-3199-47a6-936a-68554c15bf12", "sighting_of_ref": "indicator--5667e082-65fd-4a64-9a4a-9b47abbe06c1", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--163e4ac8-21af-43f1-8861-a060aa8e801f", "sighting_of_ref": "indicator--5667e082-65fd-4a64-9a4a-9b47abbe06c1", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89455923-96ad-4da7-9671-1d992a42f7be", "sighting_of_ref": "indicator--183d2f19-3eec-4eb8-91dc-410ebc2bafbf", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8049760-3d10-4106-b943-9782337e73e5", "sighting_of_ref": "indicator--183d2f19-3eec-4eb8-91dc-410ebc2bafbf", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e2cb176-85f7-45f0-889c-b78f6cabe17c", "sighting_of_ref": "indicator--d1944867-4834-4e35-b333-7865d846b88a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86a74343-2acb-4d11-8017-673586325994", "sighting_of_ref": "indicator--34ca3271-4f78-4a78-bacc-ce31dd807d72", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a084908-d52e-4ff4-aa7b-cb607898c763", "sighting_of_ref": "indicator--34ca3271-4f78-4a78-bacc-ce31dd807d72", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3466938f-b2b0-4ee8-b306-879084b70839", "sighting_of_ref": "indicator--c7b22600-6bd9-4749-8f5f-225ffb948002", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c880e3a-2e5e-4db5-9fca-a2143b173b32", "sighting_of_ref": "indicator--6ab6edee-6739-4f81-96e3-37ba322aba22", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2b178ac-d500-4e13-9ab1-68ef8039aab6", "sighting_of_ref": "indicator--5c458539-2f09-476b-aed7-e306fb01148f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73b653c4-0b66-4132-8d21-b6755d2d2691", "sighting_of_ref": "indicator--5c458539-2f09-476b-aed7-e306fb01148f", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07fc1483-52ff-49dc-b42c-d835ee5dc183", "sighting_of_ref": "indicator--88240bab-baa9-4867-a6ac-30b7d81b1465", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfc972f9-77cb-4f94-a045-fb740512fbf4", "sighting_of_ref": "indicator--ced4ed18-f708-451e-82b7-b4ea05e8f09f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1760ad60-7f08-4eda-a34d-432c832a7338", "sighting_of_ref": "indicator--ced4ed18-f708-451e-82b7-b4ea05e8f09f", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fc964fe-a043-4f98-a118-5cd3516d9925", "sighting_of_ref": "indicator--ced4ed18-f708-451e-82b7-b4ea05e8f09f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--048d6889-8aef-4df8-96a7-4249864412b7", "sighting_of_ref": "indicator--387f1962-ad39-4647-9dae-1036a3c404a8", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72fcbd30-0e06-4379-a9fa-c7528e74353f", "sighting_of_ref": "indicator--387f1962-ad39-4647-9dae-1036a3c404a8", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d12bffac-6513-4bf5-b820-b0dd93dc3bde", "sighting_of_ref": "indicator--a2e264f0-3608-4895-afae-25965b3a1633", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54d22064-61bd-4259-9489-a2ca420400ec", "sighting_of_ref": "indicator--0b0fca4d-179b-4abc-9f10-55a8fcb9e0fd", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba73b729-a98b-420c-8374-c6195f3ebfa5", "sighting_of_ref": "indicator--d9c1b1e3-ce43-4f0b-b769-bcaa51d6eab1", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1050a74-69d0-43e4-a473-e7ef34e24ba0", "sighting_of_ref": "indicator--f9b0d5e3-d5a6-4e2a-a33d-6bfdc025dc30", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45bcf712-faac-4121-b3b9-488c80170454", "sighting_of_ref": "indicator--752fc558-3c9b-47be-9640-a552766029b6", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f86f5f5c-409b-4bb6-b198-302652a96132", "sighting_of_ref": "indicator--36657fa0-0f65-47e3-8ee9-41f91aa6dcb2", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--814e7131-bb7c-408a-b422-7af2db4ebfa0", "sighting_of_ref": "indicator--432e1559-a507-4f62-8534-daa9b6accfad", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d18e22c8-e2e0-4326-9ac8-33d5141ffe49", "sighting_of_ref": "indicator--432e1559-a507-4f62-8534-daa9b6accfad", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a663495-02da-464f-b899-f830fe146aeb", "sighting_of_ref": "indicator--1341d918-ff74-43bf-b581-2a699d6b7f40", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fe5d061-0c5a-4df3-a700-2ee20bb09b88", "sighting_of_ref": "indicator--1341d918-ff74-43bf-b581-2a699d6b7f40", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adb7f9d2-77c9-45b9-8065-39d80ebb8c45", "sighting_of_ref": "indicator--8f0524de-8463-4c8f-bc76-390229fe0a2c", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b598b8d3-8bd2-40bf-8015-c926c0e2ab38", "sighting_of_ref": "indicator--8f0524de-8463-4c8f-bc76-390229fe0a2c", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--daa3f20b-a510-4567-9a78-6425ba371e4d", "sighting_of_ref": "indicator--2d1eb47b-0875-408b-bde0-7d9e22f2f6bd", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3caac07-b9dc-44c6-b6f2-afc0f1d5b404", "sighting_of_ref": "indicator--7a28b3be-1f67-4963-9496-e686318921e4", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a017554-1efe-454b-b777-d85ee5b9b803", "sighting_of_ref": "indicator--a8956da3-3c4f-45b7-a10d-f2e0390d8116", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b5c1bb9-c470-4917-9ded-3d68f4e4143d", "sighting_of_ref": "indicator--df3870e7-f845-43be-8763-470800cfe529", "where_sighted_refs": ["location--cc47317e-2c18-43a6-8938-dea748a56ad5"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f91a906-4cf9-4e75-9448-6b89e2744956", "sighting_of_ref": "indicator--3a750cf8-61c5-4e88-a7fe-7ac4ad02df86", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f90e42a7-d0ec-430e-8307-e8a00d199904", "sighting_of_ref": "indicator--a899de81-5c1c-48c3-afda-857e206f4fb5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e65da6c-8166-4a6a-a0d2-5002e1dd5ba9", "sighting_of_ref": "indicator--e967de34-f2cc-49da-8c1e-426d0d81c621", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45449175-b49d-4eed-96d9-84111df2f768", "sighting_of_ref": "indicator--e967de34-f2cc-49da-8c1e-426d0d81c621", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8527420-bb04-4f0a-b7ec-ce28ee23a857", "sighting_of_ref": "indicator--e967de34-f2cc-49da-8c1e-426d0d81c621", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57f483f1-c9a9-4390-b23a-6e1b8f282cfd", "sighting_of_ref": "indicator--3d33551c-eb54-4278-8754-3fb12fb4e3f9", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0713e5b-918f-4cda-b365-165757ba5a79", "sighting_of_ref": "indicator--3d33551c-eb54-4278-8754-3fb12fb4e3f9", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2b55d49-f64d-49b0-9b52-c8efcbbebcbb", "sighting_of_ref": "indicator--3d33551c-eb54-4278-8754-3fb12fb4e3f9", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c11772c-cc91-435a-a3c7-8ce8278f9ff7", "sighting_of_ref": "indicator--408ef3b9-248b-4ba0-b1c8-54b380278d02", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29fc1f32-a0d6-42c0-ac73-1b3eb2a9d998", "sighting_of_ref": "indicator--408ef3b9-248b-4ba0-b1c8-54b380278d02", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a21744b3-7277-4fda-b384-6c376160c23d", "sighting_of_ref": "indicator--408ef3b9-248b-4ba0-b1c8-54b380278d02", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b003924-0847-4382-96ab-acd2d8c0c100", "sighting_of_ref": "indicator--802d3d4e-c60c-43ca-adeb-be13e677fbc4", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93aabaa7-8067-456e-be71-07e03260987c", "sighting_of_ref": "indicator--802d3d4e-c60c-43ca-adeb-be13e677fbc4", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8acdbd47-53a6-49c9-ab3a-15f1aaefe9c8", "sighting_of_ref": "indicator--802d3d4e-c60c-43ca-adeb-be13e677fbc4", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6933ab71-2525-4da7-b8dc-76f9a4dfe986", "sighting_of_ref": "indicator--f8c0a9da-62dd-4cc5-96cd-a704be1a4af8", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03251507-c8d6-4563-bf99-cdc4f5577ce1", "sighting_of_ref": "indicator--f8c0a9da-62dd-4cc5-96cd-a704be1a4af8", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29f1faf3-7c1e-4426-864c-a225da244fcf", "sighting_of_ref": "indicator--f8c0a9da-62dd-4cc5-96cd-a704be1a4af8", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9fbb0ee-e88e-4320-9889-8cc7224c4771", "sighting_of_ref": "indicator--3e275e58-603d-400d-bd4c-c594766dd731", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a36bbd31-3e10-49b1-8b15-20a8b45fe3fe", "sighting_of_ref": "indicator--3e275e58-603d-400d-bd4c-c594766dd731", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e45b7a57-f5d0-41f7-87eb-7aa487ff9091", "sighting_of_ref": "indicator--3e275e58-603d-400d-bd4c-c594766dd731", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--434abff4-b218-48bf-ab23-f8f124b7ac3f", "sighting_of_ref": "indicator--99c26e61-c4cb-4661-9e94-fad09dde5360", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb3e0a3a-a6e3-45cf-ae8d-2e4b5a150ad9", "sighting_of_ref": "indicator--99c26e61-c4cb-4661-9e94-fad09dde5360", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad440599-8b89-441a-bf64-d412825a3db7", "sighting_of_ref": "indicator--99c26e61-c4cb-4661-9e94-fad09dde5360", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cec3272-f983-48d0-9dce-78dc2e57c8cd", "sighting_of_ref": "indicator--b8e578d5-6c28-4b1e-8555-9961216e50aa", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--810054bf-3a85-41be-9891-cb13edcb1474", "sighting_of_ref": "indicator--b8e578d5-6c28-4b1e-8555-9961216e50aa", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9762871-7a93-42c8-a362-cf64728b3a23", "sighting_of_ref": "indicator--b8e578d5-6c28-4b1e-8555-9961216e50aa", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d137ce90-b0eb-4460-88e8-919fa1a5193b", "sighting_of_ref": "indicator--d1239c49-cd3a-4665-8a7a-7e2e63a0b09e", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--926a3b3a-6304-41e6-85a4-cde35a5e19c4", "sighting_of_ref": "indicator--a13f7179-9738-486f-969e-0c13fad09231", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42239861-9a90-4853-b586-dcadd681cfa1", "sighting_of_ref": "indicator--f6a45373-bea2-47c0-a7cd-1cc0d3d7626f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5a4e6fa-ba8a-48f1-a7fe-9d5ed4230edb", "sighting_of_ref": "indicator--ffdadc35-3ba7-4550-a08d-7c3ea148ae7b", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dee7f80b-6f37-4af9-8918-e7630771330a", "sighting_of_ref": "indicator--ffdadc35-3ba7-4550-a08d-7c3ea148ae7b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d315ad19-9fae-45a4-89fb-90d866ef4f25", "sighting_of_ref": "indicator--95213b07-5962-4676-9033-e2a3c284b25b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edbc0044-5ad4-42bb-a268-c63f88d9d7a9", "sighting_of_ref": "indicator--b29d4325-ae4b-42f2-b600-a103171afd92", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49356cbb-ad74-4d71-b8bd-3804514aec6a", "sighting_of_ref": "indicator--9a50cc6d-8426-4612-aeb7-38afded4c114", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ace2c17-d37b-4c80-b56a-2a62e7ac13ed", "sighting_of_ref": "indicator--110a42f4-9c73-4fda-896d-1ac88231a167", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4cf5ce6-3128-4446-912b-ab1d20e249a5", "sighting_of_ref": "indicator--110a42f4-9c73-4fda-896d-1ac88231a167", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e4829de-dee6-437c-a104-d811d68eb009", "sighting_of_ref": "indicator--cdf1fdb1-2673-41dc-808a-63d70e97a4f2", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5d8dac3-9bfa-4ef1-9e9d-e93b22634638", "sighting_of_ref": "indicator--572ff05d-9b89-4b15-9f63-aa80c87a1e58", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50b03888-54c4-4fde-9ae7-786ae43afc0c", "sighting_of_ref": "indicator--dd476197-09d0-4134-a43c-49d2ffdf80cf", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a658b4fa-8552-439d-be09-33f855525fe3", "sighting_of_ref": "indicator--35d972c2-8d5e-4f85-80f2-f2f47733f624", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e2c4847-a26b-4d47-bedb-3230b85354ff", "sighting_of_ref": "indicator--fbe45a71-f0d6-4096-afb9-e6286f32c26d", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd7b3c07-a489-4bb9-8758-669cdcfdb697", "sighting_of_ref": "indicator--d761712f-3f34-4209-ae5b-b9c214b5cff8", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65733db6-1147-4822-a548-f1198acf6548", "sighting_of_ref": "indicator--00b74baf-9941-4796-a047-76f0284439fe", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65e251d1-3ff5-44e7-ba23-44c17f454e1f", "sighting_of_ref": "indicator--bea70d89-5ccc-4210-9526-524117fd96eb", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c3589a9-f096-498e-bd15-973487e43a00", "sighting_of_ref": "indicator--52073f57-a8f9-4a26-87aa-e539928dd6cd", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ebd30e2-ff13-4550-8e52-f517895cf520", "sighting_of_ref": "indicator--b58cfe21-8348-47af-9846-c502de6d25f8", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77e32e43-3100-4267-ae4e-0f84354f3062", "sighting_of_ref": "indicator--aa3778a0-8138-4d14-b4a4-ee7f94e56ecb", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c1d4057-5642-4d53-89c4-d773921e0d50", "sighting_of_ref": "indicator--09df3303-6857-4e42-8bec-a620289e70fb", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a92793f-d66b-426c-a0a0-c6af5e158a53", "sighting_of_ref": "indicator--09df3303-6857-4e42-8bec-a620289e70fb", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8568d65e-ce3b-43e3-88ad-29b8ed4d61bb", "sighting_of_ref": "indicator--7197b1b3-ef35-4ffc-b0fd-11782990fb96", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b957344b-83b9-4e22-889a-201356c5ff23", "sighting_of_ref": "indicator--eb0ee93d-2fe2-4cfb-a561-9a73df8be478", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e2afe81-342f-4e7d-bf4f-d5bb210c3939", "sighting_of_ref": "indicator--da9398df-d695-438b-aa75-7650e41475d0", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4deab4bb-e04b-4f9e-9890-7d51cb773a23", "sighting_of_ref": "indicator--3fe7f601-ccca-4dfb-948a-da9dbfaa14c6", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e78ea8d6-722f-445d-a953-3b4bbf800932", "sighting_of_ref": "indicator--dba52d2f-ebfe-47bd-8193-febd50fc3fc1", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b5b477f-4588-4a2e-bcd4-e5a41dd923ed", "sighting_of_ref": "indicator--42bfb355-acb2-4830-92fa-c9179686fb33", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3927e89a-6193-4e64-99d2-1b79112340c5", "sighting_of_ref": "indicator--bd5919b1-8ddf-4fe6-9b05-ad38b6c28ce8", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--068f17b0-1a51-48b2-9908-e4788d0a6de2", "sighting_of_ref": "indicator--6bf10b5e-0392-44e4-9582-441d30b74e19", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15db64d2-6744-4851-940c-07cd8c1f6e98", "sighting_of_ref": "indicator--f7f0a0eb-31ee-45b5-8b3d-e62bc290dc40", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d111fc56-f9ce-495e-9c95-7c045bd4136c", "sighting_of_ref": "indicator--c44419d9-70df-459b-a773-a458743ba425", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7fdcd70-80b2-4a11-becc-ea7a22974a8c", "sighting_of_ref": "indicator--ff89192a-d707-4880-99ef-d68085653538", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6f39729-c549-4e1b-9926-8b15f813c0a3", "sighting_of_ref": "indicator--4192f26a-a089-4009-9066-7cc38ddcc028", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31361763-8b3c-4bbe-bcae-fdc85e5b1112", "sighting_of_ref": "indicator--4192f26a-a089-4009-9066-7cc38ddcc028", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8eff65f-b207-4cb2-9886-8de5d25cd503", "sighting_of_ref": "indicator--4192f26a-a089-4009-9066-7cc38ddcc028", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2eedb45-d094-4a1d-b24e-f018c696b329", "sighting_of_ref": "indicator--6e4e8c8a-918b-4c7e-91e2-4a060503b26c", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cda42c8-71bb-4846-84b0-c3d7727969f3", "sighting_of_ref": "indicator--6e4e8c8a-918b-4c7e-91e2-4a060503b26c", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--142aed12-a46d-4f8a-8191-d6d47b41aba7", "sighting_of_ref": "indicator--ea8530e0-a539-4eb0-9885-941adb85f7d7", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d06e8684-e850-47f5-88d4-5b06e0ebadb8", "sighting_of_ref": "indicator--d8d998aa-8ca5-4280-9394-973f57905b8f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85bc947c-907a-41df-b3e5-e994688373b2", "sighting_of_ref": "indicator--d8d998aa-8ca5-4280-9394-973f57905b8f", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2e398f7-6fec-4943-badd-bcb94e4585f2", "sighting_of_ref": "indicator--28636c26-909d-45ed-977c-408b5b57b6ba", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0569fa2-904d-4d45-b156-00243dc64be5", "sighting_of_ref": "indicator--6c60d4d8-deab-443a-b959-6be138cd7596", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a9da6e4-0e4d-4cdf-a5f6-231058fc7b8b", "sighting_of_ref": "indicator--6c60d4d8-deab-443a-b959-6be138cd7596", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f46dbec3-d4de-46a8-b74c-b37a9f12ef81", "sighting_of_ref": "indicator--ef4e60ce-a6eb-40d9-be9b-54cf534cd880", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92aaa682-a369-4b4e-9a45-f64ec2e8023e", "sighting_of_ref": "indicator--ef4e60ce-a6eb-40d9-be9b-54cf534cd880", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--032b6614-7ceb-43f3-a1b4-8cb850ec952a", "sighting_of_ref": "indicator--ef4e60ce-a6eb-40d9-be9b-54cf534cd880", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55e25313-ca63-4626-a05d-4d069d1432e2", "sighting_of_ref": "indicator--335f712b-6534-4976-b5cf-9b660e3e715e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d88eb17-543a-4477-b144-24dce844db77", "sighting_of_ref": "indicator--c51b6d66-39ca-4ccd-b7ea-aab296dddfa6", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88e6889b-7055-4336-a25c-274e92d064f9", "sighting_of_ref": "indicator--6f3ac662-5e9a-4439-a5bc-bd798adf920d", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e0e687a-f6c6-4ea1-bc08-0fd1b01e050d", "sighting_of_ref": "indicator--6ceb4c42-a89f-49ab-9e3a-75080bbf3a2e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--089ffd1b-2ebc-49fb-915d-915fb9874d5c", "sighting_of_ref": "indicator--6ceb4c42-a89f-49ab-9e3a-75080bbf3a2e", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45a7f7e0-5b8e-41bf-8e47-aeac9496f3ef", "sighting_of_ref": "indicator--36db337e-375a-44e5-9b91-f34db6d40cd0", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0b5b3d1-da3c-481c-99bf-12c27e553bc7", "sighting_of_ref": "indicator--f80800f2-9288-4790-87e0-2f83a34cce62", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff10c81e-f861-4d44-8e6b-71b941fb72eb", "sighting_of_ref": "indicator--50d91ce1-47a2-435a-9a07-4675bbe250c9", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65e0b809-c753-43e7-8da9-d61a70177167", "sighting_of_ref": "indicator--34b9f95a-109a-4dcd-afd9-fbcd89b510fd", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a14bb38c-d9fe-4526-9df3-05140ed1ffc1", "sighting_of_ref": "indicator--edd20b87-f804-4105-aade-deae27da6126", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bdded75-98ae-4ea9-b59e-50e546f15de0", "sighting_of_ref": "indicator--ce8e809c-b7e8-4ca5-8927-195372470f77", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17ba5213-73e2-4753-81fe-d955866aed94", "sighting_of_ref": "indicator--baf0074c-336a-42b0-b64f-391d0846e5a4", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59cf3c9b-bbf6-49e1-995e-d3797aa22fc1", "sighting_of_ref": "indicator--d363554c-2df8-4e8d-8d77-ff1adc93fc0b", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d513c46-965d-40b9-aaed-bedb2989fd4c", "sighting_of_ref": "indicator--d363554c-2df8-4e8d-8d77-ff1adc93fc0b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae4cc651-54d7-4328-88b8-f519591884b6", "sighting_of_ref": "indicator--5ce10087-50db-44db-bcc1-2c834ba99636", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--193b46ec-0288-491c-883e-c5fdc180bc06", "sighting_of_ref": "indicator--5ce10087-50db-44db-bcc1-2c834ba99636", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ac62f4a-3823-44d3-ad3d-08fdea15d0bc", "sighting_of_ref": "indicator--557a06a1-b223-4ebb-8a42-34ed289089c8", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0489a5e-62d0-49e2-a187-26cba765bf34", "sighting_of_ref": "indicator--e1daa002-b854-4131-b04d-192678cf7a64", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d235221-3430-4c9a-8c97-93b73391ebda", "sighting_of_ref": "indicator--e6148a02-4d18-4bf1-9643-ee34f8785f2a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff48e07d-6f7c-4466-9256-26d1b27c9e81", "sighting_of_ref": "indicator--34099d9a-aca0-46f5-b06b-700071324417", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cce342b-cb8f-4f76-ad32-04533c0a1f59", "sighting_of_ref": "indicator--7f0f985e-723e-4281-bff6-572c494d1838", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2f37b99-13eb-4628-a27d-7dead87fe40f", "sighting_of_ref": "indicator--8334886f-7881-4815-a34d-af4ba5e0e85d", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f32cbf1-8789-49dd-ace2-06056cf05d09", "sighting_of_ref": "indicator--cdb9e700-0780-4f1d-9587-da1e6cf8eaac", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ce83d0f-da25-43c5-b904-b5607d5410fc", "sighting_of_ref": "indicator--fd787588-c7db-41a0-ae1d-925876d71e3b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26e37996-d5ed-4c46-b2a6-063ff9251f2e", "sighting_of_ref": "indicator--e5341b1f-07bf-4e7b-80a1-3f95e9925ebd", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--692d30ec-bf26-423e-96d4-3087d529d272", "sighting_of_ref": "indicator--e5341b1f-07bf-4e7b-80a1-3f95e9925ebd", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7eaa1c54-d040-49da-a151-a934501ca24e", "sighting_of_ref": "indicator--e5341b1f-07bf-4e7b-80a1-3f95e9925ebd", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7713e19-c801-4367-be44-e52261e1061a", "sighting_of_ref": "indicator--e65c40d3-d3af-49e3-a969-e6ba6780b828", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--476ecf77-a4c2-4ed5-9070-82f05519ade6", "sighting_of_ref": "indicator--c7e30118-d716-4bef-a16a-8baa3632a2a6", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85376b51-ac4d-4088-9960-caaba2c8293e", "sighting_of_ref": "indicator--7055e487-28c2-4233-8394-cd2fdac3bd00", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ecd6490-efa2-4095-9cff-8af858418261", "sighting_of_ref": "indicator--7055e487-28c2-4233-8394-cd2fdac3bd00", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55b338ad-dcd0-416e-8d4d-ad6a0a132ca2", "sighting_of_ref": "indicator--d4eda4cf-8700-47f4-80ca-05485c45316f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d8e9336-be8b-41d9-8ea9-ee386a72769f", "sighting_of_ref": "indicator--d4eda4cf-8700-47f4-80ca-05485c45316f", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85bb58c2-6fa1-4843-a2a5-427bd5c8feb9", "sighting_of_ref": "indicator--d4eda4cf-8700-47f4-80ca-05485c45316f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aed58230-0666-4273-af25-f8dc384b519e", "sighting_of_ref": "indicator--bf22003c-a678-4638-8a7f-f83bc9ee375e", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac078dc8-f7e9-4235-85fc-9a4bcf180d95", "sighting_of_ref": "indicator--bf22003c-a678-4638-8a7f-f83bc9ee375e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54bbcfbc-5967-4303-a39b-3ada31995812", "sighting_of_ref": "indicator--1dfb6ab7-d9c9-4b49-b38d-b8896794d5dd", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65461d50-c578-4150-85ca-65590fd21d8e", "sighting_of_ref": "indicator--e7f031ad-fe02-482c-b1bc-d45015074927", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7823a25d-db29-4720-bbb1-54ce30808c75", "sighting_of_ref": "indicator--e7f031ad-fe02-482c-b1bc-d45015074927", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e4bd010-f9e3-4e61-ac51-e475b01ac399", "sighting_of_ref": "indicator--5c582b61-bcd8-43ec-9c3a-89d318acc763", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1695262-9c06-48fd-b0a5-c3ce20059cbd", "sighting_of_ref": "indicator--5c582b61-bcd8-43ec-9c3a-89d318acc763", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36951810-30bf-4bb2-9630-4fead7086832", "sighting_of_ref": "indicator--5c582b61-bcd8-43ec-9c3a-89d318acc763", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e2d6560-80e9-4dab-948b-fed46b79d441", "sighting_of_ref": "indicator--1a56e5e7-0ff4-46cc-acab-8b749750b1be", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eafcb4f3-d31d-44d1-9afe-8f144cdbac83", "sighting_of_ref": "indicator--1eeb0a6a-1f71-4e89-a8be-8bd9854c75d0", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e1342e0-6626-45a3-9dd0-6803b2ef62fd", "sighting_of_ref": "indicator--3015cc19-dd7d-447f-a15d-8d82e82c4da3", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbf171af-0da8-40a7-8e69-38014c680e1e", "sighting_of_ref": "indicator--163a80b8-d048-4154-81b4-615fbdd3d3f0", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72c0d6d5-f66d-4105-884c-5f720f537084", "sighting_of_ref": "indicator--a44e2d9f-13c7-4d48-8cdb-3d8bae5dcf97", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb16201b-1ad9-4872-a821-3a38cc6cc41e", "sighting_of_ref": "indicator--a44e2d9f-13c7-4d48-8cdb-3d8bae5dcf97", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09ca4786-3460-46da-9a64-45f8324b6e2d", "sighting_of_ref": "indicator--64d1ba09-8579-4c74-acaa-ec978b5286eb", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53622ba9-918e-4350-a930-ebb01fcdd64c", "sighting_of_ref": "indicator--17bfab63-baf0-46a3-ae41-d2b1dfce9924", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b269720-5dbd-4cd7-8dff-d3e3d27b1bdb", "sighting_of_ref": "indicator--9e5cf638-eaa6-4f99-8a9b-a2a0b62bd478", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f95836c2-98c6-43b7-9b7c-7a6d5621994e", "sighting_of_ref": "indicator--650c02c3-9a05-4cd3-a1d7-5c428a1030ba", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--648b81ea-03ed-4247-92e5-7c50be85c187", "sighting_of_ref": "indicator--97516759-cd3b-4e36-b5f9-911e44ff3a00", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f8a0b9b-9c66-4fc7-a51c-00d77061947c", "sighting_of_ref": "indicator--b5b24f81-b32a-4d4f-b0f5-886a0a16a9da", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1653990-803c-4e3b-9af9-71f3c5fdda58", "sighting_of_ref": "indicator--9db5e79f-87d4-4481-b0d3-2431c71a17ec", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55808a50-f566-4d1f-94e4-adfead7f76a7", "sighting_of_ref": "indicator--7aa597e6-e504-48cc-b92f-128d4d093a0f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e241d65-5507-4975-b701-c425f534a84b", "sighting_of_ref": "indicator--5f1f473a-e1a2-40e7-b59c-93820a2691a8", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78bf2fef-59a6-40aa-b849-64a909d0527d", "sighting_of_ref": "indicator--acd25767-d5e9-400f-969c-e8e11cf6d570", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74b5cb5e-d1e1-4336-b769-c9854db1f7ff", "sighting_of_ref": "indicator--46e61047-9a51-4bc4-b08f-18cc4c521394", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed168419-1801-4ec4-9f1d-e0ae888b0330", "sighting_of_ref": "indicator--099bf13f-908c-4dbd-9932-db3bbffff59b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66379a94-2a9c-4846-9e0a-8b3f0ecd45ce", "sighting_of_ref": "indicator--13523dce-8c49-4eef-954c-e3af1f21332c", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f96cfd0-7cf0-4578-846b-970046415eef", "sighting_of_ref": "indicator--cb9bc144-9870-42b2-8195-0a0e5e5d7908", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe063803-c659-4c87-be16-da4d43bd413b", "sighting_of_ref": "indicator--e7a234a6-5c35-40ce-b958-5d4b1bd00d9b", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--938f7bef-2745-4af2-8926-949bb84433ae", "sighting_of_ref": "indicator--2a520caa-ae95-498d-9528-d985179d1c05", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94aa1d3f-6aef-4d09-b400-dcfc7b1069ae", "sighting_of_ref": "indicator--c74595b1-df24-4e86-8342-c695ae6b0a21", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd891f35-d0ad-45fb-b355-357d378988d0", "sighting_of_ref": "indicator--c74595b1-df24-4e86-8342-c695ae6b0a21", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21ba69c6-72f4-40c4-9c49-cbcf3b3873cd", "sighting_of_ref": "indicator--272faba4-fd89-4c5f-9cc9-cafe1057f9cd", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edb25dbc-7a7e-45df-a930-12945f483fd9", "sighting_of_ref": "indicator--509ed927-f4a9-44d8-9a0b-f46159c7a299", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e22768f-a53b-44ad-994a-b06a8fc210c7", "sighting_of_ref": "indicator--0c6fec37-9ff6-469c-981d-f99bc71d91ee", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edbadd86-69ba-4153-9a4c-757c4481d7ee", "sighting_of_ref": "indicator--3da1defd-604b-4c31-bdc6-c600ad894235", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b36e266c-770b-4327-8b4c-9aa7598da6af", "sighting_of_ref": "indicator--cf09ff59-5c57-4001-94b5-3be06f528345", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--546084d2-f1ac-4b02-ac7b-9a70af9bf97a", "sighting_of_ref": "indicator--e2e1db33-76e4-47f9-9577-3f68a150650f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--686adb6e-55b9-4778-b93f-ea1b25478b59", "sighting_of_ref": "indicator--d9568404-07c2-4f5e-9501-2d7b0a8e192f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acc03439-cc08-472c-a7bb-66f908f76fda", "sighting_of_ref": "indicator--c1ee90cc-0976-421c-839e-069b32170811", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79ff693c-da13-403b-8d01-0cc62ea0eadc", "sighting_of_ref": "indicator--0724b425-3307-43db-93ff-1ff8767a782c", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a63c3ce-0105-4858-8132-0d8242d4474e", "sighting_of_ref": "indicator--92b48e24-0f59-4f18-a6ac-df1ac9af4e2a", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bcda5bb-b804-4bec-93e0-5a6f32405658", "sighting_of_ref": "indicator--2a47b6c0-9d97-4dcb-974c-5c41bf2f1a49", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b4f2fdf-9265-4d02-bc38-c4cad4bee3ba", "sighting_of_ref": "indicator--00b40f03-372f-49ca-a325-6d21ac441439", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a7aeffd-009f-4c80-b573-e85651348902", "sighting_of_ref": "indicator--672986a4-f837-4dcc-a3df-592e14190f49", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a3444cd-c8c3-496f-87e6-5318faa44a3b", "sighting_of_ref": "indicator--ee858e40-9d29-4311-90eb-e26789ad17ad", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a01bdec0-8439-4120-b311-52d13da3ed20", "sighting_of_ref": "indicator--2a3cc602-00bb-48ad-af17-160d70854f91", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2a9a19b-5295-44c5-988f-68f9b700cca1", "sighting_of_ref": "indicator--133a8927-b531-425e-8c0d-5503f9e055d1", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6149a186-d2b7-4cbf-a756-79c89248af51", "sighting_of_ref": "indicator--71326abe-0f2d-4b91-be80-6dd794ae4003", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbadd263-89e7-4154-8843-553a9db993c4", "sighting_of_ref": "indicator--9a6064dc-4284-4a78-9516-aed134bb58e0", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f7ac117-f99e-4a46-b29e-1276725d3337", "sighting_of_ref": "indicator--9a6064dc-4284-4a78-9516-aed134bb58e0", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a80892a0-9648-4bbf-a5bf-875b6d862e39", "sighting_of_ref": "indicator--946bd3cb-e5f2-4d82-a36d-9c0a7f0c3640", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71a2a843-a17a-4610-9816-d3735dd4c276", "sighting_of_ref": "indicator--db84c93b-7ee1-46e5-8d0f-f8d275d0a2d0", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88612b54-a54e-4634-8287-9ecde4d2e09c", "sighting_of_ref": "indicator--7f41d9c9-838a-48db-9dff-b3a4e346a120", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7b9e3c2-6aa8-4513-b907-cea15e047931", "sighting_of_ref": "indicator--ae7eec20-dc6f-4f5a-a15b-bbdeef25fdc5", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcf7e938-80aa-444f-bc77-977f883b4d48", "sighting_of_ref": "indicator--ae7eec20-dc6f-4f5a-a15b-bbdeef25fdc5", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95ba9a24-6920-4c97-9366-97a08a1f4d2c", "sighting_of_ref": "indicator--4b3ea81f-8adc-4181-a6ac-4b952cc4d7a9", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb6c199d-4c7a-43cd-b19b-e4ecbbaa8f1f", "sighting_of_ref": "indicator--b1f64851-0602-4db8-8e26-48882dcbea0b", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39b73764-b546-445e-a14d-ccad89ccee44", "sighting_of_ref": "indicator--b1f64851-0602-4db8-8e26-48882dcbea0b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17842df4-45ed-4dc4-9b59-87c5b17371c9", "sighting_of_ref": "indicator--b1f64851-0602-4db8-8e26-48882dcbea0b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa2ee098-49d5-43fe-9d32-b8e9546912db", "sighting_of_ref": "indicator--a37fc7a0-ea48-4835-aeee-a979eab7a939", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d48963ba-2773-4a30-b27e-534131551454", "sighting_of_ref": "indicator--a37fc7a0-ea48-4835-aeee-a979eab7a939", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ee912c7-8080-4d11-a5c2-2bbb3efc684e", "sighting_of_ref": "indicator--a37fc7a0-ea48-4835-aeee-a979eab7a939", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--397aab3a-85e6-4f06-b3d3-913115d505a8", "sighting_of_ref": "indicator--80fe6685-691a-4e0a-b580-ffa9484b2f0e", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28eaa38b-7c44-4b17-bfa9-432272c21843", "sighting_of_ref": "indicator--80fe6685-691a-4e0a-b580-ffa9484b2f0e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--facd27a5-c439-4de3-9a1a-6cf166f6a33d", "sighting_of_ref": "indicator--80fe6685-691a-4e0a-b580-ffa9484b2f0e", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48e126f0-3ea8-48c9-96ad-795baeedf328", "sighting_of_ref": "indicator--94311b0e-e98c-4d9d-af1f-d920628300ab", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ab8ad02-7512-40b0-8aeb-7772eb8be350", "sighting_of_ref": "indicator--94311b0e-e98c-4d9d-af1f-d920628300ab", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3923dd8f-6059-4dd9-a977-df28360fd140", "sighting_of_ref": "indicator--94311b0e-e98c-4d9d-af1f-d920628300ab", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afaa97f3-8cee-4105-b353-5f1f6febe3a7", "sighting_of_ref": "indicator--ec1b0332-09d8-4090-a247-1dda392e0121", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e75ca2a-5702-4f58-ab4b-2647944b5863", "sighting_of_ref": "indicator--ec1b0332-09d8-4090-a247-1dda392e0121", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ceb93350-bde4-4f10-871e-d207109b44e5", "sighting_of_ref": "indicator--ec1b0332-09d8-4090-a247-1dda392e0121", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd47a30f-49ba-41b3-a062-362467b64980", "sighting_of_ref": "indicator--1d7d5b81-2091-4fa0-8f20-4cc8b034005e", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfacf015-e0d5-4141-9e87-54fb7bc13469", "sighting_of_ref": "indicator--1d7d5b81-2091-4fa0-8f20-4cc8b034005e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa1e6599-361c-4551-b30c-95d7a57d03dd", "sighting_of_ref": "indicator--1d7d5b81-2091-4fa0-8f20-4cc8b034005e", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8da2045a-2f8c-48d5-bc12-f977629de0c2", "sighting_of_ref": "indicator--c7bfc705-cfdf-4853-b03d-8eb05bfa9d6b", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8626065-2ff1-445d-a80e-ec85da0e15a5", "sighting_of_ref": "indicator--c7bfc705-cfdf-4853-b03d-8eb05bfa9d6b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbc848f6-ba7c-48d4-b59f-4dcf8b10dcd3", "sighting_of_ref": "indicator--c7bfc705-cfdf-4853-b03d-8eb05bfa9d6b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6946ac6-d439-4511-849c-bb843e5a2938", "sighting_of_ref": "indicator--6f127708-a62c-475e-b2f7-fabdb41c33e4", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df4981a8-8a73-477f-95a2-aafcc35a2b48", "sighting_of_ref": "indicator--6f127708-a62c-475e-b2f7-fabdb41c33e4", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46bdea03-01ed-456e-a85d-9a0a1a487d39", "sighting_of_ref": "indicator--6f127708-a62c-475e-b2f7-fabdb41c33e4", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--effceac2-f4ba-4eee-81c3-2b19a9091039", "sighting_of_ref": "indicator--91f32836-38ba-49b7-b35f-073408a46557", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9fe4431-81b4-4568-91cd-6b59db07fe0f", "sighting_of_ref": "indicator--91f32836-38ba-49b7-b35f-073408a46557", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03cebaf4-a170-4a30-8c8d-8657fa80cc1e", "sighting_of_ref": "indicator--965d73c9-bdda-4855-b449-c06aa2796e2c", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5144618f-d743-4106-b43d-53369768ce62", "sighting_of_ref": "indicator--965d73c9-bdda-4855-b449-c06aa2796e2c", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89a2030c-e942-41fe-8462-e77e00d7852f", "sighting_of_ref": "indicator--965d73c9-bdda-4855-b449-c06aa2796e2c", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f2bfda9-6b26-43bc-af21-13c127e9d78b", "sighting_of_ref": "indicator--da6fef11-e16d-4682-9955-ffc57a8e83aa", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e977d58-5765-4212-a4eb-770e59af0ade", "sighting_of_ref": "indicator--da6fef11-e16d-4682-9955-ffc57a8e83aa", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d5cd164-72b2-4759-8989-2a5c8a42f554", "sighting_of_ref": "indicator--da6fef11-e16d-4682-9955-ffc57a8e83aa", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ba4af6e-5024-49bf-893d-428a38ef6b42", "sighting_of_ref": "indicator--5fcae807-b29c-4a37-9a44-d0954495d112", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e35ff1a9-1e64-4c62-84da-a5919d9e97aa", "sighting_of_ref": "indicator--5fcae807-b29c-4a37-9a44-d0954495d112", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--735baeb3-11bc-474a-9eb1-f94f291ff011", "sighting_of_ref": "indicator--5fcae807-b29c-4a37-9a44-d0954495d112", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8563a3e-3d10-40b5-9963-5f00946a684f", "sighting_of_ref": "indicator--508aed0c-7852-4f87-9f2f-5facbe08d2d0", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9a8507d-cfd8-4af5-9e8b-30678d7e585e", "sighting_of_ref": "indicator--508aed0c-7852-4f87-9f2f-5facbe08d2d0", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47047d93-2245-45a8-9ec0-babac6b7f343", "sighting_of_ref": "indicator--508aed0c-7852-4f87-9f2f-5facbe08d2d0", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84a19ca5-ae30-45fc-8b19-17dbcf788e5f", "sighting_of_ref": "indicator--2bd30538-9b6f-444b-a69a-b2a87ff97b24", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3406b5c-4365-41db-9c49-a6bcf0542b88", "sighting_of_ref": "indicator--65c08657-c1ce-4ee1-bd87-39b848d2145a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbd5e087-e18d-407c-b315-1e49b10ab644", "sighting_of_ref": "indicator--1a7fb7b4-cc45-4176-be5f-17b9050fd414", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--357bc68d-cc45-4ee8-a170-f2262b3fc2f1", "sighting_of_ref": "indicator--1a7fb7b4-cc45-4176-be5f-17b9050fd414", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b1b4697-2b57-4f48-ae92-7c952d5ac46a", "sighting_of_ref": "indicator--1a7fb7b4-cc45-4176-be5f-17b9050fd414", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09004657-5bb2-4403-9f96-b1f86a503566", "sighting_of_ref": "indicator--142abe9d-db67-405a-ba1d-45df925716e9", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dba66573-19d5-47f3-8ee4-716288c79fba", "sighting_of_ref": "indicator--142abe9d-db67-405a-ba1d-45df925716e9", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80efef29-af47-4109-b51c-53f923a618cb", "sighting_of_ref": "indicator--142abe9d-db67-405a-ba1d-45df925716e9", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--338b3ea5-0127-4f6c-88e0-6922e729e915", "sighting_of_ref": "indicator--4b789d99-56b8-43b1-8ab1-93c96fe035ef", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d28a928-dfd0-4ff3-b1f5-b74882eb8084", "sighting_of_ref": "indicator--4b789d99-56b8-43b1-8ab1-93c96fe035ef", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e13054a7-9326-49ce-bbba-d3d7b67874be", "sighting_of_ref": "indicator--4b789d99-56b8-43b1-8ab1-93c96fe035ef", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1019935b-7eec-4f3b-972a-bb6cea137335", "sighting_of_ref": "indicator--b901530e-f3df-40b7-9db0-2a8671d3a462", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6792ae68-061f-4a90-806e-96c2030acc8a", "sighting_of_ref": "indicator--b901530e-f3df-40b7-9db0-2a8671d3a462", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bd080bb-f370-4248-b184-0deb615b61a6", "sighting_of_ref": "indicator--b901530e-f3df-40b7-9db0-2a8671d3a462", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04bb5c42-6ac6-4cd4-a009-dc7877507823", "sighting_of_ref": "indicator--36c996da-f1a6-483b-92ef-402b90b58cfc", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe4fdaa6-0418-490c-8a58-92de0330fd20", "sighting_of_ref": "indicator--36c996da-f1a6-483b-92ef-402b90b58cfc", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69591fec-66fa-469b-a3b1-5563da99269d", "sighting_of_ref": "indicator--36c996da-f1a6-483b-92ef-402b90b58cfc", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c70fa45b-3c44-4ed5-829c-1b6f4d132df8", "sighting_of_ref": "indicator--52ab78d8-31cf-4546-8b74-746b80b2e1a2", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ff1abab-3c2d-4292-8a8b-f17ff6cef82c", "sighting_of_ref": "indicator--52ab78d8-31cf-4546-8b74-746b80b2e1a2", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80d33eb6-5c3b-4985-aa5d-3b4195392841", "sighting_of_ref": "indicator--52ab78d8-31cf-4546-8b74-746b80b2e1a2", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28383c3e-442c-4420-8170-ec0d8ebb9836", "sighting_of_ref": "indicator--d68cff25-99a3-467d-b25e-834e3347c924", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7286590e-4d7e-4ebf-8371-70a5c6de333b", "sighting_of_ref": "indicator--d68cff25-99a3-467d-b25e-834e3347c924", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04f3a2ba-1f95-4727-a855-66da7a477458", "sighting_of_ref": "indicator--d68cff25-99a3-467d-b25e-834e3347c924", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0589d89-27d0-4d44-83ae-5c37f818ab26", "sighting_of_ref": "indicator--25283619-f913-4cbc-b089-c9c0546d67bb", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06980656-6e20-4aee-8058-6e8d9ad34751", "sighting_of_ref": "indicator--25283619-f913-4cbc-b089-c9c0546d67bb", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a16e1ec6-6795-467f-a992-278d68497ece", "sighting_of_ref": "indicator--25283619-f913-4cbc-b089-c9c0546d67bb", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e7d422d-0288-44b1-bc11-0aafc1b84660", "sighting_of_ref": "indicator--87042834-8e5c-490b-b1d7-122e2f46e53d", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc8b561d-057f-49c7-b392-d75410dc8dab", "sighting_of_ref": "indicator--87042834-8e5c-490b-b1d7-122e2f46e53d", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62a64b0d-cb06-4fed-b70d-2e8ee92bc589", "sighting_of_ref": "indicator--87042834-8e5c-490b-b1d7-122e2f46e53d", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fa9109a-5031-41e0-b204-0f424f088696", "sighting_of_ref": "indicator--f690a57d-a11f-4fc0-91ec-04ddcc48bf4a", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8784cd90-0d78-4308-bc4e-18a7deb0a879", "sighting_of_ref": "indicator--f690a57d-a11f-4fc0-91ec-04ddcc48bf4a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aada76eb-2517-41d4-8073-4fd83da385ff", "sighting_of_ref": "indicator--f690a57d-a11f-4fc0-91ec-04ddcc48bf4a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9e507c8-f8f7-4c40-993b-d301795cd390", "sighting_of_ref": "indicator--3645747c-382b-4513-b1d3-cc65e8ade14d", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7edc811-9662-4aeb-b56c-1186358fbd86", "sighting_of_ref": "indicator--3b561492-0784-45fd-b2e1-9e98aad8da9b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0238d46-94f5-47a4-bcd1-43ab0a99121f", "sighting_of_ref": "indicator--6d44677d-bb88-4454-96eb-099864e3d1e9", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--043413da-20cf-434f-a534-36aa5185f9ac", "sighting_of_ref": "indicator--6d44677d-bb88-4454-96eb-099864e3d1e9", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43f69e16-e036-4d96-a2d6-a7fb15d3394d", "sighting_of_ref": "indicator--1b32c5aa-a761-4909-a4e8-59d445024e95", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be7d14ec-83e3-490a-acec-394ab433f5b1", "sighting_of_ref": "indicator--1b32c5aa-a761-4909-a4e8-59d445024e95", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--509372d2-31e7-499d-b322-18a676ea8b02", "sighting_of_ref": "indicator--1b32c5aa-a761-4909-a4e8-59d445024e95", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d261dcb-ec35-465a-aed1-a946cb8c78d2", "sighting_of_ref": "indicator--29329fca-804f-4176-8365-a1be2c078914", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f9ea854-0db3-4431-80e3-1efd2977a506", "sighting_of_ref": "indicator--29329fca-804f-4176-8365-a1be2c078914", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4084f2ce-e16c-4072-9c43-ab23601b3f7f", "sighting_of_ref": "indicator--29329fca-804f-4176-8365-a1be2c078914", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17283ce0-19cc-421e-adf7-4ae282f3d1bf", "sighting_of_ref": "indicator--67a26b4c-6034-4794-a02e-ecb88bb42d07", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ca7e8fe-e2b8-4d29-8112-c5aa743b2922", "sighting_of_ref": "indicator--67a26b4c-6034-4794-a02e-ecb88bb42d07", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00b0ce46-65b4-430a-b724-885dee32c079", "sighting_of_ref": "indicator--0f2fa1cf-9f2d-4657-9f4d-837bb6e4c7b3", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2cd2949-8df0-41be-9ca1-7ee418a1d64f", "sighting_of_ref": "indicator--0f2fa1cf-9f2d-4657-9f4d-837bb6e4c7b3", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b19f505-5499-4061-854c-9035e21135bc", "sighting_of_ref": "indicator--0f2fa1cf-9f2d-4657-9f4d-837bb6e4c7b3", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27952607-ee92-47b6-9340-d3c6fee0924a", "sighting_of_ref": "indicator--a6639173-686b-4849-b18a-f0adee1b4f9a", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f15ca2fe-3a37-4f8c-a89b-06262c159bae", "sighting_of_ref": "indicator--a6639173-686b-4849-b18a-f0adee1b4f9a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4349840f-afb5-41e2-9e14-f193d8b70a34", "sighting_of_ref": "indicator--a6639173-686b-4849-b18a-f0adee1b4f9a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d759b29-abfd-4c9f-9483-bb5d535bde32", "sighting_of_ref": "indicator--9254e276-77cd-4139-a907-aa616571c516", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f63487ed-e88a-4b49-9dc3-5c696e68f9f6", "sighting_of_ref": "indicator--9254e276-77cd-4139-a907-aa616571c516", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5332099-1c27-4a8c-a5f6-e90405542290", "sighting_of_ref": "indicator--9254e276-77cd-4139-a907-aa616571c516", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c8b43fe-e2c6-4ee5-b9f8-ad4aac956db8", "sighting_of_ref": "indicator--26e1b93e-0102-4637-979b-46cfcdbad135", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d95e1a1-4cf8-423a-aa94-b512f6a40c2a", "sighting_of_ref": "indicator--26e1b93e-0102-4637-979b-46cfcdbad135", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f86767e8-c608-44e2-8033-46248d715df3", "sighting_of_ref": "indicator--26e1b93e-0102-4637-979b-46cfcdbad135", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b228619c-8d73-49e1-9869-995a01c5f622", "sighting_of_ref": "indicator--1c493ffd-ae34-4c0e-aed9-7312cac606b9", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd6b80fe-1311-4d00-9a4f-4ce801656b75", "sighting_of_ref": "indicator--1c493ffd-ae34-4c0e-aed9-7312cac606b9", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe86b9bd-4eb9-4037-b5ff-ce31ecd5fe00", "sighting_of_ref": "indicator--1c493ffd-ae34-4c0e-aed9-7312cac606b9", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5e0985a-861b-40c9-88d6-874c33bae8c6", "sighting_of_ref": "indicator--e0f3307a-bb41-4b0d-93e3-ea8adc334bfb", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b87cbbb-c572-4481-96a7-b89862fe38b4", "sighting_of_ref": "indicator--d6a23aff-3c08-4804-b201-448d2a2342f2", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c98454eb-159a-4a28-80a4-e6bd8565e463", "sighting_of_ref": "indicator--244422de-21d3-4508-a53d-16b5e79feffd", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad8f4f62-047f-4176-915e-92752f07ae45", "sighting_of_ref": "indicator--06785703-c9b4-4183-819d-cae49f2b1e10", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--891a1593-4a54-465e-b321-fec37f7298ba", "sighting_of_ref": "indicator--ee7239b0-d114-40a2-a6bc-04bc752aead9", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68a6a71d-f8d9-4ca9-8a79-98d2d507b6fc", "sighting_of_ref": "indicator--f2beab76-1b3d-4a72-9439-c465254a45c5", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e02ff25f-203d-4dbc-a773-065f93168e00", "sighting_of_ref": "indicator--183b221d-f38a-4cce-b110-4970643304c9", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--209231c7-15f0-4a1d-ba96-9d099db893f4", "sighting_of_ref": "indicator--ecf4e3db-017f-436b-b0f3-4634785562fd", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d988a42-4465-47e5-9a27-8ba458732d5f", "sighting_of_ref": "indicator--60857d42-b12c-488f-97b9-d738ef16480d", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--232daca3-5e31-4775-b010-2f2121b29d2e", "sighting_of_ref": "indicator--60857d42-b12c-488f-97b9-d738ef16480d", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a26b3d7-051b-4ae8-9839-2b862d91b695", "sighting_of_ref": "indicator--60857d42-b12c-488f-97b9-d738ef16480d", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0e2c482-f42b-4ec5-acb9-d89ccf5c5f27", "sighting_of_ref": "indicator--1054628c-cd3b-4b87-a85a-a818570ac426", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d84ade2-3cc8-4fb7-89e3-6cc3bd864402", "sighting_of_ref": "indicator--1054628c-cd3b-4b87-a85a-a818570ac426", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88155504-17e3-4ac3-9412-99286eb3d81c", "sighting_of_ref": "indicator--1054628c-cd3b-4b87-a85a-a818570ac426", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f1450a2-c8f0-4a80-a90e-be8c09630cec", "sighting_of_ref": "indicator--23e4faf7-34a1-43b4-8816-3d2874da1b9c", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21303e7d-e84b-45cd-9615-988e5c0e5929", "sighting_of_ref": "indicator--23e4faf7-34a1-43b4-8816-3d2874da1b9c", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2584a5c-28b7-4586-875e-2b16c32f6380", "sighting_of_ref": "indicator--23e4faf7-34a1-43b4-8816-3d2874da1b9c", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9429e869-42c1-4bee-b655-259c784403f4", "sighting_of_ref": "indicator--916511ea-f82e-42ec-a2dc-f3fef977f050", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--483f42e1-3d01-416e-8c56-fe838ec79593", "sighting_of_ref": "indicator--916511ea-f82e-42ec-a2dc-f3fef977f050", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6dab201-77fb-4747-ad8f-d5c12f7c12e1", "sighting_of_ref": "indicator--916511ea-f82e-42ec-a2dc-f3fef977f050", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--062d2faf-7f19-4206-865d-a630bc41ef1f", "sighting_of_ref": "indicator--06f49f4b-5e52-4a57-9b14-1ba7804a15e1", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57109718-15e9-4ae5-9d0f-ee0f41f9c80c", "sighting_of_ref": "indicator--06f49f4b-5e52-4a57-9b14-1ba7804a15e1", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--710ac249-11a3-4eaf-a6f8-4c0a51bc285c", "sighting_of_ref": "indicator--06f49f4b-5e52-4a57-9b14-1ba7804a15e1", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa06d7b9-e2fd-4fe5-8529-4fee92e49877", "sighting_of_ref": "indicator--d8081cf5-2abf-49a9-83d7-338962cfa88f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6302146-318b-4297-b39e-5d1b5c616a9b", "sighting_of_ref": "indicator--d8081cf5-2abf-49a9-83d7-338962cfa88f", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa874bc7-137b-4119-8975-cc404803b912", "sighting_of_ref": "indicator--d8081cf5-2abf-49a9-83d7-338962cfa88f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01dfe5d2-cac0-4930-ad26-e068a629622f", "sighting_of_ref": "indicator--fdaba6f0-de52-412f-9392-e3829543eb20", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95705c5c-a41f-48ab-b493-c706e71aad96", "sighting_of_ref": "indicator--fdaba6f0-de52-412f-9392-e3829543eb20", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6472b40-9101-43f6-b6e8-9bae666ab31d", "sighting_of_ref": "indicator--fdaba6f0-de52-412f-9392-e3829543eb20", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1982e9e-981a-433f-8416-e568bba9953e", "sighting_of_ref": "indicator--3fa214de-f384-4bd6-88a9-4e48b6af1190", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe5d6258-9841-4bef-a05e-e10d5e7679b5", "sighting_of_ref": "indicator--3fa214de-f384-4bd6-88a9-4e48b6af1190", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edff61d8-773d-4600-ab58-2ad574f6bdfc", "sighting_of_ref": "indicator--3fa214de-f384-4bd6-88a9-4e48b6af1190", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a31d15a4-8765-4346-9a73-fae4003395d8", "sighting_of_ref": "indicator--0e06e6c5-366a-4d71-b27d-e6240a42fd33", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fff1074-4d17-43ab-b5b9-23fdd505e989", "sighting_of_ref": "indicator--0e06e6c5-366a-4d71-b27d-e6240a42fd33", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d05d45ae-1a06-4963-b7e7-56aef459187c", "sighting_of_ref": "indicator--0e06e6c5-366a-4d71-b27d-e6240a42fd33", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2a6175d-0bc2-485e-b9a7-bd3e40a33f0f", "sighting_of_ref": "indicator--7d952733-de28-4d23-ba0a-6d2cd2b12f09", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6450149f-d4ca-4590-af5b-5d8706bfc45d", "sighting_of_ref": "indicator--7d952733-de28-4d23-ba0a-6d2cd2b12f09", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ee6cda8-7eaa-4679-80e5-13d5c0a79a8b", "sighting_of_ref": "indicator--7d952733-de28-4d23-ba0a-6d2cd2b12f09", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94a529c4-18ec-404e-9bc8-66e84c6310bf", "sighting_of_ref": "indicator--f12309c8-342f-4724-ab33-e48b0ff1e03b", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--554ef97f-c600-4493-baab-24226536cc23", "sighting_of_ref": "indicator--f12309c8-342f-4724-ab33-e48b0ff1e03b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02df4ff9-a926-4383-9d0a-57b4b30a7159", "sighting_of_ref": "indicator--f12309c8-342f-4724-ab33-e48b0ff1e03b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0270792-f39a-4b97-950f-da97da1ba982", "sighting_of_ref": "indicator--2b850854-5718-490d-9968-b75cbfc369dd", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--797773d5-2cf6-4c0a-afa1-b855643fc255", "sighting_of_ref": "indicator--2b850854-5718-490d-9968-b75cbfc369dd", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--831f468c-b8f2-4941-90e4-0a5a1536066e", "sighting_of_ref": "indicator--2b850854-5718-490d-9968-b75cbfc369dd", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ee84293-f4be-4f42-ab52-3421d6e4b688", "sighting_of_ref": "indicator--627e4abd-73a0-41f8-811b-7d49628a9852", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d388153-f39d-4f88-8731-cdfb2ec1c3dc", "sighting_of_ref": "indicator--627e4abd-73a0-41f8-811b-7d49628a9852", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baefff2f-c8d5-405e-a56a-ce7901de5bce", "sighting_of_ref": "indicator--627e4abd-73a0-41f8-811b-7d49628a9852", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f80c2e1-7289-4df4-a5dd-5d0c962c82f5", "sighting_of_ref": "indicator--39ec7510-787e-4b15-8331-965498cb45d9", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--070b5d93-cb8b-4194-9da7-2b0399fdd213", "sighting_of_ref": "indicator--39ec7510-787e-4b15-8331-965498cb45d9", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a31f340-97a6-486a-9e51-83d3d0a21576", "sighting_of_ref": "indicator--39ec7510-787e-4b15-8331-965498cb45d9", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b0b95ec-0ed8-472e-b001-490dd6626d58", "sighting_of_ref": "indicator--d9fa2ca3-b587-40bf-8397-a068783bbff7", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20277a47-cc48-4a70-97e3-983666109e9e", "sighting_of_ref": "indicator--d9fa2ca3-b587-40bf-8397-a068783bbff7", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bddf73fc-d4ce-4bf9-a001-f5c3e19ab84f", "sighting_of_ref": "indicator--d9fa2ca3-b587-40bf-8397-a068783bbff7", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95751a7b-2123-4687-8cfb-ff56632da1fc", "sighting_of_ref": "indicator--d7f3da54-8fa0-4a37-ae59-97bca6277627", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98841a25-33dc-4681-ba4b-dd75a51d134b", "sighting_of_ref": "indicator--d7f3da54-8fa0-4a37-ae59-97bca6277627", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58e4cd1c-97c9-40a4-b52f-25f353084ab2", "sighting_of_ref": "indicator--d7f3da54-8fa0-4a37-ae59-97bca6277627", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15f42727-f184-47c7-87ef-055dcffe5d46", "sighting_of_ref": "indicator--238d0283-aa68-4245-9014-a0d43d429018", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3fce4a6-4651-49d8-9fbe-32c5cbd57c1e", "sighting_of_ref": "indicator--238d0283-aa68-4245-9014-a0d43d429018", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c571a68d-b642-4178-b5a7-b5af4670d6a9", "sighting_of_ref": "indicator--238d0283-aa68-4245-9014-a0d43d429018", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a38309f-0e6d-4619-bfdd-12b22dd987cc", "sighting_of_ref": "indicator--b7cc7fa4-f3ca-49a0-ad0a-600d7b6244a6", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--675e732f-1131-40ab-8a87-382b80bc8591", "sighting_of_ref": "indicator--b7cc7fa4-f3ca-49a0-ad0a-600d7b6244a6", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c882664-f175-400c-b7af-c51deb548b79", "sighting_of_ref": "indicator--b7cc7fa4-f3ca-49a0-ad0a-600d7b6244a6", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac7e58cd-05af-4654-9399-9c7af9793f63", "sighting_of_ref": "indicator--ef011688-544c-4c81-ae14-594891018e9c", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f55b951e-b751-4417-97f7-122f160405e2", "sighting_of_ref": "indicator--9661ce3f-b8b0-429f-a263-89068d8491d0", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a23bef21-117c-49a8-b1ad-3b5615ac5c2d", "sighting_of_ref": "indicator--6b1c7cfa-f99f-4ece-87ec-29c3100f546f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bddb1d77-2035-4cc8-890d-b95cfe49bf17", "sighting_of_ref": "indicator--6b1c7cfa-f99f-4ece-87ec-29c3100f546f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0b99c92-a27b-42b5-9769-24a8bd02cf3f", "sighting_of_ref": "indicator--25075324-3eba-42cc-acc1-2091deb3fde0", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da8020c7-f82d-41ea-addb-1d61944697f7", "sighting_of_ref": "indicator--2a013b89-29ea-477f-a299-02fbfe55a111", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fef071b8-1b4e-4e2d-8a80-cf75262d53c0", "sighting_of_ref": "indicator--f9a41fed-e8c0-4932-846e-24650af01c58", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08bf7089-1bde-4fa8-95ab-8d9ffb8f406b", "sighting_of_ref": "indicator--f9a41fed-e8c0-4932-846e-24650af01c58", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a8aa93a-b008-439c-8cf2-dff37e479216", "sighting_of_ref": "indicator--a5214d61-2097-42d0-915f-1e1aab10bb4e", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be5afba9-62c3-4c8f-8efd-a4526823005c", "sighting_of_ref": "indicator--a5214d61-2097-42d0-915f-1e1aab10bb4e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28649e8a-9190-427f-81eb-627c49c2a5c4", "sighting_of_ref": "indicator--a5214d61-2097-42d0-915f-1e1aab10bb4e", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--107b1185-8637-4ef3-bdb6-3c19dd787176", "sighting_of_ref": "indicator--7783cac6-4362-4821-a0e4-bad643a9430d", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52d4494b-9b9f-41a6-bd49-5e4e05a3303c", "sighting_of_ref": "indicator--7783cac6-4362-4821-a0e4-bad643a9430d", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6805ff8f-b374-4c29-a093-cb3e74d15b49", "sighting_of_ref": "indicator--7783cac6-4362-4821-a0e4-bad643a9430d", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50815f1b-4723-498a-af9b-a2fede3fb3ea", "sighting_of_ref": "indicator--49956216-d8f7-46d3-ab8e-8f311bd7df44", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2e71f74-4d3b-46ca-b485-22b3420ad4fa", "sighting_of_ref": "indicator--4e3ad258-8885-4c2d-841c-cf532062b543", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c541892-7c68-4449-81b9-e55eb2e63add", "sighting_of_ref": "indicator--694f330c-7960-4b2a-9693-e84a96f420c2", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88b86763-3dfb-4d38-b898-65d6dc81360c", "sighting_of_ref": "indicator--a6a166dc-001d-4e76-bb41-f881b5bea851", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a182dd6a-e1f0-437e-a65b-281e542f25b7", "sighting_of_ref": "indicator--1643ae18-b3c0-4f78-996b-f3411bf17cb2", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66a3c91b-89e9-4744-9ba4-b97a8d83fc20", "sighting_of_ref": "indicator--1ec6b234-5917-4658-9e1b-51e08230f4f1", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--731f0d76-51a0-451e-b60c-28f733b51f8c", "sighting_of_ref": "indicator--91444d35-f4aa-402e-aa74-14d3d95fc129", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0a72fe9-da26-4b7a-af89-b3d345126da1", "sighting_of_ref": "indicator--91444d35-f4aa-402e-aa74-14d3d95fc129", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--516f0a06-4131-4683-ad99-da21158f798c", "sighting_of_ref": "indicator--91444d35-f4aa-402e-aa74-14d3d95fc129", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54a19704-fa90-4f52-8aeb-dd16d5f13b59", "sighting_of_ref": "indicator--e8c58c3b-2cc0-4f3c-afee-8fb291e800df", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c324ba2-c93d-4bb6-8f1e-df9748ca38d5", "sighting_of_ref": "indicator--e8c58c3b-2cc0-4f3c-afee-8fb291e800df", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8486ecb-7dd9-4751-a996-1f221914e359", "sighting_of_ref": "indicator--04d3d41e-b654-4a2f-b1ec-0d15c47ed1fc", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f85b6f92-a874-44da-b7f7-9a03239230c4", "sighting_of_ref": "indicator--1086464a-1e07-4535-8a6d-7ac22bd0ee2a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e804ae27-ac0e-4fcb-8a08-150a9800311e", "sighting_of_ref": "indicator--1086464a-1e07-4535-8a6d-7ac22bd0ee2a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07e00fac-21f1-4e40-a420-d8f276410229", "sighting_of_ref": "indicator--147de3ec-fc66-45c3-88b0-2349da593588", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--419db97a-f698-46f7-a9e7-19cdc6f0aacf", "sighting_of_ref": "indicator--4b75fbfa-d82b-4daf-a2a0-ca1107324cae", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b48f02ea-5103-47b4-a124-89698e191883", "sighting_of_ref": "indicator--3590c3b3-7a6b-47f2-b6b2-b622c53c228d", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26dfacb5-17c8-4656-8686-20a2d70b1d8e", "sighting_of_ref": "indicator--3590c3b3-7a6b-47f2-b6b2-b622c53c228d", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0057b34c-a585-41ca-bb97-3be6a0eb01a6", "sighting_of_ref": "indicator--048a3688-1ae1-4c80-80af-cff1331ad4df", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--654e9da7-d0db-42d3-bb41-97a39805b645", "sighting_of_ref": "indicator--f2911f73-62c8-4162-8843-6d3a97215852", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a6d1860-af53-4df1-8a3f-beb22f8ea34b", "sighting_of_ref": "indicator--bd69c799-2bae-4dcf-b5ce-004851940efb", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f681dc6f-8ef5-4403-878f-e425897e880a", "sighting_of_ref": "indicator--bd69c799-2bae-4dcf-b5ce-004851940efb", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b132244d-b713-4761-9761-aace17837dc3", "sighting_of_ref": "indicator--bd69c799-2bae-4dcf-b5ce-004851940efb", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd9c9575-3c2b-4958-b7da-5d588cb403ee", "sighting_of_ref": "indicator--2f58c1b0-d39e-4a68-a76a-d9f20bd22e31", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ddbc4b5-cd66-4662-a3ad-9e2033d9ce5e", "sighting_of_ref": "indicator--2f58c1b0-d39e-4a68-a76a-d9f20bd22e31", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1c99189-59b2-4d87-8579-6ee4c5c55e68", "sighting_of_ref": "indicator--8fd48778-4241-4cd1-9708-a4cede617e53", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41a2bdb3-5976-480c-bb3c-4442ccdbb4f9", "sighting_of_ref": "indicator--253cdceb-c519-4600-aa2b-02f57e1b6be8", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1f88690-637d-4edc-b86b-c1b9a6919ba1", "sighting_of_ref": "indicator--5eef5c65-842e-4cc1-9b60-091fb1d7400b", "where_sighted_refs": ["location--cc47317e-2c18-43a6-8938-dea748a56ad5"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef773eeb-9df2-44a6-9ae8-c6b3df110174", "sighting_of_ref": "indicator--afd2f1fe-f553-42e5-9f8f-3d47192ed584", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--567f32fb-8939-401a-b381-0c7ba8d6a74f", "sighting_of_ref": "indicator--afd2f1fe-f553-42e5-9f8f-3d47192ed584", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--881bfe8a-e371-482b-9a0c-63874d0c4e25", "sighting_of_ref": "indicator--051f0b7e-9b73-4757-bd32-5a92b6068d81", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ca2f9fe-9a19-4545-be7b-389a07b044b9", "sighting_of_ref": "indicator--c672cf9b-a8f4-4fb5-a75f-80ef5178479f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--469cfa8b-f50b-402a-bbd9-0c6371d8028c", "sighting_of_ref": "indicator--c672cf9b-a8f4-4fb5-a75f-80ef5178479f", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fb515f0-0450-488c-9549-59d29f3f0f57", "sighting_of_ref": "indicator--c672cf9b-a8f4-4fb5-a75f-80ef5178479f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2af0323e-f319-446e-bd25-6401d0ed2796", "sighting_of_ref": "indicator--85f47b6b-7c55-4b79-9247-ffd88ed940ec", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a77e623-23cc-4156-94f0-4346e8a021d0", "sighting_of_ref": "indicator--85f47b6b-7c55-4b79-9247-ffd88ed940ec", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26da3953-0047-436b-8efe-d6243d6a1046", "sighting_of_ref": "indicator--ac0d6fbb-969a-4f81-89a5-01713cf22409", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c4eb972-9dcc-4209-9835-5cebcc983a8c", "sighting_of_ref": "indicator--ac0d6fbb-969a-4f81-89a5-01713cf22409", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--604ced96-0817-47eb-a7ae-400e203a8cf9", "sighting_of_ref": "indicator--8e954ac9-b720-4eaa-aed3-5eea7d40c95a", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adf56567-29f5-4d62-b9b0-bab1e31e6e20", "sighting_of_ref": "indicator--8e954ac9-b720-4eaa-aed3-5eea7d40c95a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e957957-e651-467d-9f25-21ddde96e912", "sighting_of_ref": "indicator--8e954ac9-b720-4eaa-aed3-5eea7d40c95a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--620b6855-a545-4cea-98dd-e75383c60f14", "sighting_of_ref": "indicator--68b2e02d-c4f1-4974-8b2c-21320111d89a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39c038f5-17d5-4fc5-b806-409cd8096f7f", "sighting_of_ref": "indicator--76bd0018-3aff-4587-84c7-7ed55cf19b46", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf3ac1ff-703f-4feb-a1d0-c1b114e53021", "sighting_of_ref": "indicator--76bd0018-3aff-4587-84c7-7ed55cf19b46", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f22e4972-f18a-4673-8840-a33e86eefa0f", "sighting_of_ref": "indicator--76bd0018-3aff-4587-84c7-7ed55cf19b46", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42d4e9af-088b-48e7-9fb9-b6c641078ca1", "sighting_of_ref": "indicator--1646566c-c5c4-4edf-8910-d2f0735eb064", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e674966-5f96-4e10-89fe-b833f33142ea", "sighting_of_ref": "indicator--1646566c-c5c4-4edf-8910-d2f0735eb064", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46fcce8e-7e56-4075-bd69-77a40b6f5ea8", "sighting_of_ref": "indicator--1646566c-c5c4-4edf-8910-d2f0735eb064", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25f07f3e-6002-444a-aa19-9b6667dc6388", "sighting_of_ref": "indicator--fe64dde0-0a7e-4310-b65e-3e22d26589ce", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06059099-be26-44dd-966e-8a145df5fbb3", "sighting_of_ref": "indicator--fe64dde0-0a7e-4310-b65e-3e22d26589ce", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7257b07d-d1cd-4545-8b55-445111e6edda", "sighting_of_ref": "indicator--fe64dde0-0a7e-4310-b65e-3e22d26589ce", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acfbad77-aa09-4e86-8d3a-7e0c1e31e2ef", "sighting_of_ref": "indicator--6c63d813-6857-4482-9c03-95438d7bcbce", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--283ac98f-5651-47dc-ba2f-24b1c76eaac4", "sighting_of_ref": "indicator--6c63d813-6857-4482-9c03-95438d7bcbce", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb02e639-5fb8-4b82-9c1b-ed3ce9b6e134", "sighting_of_ref": "indicator--6c63d813-6857-4482-9c03-95438d7bcbce", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12348e89-0520-475f-9ded-083fab558a1e", "sighting_of_ref": "indicator--bcc502df-ddab-44bb-8e96-ba3bbb3cbbb8", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46b01893-9dec-4533-9e69-b6df1524b693", "sighting_of_ref": "indicator--bcc502df-ddab-44bb-8e96-ba3bbb3cbbb8", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb000daf-7f07-4efd-b0d1-3e64cac1a9b8", "sighting_of_ref": "indicator--bcc502df-ddab-44bb-8e96-ba3bbb3cbbb8", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76a2c162-64fa-4cb2-b263-a80c094b7dcf", "sighting_of_ref": "indicator--f79e10e4-ee1c-4769-b5af-fa8135afc46e", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e5823d9-ef2f-485b-84ef-f782418079a3", "sighting_of_ref": "indicator--f79e10e4-ee1c-4769-b5af-fa8135afc46e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5e46337-96ff-4a4b-9e39-d976df50858f", "sighting_of_ref": "indicator--f79e10e4-ee1c-4769-b5af-fa8135afc46e", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16bda891-72bb-49ea-8139-27350e16da5f", "sighting_of_ref": "indicator--ea4fc658-133d-4732-94c2-9360b0b06f0f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64472364-4e8e-449e-ad0f-1b195ef70c52", "sighting_of_ref": "indicator--ea4fc658-133d-4732-94c2-9360b0b06f0f", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dd63d8c-5c43-41f9-81af-bd49c931955b", "sighting_of_ref": "indicator--ea4fc658-133d-4732-94c2-9360b0b06f0f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--928a60ab-32fa-43d7-bf65-bffa641ad23f", "sighting_of_ref": "indicator--65c382b1-6460-4fea-a81f-54c35d88870e", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a230943d-c998-46c0-afa3-160580ed5c4c", "sighting_of_ref": "indicator--65c382b1-6460-4fea-a81f-54c35d88870e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a40b9147-02e8-4ade-9ceb-6e198a9f80a4", "sighting_of_ref": "indicator--65c382b1-6460-4fea-a81f-54c35d88870e", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6f9d735-47da-4257-8a20-d52719f9f057", "sighting_of_ref": "indicator--4e68bfd4-a892-4a00-ada0-186204781cb9", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2fc7b76-fbe4-44c0-9da7-3ddbb4260c1e", "sighting_of_ref": "indicator--4e68bfd4-a892-4a00-ada0-186204781cb9", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0ee332d-4c28-4808-99bf-af3f2a6e9e10", "sighting_of_ref": "indicator--4e68bfd4-a892-4a00-ada0-186204781cb9", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b515219f-eac5-442d-899d-3fafe6e3b7f2", "sighting_of_ref": "indicator--4f9f44ae-fed5-40d8-8cef-9382149f9e86", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5584d0c8-1dbe-4c06-8673-87607136d830", "sighting_of_ref": "indicator--4f9f44ae-fed5-40d8-8cef-9382149f9e86", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5ee84d1-36b4-490a-8c0a-538c6ebc28d4", "sighting_of_ref": "indicator--4f9f44ae-fed5-40d8-8cef-9382149f9e86", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0251a7eb-d96a-4161-b450-e273fedd6efd", "sighting_of_ref": "indicator--d07b852b-7ba8-4116-aa9e-5adb2105ef37", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb9e367a-c2e3-4a4e-b0fd-57f6c41a8d44", "sighting_of_ref": "indicator--0b4f1ccd-e425-49a1-9b09-7310b9a9c3b9", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2982787d-420f-4c09-9535-d611853fa4f5", "sighting_of_ref": "indicator--29ea7762-95b6-4317-b5d2-6eb7f2583b05", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9a3338c-989f-4c7b-b663-259544d4de73", "sighting_of_ref": "indicator--bdd77851-01af-4d70-8716-cc8ccca73e23", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc1d2840-47bb-4839-ab35-24adabfcd60e", "sighting_of_ref": "indicator--223535e2-09e6-4617-91b6-dcec9fc2cf69", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--577b5f37-3057-4771-88ff-8400998c7f13", "sighting_of_ref": "indicator--28e192c7-bd7e-42c0-8e5d-e6d3466f4cdf", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c3f59ca-3c77-49e8-ac62-b4736db80ff5", "sighting_of_ref": "indicator--28e192c7-bd7e-42c0-8e5d-e6d3466f4cdf", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64ccad62-761c-4e0f-81fd-97d2991c6437", "sighting_of_ref": "indicator--26a458b1-a09a-4fe8-8927-7000d5954422", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e488ba2-43f4-49a2-930d-8b2ff1aee96d", "sighting_of_ref": "indicator--c668e9a1-1a77-419e-ad84-46ba87b45d06", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d45a2143-ab74-4544-934d-cf7cb93e8e80", "sighting_of_ref": "indicator--b48d356d-a10e-4e78-80af-80b8d8df0838", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8131450-1351-4452-982d-aedb8a0978fe", "sighting_of_ref": "indicator--dc5406c3-bd4b-40de-a60a-133244fb1089", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aac677c4-faac-4525-9464-2a9b4014c917", "sighting_of_ref": "indicator--f5a4b079-7095-4c09-8481-565fb09e01ac", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dc2ec85-8dca-43a2-99f4-c4389a082c5d", "sighting_of_ref": "indicator--f5a4b079-7095-4c09-8481-565fb09e01ac", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e2df0f6-64d4-4bb4-a08c-f172ede49c83", "sighting_of_ref": "indicator--d4001e5b-5481-4cf4-9d25-db3c84baa274", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca6ae10c-9c78-46e0-9d02-6cb45bfafac8", "sighting_of_ref": "indicator--d4001e5b-5481-4cf4-9d25-db3c84baa274", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--153dca1d-0224-4632-9f02-a6fc1b749282", "sighting_of_ref": "indicator--d4001e5b-5481-4cf4-9d25-db3c84baa274", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6aac365f-377d-43f7-b860-23fac2edfd32", "sighting_of_ref": "indicator--8d8c2037-dada-479a-9dd9-bea2f766515c", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eff17383-4276-40f9-bdf5-b63d94d3911c", "sighting_of_ref": "indicator--8d8c2037-dada-479a-9dd9-bea2f766515c", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b04af33c-fb87-4994-a8e3-d05637299acb", "sighting_of_ref": "indicator--8d8c2037-dada-479a-9dd9-bea2f766515c", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73a9b383-8517-4ae4-82f7-f50b2913212c", "sighting_of_ref": "indicator--ef52d4ca-2281-4ac5-a769-11a0d3bda93b", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80477d78-d12a-4311-9848-b68fea110692", "sighting_of_ref": "indicator--ef52d4ca-2281-4ac5-a769-11a0d3bda93b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46a3d82b-30ed-480b-bbb8-68f9fc21f80c", "sighting_of_ref": "indicator--ef52d4ca-2281-4ac5-a769-11a0d3bda93b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19f8986f-1e5c-4f1d-9282-200af45fb603", "sighting_of_ref": "indicator--50576f05-8c5e-4767-9e34-6c1680c6ffa2", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edc559cc-ad5b-487b-826c-9da056154e4f", "sighting_of_ref": "indicator--50576f05-8c5e-4767-9e34-6c1680c6ffa2", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bf97d89-5fde-4755-8117-2f05eb5c1bdc", "sighting_of_ref": "indicator--50576f05-8c5e-4767-9e34-6c1680c6ffa2", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5d583db-bbd4-4bb6-9f20-96e7b91a9d97", "sighting_of_ref": "indicator--40706065-43e8-4111-bd05-5db297ad5f8d", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--121d8b0b-8e57-4fa6-a3d9-ba98b882f27a", "sighting_of_ref": "indicator--94da7264-8ba6-4707-967e-7b8a8e7f2ddd", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d923cc9-a1bf-43b7-aa68-9ad370478961", "sighting_of_ref": "indicator--593ecb2b-1dbd-40f8-ad34-fbbf87846ca5", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--111a78d4-547f-4280-ab7e-b5c68f6bee37", "sighting_of_ref": "indicator--08a29e21-32c1-4f9a-8153-b0c2a21cd1dd", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d1e8596-15d9-4399-b059-ca6afefa7ceb", "sighting_of_ref": "indicator--fe9c1526-74a7-431e-90ab-f1e0070b0e0b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddb3be59-cdf9-4ec4-94b3-f42de66486b0", "sighting_of_ref": "indicator--0bedf68e-ffaf-43a2-85a2-ae596db900b5", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5b50692-5e19-4261-8b61-172c7a6b998a", "sighting_of_ref": "indicator--5c39ccb5-d738-4e69-95c1-a5a49784962f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2134ca2-9b09-4a17-bda7-43f0583a4cff", "sighting_of_ref": "indicator--ff68c584-74e0-4048-9571-e61e7c698ebe", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--472acbc3-d785-49cb-9877-045dafc8a66e", "sighting_of_ref": "indicator--337a24a7-8f94-4853-a64d-ff5c32cd4f63", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20699231-a7f3-464f-946e-8811d6668e50", "sighting_of_ref": "indicator--3d99bc3f-7c12-4315-8c8d-58623696fafa", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49e85632-11a3-4db8-86e9-76c47c57d4db", "sighting_of_ref": "indicator--f8ecd21c-79ea-4b5c-ae53-d1c949ea3dca", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--817d556c-ff62-4f9b-bbba-9d609a0e7778", "sighting_of_ref": "indicator--f8ecd21c-79ea-4b5c-ae53-d1c949ea3dca", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--234b4166-87ab-4685-a938-09550d9a8fd6", "sighting_of_ref": "indicator--f8ecd21c-79ea-4b5c-ae53-d1c949ea3dca", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e345ae0-2194-4b4e-a054-3588debd2952", "sighting_of_ref": "indicator--a38e7f34-30de-4560-b974-66dcf3f04b40", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c77835cf-5984-47e4-8d0c-8b05953d15d1", "sighting_of_ref": "indicator--996d6508-e980-44d9-8d0d-cdb45dfcec10", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09583e44-68c3-4eb2-ba71-2dd8593fbb69", "sighting_of_ref": "indicator--0557b780-ca4c-4338-bb06-690cea1b4fe3", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b7f4c08-0832-4e5a-85ce-1fcadd326aad", "sighting_of_ref": "indicator--4f9dfeac-6d97-45d0-a3c8-51935a0b69fc", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea6fefed-ab22-4715-a888-2323dd60affa", "sighting_of_ref": "indicator--1a56ae0e-dc7d-4442-b512-c3a20553b627", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--587f4c92-ab0c-4ccc-b3ed-4fa37349974a", "sighting_of_ref": "indicator--1a56ae0e-dc7d-4442-b512-c3a20553b627", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--738575d7-5960-4c7b-89a2-103691009c8a", "sighting_of_ref": "indicator--21705370-6d70-41f2-ba7f-5458c76b9e52", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0c2f6fc-a099-4f55-a4f6-7f6584706760", "sighting_of_ref": "indicator--21705370-6d70-41f2-ba7f-5458c76b9e52", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d26165b-f345-4abe-9f5c-f6e83bd5b70a", "sighting_of_ref": "indicator--21705370-6d70-41f2-ba7f-5458c76b9e52", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1dafe32-e506-4b18-b385-e75ca9e04ffe", "sighting_of_ref": "indicator--f593cb82-eb6a-4e4d-aee9-df21ccfc8970", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87781a26-b990-46bc-add0-9e73736fe317", "sighting_of_ref": "indicator--f593cb82-eb6a-4e4d-aee9-df21ccfc8970", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b051b9b-57ec-43b6-8b3b-d3df78f413ba", "sighting_of_ref": "indicator--92ae13ab-de56-4a6d-ab3a-a5d53dfa2a53", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42988a46-758e-4872-8049-1b974a26ff84", "sighting_of_ref": "indicator--92ae13ab-de56-4a6d-ab3a-a5d53dfa2a53", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1f78acd-aeeb-4e13-a9fe-603f38b192b3", "sighting_of_ref": "indicator--92ae13ab-de56-4a6d-ab3a-a5d53dfa2a53", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d8eed19-d482-459f-bfaa-e3bd283c3ff1", "sighting_of_ref": "indicator--4b3cd582-2939-45d9-a5ad-6794336c7728", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99874e99-6bc2-42f0-a6ac-d9a353c6f441", "sighting_of_ref": "indicator--f7d65b0a-9529-4ab4-b50e-260abfccad90", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50363ee6-f5b3-472a-942d-2353309781be", "sighting_of_ref": "indicator--28b5f401-7067-436e-8b79-b85ebe76b645", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bec3dabc-fa0d-47e1-80f3-be3e03d7a3f6", "sighting_of_ref": "indicator--28b5f401-7067-436e-8b79-b85ebe76b645", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5010cb39-bdfb-4055-89f8-494f87cd12b5", "sighting_of_ref": "indicator--b7eb27d5-6dd9-40f1-aff3-594896da3bab", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e5d7de5-f891-402e-ac65-59b2bab793fe", "sighting_of_ref": "indicator--dfc4ba67-c50f-41d7-a102-9610be78abbf", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c5fac4d-9b37-4bcd-a090-4f01caac7b5b", "sighting_of_ref": "indicator--8a15c54f-28b1-4cd5-bfb8-b6f37a09e075", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34196908-c0f9-4837-897d-110b084aead3", "sighting_of_ref": "indicator--c14ace0b-e67a-4f2a-ad54-69bd1a54e31d", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be7ec9bf-fc48-4880-af05-c60cc792f9c4", "sighting_of_ref": "indicator--c14ace0b-e67a-4f2a-ad54-69bd1a54e31d", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb773500-c123-40fc-b891-0e8b71ee06d1", "sighting_of_ref": "indicator--c14ace0b-e67a-4f2a-ad54-69bd1a54e31d", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9eb80afa-273d-4479-9556-66ffe7a908a7", "sighting_of_ref": "indicator--efad835a-6c6a-4993-a2d4-244df76118ba", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f56983e4-8100-4fa6-8ff2-7990e0fe8dae", "sighting_of_ref": "indicator--efad835a-6c6a-4993-a2d4-244df76118ba", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4b59236-606b-4666-b30c-9745de0250c6", "sighting_of_ref": "indicator--8d76de0a-25c4-41a6-b11a-3370e2d8f653", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fa30597-7be3-4a77-82e7-ef232a306a4c", "sighting_of_ref": "indicator--858648ee-81c2-4158-a626-59b6088465e4", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7884e9f-b686-458e-a9eb-43ed650979f9", "sighting_of_ref": "indicator--d7f2915d-17a7-4f3c-bfc5-cbafe4e8d5e8", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--319a98ab-dfc1-41f7-a00d-6fb3314a5c6d", "sighting_of_ref": "indicator--e0c7943d-7452-4f4e-8fda-da37f469a984", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--def6423b-7f75-40e5-9a00-38fe6dbc6185", "sighting_of_ref": "indicator--86177532-686d-4aed-a85b-5a8023ed9faf", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49b96728-de77-4354-a23b-c22a8c907896", "sighting_of_ref": "indicator--b34cbde9-4410-41e3-a18b-f149e14cbc40", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d08a1812-5c5d-4c7f-a0b4-a19e9d48fabe", "sighting_of_ref": "indicator--a715dd8d-1b6f-43dd-8e83-c8b5537c9671", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8f59957-0b76-4d66-adfe-3f9f03613929", "sighting_of_ref": "indicator--eb12fb1b-9651-4646-84bd-6e000a5ac09e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4164b2a5-c566-4d02-8e29-a05e9b695e9a", "sighting_of_ref": "indicator--40122db4-4a69-43b1-ac5f-251c748b7c4b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--810dc59f-324a-4ed6-af1f-ce30dcca2eec", "sighting_of_ref": "indicator--1ad76f6b-6edf-4882-ad08-183b1cb53716", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37b654b6-c657-48dc-8761-1a14487b7bf0", "sighting_of_ref": "indicator--8bf72015-568d-40c0-9a3a-f6aaae386947", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28a02cfe-5633-4fad-aad6-80e2fdece6b8", "sighting_of_ref": "indicator--39bcfbe4-2fe7-4a2a-9c61-307ea797c308", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--873d02fb-8fe0-41b6-b93b-77ac0146a92d", "sighting_of_ref": "indicator--39bcfbe4-2fe7-4a2a-9c61-307ea797c308", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04b5a5ca-bb1f-4643-80e7-7ebbc6e8f730", "sighting_of_ref": "indicator--39bcfbe4-2fe7-4a2a-9c61-307ea797c308", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ea291a5-8d73-46a6-bddd-3e59955bbeb4", "sighting_of_ref": "indicator--3c57fc54-acd1-4b86-8a69-1a6190e52545", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--309b49c0-a021-4f1b-a3fa-7ae0b562331b", "sighting_of_ref": "indicator--533d1dd2-6dac-48f6-b164-55d45fef193f", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7c92f8c-84ed-4053-8028-fcf7a7e38350", "sighting_of_ref": "indicator--533d1dd2-6dac-48f6-b164-55d45fef193f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd85a346-8ad9-4acb-86d4-299fd35e8ec1", "sighting_of_ref": "indicator--533d1dd2-6dac-48f6-b164-55d45fef193f", "where_sighted_refs": ["location--cc47317e-2c18-43a6-8938-dea748a56ad5"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa318544-87a2-4bd3-85f4-5ba47c97d68e", "sighting_of_ref": "indicator--268a012b-b718-4da3-b1b4-037c9fc7cd66", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f077c77f-16cc-4535-9d52-f314b34b9d7d", "sighting_of_ref": "indicator--268a012b-b718-4da3-b1b4-037c9fc7cd66", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d49b313e-2cea-4229-8899-2a065de38297", "sighting_of_ref": "indicator--268a012b-b718-4da3-b1b4-037c9fc7cd66", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61def475-cc2e-401a-9f1e-ef22b3c5d037", "sighting_of_ref": "indicator--99362844-4e16-4103-9fc4-0bd4949415ea", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08405783-9201-493a-96d6-f2de8751a685", "sighting_of_ref": "indicator--99362844-4e16-4103-9fc4-0bd4949415ea", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ba5b03e-39c0-473c-86d1-fa14338a5a08", "sighting_of_ref": "indicator--b800334d-6011-40bb-b2a7-24df3c5a3248", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87917aea-2cf1-497e-b035-f5274d751910", "sighting_of_ref": "indicator--b800334d-6011-40bb-b2a7-24df3c5a3248", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05dc634a-0d22-4864-a7e4-976d1852bb61", "sighting_of_ref": "indicator--b800334d-6011-40bb-b2a7-24df3c5a3248", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a67b34c7-fdf1-44f6-ac9a-b630df433f2f", "sighting_of_ref": "indicator--0895f0f1-6acd-49fc-b347-8c1841bcd1b0", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad41702e-6807-468c-92e7-a2cf6794c3ed", "sighting_of_ref": "indicator--0895f0f1-6acd-49fc-b347-8c1841bcd1b0", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d1227fd-9f50-4fc1-9d78-ae5cdb340f8c", "sighting_of_ref": "indicator--8984b5dc-afc2-4df6-8c81-fb9acb909af4", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c27c9f98-7b5e-496d-92b3-ec70e70123da", "sighting_of_ref": "indicator--1d31757b-6c38-410b-8796-fe0b6cfe78fe", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae6aa198-ac9a-4044-a5a6-cdfed4c937b6", "sighting_of_ref": "indicator--f5c05315-71da-477e-8ee8-dd2845484f78", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a60abb23-656a-41c2-a21d-1ddd14d0fdcd", "sighting_of_ref": "indicator--56e6d513-834a-434b-8f4a-f086e3ebe554", "where_sighted_refs": ["location--cc47317e-2c18-43a6-8938-dea748a56ad5"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b63ea6f-faab-4fb2-869f-9316d91f9906", "sighting_of_ref": "indicator--d8b9cf13-7ade-49de-9054-9c60f4ce27bc", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a26beeb4-0dfc-4174-9068-33d2f3b1f51e", "sighting_of_ref": "indicator--6574e53b-0a01-4b9d-9abb-d20196f8a310", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b3e9b35-6c84-42b5-a0a6-12c3212be790", "sighting_of_ref": "indicator--6574e53b-0a01-4b9d-9abb-d20196f8a310", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0625472-c48b-4e4c-b321-dbd764e930ab", "sighting_of_ref": "indicator--6574e53b-0a01-4b9d-9abb-d20196f8a310", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--522c26e9-8be3-41df-b4d2-3bbfa7ceaa12", "sighting_of_ref": "indicator--00060c49-d514-4a50-841a-a531f94eb605", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cebb01c-b537-4df6-8821-582ea2957773", "sighting_of_ref": "indicator--00060c49-d514-4a50-841a-a531f94eb605", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--979ab06d-c06a-4272-8b1a-23cc15cff5de", "sighting_of_ref": "indicator--00060c49-d514-4a50-841a-a531f94eb605", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d5aca16-a788-47fc-b139-a2bf958f39a2", "sighting_of_ref": "indicator--6b8e5398-56ce-4272-8c94-b0ddd7e81190", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--feaf361f-6535-4787-94b6-1e1506efe67a", "sighting_of_ref": "indicator--6b8e5398-56ce-4272-8c94-b0ddd7e81190", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6db3eb3c-10e4-45e6-8096-a665c046b600", "sighting_of_ref": "indicator--6b8e5398-56ce-4272-8c94-b0ddd7e81190", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27eebd9c-c114-427b-aac1-b6bc2be949e7", "sighting_of_ref": "indicator--27f31012-3202-4742-883d-744b4adb1979", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08f075a5-27c9-4ee9-824a-cce496a1816a", "sighting_of_ref": "indicator--27f31012-3202-4742-883d-744b4adb1979", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8b0064a-4453-4360-b924-0e86f95a8cb6", "sighting_of_ref": "indicator--27f31012-3202-4742-883d-744b4adb1979", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df70c607-584c-49d9-b6de-2fc6455d3d6a", "sighting_of_ref": "indicator--25d90138-aea2-4be9-b10a-81f7f7d29ea3", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad16a43c-2974-474a-9e74-f69024d164b4", "sighting_of_ref": "indicator--7531533f-efbb-4370-9095-b8e3736d5dcb", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca6e0ae7-49d6-4a0e-bd09-bc86bc371aee", "sighting_of_ref": "indicator--7531533f-efbb-4370-9095-b8e3736d5dcb", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--125b9af8-f2ea-45d1-9c76-f134da4484e6", "sighting_of_ref": "indicator--7531533f-efbb-4370-9095-b8e3736d5dcb", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28950d68-4398-4b75-b428-be6866fe0ae2", "sighting_of_ref": "indicator--4ff305cf-584f-4073-9993-0be2ee21c3e7", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--778799c3-d77e-48a4-8841-827f5fee48f6", "sighting_of_ref": "indicator--4ff305cf-584f-4073-9993-0be2ee21c3e7", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--525837cb-aeca-4317-855f-0c461ce26adb", "sighting_of_ref": "indicator--e446ccf1-b2a6-49d7-9dfb-41edde5cbb22", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7149bb50-5d91-4d0f-86e4-aab4f14ec32f", "sighting_of_ref": "indicator--e446ccf1-b2a6-49d7-9dfb-41edde5cbb22", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1b7d640-2027-4526-b3ed-fd3b8efcc7f7", "sighting_of_ref": "indicator--e446ccf1-b2a6-49d7-9dfb-41edde5cbb22", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebd44346-10dc-45ff-a58c-f26bd0a169c5", "sighting_of_ref": "indicator--7e946f62-0d71-446f-ae3a-d9e17211a762", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--360cb370-fc3b-4a13-90e4-34454eeff33e", "sighting_of_ref": "indicator--7e946f62-0d71-446f-ae3a-d9e17211a762", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a5685e2-7902-4835-a178-93f302d6dfbe", "sighting_of_ref": "indicator--d9bc9f5b-93b8-42be-87ca-bf412dfa03ec", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62355270-0cf3-4f1e-b430-ada8f096158b", "sighting_of_ref": "indicator--d9bc9f5b-93b8-42be-87ca-bf412dfa03ec", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--027d7066-9dce-4d88-a9a9-d0dd54977737", "sighting_of_ref": "indicator--d9bc9f5b-93b8-42be-87ca-bf412dfa03ec", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4379c6a7-e5a5-4c44-9e62-e021be1cbb27", "sighting_of_ref": "indicator--18bece71-b4d7-45fb-a88b-5d3d86f7aa46", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--495b4d71-a03d-4af6-a0ed-cb4646ec2f82", "sighting_of_ref": "indicator--18bece71-b4d7-45fb-a88b-5d3d86f7aa46", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18caa822-c622-4273-9c46-650c1a62179f", "sighting_of_ref": "indicator--18bece71-b4d7-45fb-a88b-5d3d86f7aa46", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d350279a-428e-49f0-a310-e39ecfce3712", "sighting_of_ref": "indicator--30d4d850-9655-410e-8e86-a04f643fe7f5", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ee0a239-92b0-400f-bcef-8eed128e9160", "sighting_of_ref": "indicator--30d4d850-9655-410e-8e86-a04f643fe7f5", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--225fdbc0-b54b-49bc-9601-0d2c446ffd2f", "sighting_of_ref": "indicator--30d4d850-9655-410e-8e86-a04f643fe7f5", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb2203d5-de9c-45d8-94e5-55710466a0dd", "sighting_of_ref": "indicator--07ffcc9e-38e6-4ccf-b327-1185348e7de2", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90ecaf7f-cfe1-4b29-bf29-a1f7434324ce", "sighting_of_ref": "indicator--07ffcc9e-38e6-4ccf-b327-1185348e7de2", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--866579bd-c38f-440f-a0ab-5d1b94f45e18", "sighting_of_ref": "indicator--07ffcc9e-38e6-4ccf-b327-1185348e7de2", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--487de7d5-4edf-4392-8e19-a1b15879384f", "sighting_of_ref": "indicator--9e44d557-e87d-4762-aaf2-f4bfb150bb88", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66cd5e87-da78-4fde-b84f-42ff64822b48", "sighting_of_ref": "indicator--9e44d557-e87d-4762-aaf2-f4bfb150bb88", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ecf92c8-a7e9-4b29-b16f-1ae3790461f0", "sighting_of_ref": "indicator--9e44d557-e87d-4762-aaf2-f4bfb150bb88", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b2b9658-aa22-4333-bbe9-f1b2cf58fac4", "sighting_of_ref": "indicator--e077b450-05d7-426e-a2ac-148b243f508d", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f248cf9-7a15-4c09-911a-d5516fd9c0df", "sighting_of_ref": "indicator--53a1a6b1-4f21-4d45-98ff-18db55eab09a", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e34918b-526f-40e7-821c-0f07b83bdbc5", "sighting_of_ref": "indicator--53a1a6b1-4f21-4d45-98ff-18db55eab09a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dafb3e48-4983-44ae-af94-b51636308617", "sighting_of_ref": "indicator--53a1a6b1-4f21-4d45-98ff-18db55eab09a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32fca718-71e4-4f6b-bdfb-af3801b3148d", "sighting_of_ref": "indicator--3d77fe96-b15a-46ba-9818-bb4e8c98ab6f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7d49d2b-3bd0-4b9a-8fa1-6a67831b11ff", "sighting_of_ref": "indicator--3d77fe96-b15a-46ba-9818-bb4e8c98ab6f", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdaeb131-d5aa-420e-8852-f9cb65e984bd", "sighting_of_ref": "indicator--3d77fe96-b15a-46ba-9818-bb4e8c98ab6f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a5064c3-1d7a-4c09-928c-38b176a2c4c2", "sighting_of_ref": "indicator--bd837583-bdf2-4076-b7ef-1bbcc8354892", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdd81a65-9893-4074-9f19-cf1655391893", "sighting_of_ref": "indicator--bd837583-bdf2-4076-b7ef-1bbcc8354892", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e37e385a-5701-4915-afcf-985b1856aa90", "sighting_of_ref": "indicator--bd837583-bdf2-4076-b7ef-1bbcc8354892", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8faf2cb8-a17e-4cf1-9d1b-37ce97b0805b", "sighting_of_ref": "indicator--bcfc03b6-916c-4469-9e45-ea3ea1cc1576", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51c9352f-3e74-4303-a878-bb81a8a25f99", "sighting_of_ref": "indicator--bcfc03b6-916c-4469-9e45-ea3ea1cc1576", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--945f19c1-844a-4a4c-a115-e8f502ac789c", "sighting_of_ref": "indicator--bcfc03b6-916c-4469-9e45-ea3ea1cc1576", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e7d7daf-4799-417d-b18b-2285b03e8223", "sighting_of_ref": "indicator--4786f7e4-a785-4fe3-a0fa-ddb8c054358e", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98cd0e46-3d21-493d-acc2-a8736204d125", "sighting_of_ref": "indicator--4786f7e4-a785-4fe3-a0fa-ddb8c054358e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d3b8abc-9e45-49b0-9eaa-a66b588e4398", "sighting_of_ref": "indicator--4786f7e4-a785-4fe3-a0fa-ddb8c054358e", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--301d791a-b316-4d21-aa99-82886148fc17", "sighting_of_ref": "indicator--28260f0a-5e54-4817-9264-534014cfa0ee", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48511658-0f69-436b-a2b7-833d0c11c20e", "sighting_of_ref": "indicator--28260f0a-5e54-4817-9264-534014cfa0ee", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--917d1bdb-2eee-492d-9ada-3db3a8ad9eee", "sighting_of_ref": "indicator--28260f0a-5e54-4817-9264-534014cfa0ee", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9f89942-ae77-4166-9579-1dfd348f9d9d", "sighting_of_ref": "indicator--5305ebb5-ffa0-475d-b3fc-4cc5df261f1c", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80d4d76e-8b64-4131-926d-7dfeb84f70ee", "sighting_of_ref": "indicator--b5d59987-ad80-4169-b077-115b601dbfdf", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e457ee83-75f3-433b-9eaf-c2b605e95741", "sighting_of_ref": "indicator--b5d59987-ad80-4169-b077-115b601dbfdf", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43e57ef8-9ef5-4eae-811e-473698e837bb", "sighting_of_ref": "indicator--b5d59987-ad80-4169-b077-115b601dbfdf", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96a848a7-5be2-46b6-b64c-e505d25eed4b", "sighting_of_ref": "indicator--d32a65f6-eb85-4474-9a5d-4565e764c7c2", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f9735a1-4943-4990-8b7c-3fe323b1b755", "sighting_of_ref": "indicator--d32a65f6-eb85-4474-9a5d-4565e764c7c2", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f51c1ea-809a-469a-ad45-191afa4d13cf", "sighting_of_ref": "indicator--d32a65f6-eb85-4474-9a5d-4565e764c7c2", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43ce1b26-5580-4e00-9edd-16aabf480009", "sighting_of_ref": "indicator--f93f4927-05db-48b8-8d15-16990693cdad", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdc1d46b-1cd6-4768-ade8-8a973fc705b1", "sighting_of_ref": "indicator--f93f4927-05db-48b8-8d15-16990693cdad", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--493b223c-d6e2-4e20-be4d-7d107e043262", "sighting_of_ref": "indicator--f93f4927-05db-48b8-8d15-16990693cdad", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dab77ed3-d0d3-4ebd-8593-097683b84eb9", "sighting_of_ref": "indicator--1a78743b-b81e-4a2c-a670-f62693ff9455", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6939383e-e896-446b-b669-eb332d8622e2", "sighting_of_ref": "indicator--fa257a28-5fc7-4552-9556-27f167a5c2d0", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b8a7188-3e2a-4469-8f4c-9fda748af341", "sighting_of_ref": "indicator--aaabfc0c-ba69-4b84-8912-48572a8a2671", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb28928b-bc14-41e6-b1e6-eba9ebb3d146", "sighting_of_ref": "indicator--cf20cd90-512a-4f7b-91a4-d5d773d6ac3f", "where_sighted_refs": ["location--cc47317e-2c18-43a6-8938-dea748a56ad5"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74e58c15-8172-4ad6-a6d5-b2c7cceb771d", "sighting_of_ref": "indicator--79a77e21-4987-457d-ab18-766c5a07446b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13325177-e658-4e9f-8a66-485176576b09", "sighting_of_ref": "indicator--944da20f-ea7c-410d-9910-0a051cdb5c32", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dc201b7-e699-4bf2-adff-b9d4e7796d8b", "sighting_of_ref": "indicator--91d32c7f-0fc7-40f3-b24d-1a9aa243a818", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b64208c-4e36-4000-928a-9d39e8ee86c7", "sighting_of_ref": "indicator--5352f860-9335-489d-a936-48bfd4938a15", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba0d2584-b924-4429-a1e0-7af1e69a5c15", "sighting_of_ref": "indicator--32c58256-ead6-4813-9ac0-0bea9b7b057e", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18e58403-8d3d-451d-b052-d712600913bd", "sighting_of_ref": "indicator--19ca7020-1e4b-4591-87b7-323f90b3ddc9", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd9b9ad4-03e2-427b-a3ff-b942e6acb3ba", "sighting_of_ref": "indicator--ed869123-6ab2-404e-9d9f-e53372927f83", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6164aa22-53a1-436d-87c9-c98840835deb", "sighting_of_ref": "indicator--ed869123-6ab2-404e-9d9f-e53372927f83", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--438b4259-ee14-413d-a1a6-2cd134bc9921", "sighting_of_ref": "indicator--45bc35f6-6c1f-4871-9f67-c174ba2ae76d", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6c62e4b-b1f3-4ebb-b11d-25d97c255fb7", "sighting_of_ref": "indicator--eb73d6ef-ae0a-4aff-8889-90ad613e4607", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adc97e07-d3ab-4613-a399-2ab652ec4b49", "sighting_of_ref": "indicator--1bdd308b-817e-409f-84ce-cb351a141ad3", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c7be91c-e430-408a-a976-cbcfeffd706a", "sighting_of_ref": "indicator--67fdabd8-37d8-438d-a0de-c0a4893e0be6", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--144d10ae-3c18-4382-a458-6c8355f28085", "sighting_of_ref": "indicator--67fdabd8-37d8-438d-a0de-c0a4893e0be6", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f241e8e-b63e-4d9b-88b3-ca7070084e00", "sighting_of_ref": "indicator--67fdabd8-37d8-438d-a0de-c0a4893e0be6", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f941fcd9-29ba-447e-81bd-cf627b77d623", "sighting_of_ref": "indicator--5a72e1d1-ce30-4425-87fc-71d749366077", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff915046-901c-4664-91c8-ca67f6810c9b", "sighting_of_ref": "indicator--d3aa4d73-dc47-4c42-aa29-16a6046ecd9f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28ae33b3-fbd7-47d9-897b-d52f743bf361", "sighting_of_ref": "indicator--d3aa4d73-dc47-4c42-aa29-16a6046ecd9f", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--274ffbca-3e83-45cf-aac5-396eafa7744a", "sighting_of_ref": "indicator--57e8c210-f9ac-4073-bb75-5c34c71749a6", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3377d539-b8a6-4b69-807a-e68bd97f8b38", "sighting_of_ref": "indicator--54c5078c-1b5a-4724-98a1-5d66923ccfeb", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56c62373-d3d6-4d1c-83b3-10483aa2b169", "sighting_of_ref": "indicator--5493c4f3-c4b9-4223-86b4-8e6ea9ea9ae8", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d20390c8-2106-499c-828f-347d08494641", "sighting_of_ref": "indicator--7cbdb2fb-4862-46b0-a530-7e576b837dd9", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5218acb-4457-407b-a98a-f8477371dc30", "sighting_of_ref": "indicator--8cf0b461-a422-43dc-8015-ad3de1054b59", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b1a7e61-b137-4b18-a022-48c9bcc97279", "sighting_of_ref": "indicator--5d3adae1-d784-4d05-93c2-76c906bf3d1a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--216eb7b5-7b5b-4d64-931e-c19fdbb5c528", "sighting_of_ref": "indicator--8e433377-3ebc-4aaa-9c04-8011ea011c9d", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fbc3f52-827c-4ed4-9565-6b1d9a20b7c9", "sighting_of_ref": "indicator--f0d010c4-e5c7-49e7-abb5-68c6f28993d0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4213114a-41cf-4e52-b72b-64cc52463726", "sighting_of_ref": "indicator--b1b7caf2-4b99-4558-b715-abde6f0b0697", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c96605a-7ce3-4f3f-8c4c-2b88349ad460", "sighting_of_ref": "indicator--eb3547de-1141-44fa-a9ca-a7bb87a4b786", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e73d8533-4827-4045-b73e-f50c54f44f7b", "sighting_of_ref": "indicator--e4ba55a1-08ff-43fb-aa68-22f7e39c44d5", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--150adbd6-3d7b-4997-8ac9-19d072c890be", "sighting_of_ref": "indicator--cd19cde2-787f-4094-8ba5-df757da2e380", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c94db4ac-89a0-4821-a161-4ec5c2bc0f4c", "sighting_of_ref": "indicator--cd19cde2-787f-4094-8ba5-df757da2e380", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a027646-763e-4b75-b73a-a10d2ad1f954", "sighting_of_ref": "indicator--474f7127-3cf4-4a3d-bfd1-716e304b7428", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cac9dc08-5e28-4d48-84ce-07c1383c7b8a", "sighting_of_ref": "indicator--a7ddf468-4145-417e-ab88-6b035b9148cc", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4ad7cc2-5f3f-4354-80e8-a40b26120e9a", "sighting_of_ref": "indicator--882b2151-a699-48d0-aa83-87ea740ff32c", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2798c7a4-c9d0-4622-8b87-adaf50fd41e2", "sighting_of_ref": "indicator--1acdded3-4e7f-4d54-ae26-8f60e3eeb7b5", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89924ba6-2bd5-4636-992d-444cf0445eb4", "sighting_of_ref": "indicator--1acdded3-4e7f-4d54-ae26-8f60e3eeb7b5", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c16d4a5a-c356-4428-9e4f-0e82fd694948", "sighting_of_ref": "indicator--1acdded3-4e7f-4d54-ae26-8f60e3eeb7b5", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1a70d21-4ee1-45b0-a071-c2c17d921c14", "sighting_of_ref": "indicator--94d15200-10df-4d1d-99c5-65e6d9389706", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0e6e606-c7e2-4403-8f3e-e7d91b8d2380", "sighting_of_ref": "indicator--94d15200-10df-4d1d-99c5-65e6d9389706", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--219012d8-ccce-4919-8f33-ba8b069bc301", "sighting_of_ref": "indicator--94d15200-10df-4d1d-99c5-65e6d9389706", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b921617b-641a-44fa-b98a-182c127dba20", "sighting_of_ref": "indicator--6b33cac8-0ed1-421e-9810-ae0602678485", "where_sighted_refs": ["location--cc47317e-2c18-43a6-8938-dea748a56ad5"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5da5688a-8f69-4841-8f75-70c776faca32", "sighting_of_ref": "indicator--22546d35-befb-4f12-a53b-de3ca3dca21b", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a2c10dc-222a-47e4-b00b-f947dff66676", "sighting_of_ref": "indicator--22546d35-befb-4f12-a53b-de3ca3dca21b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--124d1ca0-3599-41cb-b7b5-695738a3b159", "sighting_of_ref": "indicator--22546d35-befb-4f12-a53b-de3ca3dca21b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04d96d1f-6258-47cb-8985-ede000d23cab", "sighting_of_ref": "indicator--f470ce7b-47b2-48b7-8f9a-14d67b34043a", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f9b7bc9-b071-4a72-8389-e9c5aa226a82", "sighting_of_ref": "indicator--dcd1dda5-fa1b-439f-beea-da6ebaed5838", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--daf2580d-a378-405c-97f5-38c19af8ed11", "sighting_of_ref": "indicator--a974056e-b3f7-4f31-96bb-fe600f87332b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3edcaf1-25ce-41bc-a935-eff536953ef2", "sighting_of_ref": "indicator--50019530-1aa2-41f4-86bc-819f4a71fa75", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2a5f36d-fd41-4308-b12b-85973a087286", "sighting_of_ref": "indicator--b56c168f-a3fb-4b08-b56c-6a17cd0aaad7", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--316504ce-6071-488b-8e2c-bcb125116a97", "sighting_of_ref": "indicator--02ac5aa9-dd18-4d07-9e99-74331ed3fe4c", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d105b6fe-9908-447a-bb14-c64a815226a6", "sighting_of_ref": "indicator--2075d50d-6702-4771-902d-2227dc4fb676", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edcad8ed-4482-40fe-983e-0dae0a184489", "sighting_of_ref": "indicator--2075d50d-6702-4771-902d-2227dc4fb676", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8493bc83-70ae-4812-846d-d85cc7269f2c", "sighting_of_ref": "indicator--2075d50d-6702-4771-902d-2227dc4fb676", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5293dd08-de71-4955-ab02-8d70bfcd50ac", "sighting_of_ref": "indicator--dd6f9ed6-3e4a-4277-9690-846b4e854f43", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9c33c6c-8c03-4da6-9d01-44e02540128a", "sighting_of_ref": "indicator--64e87afd-a453-4926-a031-fd29998453f2", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c208cc96-f45f-4eb6-8531-839ec5e124cc", "sighting_of_ref": "indicator--64e87afd-a453-4926-a031-fd29998453f2", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75eef5f1-ac90-40b5-b843-93155b950a2b", "sighting_of_ref": "indicator--08876b23-f8d7-43eb-a108-2044c8a3d2fc", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f54578d3-7174-401c-a0d5-c116806acfc6", "sighting_of_ref": "indicator--30058d36-f527-4fd9-9e0a-9cb54376a3d9", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec3459ba-b500-4970-9685-b6b736b47b01", "sighting_of_ref": "indicator--0fb458bd-a033-4dc8-ae4c-08d968e0281d", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f46c2b01-69c8-4740-bbda-0e4dc41ed7d8", "sighting_of_ref": "indicator--0fb458bd-a033-4dc8-ae4c-08d968e0281d", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cb2ad01-3f77-4901-9467-2e74b55824b8", "sighting_of_ref": "indicator--15aabad4-3edf-4d0c-ad00-cbe3fd0aaeb7", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d12d0523-1b92-465a-a252-634584cb8e55", "sighting_of_ref": "indicator--85114a1a-291f-44ed-9e18-20aacf3197ee", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dacf0f3-9a90-481e-a8f4-28ca05e7239b", "sighting_of_ref": "indicator--85114a1a-291f-44ed-9e18-20aacf3197ee", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d640711-74a7-4489-9cc3-0c06ad5b6463", "sighting_of_ref": "indicator--180f3ddd-4644-49d9-9a22-e9903437a666", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25a6d390-3c31-4e79-bb3c-44248bb87b78", "sighting_of_ref": "indicator--c75ba35a-c976-4815-8e1b-591645368181", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e77623f-8289-4c96-ba24-8c01fa9a2c2c", "sighting_of_ref": "indicator--c75ba35a-c976-4815-8e1b-591645368181", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a20c36d-1fb2-45d7-9c82-439a0fa5453c", "sighting_of_ref": "indicator--0680dd0a-2026-4176-9449-4cd75d14be37", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b68e1e8-e68d-40f8-a44b-b1604a9b7ede", "sighting_of_ref": "indicator--11b868f7-bc1c-43bf-851b-2ad6fd2c9b1f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d6bc017-2a65-49a9-b4ce-05667fd230c9", "sighting_of_ref": "indicator--11b868f7-bc1c-43bf-851b-2ad6fd2c9b1f", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b79b84c4-2e59-42d2-924a-29d8da94895b", "sighting_of_ref": "indicator--11b868f7-bc1c-43bf-851b-2ad6fd2c9b1f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f66b7cf8-54bb-4b7a-bf32-5e6a94ea30a6", "sighting_of_ref": "indicator--94050ffb-525f-49eb-b136-a91ac0595001", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cad45365-5a13-4f85-9a5b-383df711385b", "sighting_of_ref": "indicator--9fd8fcef-aabe-4c20-a9a1-e783e260389b", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ab95206-5d07-4464-b435-677bc5cd25ff", "sighting_of_ref": "indicator--9fd8fcef-aabe-4c20-a9a1-e783e260389b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb23c143-d2d7-47a6-abfa-2aa00d6cefaa", "sighting_of_ref": "indicator--9fd8fcef-aabe-4c20-a9a1-e783e260389b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dcdf848-8813-4df0-af79-5a1ba6f62a4d", "sighting_of_ref": "indicator--594bd2cd-de34-424b-9f37-f72459def372", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c554b05-6bb6-4763-a6b0-b2c4a32a68f4", "sighting_of_ref": "indicator--594bd2cd-de34-424b-9f37-f72459def372", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38a82293-13f0-4ef8-b975-65433655b12c", "sighting_of_ref": "indicator--594bd2cd-de34-424b-9f37-f72459def372", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--276d9b64-1a75-47c0-bfba-51149ddaab66", "sighting_of_ref": "indicator--eaa1a26b-e16a-413e-9f97-6641b61fc198", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca3c8388-e47c-453f-ac21-b137690fd3b9", "sighting_of_ref": "indicator--5c30716d-6021-4ebf-9a90-9000e2584782", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--389e9c7c-0cc7-480c-b3ab-d73f24a5fb02", "sighting_of_ref": "indicator--09466300-7cf4-49b0-8d45-79df4b265a56", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91ea0059-1b86-4f4c-a24b-705fb1e4dc34", "sighting_of_ref": "indicator--09466300-7cf4-49b0-8d45-79df4b265a56", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29df607a-7e74-4971-97fe-94feb885e2d2", "sighting_of_ref": "indicator--09466300-7cf4-49b0-8d45-79df4b265a56", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9b63791-3c8a-4cb2-94c6-c5ab845c292b", "sighting_of_ref": "indicator--07c5499c-83ed-4090-96ac-7937b6562c40", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b75c0cc-55fa-4162-ba55-e85469d25ac1", "sighting_of_ref": "indicator--07c5499c-83ed-4090-96ac-7937b6562c40", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edd3640e-b755-4d2e-ab3a-f74c9677592e", "sighting_of_ref": "indicator--07c5499c-83ed-4090-96ac-7937b6562c40", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6d213b5-c3b8-401a-86aa-f5f19330a606", "sighting_of_ref": "indicator--8050388c-2335-4652-92b8-6cd0aa4001f9", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5141b339-cb93-47c9-83b1-d48c3f26ce14", "sighting_of_ref": "indicator--ba448cfb-c143-4120-b6b8-94fc70fb261c", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--200dd3b3-c3dc-4850-9362-8a19cec7479a", "sighting_of_ref": "indicator--97c45d21-0274-4dd5-bfbc-9128fd1723ad", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23e46163-cab5-4fdb-9af0-6bbbedb3fb4f", "sighting_of_ref": "indicator--06d16203-2e76-4db3-b8d2-bdb444129947", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03ecb2cc-fd82-438f-abf5-dcfad9023a9e", "sighting_of_ref": "indicator--06d16203-2e76-4db3-b8d2-bdb444129947", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b235adf-43cf-4bc7-82fc-08b91e63d411", "sighting_of_ref": "indicator--52f26c07-25fa-445d-9983-7e6dc40d9f1d", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac87db44-6604-4b9e-ae27-c5b3760a215a", "sighting_of_ref": "indicator--52f26c07-25fa-445d-9983-7e6dc40d9f1d", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70da0d70-5ba8-4b36-b70b-6a89248d30fb", "sighting_of_ref": "indicator--52f26c07-25fa-445d-9983-7e6dc40d9f1d", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b60061b6-bedd-41f1-8bac-b4c1fb4ac1aa", "sighting_of_ref": "indicator--e6cff2a5-0a14-45ce-9a53-639eade697a7", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da3d7d52-6d98-4a72-843f-2a25c11fbc9a", "sighting_of_ref": "indicator--31fa1f2e-2140-4270-a9f4-6b81c2f8a7dc", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66efbcc5-ac5d-4dc1-801f-b9e8619fcff3", "sighting_of_ref": "indicator--31fa1f2e-2140-4270-a9f4-6b81c2f8a7dc", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32b5345e-5e8d-4f60-acba-fa507e5d960e", "sighting_of_ref": "indicator--31fa1f2e-2140-4270-a9f4-6b81c2f8a7dc", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3730843-e4ca-4778-bf7e-56206c727c2e", "sighting_of_ref": "indicator--49e41e06-6e41-4aff-ba8c-d6a24944e7b5", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91e5ce32-d7c7-4d79-8be0-8cad7382140a", "sighting_of_ref": "indicator--4b8e8109-f74a-488f-903f-b14f6bf4c689", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc0e8568-edb6-49e5-bb33-c027cc8a84ee", "sighting_of_ref": "indicator--3777bce9-0227-4701-a2ce-ed80a5eab7f4", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc41ffb4-27b5-461e-b7f4-679a4ac34491", "sighting_of_ref": "indicator--dd02c37b-be71-4f1d-8407-62ffae2f0c5f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3510ce6-a9e5-402b-952e-8df8f9f0d42e", "sighting_of_ref": "indicator--1bc2d5b8-25f9-4eec-a49c-c06ab014fd3d", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9281f906-f3f3-44a4-98c1-a247c73ba983", "sighting_of_ref": "indicator--1bc2d5b8-25f9-4eec-a49c-c06ab014fd3d", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--142d03f3-93ad-4511-b74a-db1e5ec3acea", "sighting_of_ref": "indicator--18a776c7-fbc5-4c2b-a34b-51db89fd83d7", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b61e7cd-89af-40c2-927c-deed89c34425", "sighting_of_ref": "indicator--ab9ab292-1c25-4fda-bdaa-9db8564d389c", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a35dc305-5c76-4776-919b-18435d8c2603", "sighting_of_ref": "indicator--ab9ab292-1c25-4fda-bdaa-9db8564d389c", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--891082e1-3f8b-4f5b-87f9-211288f9992e", "sighting_of_ref": "indicator--1ff76b83-93b2-4a4b-826a-49b0dc328d32", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e0130e5-6ddb-4388-81b4-dfc8fcea37cc", "sighting_of_ref": "indicator--8dd1a327-7362-495f-9813-da73675bfa30", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acacc26b-b42f-4ea2-bae8-0da8ae52edf1", "sighting_of_ref": "indicator--3659e4df-205a-4efa-8892-c8ee8dd6e107", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--329c7f1d-e4f4-40a9-9d89-0ae8c58a9fc8", "sighting_of_ref": "indicator--b81f8c8e-5c77-4adf-b929-0c9afb4b9656", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e282983-d61d-4aee-8d37-59ef686080fa", "sighting_of_ref": "indicator--534fe173-23e5-4bd6-9d35-2464c88df35f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f221b05-a277-4694-9e94-fa786497f983", "sighting_of_ref": "indicator--534fe173-23e5-4bd6-9d35-2464c88df35f", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa706231-572a-4225-8559-20b99cf2d36c", "sighting_of_ref": "indicator--534fe173-23e5-4bd6-9d35-2464c88df35f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b4045a4-f582-4bd0-84c9-99f51c9538a6", "sighting_of_ref": "indicator--85dceee9-35db-4246-bcc9-ed61a176284a", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1c5aec6-7aad-4f1a-af22-db5a12efbc5d", "sighting_of_ref": "indicator--85dceee9-35db-4246-bcc9-ed61a176284a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abc1c64d-9cc2-4f15-9a1b-887b7d2ede47", "sighting_of_ref": "indicator--85dceee9-35db-4246-bcc9-ed61a176284a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e393c3b4-e911-4c5f-82ff-ab4528bb37e8", "sighting_of_ref": "indicator--340112f4-5f37-464e-af5f-908919396f32", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8350cd70-32af-46c4-89e2-bff85f24a411", "sighting_of_ref": "indicator--163149bb-a25b-4a4a-9e06-99aa4fc60aa3", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49940e16-2884-4eec-a606-f840f9da2289", "sighting_of_ref": "indicator--a269817f-8a5a-4e13-9c50-08f896d6c9f1", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ea9528f-8c03-4205-8275-d56a62b20932", "sighting_of_ref": "indicator--47722395-0e4c-4f80-aca4-171e44e7b8ca", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c36eb83-4bb3-421c-adc7-692348f24a59", "sighting_of_ref": "indicator--47722395-0e4c-4f80-aca4-171e44e7b8ca", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9ee3fbe-09a0-48bf-9662-2337f8226a90", "sighting_of_ref": "indicator--8f80ebc1-d4e4-4fda-a6be-1e48032b421f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e8f10b2-7e96-4642-a22d-135ac394b907", "sighting_of_ref": "indicator--8f80ebc1-d4e4-4fda-a6be-1e48032b421f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a470ea7-0f16-4d55-9589-d81b3b92b3bb", "sighting_of_ref": "indicator--1341ec7e-f26d-4768-92bf-bcdb0ffcdfd3", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdb87779-56b4-4309-81e9-72187f2f912c", "sighting_of_ref": "indicator--b55f0d61-d500-48ca-8662-ff5d0d154a7b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4198647-c627-4eef-856e-2272623b8b60", "sighting_of_ref": "indicator--f0f839ec-f013-4883-ae86-b30086eb4410", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9abcc6b9-2583-431c-afa2-c882c477000d", "sighting_of_ref": "indicator--44f41adb-5fcd-4330-8923-317bd2d71c3e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bd4df2f-7a95-4653-9b3d-97c6b14e733e", "sighting_of_ref": "indicator--44f41adb-5fcd-4330-8923-317bd2d71c3e", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69bf1df4-094c-45dd-8df9-c00c5547b80c", "sighting_of_ref": "indicator--4a14a21a-296d-48c4-988d-38c8e0fa83dc", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--325ac39d-92d2-4c88-8ff1-eb20a1b6ec7f", "sighting_of_ref": "indicator--f1c91e77-3227-40ba-b903-20b379255871", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c9a727d-59c3-4e17-bca6-e267a1e54332", "sighting_of_ref": "indicator--7a7a18b3-c25e-4262-9984-2dd1d7a201b4", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d8c60c2-d0b8-4366-8541-0b7dcfb43ce3", "sighting_of_ref": "indicator--7afe196f-f89e-4250-ad12-4180ad60a4fc", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8de252f-c5d4-4cd1-9f2f-72af455c5e06", "sighting_of_ref": "indicator--f06ab502-119a-4426-a5c2-975f565a00c1", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25c61fe4-a209-484e-b3e5-018b8ed9dcfd", "sighting_of_ref": "indicator--3b88193c-f3e6-471e-a5de-c518df7eb6ea", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e8e36cb-7b1c-4d89-8b7b-3d18e35b9c16", "sighting_of_ref": "indicator--516bb287-2c0d-4143-a79a-ac0065ff96cb", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ec0ca82-5589-4dae-b8fd-6bfe94df8f06", "sighting_of_ref": "indicator--3856af39-a380-4e40-b572-cc0ff27e784b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5178540-a94e-435b-b8f9-4c5400c50bfa", "sighting_of_ref": "indicator--de400372-ebd7-40ef-ae82-c84fbc8b77d2", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fad06c9-12f3-4755-a939-1fee4ba85271", "sighting_of_ref": "indicator--de400372-ebd7-40ef-ae82-c84fbc8b77d2", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40159910-c05c-4ee2-b29c-23de5b69793f", "sighting_of_ref": "indicator--fc4b6417-a503-4dc5-90e3-487f8bb4542f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a3517f2-6e55-494e-923d-0117d82a6302", "sighting_of_ref": "indicator--84871ea4-d393-4c22-8f56-cb2e50de17c3", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61744ce6-1ef4-462e-9a6f-614bbd0de616", "sighting_of_ref": "indicator--7dce375c-6b3f-439c-800b-759ccc5b5fe1", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c7275a8-7622-4842-8bf9-ab561590b774", "sighting_of_ref": "indicator--88e0eaf3-b68d-49e5-b4a8-d217c1cd8b33", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db62766a-8cb8-435a-9a2a-2e3e76528ad4", "sighting_of_ref": "indicator--855cc534-b9eb-44f6-8ac7-78b48cb695f2", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3383f25d-7ac4-457f-b738-d57abbac1312", "sighting_of_ref": "indicator--9dce1de2-e468-4fcd-a4e7-bfca3a1dd41b", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba561b75-b206-441d-b73a-fbf123d883c5", "sighting_of_ref": "indicator--a70b2068-2cfe-404f-a803-f2e16add82a2", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81fae7c4-20ed-4e54-bae9-d80ba4ee868c", "sighting_of_ref": "indicator--350e105c-fb24-428b-b58d-3c91fb637b16", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--034fe75c-4004-4b4b-8ef2-86fecd0b4c2d", "sighting_of_ref": "indicator--bedf0b5d-b62e-4668-9ca7-fe6ad1be363f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2763a604-7204-475d-94d0-9f10398d3cde", "sighting_of_ref": "indicator--2639ddc7-f873-499a-b27a-00d35206b433", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e028bcbd-47ac-4689-919a-91281c50c266", "sighting_of_ref": "indicator--f99b254d-1fb7-4545-86e9-fddb61a3abea", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0fd14f3-51cc-4119-b159-3ae96caf531e", "sighting_of_ref": "indicator--a6dcb7ef-cfc7-4d6a-8aef-06205e8cdf65", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b6748fc-12f7-4b55-a63c-f4bac7f14f94", "sighting_of_ref": "indicator--23ae98c1-14aa-41e2-9152-fb9592f4d3a8", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e832dd2b-ee94-4910-b542-56bbf2085ae4", "sighting_of_ref": "indicator--856ab5ee-d2ba-45f5-97df-70f51f2f610a", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--108b5fd4-ba50-41f0-801e-445668c0198e", "sighting_of_ref": "indicator--e4e3b0e7-d68e-49d2-96a5-82981e532680", "where_sighted_refs": ["location--cc47317e-2c18-43a6-8938-dea748a56ad5"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1334abce-3860-4dfb-88e9-15175aa0599a", "sighting_of_ref": "indicator--5a28227c-6455-4970-a56d-77be62cbe10b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0745b986-dc0c-4c60-85e9-67cfab40cef1", "sighting_of_ref": "indicator--7a47ea70-10ce-4db2-907e-82c974536b10", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86116a2c-6eab-4f4f-8f97-f7c764f877a2", "sighting_of_ref": "indicator--0811dd15-61d2-4ea8-b050-22fa1e04a8ee", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bab9d6de-55a7-4597-99fd-d4782c288597", "sighting_of_ref": "indicator--547b2a87-5781-42ba-a7ca-a77cbca69a99", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b1cadd4-f75c-490b-9c36-e36ac2cd1982", "sighting_of_ref": "indicator--547b2a87-5781-42ba-a7ca-a77cbca69a99", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6928796-9c47-4402-bfb1-44f4b5427684", "sighting_of_ref": "indicator--547b2a87-5781-42ba-a7ca-a77cbca69a99", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c2eefaa-0f46-4315-9b3d-2d8712dd438a", "sighting_of_ref": "indicator--8ee896a7-13c1-4988-87cb-bb3c699b7f14", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--006bde26-0ee2-4209-a5b7-235c8aae0b9c", "sighting_of_ref": "indicator--9fa6c6d6-828e-4a63-9b28-3a5c008e9e6c", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54e2a247-cdb1-4f47-97fc-438e7b36b4d1", "sighting_of_ref": "indicator--c6918579-deab-4faf-bb0e-fffb7f3ed2f1", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e18bdec-2c7e-4956-b50a-4617e674c751", "sighting_of_ref": "indicator--90cd404e-8d53-4cc0-9a55-b897f9468edd", "where_sighted_refs": ["location--cc47317e-2c18-43a6-8938-dea748a56ad5"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17b9ff14-e941-4d8f-acc9-cb75276ce689", "sighting_of_ref": "indicator--e2fa6bf2-8075-4558-84ce-bff4fea80046", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2151b5e8-d39b-41b3-a33a-7bf4ee010156", "sighting_of_ref": "indicator--40844b1f-0e8f-4dbf-ae24-127b0e98c107", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--834bb170-2964-4efa-9194-11c375c5cdb9", "sighting_of_ref": "indicator--ccd3f77b-a205-42db-ab67-cc36afbca600", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d772fb83-77b2-4e41-bdcc-8c62e0f02921", "sighting_of_ref": "indicator--ff233016-dfe3-40d8-80fd-ba0df2780f03", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2519a52a-a7c2-48f2-9291-5be9ebc25374", "sighting_of_ref": "indicator--f8971c61-4dd2-49f3-a92c-a4bdf6e83e2d", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57a91c81-e535-44b2-a56d-7c7bd0631b49", "sighting_of_ref": "indicator--d5c23a70-5910-4044-8af6-064897b755be", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c00b7c4c-a0bc-4bfa-a94f-53ed17ff5c14", "sighting_of_ref": "indicator--17838c43-9f36-467d-b154-c5b477f17ae5", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--faa41b43-8711-49b4-b21a-06aef54a329e", "sighting_of_ref": "indicator--c4da37f4-0f73-4057-8da6-f776b60f471d", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8744057a-404d-4e64-b637-24c70e042ed5", "sighting_of_ref": "indicator--01c34b1f-fd50-41ea-88fd-02b7f4b402f7", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d754230f-54cb-44dc-a129-e2dd2baed0a1", "sighting_of_ref": "indicator--2f642c94-700c-43f4-9d72-cbfe3bad75a6", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4958abe-4113-4c77-9c5b-b2100af8f7fa", "sighting_of_ref": "indicator--2f642c94-700c-43f4-9d72-cbfe3bad75a6", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48dbbf5c-a8a4-4a1d-bb2e-5a601f5764ec", "sighting_of_ref": "indicator--3f6c12cb-cd9d-4a80-b7b9-655150355e72", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d7ca0af-318f-4f0c-9a83-0ba104618c9a", "sighting_of_ref": "indicator--f0fda99a-b45f-4387-8b54-d4ef38a95cc9", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d03f67d-906e-47cc-ad55-31c11b200aa3", "sighting_of_ref": "indicator--f0fda99a-b45f-4387-8b54-d4ef38a95cc9", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3de73598-6d1f-4716-b93b-efb59c53c3b6", "sighting_of_ref": "indicator--f0fda99a-b45f-4387-8b54-d4ef38a95cc9", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49b51e8c-c9cc-4654-9847-cda049d262e2", "sighting_of_ref": "indicator--c2d9eb1a-d235-41f6-bc80-5fddc782954e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b128949-8fcd-461c-a7a7-699d90ba084a", "sighting_of_ref": "indicator--878f02e2-d81e-469c-a661-4f4918d9c39e", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--718353c9-92b6-4036-b63b-8e75164b5064", "sighting_of_ref": "indicator--0cfe161d-e516-482e-8209-9bc06353c8f6", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e7042a9-7b67-471e-82ad-228e82b15895", "sighting_of_ref": "indicator--0cfe161d-e516-482e-8209-9bc06353c8f6", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b69bc9c-60ee-4bdf-a58f-e09056fbece8", "sighting_of_ref": "indicator--f0b6ecd2-9c7e-4a7e-a144-e46a6f155e7d", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8bc281a-8259-432f-99c8-efadf7ceb51b", "sighting_of_ref": "indicator--ab135367-db21-487c-bccc-2a66d255fb50", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--710529a8-b182-4b74-9926-0fcdf9f7c29e", "sighting_of_ref": "indicator--d2957bc6-75cf-42b8-8975-5b9644503db1", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a54bfe9-8d76-4fe1-aa4b-f26a4b5e4e81", "sighting_of_ref": "indicator--d2957bc6-75cf-42b8-8975-5b9644503db1", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77b327e7-5f3a-4f9e-901c-f67f003a6b9d", "sighting_of_ref": "indicator--630f7095-2424-42c4-830c-b5cf94d93466", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f93fda42-7d90-4c95-9a9e-0f7c9a630862", "sighting_of_ref": "indicator--630f7095-2424-42c4-830c-b5cf94d93466", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5476ab5b-0f6b-4e0f-b49a-9ed12a3514a8", "sighting_of_ref": "indicator--0b0cb574-d681-4a28-8c87-8e79ef73f1fc", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acfcca9a-66ef-497d-872c-2737c515e50e", "sighting_of_ref": "indicator--98850d3b-c7ed-4a9f-b585-d14638003426", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b43ab08e-99a7-4937-9633-c1a168ad527c", "sighting_of_ref": "indicator--47b99493-707b-4ddb-80eb-74c11d29c7df", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53500659-6408-4842-abc2-0da2601603d1", "sighting_of_ref": "indicator--d2757c8a-968a-44ea-9369-35f231a20b4a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3914edb-62ba-478d-b055-a7ba861c2208", "sighting_of_ref": "indicator--74352dae-17e0-4eb2-9e04-e725dc52ff79", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98f23174-dcc6-4884-bc40-a83213603c22", "sighting_of_ref": "indicator--e86ec83e-df9e-489c-a4f6-cefdd9faa0b3", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab95fba5-3193-4f5a-a529-0e2450c8d6ed", "sighting_of_ref": "indicator--e86ec83e-df9e-489c-a4f6-cefdd9faa0b3", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ab9dce4-901c-45ff-8991-b60130a0ddb1", "sighting_of_ref": "indicator--680d8b25-894a-4955-a3e2-bba989f3c530", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bab431f0-2c17-4c4f-9d02-8a7cf37f769b", "sighting_of_ref": "indicator--40fbefe9-7faf-419c-b140-89de734202b1", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfff2a5e-f352-4d85-988d-0eece71b4320", "sighting_of_ref": "indicator--76848ebb-2a7a-45bf-8f0b-6f3ba08f9eac", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4522afbe-e866-4e85-994a-cdf6a461cfc5", "sighting_of_ref": "indicator--4710542c-e264-48cc-89fb-68e4d6a542ca", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89a45072-c89d-4630-89db-1a11c99843f0", "sighting_of_ref": "indicator--8d4f5d06-5504-4f0c-9517-f066df425eff", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ae96b16-967b-42ad-9024-fb8abee08352", "sighting_of_ref": "indicator--d4fbab1d-37de-49e8-a3ff-d3754e980ee5", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0328033-69a4-4f3d-8a28-24f20dcbfb33", "sighting_of_ref": "indicator--3a4e8bb7-f78e-4736-8b67-b1091a705f0e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bda1d3d1-3443-475d-a52c-21a84b5fc45c", "sighting_of_ref": "indicator--3a4e8bb7-f78e-4736-8b67-b1091a705f0e", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ffff5e9-32c3-41d1-98da-03cfbfc18f5f", "sighting_of_ref": "indicator--9cd62c8f-ebf4-46c9-ae38-5d917acb144b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc74f7aa-1299-4d2e-97e7-74dc8f5e1da1", "sighting_of_ref": "indicator--44932e8d-fdfd-4409-9fd8-7b8d915221e6", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e486005a-1e9e-463e-853d-71c37aea20c4", "sighting_of_ref": "indicator--44932e8d-fdfd-4409-9fd8-7b8d915221e6", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7716645-6957-4643-83a1-2ebd7c357615", "sighting_of_ref": "indicator--44932e8d-fdfd-4409-9fd8-7b8d915221e6", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8aaa90c1-6247-4618-838e-415691e83c09", "sighting_of_ref": "indicator--7d71d365-5161-47e0-96f8-e63ca23a17ea", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2b84269-eaea-4be2-8627-c2799844a70c", "sighting_of_ref": "indicator--7d71d365-5161-47e0-96f8-e63ca23a17ea", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d07dce3c-c212-4997-9b98-f8d76e662e31", "sighting_of_ref": "indicator--b7616c1a-c0e6-41ae-a2c1-1c2f60e10c03", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b29c57a6-98af-4043-9a14-d3e9eab6cd03", "sighting_of_ref": "indicator--b7616c1a-c0e6-41ae-a2c1-1c2f60e10c03", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a78419e-0e0a-46b7-89ac-89858825c3e0", "sighting_of_ref": "indicator--eee6331d-48bb-4acb-bf83-803c9ba4fd0e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--869d7754-8fc2-4e02-985e-54817740049c", "sighting_of_ref": "indicator--f88ab8e4-7e76-488f-9297-9477c02f0c45", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffdadbd1-97be-45d1-841e-80b7a0cb37ad", "sighting_of_ref": "indicator--f88ab8e4-7e76-488f-9297-9477c02f0c45", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b882e779-acf9-42f9-b149-5248a7a93103", "sighting_of_ref": "indicator--dbf25cf0-adeb-4394-9489-3214df1de6cf", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84cd49af-93f2-4081-a13e-accb8d852de5", "sighting_of_ref": "indicator--bb222606-f361-4115-91f3-7ef56b215f61", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f28012b-5275-4aa9-81b5-934664893804", "sighting_of_ref": "indicator--bb222606-f361-4115-91f3-7ef56b215f61", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00566c3f-d166-4799-90a8-dd53dff14a6e", "sighting_of_ref": "indicator--44d8f221-9568-4374-aef3-a8f6f6af5dc5", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9856a628-9d5b-4562-b32e-8f1aa4770726", "sighting_of_ref": "indicator--bd5208bf-27da-40e0-b95a-34dfd633c076", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c85d1c20-20bc-499d-bb86-f43ea2149937", "sighting_of_ref": "indicator--bd5208bf-27da-40e0-b95a-34dfd633c076", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a285c4a4-781b-4fad-9605-dd1869c3d30f", "sighting_of_ref": "indicator--bd5208bf-27da-40e0-b95a-34dfd633c076", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3e5e436-6c9e-4021-80c9-b5b9d5cca309", "sighting_of_ref": "indicator--fa6dcf62-7d2f-4a3e-a6ab-9540621b963f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68bc5530-5c50-441a-bdb7-b82b4b225f9b", "sighting_of_ref": "indicator--17076f3b-e224-40d7-b29c-ad28d81b4279", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ad2b8dc-8afd-4423-ac42-f074e356a178", "sighting_of_ref": "indicator--0dc2b1ce-7b53-4ab7-a687-267076a316a3", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73dc2a04-fedd-4cc6-bc5b-2c76c1b77ee4", "sighting_of_ref": "indicator--0dc2b1ce-7b53-4ab7-a687-267076a316a3", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa68d8d2-369d-4c42-8ddc-b1d3572af403", "sighting_of_ref": "indicator--3b9e3529-8b76-4475-b8cb-a5d5eb05f2af", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dcc126d-97d7-4fe8-9bed-525af2e3d934", "sighting_of_ref": "indicator--b8a7f17f-c074-4e16-a511-74e32063c0b6", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a7f2676-6202-4710-9034-c265f65921e9", "sighting_of_ref": "indicator--300c2b8b-2660-4a37-8b0c-86105f132738", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e096406-f399-4564-97d6-66c1d2888c15", "sighting_of_ref": "indicator--8dbcf9f6-008b-4569-99ab-9259a9fc937c", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7469c34-89ef-4cd6-914b-3891a22a32aa", "sighting_of_ref": "indicator--55e3adb8-87fe-4416-a659-7d3f84599acd", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a09bf92d-6c53-48ff-ba68-a56e212b8938", "sighting_of_ref": "indicator--55e3adb8-87fe-4416-a659-7d3f84599acd", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31461340-5d25-4634-a947-e327e05307ef", "sighting_of_ref": "indicator--f08bffb2-b3a9-4baf-93f0-b5e5549edd75", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--001898e7-3a2e-4b4f-8c4b-58f1b359ea1b", "sighting_of_ref": "indicator--4719367a-1272-43bd-9513-ae79f75f92fd", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--768bf484-1c2a-4124-943d-262012bc2b9e", "sighting_of_ref": "indicator--4719367a-1272-43bd-9513-ae79f75f92fd", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8d7fc0d-3e61-43f0-aa98-f1b0a7d60877", "sighting_of_ref": "indicator--4b2fb556-05f2-45fd-80ee-b5a469c3bee8", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf5551da-a5a6-480f-89bd-f1012e9a3b9c", "sighting_of_ref": "indicator--47676c0f-c72f-41d8-a578-e6ba3a6f08b5", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9280eeb2-0645-4aa8-9660-5029128fbf1f", "sighting_of_ref": "indicator--47676c0f-c72f-41d8-a578-e6ba3a6f08b5", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2d64d9e-7685-433b-8bd1-b0f83778037d", "sighting_of_ref": "indicator--9f8a6eff-25fc-4d6e-91cd-1dad459bafcf", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba94c346-5f63-4b74-9a72-be6afe4a47c7", "sighting_of_ref": "indicator--9f8a6eff-25fc-4d6e-91cd-1dad459bafcf", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebf8193a-12bf-42d0-863a-482f03f18fd8", "sighting_of_ref": "indicator--4c83287f-307f-4917-992d-0452873c662f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0f89632-85b9-400a-8b58-d9243f7e72ec", "sighting_of_ref": "indicator--07d14c1d-4aa7-47de-a6b7-e4793a9a606c", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f47676fa-8693-40ed-9392-b1f7c42791a2", "sighting_of_ref": "indicator--07d14c1d-4aa7-47de-a6b7-e4793a9a606c", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ca68646-ab52-4d2b-8eb9-daf80717aa0c", "sighting_of_ref": "indicator--7c45bd3f-36d1-4b0c-9171-fafbeff225f0", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64792a9d-685c-4b0d-b50a-b5621a8e3ef2", "sighting_of_ref": "indicator--51a2c83f-665e-4a06-bc3c-83f991efad64", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--304e159f-127f-4379-8740-a29efd6ee474", "sighting_of_ref": "indicator--7ba26ae2-eddd-4c6c-8eaa-7e92c395b0d8", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50068bc8-8378-47e3-8795-40358b787dd0", "sighting_of_ref": "indicator--f7b96b81-3bbb-43a9-bbaa-fbbde3073222", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae7d888d-480d-4541-be11-6565e6d76343", "sighting_of_ref": "indicator--f7b96b81-3bbb-43a9-bbaa-fbbde3073222", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1b48800-d536-478b-8882-e7bcc2cf6f50", "sighting_of_ref": "indicator--f7b96b81-3bbb-43a9-bbaa-fbbde3073222", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90b24bea-d24a-417a-8ce1-cea63b0412c6", "sighting_of_ref": "indicator--24ef57ab-e0a2-4b4f-b204-1adb59e92f23", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7519992d-f8b9-48ac-b718-eafc9f634118", "sighting_of_ref": "indicator--24ef57ab-e0a2-4b4f-b204-1adb59e92f23", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1c4f32b-d781-42e5-871e-99ea3a6eb47c", "sighting_of_ref": "indicator--bbf89cd0-dd87-45ee-bd0c-1dffd657dc47", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1e464f4-9f3b-4daf-8401-520206159ca8", "sighting_of_ref": "indicator--bbf89cd0-dd87-45ee-bd0c-1dffd657dc47", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--986fc48d-caf7-49ac-9fa2-cf2ef724d3e5", "sighting_of_ref": "indicator--bbf89cd0-dd87-45ee-bd0c-1dffd657dc47", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4a75967-2754-4c8f-98cb-22df10c71d7c", "sighting_of_ref": "indicator--f165950a-d49c-423e-995d-a287fd664975", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38bb8a1d-d812-4ebe-aa13-5c83a0e72a12", "sighting_of_ref": "indicator--f165950a-d49c-423e-995d-a287fd664975", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--431c0c44-811b-4052-9469-ddd52cdfa746", "sighting_of_ref": "indicator--3110fffc-ec43-4c6a-ade3-2d141346c720", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c167753-306f-4809-8be6-acdade701efc", "sighting_of_ref": "indicator--b2970e1a-1dd9-47de-9826-8e7f7ef08085", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43bd2722-b89b-4507-9e01-5b1c1bf7201a", "sighting_of_ref": "indicator--99b5d4b3-7444-45be-baf3-c94aaa063d71", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca67a665-ddbe-4ec3-96be-4b7035141f16", "sighting_of_ref": "indicator--fecd433d-dc9d-4124-b226-bbb488e1d77e", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc487525-a328-4cee-b270-fcf338c85bc4", "sighting_of_ref": "indicator--fecd433d-dc9d-4124-b226-bbb488e1d77e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--470fde19-b3fd-4219-a0c1-0218b21efd3c", "sighting_of_ref": "indicator--fecd433d-dc9d-4124-b226-bbb488e1d77e", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f2cfa17-e658-42ce-a610-6f6a2a7fb544", "sighting_of_ref": "indicator--66286be4-1e89-48d6-87ac-f13092f9f963", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fecf8f27-9ec7-46b1-b461-31eee6f4e7fc", "sighting_of_ref": "indicator--4428a268-f8de-44f8-89f7-00336f7f1d1e", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9de10a60-5452-47b4-88d6-5abecf4d842b", "sighting_of_ref": "indicator--4428a268-f8de-44f8-89f7-00336f7f1d1e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ac848b2-4f3b-4a13-ac49-aeb65400b3d9", "sighting_of_ref": "indicator--4428a268-f8de-44f8-89f7-00336f7f1d1e", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c43cd860-c1ee-455c-b6e2-c9d6fe00b505", "sighting_of_ref": "indicator--311c3746-6ce3-42d4-8fd9-61d888302027", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a24998e1-f685-41da-a18b-653f3a957573", "sighting_of_ref": "indicator--8fd3a886-385f-4dd9-9e60-f4c404d61729", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--499404df-b3dd-4390-99b7-d7a677c68e88", "sighting_of_ref": "indicator--2d6096cd-8b51-43ea-947e-ebbe30a8b5f6", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--481ce069-8985-405c-85a0-4ad4ab62a39f", "sighting_of_ref": "indicator--a5134ab6-3fe1-4bdf-b580-51927200eb5f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49a8318e-0c47-4f35-bd95-b8dbb035ccb4", "sighting_of_ref": "indicator--1036d389-61cd-4189-b8d5-0153ae7b5dc1", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5527397c-ab0d-4e23-a129-1f0377357a77", "sighting_of_ref": "indicator--03c7ec29-b316-4c69-b213-321e76451786", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6579879-e350-4d80-8b51-ebd7315890c0", "sighting_of_ref": "indicator--80ed5d2d-70a6-4bda-b373-acdd25888e00", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72db837e-bc73-4acd-b446-3888489b4ae4", "sighting_of_ref": "indicator--80ed5d2d-70a6-4bda-b373-acdd25888e00", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a10027c9-3754-4553-9655-819dcd7daca9", "sighting_of_ref": "indicator--8e55b9a1-7ed4-48dc-83ca-2ff97f32aa52", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11cf4c5b-54ee-4313-b09a-373de41697aa", "sighting_of_ref": "indicator--061534f1-aa4b-4347-9362-489a142315ef", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3365e79-0a38-4dad-bc80-cb24bc89ade4", "sighting_of_ref": "indicator--f5e48579-dbd9-4c3c-bb5a-d9d747e113f7", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--999b12f5-51cd-4f60-8f35-215929e60b72", "sighting_of_ref": "indicator--f5e48579-dbd9-4c3c-bb5a-d9d747e113f7", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb0853a4-f0bb-42e4-9db8-368695065a9e", "sighting_of_ref": "indicator--f5e48579-dbd9-4c3c-bb5a-d9d747e113f7", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84169d50-65f8-4ce2-9c23-aa06863c64c5", "sighting_of_ref": "indicator--e470133c-aa47-4410-9c5d-2ff0e41e53eb", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f866b70-ac31-4d00-bdc6-209d9ca9632e", "sighting_of_ref": "indicator--1c58ce97-81b6-432c-a503-6982ee5d7006", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97edc66f-a8b7-4add-84e5-49c1d1cd7b2f", "sighting_of_ref": "indicator--fb408e7d-0d7f-443a-b753-120f1af90d3c", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8b6d844-8fe8-49dc-89c7-c39458ac2fee", "sighting_of_ref": "indicator--fb408e7d-0d7f-443a-b753-120f1af90d3c", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffb9eb26-8fdc-4031-bbea-53b0fed3d86c", "sighting_of_ref": "indicator--fb408e7d-0d7f-443a-b753-120f1af90d3c", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48cedfa1-4686-47d5-bbdc-03b5357df557", "sighting_of_ref": "indicator--f65860fb-9bec-4052-8254-4a9ffc40ac0a", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a690de7d-d40c-40da-aaed-bfaa35d147b9", "sighting_of_ref": "indicator--795e6ea0-046c-46da-b862-f93449722ea6", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c99dea33-26c4-41e8-82db-53302399f705", "sighting_of_ref": "indicator--795e6ea0-046c-46da-b862-f93449722ea6", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58c1da0a-7048-4212-b656-ca0bde3ed9e4", "sighting_of_ref": "indicator--5b6171ef-47c6-4597-b6e6-6108443afa0b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5033698-7bf8-404d-bd8d-f79083e664b6", "sighting_of_ref": "indicator--81f5320c-88e1-4603-a587-739339c9b8e9", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bd13197-7aef-47b9-bffe-2e9b8cb7cdd9", "sighting_of_ref": "indicator--81f5320c-88e1-4603-a587-739339c9b8e9", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5487cca-9d67-4d48-ae07-ca1a9484498a", "sighting_of_ref": "indicator--81f5320c-88e1-4603-a587-739339c9b8e9", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d47c2c45-ce95-4b66-b883-d8697b801ab4", "sighting_of_ref": "indicator--c8049fa8-9f82-4d72-bede-26dc5ace883c", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fe1660f-1065-456d-ad49-d8321d7b8674", "sighting_of_ref": "indicator--c8049fa8-9f82-4d72-bede-26dc5ace883c", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e756bd9d-96a0-4fd9-8368-f8fed16f2665", "sighting_of_ref": "indicator--c8049fa8-9f82-4d72-bede-26dc5ace883c", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31d6d7a6-669a-4dd9-b143-9da4f071265f", "sighting_of_ref": "indicator--d075a46f-4cfd-4a46-ab96-8bcce1d8c91e", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02f35a2f-1598-45f3-828f-186a69952aec", "sighting_of_ref": "indicator--d075a46f-4cfd-4a46-ab96-8bcce1d8c91e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1479ec1-6073-499c-ae6e-cf80069e0131", "sighting_of_ref": "indicator--d075a46f-4cfd-4a46-ab96-8bcce1d8c91e", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca99a6f6-a7eb-4f4e-9c01-28fd78d5ca3a", "sighting_of_ref": "indicator--5d4b0fa1-eb44-416c-8090-6c0f7f1d21b2", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--300c158f-d729-426f-95be-5df1974d30f9", "sighting_of_ref": "indicator--5d4b0fa1-eb44-416c-8090-6c0f7f1d21b2", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9876dd31-d464-4d62-aaf6-7f6d86f97e27", "sighting_of_ref": "indicator--5d4b0fa1-eb44-416c-8090-6c0f7f1d21b2", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d16f361-d128-428f-8c1f-2015b67db378", "sighting_of_ref": "indicator--f80f3ca9-8af0-49de-a178-f8382a9903e1", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--872748c9-a2fd-469f-b9ae-4ac9e8b6c208", "sighting_of_ref": "indicator--f80f3ca9-8af0-49de-a178-f8382a9903e1", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f06ddfbf-4647-4547-bc74-62f6bdb34a94", "sighting_of_ref": "indicator--f80f3ca9-8af0-49de-a178-f8382a9903e1", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52ba34d2-6e19-4899-bbd0-e9902e3ef987", "sighting_of_ref": "indicator--545ddf11-f1ba-4fdb-83e2-2ef6b5a59ea5", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4bded2a-1ae9-4a0c-bb5d-d6ce1884053e", "sighting_of_ref": "indicator--545ddf11-f1ba-4fdb-83e2-2ef6b5a59ea5", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b16225b5-fceb-4577-9172-e1ef18684559", "sighting_of_ref": "indicator--545ddf11-f1ba-4fdb-83e2-2ef6b5a59ea5", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--890a7043-8c72-41ce-a1e6-abe2c1a7d504", "sighting_of_ref": "indicator--b7c78c00-3957-4571-bd60-fb826b2748a2", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc1f563a-99cb-4927-8a5a-8ba7991c4f70", "sighting_of_ref": "indicator--ef10f1ff-0220-42ef-83f8-c589bcba28ce", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95a8cd54-62fc-4ea5-944f-408cd0f5e337", "sighting_of_ref": "indicator--588734ce-0507-455e-9bd6-aca6d3ec73a1", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24b0ae46-1e10-42f5-94be-d92684f90eb0", "sighting_of_ref": "indicator--588734ce-0507-455e-9bd6-aca6d3ec73a1", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d09d51ef-dd6c-4bcd-85d5-252b06f0b065", "sighting_of_ref": "indicator--81db130a-ecf3-4dba-9383-33fe633bd6c2", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72c3e6fe-23d7-4d36-a53e-9d1f0b71769a", "sighting_of_ref": "indicator--b9dbc9f3-154a-4423-9c7f-fba082525337", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6472ac7a-1663-4d55-90b6-ab74045503cf", "sighting_of_ref": "indicator--13f838a3-58ac-496d-892c-7d74fe3a60c4", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eabc786e-d254-406f-a9ce-7bd04bb94efe", "sighting_of_ref": "indicator--f0f998bb-1dc2-482f-998a-a18ea6f89598", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0aa97e8-2887-47d1-a761-9e151dec1a61", "sighting_of_ref": "indicator--d581631c-cbd1-40be-8a3a-a055819b3af7", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b717c80-dfac-4481-bd95-96b9382efe5d", "sighting_of_ref": "indicator--d581631c-cbd1-40be-8a3a-a055819b3af7", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78638de8-df17-49d3-b8a0-ee13d7acec21", "sighting_of_ref": "indicator--e07ee02f-d295-43aa-bf9a-0d132ce5bda6", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79bc5018-2bff-4a4b-9445-6caaddcf6b9f", "sighting_of_ref": "indicator--c563e8ca-367f-4f68-9421-c75156997399", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf87953b-e719-438d-995e-cb2afe76b61d", "sighting_of_ref": "indicator--c563e8ca-367f-4f68-9421-c75156997399", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d05b803f-cc2a-4164-a128-f11692a5c493", "sighting_of_ref": "indicator--55dcd8ce-037e-46ec-8204-16d808f46f96", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfcc51f3-f70e-4d92-ad4b-1bdc112d0975", "sighting_of_ref": "indicator--55dcd8ce-037e-46ec-8204-16d808f46f96", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f68aebb1-e767-4483-a4a0-728ad977d11c", "sighting_of_ref": "indicator--c14fa075-af26-4298-8948-9ce59bcf5997", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3802f27d-8d3c-4b5b-bc0f-d227922d6b60", "sighting_of_ref": "indicator--78985848-ac72-4d00-96e1-75d75928a5b4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--482b9fbe-2624-4ff7-8742-f70b1c534e60", "sighting_of_ref": "indicator--8226763b-8f0b-47d2-8436-46e5f246dec5", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca78c420-cfc9-4b6e-ba6e-17d879a4e268", "sighting_of_ref": "indicator--8226763b-8f0b-47d2-8436-46e5f246dec5", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42e949bb-e3a1-40e5-974c-5b9fa5009add", "sighting_of_ref": "indicator--bf066ab7-7007-4136-bb35-807a39a1dbf8", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99fbf75e-1bbe-4b12-bfbb-4e623dab96b3", "sighting_of_ref": "indicator--bf066ab7-7007-4136-bb35-807a39a1dbf8", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32687166-0fe6-4d51-a632-8061075324f8", "sighting_of_ref": "indicator--bf132169-5b6a-41e5-b015-d3183fd71134", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec7f8167-b725-483e-b4eb-ac58c3b511ff", "sighting_of_ref": "indicator--bf132169-5b6a-41e5-b015-d3183fd71134", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--add173f7-66bc-4df4-a530-767861e7c723", "sighting_of_ref": "indicator--bf132169-5b6a-41e5-b015-d3183fd71134", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5764e997-019c-45aa-a402-8ed8925e42bd", "sighting_of_ref": "indicator--24ada8f6-7dae-466c-9131-ae31e9d08fbe", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a4d1a3f-9170-45fb-b326-63c2c526815e", "sighting_of_ref": "indicator--42a7c04f-bd55-43f9-ab85-234731a84358", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5aa60bbc-38bb-4544-9da0-cc57c9cb51b4", "sighting_of_ref": "indicator--42a7c04f-bd55-43f9-ab85-234731a84358", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d470289-4401-4a4a-bf0b-57faae14bcff", "sighting_of_ref": "indicator--42a7c04f-bd55-43f9-ab85-234731a84358", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5df3649-13d4-4a82-904e-03c9821746f2", "sighting_of_ref": "indicator--6a620953-92c9-4734-b129-06b2c48a7532", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bf0990c-8a6d-49c3-9129-6ea8702c04ac", "sighting_of_ref": "indicator--4405a5ea-0f27-4820-a66e-a52096069795", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1132807-c14a-4e5a-ab24-d9bbd5348aca", "sighting_of_ref": "indicator--a52a9a29-b3a9-49f4-a8aa-6d1ba9e3344d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef335c6a-61e3-4422-9be0-c4d27c9567f2", "sighting_of_ref": "indicator--cd5d769f-7a4e-4ae5-889e-5ccac4b08a32", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4cd6ce7-d61b-4f99-a413-90c89e2d661c", "sighting_of_ref": "indicator--cf9feabf-7975-46dc-a8e0-de91d77a1417", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6194a835-1739-4c3e-adb6-5ae4786a1f96", "sighting_of_ref": "indicator--e6eba44e-fc73-472d-ac55-f2e80bf4e2cf", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd2dff3c-819f-4396-9cf8-2a35d3248886", "sighting_of_ref": "indicator--080e675e-f951-4f9f-b812-0178f37c3818", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6aedb34-acb3-4205-9e24-3f0cd74ccea0", "sighting_of_ref": "indicator--adf61c53-3437-41a0-b8d7-cbbac222ddb8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82df4593-655f-4784-baba-34d30db21a8c", "sighting_of_ref": "indicator--6a4add65-a5c5-41cf-8389-20d086af001e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6678387a-2dde-4a70-a4b6-75b5a5ddb74b", "sighting_of_ref": "indicator--3cfa999f-34cb-457e-a2d5-9fe7955edba3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3df5befe-896a-4065-8287-661e279c6bd8", "sighting_of_ref": "indicator--604f252f-b671-43ad-b9d4-97779b862bb1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb981c3c-6dad-4599-b34c-141f961cf948", "sighting_of_ref": "indicator--589baf0f-8d98-4f1b-8d6b-8a0318cc2898", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--643788ad-d866-473d-8fd1-e5104ded340c", "sighting_of_ref": "indicator--a42c450e-00a7-45e5-a3a0-bb4dffa24410", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fd6dbac-06c7-4a1a-aa86-b58854744c0d", "sighting_of_ref": "indicator--2087738e-5efa-4d23-aaf5-669061d8ebfa", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2764e5fd-e0b4-4fdd-8005-f00bd1a9ca70", "sighting_of_ref": "indicator--913c9e21-7a42-49c4-b134-9816c088078a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81923178-d177-48c7-93d7-d4d268b86202", "sighting_of_ref": "indicator--7db1c594-02cd-4600-a63b-eb3965ce9baf", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adff4973-e8bb-43ca-a066-0343367fc94a", "sighting_of_ref": "indicator--ba13ee41-3725-412a-94ff-461fa71a8160", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe2eb3de-709b-46b4-999c-8098430fc084", "sighting_of_ref": "indicator--079cb4d6-c535-4ae5-b88d-141cc250a1cb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f3174c8-5354-4183-9758-a1b2e657b283", "sighting_of_ref": "indicator--4c5dd53a-2092-408d-82ce-bedd3427756f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33da7118-c770-45d9-a39b-ff68d4899193", "sighting_of_ref": "indicator--e945768a-3f25-412c-aeae-c7ab514e126c", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b4bcf74-b51c-483c-bff1-cf697d07f88f", "sighting_of_ref": "indicator--e945768a-3f25-412c-aeae-c7ab514e126c", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52955839-8a08-471f-b5cd-210bff3da593", "sighting_of_ref": "indicator--e945768a-3f25-412c-aeae-c7ab514e126c", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95ccae0e-ee43-4643-99c5-4cc0e6d58e44", "sighting_of_ref": "indicator--2d37386d-34e9-450c-9c24-ac5f0344d86a", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d910abd-fc18-4d88-b5a0-d5710f9e9785", "sighting_of_ref": "indicator--2d37386d-34e9-450c-9c24-ac5f0344d86a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0605ebc-9aca-4133-9b79-aad4c31f75be", "sighting_of_ref": "indicator--2d37386d-34e9-450c-9c24-ac5f0344d86a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e30d3846-7147-4f34-9164-dc62ee9886bc", "sighting_of_ref": "indicator--d4acf21d-1623-4e9c-8691-6793f42f0e05", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b117c154-f702-4756-a7ae-4d9767199f5b", "sighting_of_ref": "indicator--d4acf21d-1623-4e9c-8691-6793f42f0e05", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--257a8726-c474-422e-8f21-faca5affb6ec", "sighting_of_ref": "indicator--d4acf21d-1623-4e9c-8691-6793f42f0e05", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbed1460-c962-43f0-b444-164379b6f63f", "sighting_of_ref": "indicator--8312ad87-bc50-4890-a94a-1fec0297f038", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a377e641-b997-4a21-9784-f5a6e939bc44", "sighting_of_ref": "indicator--8312ad87-bc50-4890-a94a-1fec0297f038", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8aa74116-4282-4139-87cb-8575d8095bcf", "sighting_of_ref": "indicator--8312ad87-bc50-4890-a94a-1fec0297f038", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24d7f8a2-fec3-4997-8df3-4b6510fd656a", "sighting_of_ref": "indicator--96602d1f-7e48-4547-ace0-0c884f2be821", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf60abbe-905c-4cb9-9299-b7e26e142e88", "sighting_of_ref": "indicator--96602d1f-7e48-4547-ace0-0c884f2be821", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a19785d-87bc-4ea7-8b40-882732dce0a1", "sighting_of_ref": "indicator--96602d1f-7e48-4547-ace0-0c884f2be821", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--336cba45-b9a6-4c3a-acfb-1843afd2a0a6", "sighting_of_ref": "indicator--a1c25c5e-4fbc-42b7-b43b-c55b68752b11", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--503b8346-a24f-46fc-b665-f6de3437f7ce", "sighting_of_ref": "indicator--a1c25c5e-4fbc-42b7-b43b-c55b68752b11", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d28210bd-a829-4e86-8652-170e37f4e7db", "sighting_of_ref": "indicator--a1c25c5e-4fbc-42b7-b43b-c55b68752b11", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c0b0b27-406b-4be4-821e-2f279d9582d9", "sighting_of_ref": "indicator--6058f67f-d59b-4c5c-b768-7d56da04dfc5", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae52698c-976d-47a4-a722-90d5bb6ea347", "sighting_of_ref": "indicator--6058f67f-d59b-4c5c-b768-7d56da04dfc5", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3227aff-9487-4e8a-9668-c3432a7663ac", "sighting_of_ref": "indicator--f469dbdb-2097-4a61-a0cd-8f9dd698e48d", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6b44e7d-8e21-4066-ab0e-48de6d084f50", "sighting_of_ref": "indicator--6c964e58-f638-46d4-98ee-3f7ce2a5dbce", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0469257b-d229-4ceb-abe3-75926f997002", "sighting_of_ref": "indicator--b84ff19b-ee93-4716-95d4-810e49745a1e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99a55a7b-34b2-4d31-a0dc-11e5217e268a", "sighting_of_ref": "indicator--b84ff19b-ee93-4716-95d4-810e49745a1e", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eacbf829-081d-4b66-89ce-bf1e9c13755e", "sighting_of_ref": "indicator--736ec95d-40b3-4237-974f-f375e6f7b945", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35ae9f85-0a88-463e-878a-541dca7792ae", "sighting_of_ref": "indicator--cd39fb25-d2d2-4077-ba5c-983865f0b2d4", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd27c3a0-4922-439e-8bc9-c35794f8a067", "sighting_of_ref": "indicator--63a85175-d01e-4bd6-b08e-b6fe4c7decc1", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--101a300c-85a6-4012-bb75-0e31cc47d969", "sighting_of_ref": "indicator--63a85175-d01e-4bd6-b08e-b6fe4c7decc1", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a232774-add8-477e-b3da-70dca2ef0a2c", "sighting_of_ref": "indicator--7c2dde80-38e8-4622-b8b5-b1b565071a97", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3b54d7a-b290-43dd-bcf6-1c108fa60df2", "sighting_of_ref": "indicator--41c77743-fda7-45f2-a11f-f2d98f8ee1a6", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe6b28ae-c60b-47d3-972b-ffed6391650b", "sighting_of_ref": "indicator--41c77743-fda7-45f2-a11f-f2d98f8ee1a6", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8727b1f4-a3dc-4483-8478-ea236eca194e", "sighting_of_ref": "indicator--f7d855da-6d3c-4175-a57e-0adc95adcc0d", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9568fc2-b932-4ccd-ad9e-35d29d33cdf2", "sighting_of_ref": "indicator--f7d855da-6d3c-4175-a57e-0adc95adcc0d", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96fca4da-a1e7-41a1-818b-5ca698cc7d44", "sighting_of_ref": "indicator--4d655e92-7d65-47ec-b261-0846b4699038", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee715672-3009-444c-be71-e980d6b8be66", "sighting_of_ref": "indicator--4d655e92-7d65-47ec-b261-0846b4699038", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b80b9e59-f8a9-4c45-836d-d04c29c52149", "sighting_of_ref": "indicator--4d655e92-7d65-47ec-b261-0846b4699038", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb70eed0-0fd3-4e87-a773-96ad85079b96", "sighting_of_ref": "indicator--aeed394b-8755-427a-8159-bc66ccd04fbe", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--beb9c853-fd84-4d07-bbe7-c4f7e4093e7c", "sighting_of_ref": "indicator--fb80f207-fcaf-40b6-abf7-fd01ceb2e0c6", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c959ef45-c96e-4c9a-99b8-11fc3a4c2132", "sighting_of_ref": "indicator--b8408318-349a-489c-901f-8e536e32d311", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10a0855b-c27e-4aee-a8dd-3c0d3fbc93a3", "sighting_of_ref": "indicator--ef30d927-aa75-45c6-b398-21c1dde7ffa2", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77fea747-8ca2-4a08-ba16-29d6b3449d7a", "sighting_of_ref": "indicator--ef30d927-aa75-45c6-b398-21c1dde7ffa2", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f421f32-b567-4455-bb8b-70a0f3eb2d22", "sighting_of_ref": "indicator--693d9b62-a721-4d8e-ab79-6f9e06a377c7", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--116d4d97-6c21-4e74-8a80-b1dac0d2ff09", "sighting_of_ref": "indicator--6e7f9ab0-f587-4966-96c8-22cf5c74e3cc", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a5f342a-a26b-466a-bcd1-62e7e6e48802", "sighting_of_ref": "indicator--5eb52355-8b88-4116-9619-dc1b500fa563", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40cb3b1b-e3a6-4aa8-8893-87c59ee68975", "sighting_of_ref": "indicator--b67b907e-d7ac-4b80-b1cb-6302eca15abe", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9332c36c-d3e8-4aed-817f-181ee66aa1e2", "sighting_of_ref": "indicator--d8c35363-de77-42fe-83a4-6af956771c37", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d288f9bc-5117-4365-a417-c41ebe14f663", "sighting_of_ref": "indicator--b8bd2d3c-d625-4e15-960b-06bff9a0b550", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cb82a0a-7d1e-4bd6-95e1-846d461cb40f", "sighting_of_ref": "indicator--b8bd2d3c-d625-4e15-960b-06bff9a0b550", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea271103-1ea6-4101-b7cc-15d0bd4dcdd2", "sighting_of_ref": "indicator--f5484042-f245-40dd-97e6-cc806266adc1", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1beb9182-0631-4bfb-8fff-5e344a27fc27", "sighting_of_ref": "indicator--f5484042-f245-40dd-97e6-cc806266adc1", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77fbe2f6-09b7-4e04-af1e-b35f8fe50fdb", "sighting_of_ref": "indicator--ec90c37e-ce82-4744-ba9c-aa5636198da1", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8713f9e3-938f-4253-9c82-46bc7ee4d3dd", "sighting_of_ref": "indicator--7e764bc3-e884-42ef-b09b-ecd80f11dfde", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--337fccca-602c-4ef0-96cd-cd7315761255", "sighting_of_ref": "indicator--7e764bc3-e884-42ef-b09b-ecd80f11dfde", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--084708fa-acc3-436c-a2e2-b40edcc81314", "sighting_of_ref": "indicator--41fe564f-36ff-4976-80ab-fe970da54cb2", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--349e9f7a-5c8f-4aa0-b5b6-8e522b42037e", "sighting_of_ref": "indicator--41fe564f-36ff-4976-80ab-fe970da54cb2", "where_sighted_refs": ["location--cc47317e-2c18-43a6-8938-dea748a56ad5"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b221248-4877-4223-8bfa-37be36d7744c", "sighting_of_ref": "indicator--fe122e6a-f4fb-47b1-889d-d0db00d6fc16", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--302dc27a-e7d6-483d-a2fd-e3bc55dcd1d4", "sighting_of_ref": "indicator--f803eb32-51a9-43b1-b9e6-abca26b3c390", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--deb6d0c9-1572-4469-a49f-609267d3a53c", "sighting_of_ref": "indicator--22db5cd8-d5e1-449b-8ec9-eaed10ea798b", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dabac597-0c24-49d7-a9de-d37ef75a475f", "sighting_of_ref": "indicator--22db5cd8-d5e1-449b-8ec9-eaed10ea798b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe428ecd-9d2f-4485-aa0a-38e821835460", "sighting_of_ref": "indicator--22db5cd8-d5e1-449b-8ec9-eaed10ea798b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3e0b9a5-3940-4a06-b644-e764e022db55", "sighting_of_ref": "indicator--81a626bb-ca1d-4e6d-ade7-c37d53b1f0be", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6715ce6-2c8e-4575-be49-6254fb1b0ec7", "sighting_of_ref": "indicator--81a626bb-ca1d-4e6d-ade7-c37d53b1f0be", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75768c95-a284-4c9d-9e69-f5047c912e46", "sighting_of_ref": "indicator--81a626bb-ca1d-4e6d-ade7-c37d53b1f0be", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe6efc63-94bf-4741-bce6-d2dedf249b94", "sighting_of_ref": "indicator--67355daa-1af9-4a2c-9255-8f41956b9484", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c91d5d9a-33e0-4b1b-823a-47861bbf9255", "sighting_of_ref": "indicator--9ccc9557-f54e-41f2-acaa-08bf3ff51ffe", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ece1d586-11c2-4c79-a078-14980c62186c", "sighting_of_ref": "indicator--8ad1a092-af9e-402e-9f2b-c51599745db2", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c75ec50b-a5b0-4324-9ba6-3b2adc13eaf2", "sighting_of_ref": "indicator--8ad1a092-af9e-402e-9f2b-c51599745db2", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1322b3c2-39a8-44f3-8dcb-1a19439b1385", "sighting_of_ref": "indicator--8ad1a092-af9e-402e-9f2b-c51599745db2", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b95b552-b230-4f5d-a69e-c85228c0acb6", "sighting_of_ref": "indicator--b66b6c48-6849-487c-ac0e-7e6eaa1b6a2a", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--712e2b1f-8fd1-47f9-ac26-db8544744d02", "sighting_of_ref": "indicator--b66b6c48-6849-487c-ac0e-7e6eaa1b6a2a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a35f81da-6bd5-469f-95f4-95b4b748e97d", "sighting_of_ref": "indicator--b66b6c48-6849-487c-ac0e-7e6eaa1b6a2a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4ab9e65-2ae4-44e8-8b3e-1aaa15772ac1", "sighting_of_ref": "indicator--3b4ab91e-9c2f-4214-9a11-abee39ceab8d", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bedbd94-757f-4a03-aeb2-b15a47a0fec9", "sighting_of_ref": "indicator--3b4ab91e-9c2f-4214-9a11-abee39ceab8d", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5be0a9e8-e039-4732-b11d-c6ee5a0132f0", "sighting_of_ref": "indicator--3b4ab91e-9c2f-4214-9a11-abee39ceab8d", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be1c4865-716d-4a63-a571-ae8742fca54c", "sighting_of_ref": "indicator--2ddd33ae-53ba-42f4-8b9c-a060400bc19f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--251fc71b-61ff-419d-8002-00f037ee871d", "sighting_of_ref": "indicator--2ddd33ae-53ba-42f4-8b9c-a060400bc19f", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dba5ee0-198a-41e5-850d-91f0fb4425e4", "sighting_of_ref": "indicator--2ddd33ae-53ba-42f4-8b9c-a060400bc19f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cfc8c82-17d9-4faf-ad8b-47da39a8a88f", "sighting_of_ref": "indicator--72e1d73a-4d89-47fe-b297-e12fd25fab46", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97b645ab-e941-412e-84f2-2307e02161a5", "sighting_of_ref": "indicator--72e1d73a-4d89-47fe-b297-e12fd25fab46", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8b6dab5-29bb-43b1-b630-dfa529c70e1c", "sighting_of_ref": "indicator--72e1d73a-4d89-47fe-b297-e12fd25fab46", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52dfd8c8-2985-4295-a7db-014114990626", "sighting_of_ref": "indicator--eb07d65d-ff2b-48bd-99ee-88630d8f8f84", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88ed7c7b-4096-42e9-9b6b-144e5b0b86ff", "sighting_of_ref": "indicator--c058b993-b4b2-4e98-b387-aa96737fbd19", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5275fbf-c80f-40a4-9a19-083456a89fb1", "sighting_of_ref": "indicator--2a2f6c1d-e78b-4dc3-b84b-58be9703a42a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cebdc13b-d966-4704-b50a-a03b26d2aab5", "sighting_of_ref": "indicator--8fb995f2-aabc-456c-9809-4dc5a6944eaa", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--104281ab-4ed0-4d48-8a33-81470598f9af", "sighting_of_ref": "indicator--8fb995f2-aabc-456c-9809-4dc5a6944eaa", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28ee5e29-0025-4eb4-bfbf-4c175b21428b", "sighting_of_ref": "indicator--5d8e0068-e9af-47a4-83b2-8c55075d2a65", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5800df6-eb68-4f74-9734-78faac476285", "sighting_of_ref": "indicator--3d35268c-5e83-4432-a288-2ed12651fd4a", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af6f2f5a-9ab4-48f0-800d-db9c06606795", "sighting_of_ref": "indicator--3d35268c-5e83-4432-a288-2ed12651fd4a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19b0df76-7f4a-4c86-b7ef-d9849c4cd4cd", "sighting_of_ref": "indicator--3d35268c-5e83-4432-a288-2ed12651fd4a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e74aac0-eb5f-4dd8-8c85-6566dffafef1", "sighting_of_ref": "indicator--774a3569-e745-4447-a913-e33dcb4b271a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--214aa609-c5aa-489d-97bc-fbab97213e08", "sighting_of_ref": "indicator--963951d1-8e50-40e0-b6cd-c455a1323016", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30c47db3-1cc8-4362-9781-42057ebb57c4", "sighting_of_ref": "indicator--6ad3b4d1-ed74-4551-86cc-c0d35a8eed67", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca4d1fcd-692a-47d6-a147-0a98977698ef", "sighting_of_ref": "indicator--545e0b86-782c-4a90-a20e-13a1ea95ef69", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f68f655-846d-401f-b5ce-4c68f9ec436b", "sighting_of_ref": "indicator--545e0b86-782c-4a90-a20e-13a1ea95ef69", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0ae3307-f0e7-4a36-b6e0-091497f58717", "sighting_of_ref": "indicator--545e0b86-782c-4a90-a20e-13a1ea95ef69", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09fb66f6-d4bb-44c5-99d8-f8845f4f0415", "sighting_of_ref": "indicator--215bfef1-d0d8-42cd-befc-05d9859fd9b1", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4fbb526-c397-4fd1-b736-9eb394801e52", "sighting_of_ref": "indicator--215bfef1-d0d8-42cd-befc-05d9859fd9b1", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--caf7fe20-21be-42e6-9fc2-751d8b30e7e1", "sighting_of_ref": "indicator--215bfef1-d0d8-42cd-befc-05d9859fd9b1", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--daaf2874-b11f-420a-ad90-9b2f76181029", "sighting_of_ref": "indicator--487fd32d-d269-4642-91bf-9f527ce2ec1f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab673c2f-baf1-4f83-a1f9-caecd888725b", "sighting_of_ref": "indicator--942d2a79-1927-44e2-a15a-27a1d8114023", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b66b3c55-f291-479c-a941-94999702432d", "sighting_of_ref": "indicator--942d2a79-1927-44e2-a15a-27a1d8114023", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d30e43b2-4297-4370-94c7-8a6d294efb4b", "sighting_of_ref": "indicator--942d2a79-1927-44e2-a15a-27a1d8114023", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f12beaa4-1603-4e0c-941a-50f235122010", "sighting_of_ref": "indicator--6f489aa6-25ae-462b-ab94-b16216d2ab35", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e86438ae-057c-4ef1-95fa-6eefedc6f1ef", "sighting_of_ref": "indicator--f5ba7409-2946-4c36-8681-677e9dc4830c", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--696f2372-6a41-4539-990f-33a65c1e88bd", "sighting_of_ref": "indicator--2c0c21c9-1698-4d1d-9401-f8d72a823557", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18775143-4cca-4ed8-89f8-9367b1a58f51", "sighting_of_ref": "indicator--2c0c21c9-1698-4d1d-9401-f8d72a823557", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2229102-6d77-484e-b265-b131e245a5b4", "sighting_of_ref": "indicator--c0a511be-16b5-4d54-a0d4-9ecfba96944a", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bd24ed3-135f-4b16-ae3d-ff6938148c1e", "sighting_of_ref": "indicator--c0a511be-16b5-4d54-a0d4-9ecfba96944a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d48ed5cd-efaa-4242-973a-a19638b749e9", "sighting_of_ref": "indicator--c0a511be-16b5-4d54-a0d4-9ecfba96944a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2efcddc-b58d-42d0-9976-8985236a8765", "sighting_of_ref": "indicator--c4d6147a-fcf1-4c90-a564-c380166c0e43", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4af7ce8-9916-4d14-be76-1300271f05d9", "sighting_of_ref": "indicator--c4d6147a-fcf1-4c90-a564-c380166c0e43", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c4df2c8-b099-4f68-bb41-9928815763d1", "sighting_of_ref": "indicator--fcedb9b2-cf23-4e66-b590-0af880e16415", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--217880ff-e1d7-4120-b2b7-482ddf31f09d", "sighting_of_ref": "indicator--fcedb9b2-cf23-4e66-b590-0af880e16415", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--714bb9e4-2ed8-46a0-ad3b-704d1fa71344", "sighting_of_ref": "indicator--47a7e4c2-9d72-4141-a175-9cbc83b9c176", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6199ad91-6c2f-4d0a-80bb-39ec60559bc8", "sighting_of_ref": "indicator--47a7e4c2-9d72-4141-a175-9cbc83b9c176", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41556590-a39f-4d25-bdae-d0ff9593a5e2", "sighting_of_ref": "indicator--47a7e4c2-9d72-4141-a175-9cbc83b9c176", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--052dc969-54ad-405b-b864-8f729c98b073", "sighting_of_ref": "indicator--6d896489-7293-408a-922d-c957edb1ba0c", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee6ca169-275a-4b30-9673-5d52a444ce2a", "sighting_of_ref": "indicator--6d896489-7293-408a-922d-c957edb1ba0c", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50ec44f6-83a8-4597-8a61-73d26110d130", "sighting_of_ref": "indicator--6d896489-7293-408a-922d-c957edb1ba0c", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f466842-f7da-453a-a1b2-c67ecfe3208e", "sighting_of_ref": "indicator--a0a53841-5f4a-4a60-bed1-8f72e8aa1ff0", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7481a165-4ef8-40ac-afab-9f1318760eb0", "sighting_of_ref": "indicator--d787a33f-e4b6-4b67-a08b-ee78c624beef", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--206932c4-35ef-4815-bc67-71dab1d609ee", "sighting_of_ref": "indicator--4051e124-fe46-4118-b2d9-2e292ecf3296", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3432f5f-39e2-499b-b274-66beab172d35", "sighting_of_ref": "indicator--4051e124-fe46-4118-b2d9-2e292ecf3296", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c255a9a-7944-48a8-a40d-0e742bcb8e9d", "sighting_of_ref": "indicator--5b59a52c-3b46-4ca9-a8d7-6729ae7300c1", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8989a9fd-789b-413e-ba47-8a9d53506508", "sighting_of_ref": "indicator--511d1ec4-32c2-4c66-ae11-10678c03b2ab", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77e27513-f9bd-4200-9830-5a76df75c612", "sighting_of_ref": "indicator--265ebdd7-ef97-4e49-947f-00a8a569ba5f", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc3e1afd-f427-495e-ba94-8819483d0f7c", "sighting_of_ref": "indicator--fdcf9c02-5536-43d1-bbca-0692fdaccaa6", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b19cf431-1c03-4b69-a1e1-25e0645677ab", "sighting_of_ref": "indicator--fc4d16dc-51b8-4c4c-971a-40bbfb791085", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c27f0b6-49bb-43c8-8533-79a34eff4460", "sighting_of_ref": "indicator--d26262cc-45d6-4e96-aec6-74eec223d8b3", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5ac531f-e891-48cb-a930-5d296614c8da", "sighting_of_ref": "indicator--44c400b6-6fa2-4206-8f1c-74578f204912", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b3c004d-e662-4fc0-991d-06ef8cedd07c", "sighting_of_ref": "indicator--a6257bd7-b7bd-47a2-9ffe-81192d359165", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5eb92ff-2d4a-4552-9e55-8ed96ec27a41", "sighting_of_ref": "indicator--e21e2fe2-7d7e-4361-bc87-2e1e7b9300bc", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef3ea83b-2207-4c8a-93fc-67f50d0fbee8", "sighting_of_ref": "indicator--40993e06-134a-4fc1-971c-7ce9495623c4", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d885e182-5ace-4a88-aadf-f1e0bd9c4723", "sighting_of_ref": "indicator--40993e06-134a-4fc1-971c-7ce9495623c4", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--848db38a-f8af-4172-8730-c94be502aa2e", "sighting_of_ref": "indicator--40993e06-134a-4fc1-971c-7ce9495623c4", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--067439e2-6536-4357-897c-0715589d9cbd", "sighting_of_ref": "indicator--4cb109c1-7674-40d0-9d83-7e6f489cd02a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f34ee2b1-4d56-4a56-b7f2-fd943fb45ff6", "sighting_of_ref": "indicator--1254fcb1-5533-4fcf-b4ce-17027e507ff3", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05e0ad90-4b5c-4120-85c9-cf05af1d02d1", "sighting_of_ref": "indicator--aa7b4fd2-f6cf-4dad-8f83-5f3b494df354", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ecc19d7-8d5c-4208-aa8a-bb8ad1d833e0", "sighting_of_ref": "indicator--aa7b4fd2-f6cf-4dad-8f83-5f3b494df354", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1f6a143-38c0-4a6d-b623-6d065a6c310b", "sighting_of_ref": "indicator--09054836-ed7f-4143-8583-e772c9794893", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--122883a5-21cc-4652-8883-8202ca76036f", "sighting_of_ref": "indicator--b7c22ff1-9979-4616-96ad-0e4399b1e841", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eec44516-6b42-4593-bad2-f35c066763d4", "sighting_of_ref": "indicator--d14e72ff-1f36-48ba-a702-ce58c206762a", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd0462ea-eed2-473f-a0b5-fc3683925c67", "sighting_of_ref": "indicator--d14e72ff-1f36-48ba-a702-ce58c206762a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ec61e4b-9f56-438f-aaf5-1b065a3338d9", "sighting_of_ref": "indicator--d14e72ff-1f36-48ba-a702-ce58c206762a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bcdb22a-6bfe-4c71-9ee4-4467ea88d443", "sighting_of_ref": "indicator--12c302cb-ec37-4e20-b354-b848d809eeb1", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af8a1898-953b-4f30-b980-0437b7ea5f75", "sighting_of_ref": "indicator--12c302cb-ec37-4e20-b354-b848d809eeb1", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49f4ccbe-f3c3-415a-a578-8fb21c60b6a3", "sighting_of_ref": "indicator--12c302cb-ec37-4e20-b354-b848d809eeb1", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d932e5c8-1ce6-4dc1-b014-e1d0f68773c3", "sighting_of_ref": "indicator--0560ce2a-3439-48e0-b654-86e1aed0ad26", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7262f60-801b-4b52-9907-d458c87b1026", "sighting_of_ref": "indicator--0560ce2a-3439-48e0-b654-86e1aed0ad26", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dcfa958-10f8-4cc3-a748-6f8dd6a71452", "sighting_of_ref": "indicator--952ea046-e050-4047-a260-34f55b2d2893", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dffa9ca-e35e-4e50-9bf1-e755511ef4b0", "sighting_of_ref": "indicator--f6929212-0bf3-4f3d-837b-518b4492835d", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e129bea-ed97-43e8-9b1c-031fa0b4fc8b", "sighting_of_ref": "indicator--c9a184ca-6ae3-4ddd-8cdf-39a81d9eda7e", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ca3f450-ca6e-4678-88de-5b65e15ba82c", "sighting_of_ref": "indicator--c9a184ca-6ae3-4ddd-8cdf-39a81d9eda7e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb06360d-0d95-4339-9a52-bd4c78df217c", "sighting_of_ref": "indicator--c9a184ca-6ae3-4ddd-8cdf-39a81d9eda7e", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79de0b30-f52b-4123-b311-555224bd9ee2", "sighting_of_ref": "indicator--83210c5e-11df-4d83-ac2b-1492dfb7a1bc", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0849d7ad-ccaa-42e8-9b6f-4c5e0ccaf98a", "sighting_of_ref": "indicator--83210c5e-11df-4d83-ac2b-1492dfb7a1bc", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f32fd66-381c-48d5-8b4e-e127ca8d2bed", "sighting_of_ref": "indicator--83210c5e-11df-4d83-ac2b-1492dfb7a1bc", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fbb3786-d314-4343-88e0-63e0972488ca", "sighting_of_ref": "indicator--d7e973a9-db58-481c-8287-339eb8f35fb6", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e730685-68ef-4414-a6f4-80d5b905dad2", "sighting_of_ref": "indicator--b33d4554-7a46-4c6e-a096-873bdc5924a1", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a716bb9b-6c1d-4f2e-bb56-2cf0291e4482", "sighting_of_ref": "indicator--7a106401-2cb9-43ad-849b-448cae96575a", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f8f612a-3e0c-45d1-a497-92cb36d19e24", "sighting_of_ref": "indicator--f8eb1f8a-7496-4293-bbed-d2dfff7891f1", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36fc23b7-ff08-4eba-8bd3-6e8448ad15bf", "sighting_of_ref": "indicator--0977e491-7ebc-427f-80dc-8fac66e41bc8", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd6879e5-fd73-4f5b-bebc-9a85745bff2c", "sighting_of_ref": "indicator--0977e491-7ebc-427f-80dc-8fac66e41bc8", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b86a86d-feaa-4850-97b2-ee1a2af5df6e", "sighting_of_ref": "indicator--4bb3efcd-bba5-45e4-919e-c535fd3e4422", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0962597-f999-494b-a398-be81e430dd1b", "sighting_of_ref": "indicator--78fb5fa3-dc9b-48e4-98ba-cc4589621501", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed596f2d-f2c2-452d-90ba-50dba39b01cc", "sighting_of_ref": "indicator--5b0b3b4c-522e-45d4-929b-f56ad60528ae", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ceb74008-f077-42cf-8fef-1f65ae1d18b6", "sighting_of_ref": "indicator--29ba6fcc-49b3-4430-8ff6-4e413b59237a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de301505-665c-4bfc-a62d-5712ea7d68ea", "sighting_of_ref": "indicator--2679a4c7-4e92-4e71-8e87-c6ca4a218329", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bf1b80a-ae36-4b93-a719-81a999720cbb", "sighting_of_ref": "indicator--4196d6be-739b-4f76-ba80-70ccb197b8b9", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2994494f-0e55-4a41-ad6c-4e7250afdad3", "sighting_of_ref": "indicator--2e0f2cb7-3f1d-4ef4-aa58-6e2e28db8eaa", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--049aa1ba-dbbb-4aea-928f-fd6690450497", "sighting_of_ref": "indicator--2e0f2cb7-3f1d-4ef4-aa58-6e2e28db8eaa", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--036f8ec5-690c-4387-8320-4a3b4190d0de", "sighting_of_ref": "indicator--421017e8-7111-458e-831c-c48356091d64", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--984c2f88-2f50-429b-becb-659d78f4ce9b", "sighting_of_ref": "indicator--421017e8-7111-458e-831c-c48356091d64", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3043a38-365f-40a3-95b1-6e3050f5543b", "sighting_of_ref": "indicator--e84414c0-5724-4228-b03b-c4e683a69c48", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4302f7cc-87f9-4aa1-bcff-3b38f8348f11", "sighting_of_ref": "indicator--87c75b8a-cd7f-4532-b045-d821bb55099e", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41334556-472a-480f-8760-8f76259398df", "sighting_of_ref": "indicator--fc738cb3-5997-4e00-b087-888594cc6d9b", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed8b92dc-0491-49c6-9dd5-d9534e3ff87e", "sighting_of_ref": "indicator--fc738cb3-5997-4e00-b087-888594cc6d9b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e43b22c4-fe93-40dc-8b66-9ac75056d189", "sighting_of_ref": "indicator--fc738cb3-5997-4e00-b087-888594cc6d9b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47802ec4-13f9-4e7f-ac3d-d1450d1ba245", "sighting_of_ref": "indicator--0410f7d9-ed7f-415f-aaf5-3e87dc8fdbce", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51e3e99d-12a6-41cb-bb2d-331e6d06da67", "sighting_of_ref": "indicator--ded0ee24-50bd-4dce-b630-b4a18518c5b8", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db2695ba-da41-4a0a-9dda-c8ffb8fcdf22", "sighting_of_ref": "indicator--0d7384fe-648d-4fb8-90e0-88920704ec69", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1df199e5-2e03-44e7-8800-d34a7f33f082", "sighting_of_ref": "indicator--de9c6711-76a1-4598-b986-6180827335ee", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8599e1da-acfe-4b4b-ace7-21b1c6c2f4bd", "sighting_of_ref": "indicator--502a05a9-6f44-4993-925c-d30b46c7f649", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--363084f9-04d7-4a90-9b40-e58656baaf3a", "sighting_of_ref": "indicator--ba651d3c-4706-4db9-b621-bacc8363b251", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a31291e-e36c-40f6-beee-5b55fbc48516", "sighting_of_ref": "indicator--245660b2-fe10-4b26-990d-8133fcd0c20c", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--026b2133-ab35-4c9b-9320-132189099b02", "sighting_of_ref": "indicator--245660b2-fe10-4b26-990d-8133fcd0c20c", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--930861e6-4806-46c3-af67-f79854328d58", "sighting_of_ref": "indicator--22af6eb3-192f-4b0d-9cae-53f0be530e90", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4181c92e-3b52-46b4-a92f-0116ba6a741e", "sighting_of_ref": "indicator--aea8d6b3-dfd4-47ab-95a8-395e7a8c5a54", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b45623c6-6630-41a8-86d4-709acff7c00b", "sighting_of_ref": "indicator--0b62274c-e862-4f20-a972-a1997f9d63bd", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb949130-a144-49e8-b85f-e9ad8b804a62", "sighting_of_ref": "indicator--690c9572-ce98-48ee-b3f3-a66d336a4938", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--737b0dee-d814-4d9b-9f3c-d4bbb5b26183", "sighting_of_ref": "indicator--07a35dc3-dd3e-48d8-b3d0-ee99b82dc394", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3848767d-fd66-4b8b-a504-2631dedafc96", "sighting_of_ref": "indicator--bee6dbda-017c-4429-9967-be99b58589bd", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcd76faa-ffe4-4175-bb47-7d591484146c", "sighting_of_ref": "indicator--bee6dbda-017c-4429-9967-be99b58589bd", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36d7cd54-dea7-46f0-9282-2592674ae2b8", "sighting_of_ref": "indicator--b18c8351-519a-4656-9964-591a1fbf7d3d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0a83fb6-303a-4949-9966-6c826b84d64c", "sighting_of_ref": "indicator--e94b44f0-31b0-4cf6-800e-3fb9e7e51da4", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--075f3dda-0e6d-42a7-871f-06f16213e283", "sighting_of_ref": "indicator--283bfe64-79a0-4894-9f04-6fc67f911e0c", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2bc57da-2003-4b66-96e8-5c0731ba0e79", "sighting_of_ref": "indicator--92a81db5-947c-4e55-8ebe-2723145111eb", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0877acef-f676-4bf2-93cd-bf5ba8ccf8b6", "sighting_of_ref": "indicator--46ba5f3b-d331-40fa-b14d-8bb5de593e80", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0f04945-7249-4edd-964a-d64f01a16219", "sighting_of_ref": "indicator--46ba5f3b-d331-40fa-b14d-8bb5de593e80", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7397a32-2691-477c-afcf-2d5707165f70", "sighting_of_ref": "indicator--6c0478aa-77f6-467d-9c53-8187326a1c9d", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e90ff83e-9247-4767-9f63-0f73a927c3da", "sighting_of_ref": "indicator--fa8e813a-7d35-4508-854e-e878016357b1", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c84666c-5e91-4c70-87d9-739e1b48a5dc", "sighting_of_ref": "indicator--2b201b12-24a3-4238-ad9a-87b9e430f5bd", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24d7c93b-67cc-4e2d-a324-c17d484f2979", "sighting_of_ref": "indicator--4a23e05d-5d9b-4acb-a69c-eacacce3166d", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c28dc732-95db-4ace-962a-08b496420ff9", "sighting_of_ref": "indicator--62c43558-c528-45b6-b181-ccc35a55da6b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b09ef93-a1aa-4c1d-aa62-0de23e7f0f8d", "sighting_of_ref": "indicator--dce9af7b-5cec-4894-81e8-9d8683334cfb", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d14f486-4b5c-44a3-892e-2cf0fc68ff78", "sighting_of_ref": "indicator--d65b2a34-124e-4162-96ce-8bc56ac45a0a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39ae34d4-b758-43df-b12e-dc8e1839e60f", "sighting_of_ref": "indicator--1605b628-3e80-4c67-a922-93de3127eb51", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8cbb7ff-3862-4138-bf2c-f884e35215b7", "sighting_of_ref": "indicator--8f9d5514-0df4-4261-83bf-03fb232ef361", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5301f045-7175-49be-bf94-0efc69b2736a", "sighting_of_ref": "indicator--25597d06-76d9-4ccd-8ecb-9a89e7bb0cd0", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--934415a2-1ad9-44ca-861b-8053ea8f1244", "sighting_of_ref": "indicator--79db21ef-24c6-4fcc-ac64-51528ae31697", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--591caf82-99a3-4e9d-8d60-48195de197c6", "sighting_of_ref": "indicator--6d214eb3-83df-4025-ae70-a7795a968dc6", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2a809a5-d105-4d85-9971-2ab3321b401c", "sighting_of_ref": "indicator--4c24d62e-ff54-4fc6-8ce8-aefbc8434b63", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b8903a3-ad26-4940-995c-d392eae72b81", "sighting_of_ref": "indicator--4c24d62e-ff54-4fc6-8ce8-aefbc8434b63", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e4fa4c6-1f7d-4c27-b3c7-50796e0a02df", "sighting_of_ref": "indicator--4c24d62e-ff54-4fc6-8ce8-aefbc8434b63", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--168a3b00-3bfe-47fa-ae45-de095a0f5dd2", "sighting_of_ref": "indicator--d736c63b-0b23-4986-bc6a-91da2529dfaa", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fb72055-4a2b-4e50-870a-6644b0e3956d", "sighting_of_ref": "indicator--e15cb4ba-46a7-466e-bf04-881c7e5d3e7b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--054c489a-5875-423f-a446-b401cac304fc", "sighting_of_ref": "indicator--6ecbe773-a992-476c-8c0f-f28c6480db5c", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33a24012-4ee5-4607-9f1e-33127371b53e", "sighting_of_ref": "indicator--cf24182e-3a38-4322-be9e-0a224425b09d", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04368fc6-a8bc-4c4a-b3cd-cf71c2fa69a8", "sighting_of_ref": "indicator--cca5fdfa-f51d-4687-9dbb-5e096fb931b7", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa99d1e0-ee0b-4794-8142-8580e112b5f6", "sighting_of_ref": "indicator--cca5fdfa-f51d-4687-9dbb-5e096fb931b7", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0992e1f0-2d3d-4dd9-8a49-a2004b819473", "sighting_of_ref": "indicator--969e9142-5c1b-49cc-bc51-ae65b8884768", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--023a58af-ceed-4437-afce-7950574a414f", "sighting_of_ref": "indicator--969e9142-5c1b-49cc-bc51-ae65b8884768", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79e66ec3-0d7d-49c4-aeaf-fbd45d3a94af", "sighting_of_ref": "indicator--969e9142-5c1b-49cc-bc51-ae65b8884768", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--361b6667-9fa1-4673-ba5d-65c473d003d9", "sighting_of_ref": "indicator--a5525ace-72dc-47e7-893c-d08c7b8834c2", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dc3a5a2-f0e6-41cd-877e-fdc12b7e7934", "sighting_of_ref": "indicator--a5525ace-72dc-47e7-893c-d08c7b8834c2", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b9dee8d-4a8a-4260-be2c-1a6fd59d82bc", "sighting_of_ref": "indicator--a5525ace-72dc-47e7-893c-d08c7b8834c2", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e9f188a-9cd1-48c2-9e35-438a0494d4c1", "sighting_of_ref": "indicator--bb716a31-dba6-4b24-89af-00a60452a13d", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcc9b5ac-9903-486c-8eda-a2690bc1821b", "sighting_of_ref": "indicator--7a13a8cf-e569-48d7-9425-5c4d45cad272", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--600e3702-361a-4949-bc9c-2c58d11d6c11", "sighting_of_ref": "indicator--4af970b2-3661-4997-af97-12c66a6cb6cb", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03b04d60-d0dc-4d15-8c3c-13c33c800f50", "sighting_of_ref": "indicator--8497b981-4ae7-433c-b291-2af12d9a505e", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2daf1a9d-888b-4833-9e66-61fca90b9ab1", "sighting_of_ref": "indicator--8497b981-4ae7-433c-b291-2af12d9a505e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85a10ee3-825e-44ca-9b0a-19ec3ae9358e", "sighting_of_ref": "indicator--1134de7b-5900-4038-8006-d41e1f44b8cb", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c62bb50-626c-4831-9663-a1ded0f3839c", "sighting_of_ref": "indicator--0dc73200-4119-4ea4-9823-c537a0d9abf6", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f2c7e41-5367-4ee3-8fc5-8e1a85938657", "sighting_of_ref": "indicator--0dc73200-4119-4ea4-9823-c537a0d9abf6", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0017fec2-adf9-44d2-84d3-26d340542f3a", "sighting_of_ref": "indicator--5686fb4d-dc52-434b-b6b4-89a12ee7a25a", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5ac219c-2dd1-4fb5-8041-a5e1ad061b33", "sighting_of_ref": "indicator--5686fb4d-dc52-434b-b6b4-89a12ee7a25a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e67fc5b-a1f9-4852-8b5d-59a95e44e4fc", "sighting_of_ref": "indicator--5686fb4d-dc52-434b-b6b4-89a12ee7a25a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--676ce17d-9b12-4b17-9ffb-4b9c88db31dc", "sighting_of_ref": "indicator--da8b18d4-7450-4080-b1c3-97817f50bea4", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0051d176-6c08-4381-aec2-5eb16f023eae", "sighting_of_ref": "indicator--c0c6e6ff-b77d-42fd-8f37-af1efb23c833", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd9d6cb1-475c-499a-99ae-13cd9c53c21c", "sighting_of_ref": "indicator--c0c6e6ff-b77d-42fd-8f37-af1efb23c833", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--daf6f3d5-fbb8-42e1-adfa-a4a923ac98cf", "sighting_of_ref": "indicator--189db552-fffc-42b5-92d1-31c9554dfe2e", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eeaa7465-2905-44f5-bb02-a1ca9f223578", "sighting_of_ref": "indicator--189db552-fffc-42b5-92d1-31c9554dfe2e", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75ebca80-25be-449f-a4be-c954127506c8", "sighting_of_ref": "indicator--b00e9a3a-73a1-4bf8-833a-a187831b97ad", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--007fce27-e74e-4672-93d4-71600c321e7e", "sighting_of_ref": "indicator--b00e9a3a-73a1-4bf8-833a-a187831b97ad", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be5f6dea-ef49-4f72-b2dd-e842f637ba5d", "sighting_of_ref": "indicator--b00e9a3a-73a1-4bf8-833a-a187831b97ad", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52255473-3d73-42d3-8361-973281e5d335", "sighting_of_ref": "indicator--7fee5f1f-c8e9-412e-92ae-c5ad411d58fd", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5594b5d-5658-474f-b262-c94499d4bfdd", "sighting_of_ref": "indicator--8e74d4e2-0dc6-4573-973b-1e8bced249bd", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfba527f-c2e9-4786-a37f-9e4dc4dffb05", "sighting_of_ref": "indicator--69dda2d2-af02-4a3b-8f20-bc1e779e2936", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d0c8d16-e97b-4d33-8caa-da025fdb9892", "sighting_of_ref": "indicator--e9f81228-4101-4ef2-bee7-a5110fa801f6", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7b838f6-3944-4c1a-8833-f4ed3fcf5cde", "sighting_of_ref": "indicator--4bad9173-fffc-49ca-a421-867c6aef3e32", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7223994-3dc3-4a6f-b115-2b5a2089fc54", "sighting_of_ref": "indicator--792d8f81-da1b-436a-8c3d-2b6e001f59d9", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2424f993-fc47-4489-b45c-3e1950d42a01", "sighting_of_ref": "indicator--3384993a-3bac-4320-9a4e-b3e6eb8acb5d", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24eb2006-5db6-49e0-b885-8ad120edb1e3", "sighting_of_ref": "indicator--c5bd781f-3ef2-4d29-8d0e-cb23bd767c05", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d461ccc5-68c8-4434-a242-7ebd578618a7", "sighting_of_ref": "indicator--5756e0c9-6d54-426e-aec3-7717c94be94f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbee275f-be3d-4e91-b554-149e085094c1", "sighting_of_ref": "indicator--e34019f2-8ce7-450b-a5ac-9b0429e88884", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67fcd0d0-87e0-41a1-8a37-93728e717850", "sighting_of_ref": "indicator--51e97fd6-2a43-4b70-a6f3-93833cb4d620", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc776446-fa2f-4b1a-b18a-749ea5dd95ff", "sighting_of_ref": "indicator--f40bb5e7-95d3-4211-abce-0ee3269c9a2c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf122ce8-f0dd-4dd0-9314-50c02c90f5ef", "sighting_of_ref": "indicator--299439e4-90fb-4af7-ba71-1ddb2d087181", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--348efd1b-e9f5-40f4-8d94-429260b11a16", "sighting_of_ref": "indicator--b86dc349-093c-4efd-8f16-1e72c592211f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19ecd9f7-fe23-4e58-a0fd-c7154f209eef", "sighting_of_ref": "indicator--17690c90-0ec1-44fc-9f52-9a2a034dabf7", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65527418-1593-44af-b378-8bc03811fc8e", "sighting_of_ref": "indicator--17690c90-0ec1-44fc-9f52-9a2a034dabf7", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1647c5db-009c-4e87-8210-1a155ecf026c", "sighting_of_ref": "indicator--17690c90-0ec1-44fc-9f52-9a2a034dabf7", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49c54e33-31cd-4efa-8087-e8b0597d31d3", "sighting_of_ref": "indicator--438e3bb6-c258-4aef-be22-4df126d3ebda", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08885f2a-0180-4973-9897-ad6f72cb62a6", "sighting_of_ref": "indicator--c803eea8-e364-42ff-bf8e-9090707717da", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59f48573-99fa-47bf-9e97-788ce89b19e7", "sighting_of_ref": "indicator--c803eea8-e364-42ff-bf8e-9090707717da", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cdfc8c5-ddea-4894-b613-87079daf36ed", "sighting_of_ref": "indicator--972fa0e0-cab9-486f-99e5-6f58245d2cda", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29fc5193-3c18-4b57-9bb0-bb9247613e5b", "sighting_of_ref": "indicator--77803758-f884-4e9c-9849-fb8b758830b4", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3af5c27c-76a3-41a6-874f-721bc21b9b7b", "sighting_of_ref": "indicator--77803758-f884-4e9c-9849-fb8b758830b4", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07df0702-8c11-4b74-ba20-9ee91b380386", "sighting_of_ref": "indicator--eed65e81-4fa5-4452-901c-e50649c1e8f9", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d87c3b2-a52d-4112-a4f0-36f1860e647f", "sighting_of_ref": "indicator--64d939d7-17a1-44b5-9336-64675b364b37", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38211952-3479-4936-9ea4-93ae319b0f3b", "sighting_of_ref": "indicator--64d939d7-17a1-44b5-9336-64675b364b37", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4aa52ed0-cacb-4af0-8caf-dd35385ca1ab", "sighting_of_ref": "indicator--b3b02223-36bc-4d14-b127-a91635035718", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6df49ad-c29e-44e8-a36a-f6a41e37588b", "sighting_of_ref": "indicator--9b9709d8-a8b9-48d8-8b6c-c894cb4f84a7", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0f4066d-9360-4d8b-abfe-e3fd18dcdcb8", "sighting_of_ref": "indicator--1cc3ea83-1219-4083-bc0e-9f1fce104e07", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8bddc3d-d980-4f56-9a7f-37178e96b59c", "sighting_of_ref": "indicator--1cc3ea83-1219-4083-bc0e-9f1fce104e07", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1bdf921-0ae0-4e61-a9eb-6267780123d3", "sighting_of_ref": "indicator--1f9d2a7b-f75b-46e9-96e0-5533d6faf401", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bd1f378-cc71-4884-a497-85019e4908fc", "sighting_of_ref": "indicator--1f9d2a7b-f75b-46e9-96e0-5533d6faf401", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c42ad32b-c1e2-4d1a-a79a-0d77aacd54be", "sighting_of_ref": "indicator--1f9d2a7b-f75b-46e9-96e0-5533d6faf401", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea09c010-081b-4e56-9f8a-7f2576648d54", "sighting_of_ref": "indicator--0713663a-40da-4d18-b59d-eccac818b232", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18673589-ce75-46db-a445-d21f2a61955c", "sighting_of_ref": "indicator--e5901df0-0256-4c55-a7e9-6e728a5ba3ca", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a0154a6-abe1-45d8-b536-353ebe5b6655", "sighting_of_ref": "indicator--5a390589-35cc-4a1d-932e-0a7c455ffceb", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8332054-3007-43a3-b93d-d766a4eecb5a", "sighting_of_ref": "indicator--31b1766b-26cd-4c4e-a77c-c52f32d9578d", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2847ccb-1c1d-4d29-96e4-ffc0d8d0e4d5", "sighting_of_ref": "indicator--ef3acfd1-718a-44bf-8f69-b268d39ea1d8", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--963b9cca-dd02-4d2e-971c-ecd917c71c49", "sighting_of_ref": "indicator--c3faa60d-a8c1-444e-9c6a-2d513932de0a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9749154c-c48c-4a5a-bd42-444d1ec58bbd", "sighting_of_ref": "indicator--4a5eaee0-b892-4d57-89bd-3a7d83d13194", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5221d42-38bf-4c4b-af82-131dafc9e228", "sighting_of_ref": "indicator--20866f89-f27d-4677-bdae-f61636222ac9", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1efa5f99-5d47-45a1-92d7-112915b67c82", "sighting_of_ref": "indicator--69ac1a91-20fe-4ec2-a876-3eac15b75907", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26af4f30-e486-42aa-a949-9ec11ef49944", "sighting_of_ref": "indicator--8a589be4-c986-41f8-abb6-e1f4d1b52598", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3183f50-5657-433a-8148-d5a0fbfa9163", "sighting_of_ref": "indicator--adae16ec-6de2-429b-83b5-8ebabcb62a5f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b6e4662-fe4d-4b0e-a473-35c1584a7fd5", "sighting_of_ref": "indicator--187faa3b-6947-48e4-88e2-3ed79d2f7cc6", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d68f993-cb36-4795-94ab-0a0d6b0308e4", "sighting_of_ref": "indicator--b9cea321-3124-4695-98fd-0451de2ebf49", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c79b5d02-bb08-4852-b10a-0d1643a1ff2c", "sighting_of_ref": "indicator--b9cea321-3124-4695-98fd-0451de2ebf49", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2869f891-7a3d-448a-9026-c8716d37b26e", "sighting_of_ref": "indicator--ab4b18b3-4b67-4e56-882e-d9b505d84efb", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a682dc54-52e8-403a-b5c7-1371d0e3f2c9", "sighting_of_ref": "indicator--ab4b18b3-4b67-4e56-882e-d9b505d84efb", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dae4ede-7e5c-4969-8ca4-936560b10767", "sighting_of_ref": "indicator--3caf7c10-a696-4811-8d7b-c23ecc8a47e5", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4a5ffbf-c0b3-4ac6-8380-0f5d260a335d", "sighting_of_ref": "indicator--3caf7c10-a696-4811-8d7b-c23ecc8a47e5", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ecd3d99-d0c1-43c1-bbf8-ab4fb216f3d3", "sighting_of_ref": "indicator--2dad67e3-d235-4707-85b5-2aaac53e66b8", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7da4ee25-4af5-4dc1-88e5-2361418d2d2e", "sighting_of_ref": "indicator--2dad67e3-d235-4707-85b5-2aaac53e66b8", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9729632f-2401-4ae6-ad35-83d3f9331239", "sighting_of_ref": "indicator--2e0c5abf-086a-490e-b959-16b91b5d8601", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e94df496-f229-49df-b9ad-fa05579ce264", "sighting_of_ref": "indicator--2e0c5abf-086a-490e-b959-16b91b5d8601", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dddb008f-c711-4f9a-84f6-8d9e2f3666d7", "sighting_of_ref": "indicator--086f03ca-aaa6-4d20-b4af-3e4bfc393282", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a76d01af-3034-4560-9a6f-e879c808473a", "sighting_of_ref": "indicator--086f03ca-aaa6-4d20-b4af-3e4bfc393282", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--431b8617-acc9-4612-8d0c-b2f1f740b5e7", "sighting_of_ref": "indicator--9b67eb59-43f7-46ab-8cca-d5ce8228709d", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60a6e2c2-d124-4548-a59e-e327169735aa", "sighting_of_ref": "indicator--9b67eb59-43f7-46ab-8cca-d5ce8228709d", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e15d3d7-cfc0-42ca-b1c1-ca863d5e35fa", "sighting_of_ref": "indicator--d2be8d50-0b04-432e-a6e5-f9813c343e7e", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca79e083-5a27-4859-a1d1-9d7e5d78b0df", "sighting_of_ref": "indicator--d2be8d50-0b04-432e-a6e5-f9813c343e7e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a04e593-498d-4dae-a914-a55e6f2c013e", "sighting_of_ref": "indicator--edebd7d1-19f6-4fd2-b1ea-fadce07a4ec6", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3743c48b-5577-4712-8da1-9352ca4f6eba", "sighting_of_ref": "indicator--edebd7d1-19f6-4fd2-b1ea-fadce07a4ec6", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36cc63ae-3c9b-4498-8826-fb70271372b9", "sighting_of_ref": "indicator--0fa24804-4de7-4976-88aa-1280eafad13e", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5c8db3a-12c2-4d31-ac91-c11b602925a5", "sighting_of_ref": "indicator--0fa24804-4de7-4976-88aa-1280eafad13e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2ec9ded-f640-466c-9a20-5dc4e2add8f7", "sighting_of_ref": "indicator--dedce3f9-32de-49d2-9d82-6b176f878e2f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--601a3f86-9028-4a0f-8d5d-cdcbf954ed84", "sighting_of_ref": "indicator--dedce3f9-32de-49d2-9d82-6b176f878e2f", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2864c9c6-3801-40bb-b646-e128cc1b485e", "sighting_of_ref": "indicator--52625be9-80cc-4fa1-9431-d0e236b7df69", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6675b61d-e1d3-485b-b70c-f5c105c4e366", "sighting_of_ref": "indicator--52625be9-80cc-4fa1-9431-d0e236b7df69", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60adc9e0-00df-41dc-a041-98a33d5e619a", "sighting_of_ref": "indicator--85150f38-3885-4b8c-a3d1-7c9646cb05a5", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1f49168-f48e-4770-b8b0-0d109109abc7", "sighting_of_ref": "indicator--85150f38-3885-4b8c-a3d1-7c9646cb05a5", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4ea1d4a-b2f1-40c9-acc2-8cf1166148c9", "sighting_of_ref": "indicator--505aec14-1825-42cb-9bcb-555e967c6282", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--393e7745-b219-4909-97b3-fd26d463e8be", "sighting_of_ref": "indicator--505aec14-1825-42cb-9bcb-555e967c6282", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2be2e5b-6757-49bf-9d98-41c74de5ba64", "sighting_of_ref": "indicator--cac2e826-a757-4d77-bc52-bfe726916f08", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f9ad116-5b4a-4920-8ea1-c5ca486e034e", "sighting_of_ref": "indicator--cac2e826-a757-4d77-bc52-bfe726916f08", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fda6ad36-0dcf-4695-ba14-a21dff7af07a", "sighting_of_ref": "indicator--37cd694a-f0df-4a9d-b783-3183d43ff7f7", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--caa85689-a445-41a2-939e-1c3f028e304d", "sighting_of_ref": "indicator--37cd694a-f0df-4a9d-b783-3183d43ff7f7", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa8591b6-ea05-4d2a-869b-3df434f3f8ab", "sighting_of_ref": "indicator--0e834d95-22de-4477-a12e-824557ff8e35", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be5861a9-4cf2-4ad7-949e-e6c1ed09b433", "sighting_of_ref": "indicator--0e834d95-22de-4477-a12e-824557ff8e35", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d240f969-c0f2-4069-9795-782da7b9edfa", "sighting_of_ref": "indicator--9d763328-8235-4131-a985-3afc56e132cc", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--398b1434-9b0a-4bdf-9232-c9c1db779606", "sighting_of_ref": "indicator--93dfe422-0f26-4b71-82fe-b08421b9463b", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f696b390-812d-49de-a7a4-3e12a57c32f1", "sighting_of_ref": "indicator--93dfe422-0f26-4b71-82fe-b08421b9463b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78a5c9d5-5207-40a3-80aa-d7c2a7d8ab0b", "sighting_of_ref": "indicator--93dfe422-0f26-4b71-82fe-b08421b9463b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--188352ea-8401-49a3-ade1-05212ae8d779", "sighting_of_ref": "indicator--4e5543e0-473d-4144-8c85-602cf3445d30", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a48033a-dea6-403e-800c-dfc140c6cdd4", "sighting_of_ref": "indicator--4e5543e0-473d-4144-8c85-602cf3445d30", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14f20215-6e1d-4456-9f67-560ddf72b19c", "sighting_of_ref": "indicator--17fdbbb7-e555-486a-91f4-ac834ea3b129", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d079b50-20c9-42d7-955a-9b7d5063ae80", "sighting_of_ref": "indicator--17fdbbb7-e555-486a-91f4-ac834ea3b129", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d0aad59-6a69-4837-accd-a9b8aa5e9924", "sighting_of_ref": "indicator--63fc5a55-1257-433c-890c-63891f35d481", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34dbd023-b477-46b2-aaa1-3c75aa8c4679", "sighting_of_ref": "indicator--63fc5a55-1257-433c-890c-63891f35d481", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b81b9308-74cb-4e83-8171-09dbe96358a5", "sighting_of_ref": "indicator--2ea8eb4e-8a84-4669-977a-9dc9c5652a33", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be80bd35-0838-4914-a908-43f5e0960cc4", "sighting_of_ref": "indicator--2ea8eb4e-8a84-4669-977a-9dc9c5652a33", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36a21421-c3d1-4ab3-991a-a70f182277ec", "sighting_of_ref": "indicator--5e5321f6-a6fb-459f-aef8-0f218b58eb2d", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03d2f827-f57f-4292-884e-980f8bbe03df", "sighting_of_ref": "indicator--9a792c74-af85-473f-9f44-07630f92a5e7", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cf91c89-62a0-45e7-a2bd-05d3111d7d41", "sighting_of_ref": "indicator--9a792c74-af85-473f-9f44-07630f92a5e7", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--642fe8f4-e198-49ad-84b1-678a6b472fc5", "sighting_of_ref": "indicator--65b2e2a9-728b-4f01-b1ea-b25390e2421a", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51de0e13-e94d-4bfd-bc49-1c56113541a6", "sighting_of_ref": "indicator--65b2e2a9-728b-4f01-b1ea-b25390e2421a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41315ed2-530c-4cfd-8ccd-6b25d97767f3", "sighting_of_ref": "indicator--85f67930-219c-4ecc-905f-ae09567653bf", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0270fe7-9630-4a44-b98d-c011a0968c3c", "sighting_of_ref": "indicator--85f67930-219c-4ecc-905f-ae09567653bf", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adbfa309-2785-4b1c-95fd-b03d73d39ad6", "sighting_of_ref": "indicator--6c3b0258-6e57-4890-8739-1297501bafd3", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67ec30fa-f713-4f8a-8891-767dfe545020", "sighting_of_ref": "indicator--6c3b0258-6e57-4890-8739-1297501bafd3", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6368385-eb38-4627-b9e0-9a1c0c9df110", "sighting_of_ref": "indicator--d8116aae-ea1d-48a3-b86a-022e44ec482a", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1c5b72c-3601-473f-a50e-70f46d61e148", "sighting_of_ref": "indicator--d8116aae-ea1d-48a3-b86a-022e44ec482a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cf97886-3b15-42b5-bdc7-c7db09159005", "sighting_of_ref": "indicator--39a92321-4d0a-4218-b912-37c314e2f05b", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e166a099-cce1-4df5-966a-a053f254a9ad", "sighting_of_ref": "indicator--39a92321-4d0a-4218-b912-37c314e2f05b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4829efd-6e23-4467-9785-22000fbba8d4", "sighting_of_ref": "indicator--052f496b-bc88-42f1-bf6a-e20bdfc04986", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd0f7390-06ef-4f36-a6c5-8a90cf415ead", "sighting_of_ref": "indicator--052f496b-bc88-42f1-bf6a-e20bdfc04986", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33048c9b-a5f1-4a7d-8562-46e9b54bb70c", "sighting_of_ref": "indicator--1c14f0a4-4667-42d7-b20b-e0005773a76d", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48e44a7d-b29a-4f51-8ed6-9dc29620fe52", "sighting_of_ref": "indicator--1c14f0a4-4667-42d7-b20b-e0005773a76d", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ca4aa6a-4c59-45cd-a920-3b82db6b6f98", "sighting_of_ref": "indicator--1aaab4be-b68a-4a5c-9b51-5cee57b2e531", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b56d29e7-c2a7-4d42-a26c-29b5314503bd", "sighting_of_ref": "indicator--5d4fbfab-4e53-4d71-93fb-e46b86277c6f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94921b09-a456-4619-9bbd-65408933397a", "sighting_of_ref": "indicator--01a2b9fc-4095-4429-9290-5f50998aeadc", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67dbb016-393c-4ccd-8be2-b5c6be97ec7c", "sighting_of_ref": "indicator--01a2b9fc-4095-4429-9290-5f50998aeadc", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb7a640c-b31a-44ff-b1b7-542240407298", "sighting_of_ref": "indicator--cb32ccd4-c607-496c-86d8-bef04a26ec00", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--256fbc08-b3c4-4bdd-a2f1-a86cd696242f", "sighting_of_ref": "indicator--711defb3-4a57-46e6-82d2-c0f993a0fc14", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51fa3160-7dd6-4777-892b-b682041e1a36", "sighting_of_ref": "indicator--2a7448ce-9065-40ed-a7c2-db874b635d08", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2a6673f-e453-40d4-83c3-f2b8f5df3953", "sighting_of_ref": "indicator--b134b550-97e3-4813-9fe2-1d0f41aa45a4", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d60c294-77a4-4581-b94f-e587c2d98763", "sighting_of_ref": "indicator--616b1f4f-90e5-41a8-9e7b-c919b62d5f2b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--331e9506-5bff-4065-b3f7-2ffa24be553c", "sighting_of_ref": "indicator--0b4dd19e-8d29-4e1e-b1e3-a61d2c8bd6a9", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--861bb64d-2c90-405a-ad7e-3778fa99309b", "sighting_of_ref": "indicator--39c26f54-412a-4d46-b84b-d80efe668e29", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3989daf9-f832-4bd6-807d-870690c101ea", "sighting_of_ref": "indicator--7ddceab2-474d-421d-bb3a-390603b3efd9", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8379def4-db50-4eeb-8af6-60ca152204b7", "sighting_of_ref": "indicator--fbbfd727-75b0-48af-bd4a-b04a0389fa19", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bba093b9-4ba2-47a5-a799-c74c184ff227", "sighting_of_ref": "indicator--45e932fb-3e05-425f-8fa4-931a51fe798c", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--683432d7-c286-4c5b-b10f-bad5b642ac1e", "sighting_of_ref": "indicator--34c772b5-ef12-484b-9295-875424607785", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62ca038d-5a26-4b2a-9cb6-04436e11a3d5", "sighting_of_ref": "indicator--34c772b5-ef12-484b-9295-875424607785", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30221e44-c429-489f-9d9b-edbedcbf4baf", "sighting_of_ref": "indicator--0d3dfb68-63d2-4a65-b41f-a6a384df001f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4afd00b7-2ec7-4847-a1db-9f7e87f682ad", "sighting_of_ref": "indicator--6f7636d2-fdba-4a84-b1c5-85d652642015", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ca76fed-0d3b-4f95-964f-61ed75f3a6f5", "sighting_of_ref": "indicator--813d51be-248c-4f8b-85e6-19b913b882d5", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57333d75-f296-4c90-b285-eba9eb018ddf", "sighting_of_ref": "indicator--604fd02c-1999-4b6d-946e-a1c980535c03", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69853a85-2d8c-4589-95d3-fb075d17f0d2", "sighting_of_ref": "indicator--473c3bc7-f7b3-4fc1-92ee-f4ecab4d98a7", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75b924f9-22ea-412a-a642-e344f0fcc21e", "sighting_of_ref": "indicator--f01be780-d9c6-4e59-908f-f262a6b9e1a6", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdc48119-b367-449f-a34d-b67253d1ce2d", "sighting_of_ref": "indicator--c93cdc22-b485-4aa4-bef9-55a33b90000c", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2395115e-12cd-4265-b65b-afa72bdae9d0", "sighting_of_ref": "indicator--0ca6ecc8-98d1-4ea4-a6b2-091d57adabe1", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57df5dbf-b0e0-45e2-834c-6fa752eea0a7", "sighting_of_ref": "indicator--3f5c69b6-850a-417b-8161-66228dd8517f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ee1751f-ad31-42e0-96e2-c07dfd8b622d", "sighting_of_ref": "indicator--e68a8d5c-9436-4e93-be3b-a379712804fb", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50599685-832b-4ad5-a09b-906549a509bc", "sighting_of_ref": "indicator--d9948d77-3290-4114-8d10-e10049a0620b", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4f91af1-85dc-4a9c-8825-db94270cd6eb", "sighting_of_ref": "indicator--d9948d77-3290-4114-8d10-e10049a0620b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42e772a1-9c00-4167-81ad-6220a92551ae", "sighting_of_ref": "indicator--1f8470fd-71af-442d-97eb-7b2619c75ced", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd817907-a873-4504-97fe-0a15c77522ff", "sighting_of_ref": "indicator--790f22f2-2097-4b03-8dbe-561baa21ed0a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f915e092-2725-4804-828c-e58e63b9d76b", "sighting_of_ref": "indicator--dea09a5c-c081-4280-b324-8a32c4538c13", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc5eaefa-c03c-4f59-bf76-4098e0cb9627", "sighting_of_ref": "indicator--a7d80531-efe8-4f56-8061-4f7ba261ac58", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--479ebae1-c1be-4ea1-88d9-828dbd506849", "sighting_of_ref": "indicator--add5b87a-21d3-433c-b88f-a71bf0ee5305", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33fe2cd4-6f18-4c1c-aadf-d6e5277e2143", "sighting_of_ref": "indicator--34bf89ea-5157-41fc-b95f-0a10b2d31747", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be7babeb-691d-43fe-9731-a64eb33163fd", "sighting_of_ref": "indicator--b25f0a29-0c00-41a1-b4c2-0d872d68ec04", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c3ae167-90cf-4b35-b88a-46506dade3e1", "sighting_of_ref": "indicator--69fc1354-7ed2-478b-88d3-6e86c8a32eea", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de100926-ae15-4382-8437-97400e859697", "sighting_of_ref": "indicator--25b9401f-dead-40e3-b2d1-6bcbdcdc3f61", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f748bc3-a1f2-4026-9589-6a82d1721bc5", "sighting_of_ref": "indicator--df7fb63b-3355-4bb3-8d6c-b5ab230be302", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6193293-893a-467f-9209-a6cfbd13b691", "sighting_of_ref": "indicator--611a9e06-75ab-4406-97ed-e158bb0beeac", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d54f7a4-caae-4674-b5ff-72f1bc48e49f", "sighting_of_ref": "indicator--611a9e06-75ab-4406-97ed-e158bb0beeac", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63c63ed7-0a89-4c52-9468-4d0bcce34d3c", "sighting_of_ref": "indicator--014a5c6f-703b-43ad-8e28-5116d4dd334c", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58149c95-6aa2-4321-8029-dafe6396c352", "sighting_of_ref": "indicator--f5586ef4-5e31-4f56-a663-bc17b9c42207", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d62998b-107b-47fb-b885-cdb194694870", "sighting_of_ref": "indicator--57d9ded9-a570-46f4-b5b0-c4c6d3aafc93", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ba2b476-ba59-4d8f-a611-f4f1290ac23a", "sighting_of_ref": "indicator--5ad99f1c-a713-4a2a-94be-98b393743d38", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--299a03c9-199c-4116-a412-8517c8052d9e", "sighting_of_ref": "indicator--c8c14330-b3fe-4d4a-93b5-65c9df76817e", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efa9eff7-b1e3-409a-b984-ec8c28ce20ff", "sighting_of_ref": "indicator--c8c14330-b3fe-4d4a-93b5-65c9df76817e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5eae8111-26bd-4aae-ac75-db49ec139ba5", "sighting_of_ref": "indicator--d6d896ea-236e-4e1f-bd3b-00fa8a4710ec", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c524ca3-34ba-478a-b5c7-d6db03fd4bb3", "sighting_of_ref": "indicator--d6d896ea-236e-4e1f-bd3b-00fa8a4710ec", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d673defb-d364-4b4d-9236-c583bafcbeb9", "sighting_of_ref": "indicator--50a9bf61-4769-4ffb-989f-24051d72457f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8a9068d-921b-4fb9-aa74-abb94fcfe490", "sighting_of_ref": "indicator--50a9bf61-4769-4ffb-989f-24051d72457f", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--faad494b-5c9b-4d96-939f-73ae6dade046", "sighting_of_ref": "indicator--50a9bf61-4769-4ffb-989f-24051d72457f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9053b013-be07-42cc-983a-2e545ab2693f", "sighting_of_ref": "indicator--1b7eae51-22d5-4e51-be71-cbdeb99bbc20", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cef7515e-67c5-4ce6-b635-96f83e0cbca3", "sighting_of_ref": "indicator--686941b6-acbb-461d-9598-4cfcdda620b7", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40310362-5e43-4132-823f-aeecf99f9b4e", "sighting_of_ref": "indicator--e2024976-9ee0-45d9-9b3d-176262d30556", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0d4aa6f-342f-4640-b878-726459de32ff", "sighting_of_ref": "indicator--e2024976-9ee0-45d9-9b3d-176262d30556", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54c3d02e-b05d-4cfa-a887-3f8ecc892939", "sighting_of_ref": "indicator--5a3bcec6-67f9-4e3a-acfa-f5aefdb38d96", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b85db06b-016c-4fc2-adbe-a3c55575bc89", "sighting_of_ref": "indicator--48317e97-0b39-4586-9e1a-e22a1461fef0", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--790d3edf-2c2c-4a5e-995f-7d3f0c98540c", "sighting_of_ref": "indicator--0239709b-f4b3-4771-b0cd-f7888d5c5629", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2ca7006-d3d7-433c-a224-ef2f2903227d", "sighting_of_ref": "indicator--b9eee2ee-7e9d-4394-9d47-195745c5a73a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad30a8d1-d8a4-4ddf-a681-ecc1f88b4bb5", "sighting_of_ref": "indicator--14360b99-7494-47fb-a475-c15e23a99afa", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ceaae133-0d2f-48e3-a22d-eaf0a0b3915d", "sighting_of_ref": "indicator--ab3cea99-a333-4411-8be5-c3db0b364ec2", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0340f14a-2ab3-4cb8-acca-eb38ffe7ec7a", "sighting_of_ref": "indicator--ab3cea99-a333-4411-8be5-c3db0b364ec2", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baa9eff6-300f-4a5f-a18e-2c4fa96495de", "sighting_of_ref": "indicator--ab3cea99-a333-4411-8be5-c3db0b364ec2", "where_sighted_refs": ["location--cc47317e-2c18-43a6-8938-dea748a56ad5"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63464cd3-b5a8-4be7-81dd-f9fc68358770", "sighting_of_ref": "indicator--d297e717-20d1-42da-8dd5-a254dfbeefd1", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b9e2e59-1653-412b-a51e-0f9013424d43", "sighting_of_ref": "indicator--d297e717-20d1-42da-8dd5-a254dfbeefd1", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cecffe97-1377-4ef6-91fc-fcecd7913a79", "sighting_of_ref": "indicator--d297e717-20d1-42da-8dd5-a254dfbeefd1", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--945e099b-f676-49b5-a8db-3ec5a30a5b0d", "sighting_of_ref": "indicator--d9ce3dca-4f15-440a-b9e9-c2a0393dfdb5", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f54ee26-2e20-42b6-bac8-998fca94e837", "sighting_of_ref": "indicator--d9ce3dca-4f15-440a-b9e9-c2a0393dfdb5", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--382c2f31-87d2-4e18-9693-44853b18ad1a", "sighting_of_ref": "indicator--d9ce3dca-4f15-440a-b9e9-c2a0393dfdb5", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b94f1a6-5da7-4ba7-9cde-3c52baf03b8f", "sighting_of_ref": "indicator--46fa7484-45cc-4f35-8289-ee8fd44e443e", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10a16d49-df29-4f12-96e6-a04130b35f5d", "sighting_of_ref": "indicator--46fa7484-45cc-4f35-8289-ee8fd44e443e", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8cb87d2-cdba-47c9-a2a8-6727b58ee9d1", "sighting_of_ref": "indicator--0af6276d-51f2-4f81-bfe7-71ff13f52a21", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--867fa066-ae7d-42fb-b774-cec93c43acb2", "sighting_of_ref": "indicator--9f66f10b-b5b3-4855-b74e-5bacf546e23a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fe3d51d-0076-4024-b0e9-c9df038fbd7f", "sighting_of_ref": "indicator--9f66f10b-b5b3-4855-b74e-5bacf546e23a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8dcac3d-9a60-4b4b-8d01-db1ba22367a3", "sighting_of_ref": "indicator--00b7360a-410d-42f4-ace8-aa7fd667c61a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b763e6fc-a10c-4c43-afd3-85b44f82cdd3", "sighting_of_ref": "indicator--00b7360a-410d-42f4-ace8-aa7fd667c61a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c11c93d3-0923-44ac-924f-0d9fc16b01d3", "sighting_of_ref": "indicator--455c346d-7697-4f81-ba2e-9e121cb3d29d", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17e07b5d-7d05-4781-895c-9bb7a605f42a", "sighting_of_ref": "indicator--455c346d-7697-4f81-ba2e-9e121cb3d29d", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dbe08be-4d16-4d94-a525-08c09342349e", "sighting_of_ref": "indicator--50fa60bf-c0a6-4d15-ad4a-c1995ee73b26", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26aee0e7-3a3a-4aa6-a588-ce83f44fb20e", "sighting_of_ref": "indicator--3ff1a7bd-b26e-4a61-a0fa-86ad0a6fb3e1", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--caba9b40-2fc8-4d99-943c-d77686064353", "sighting_of_ref": "indicator--db8611a3-311a-407d-adea-f9759dd08c02", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67483021-1179-49e8-97b6-3eac16af0754", "sighting_of_ref": "indicator--99a4e454-73ab-41e5-8c4b-1da34253474a", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f34c352a-9732-4222-a7ae-2d9af1e8c8de", "sighting_of_ref": "indicator--99a4e454-73ab-41e5-8c4b-1da34253474a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56b68c8e-1459-4af2-a690-97a4f22b1914", "sighting_of_ref": "indicator--623a3a79-2696-4d23-89ca-7126a600ddcd", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0df6c7b7-ec11-4502-82b7-0beafe4581f0", "sighting_of_ref": "indicator--d3fa7a72-76bb-4f0a-9970-eca154fa191b", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--880adffc-fa5c-47aa-a468-810d3469b790", "sighting_of_ref": "indicator--d3fa7a72-76bb-4f0a-9970-eca154fa191b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43537d26-4aa4-4557-81aa-e7b04d9c51f8", "sighting_of_ref": "indicator--d3fa7a72-76bb-4f0a-9970-eca154fa191b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90cfe8d3-b55a-435f-9f4a-6c6dcbd7b69a", "sighting_of_ref": "indicator--d3fa7a72-76bb-4f0a-9970-eca154fa191b", "where_sighted_refs": ["location--cc47317e-2c18-43a6-8938-dea748a56ad5"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fb13e40-b6ce-46e5-ab9e-78e9c85aff93", "sighting_of_ref": "indicator--e5e30539-8ffc-4a70-9e2a-ac8d2a9732f7", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f85c544f-11b8-4ecd-a60e-79f10bdfc53a", "sighting_of_ref": "indicator--e5e30539-8ffc-4a70-9e2a-ac8d2a9732f7", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a1f2652-22fb-496e-bceb-0b225b1dfd6a", "sighting_of_ref": "indicator--e5e30539-8ffc-4a70-9e2a-ac8d2a9732f7", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b79c334-13d2-4827-86d0-d4c0b9253aaf", "sighting_of_ref": "indicator--03027e8d-3bc6-406c-8b31-bce28a55c2c3", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e5f3e34-33fd-401d-85a8-a13fa95c66ef", "sighting_of_ref": "indicator--03027e8d-3bc6-406c-8b31-bce28a55c2c3", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88726268-ed49-4341-9b14-5df43266af6e", "sighting_of_ref": "indicator--e0d4f9c3-b2a2-4e37-9bd7-2578506ee0c0", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd7ac102-3cae-42a8-a7bd-ffe7a554bd1c", "sighting_of_ref": "indicator--6f078549-aead-4f76-bf6d-95c745599eef", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68b21261-0591-464b-87fc-059bc60728a1", "sighting_of_ref": "indicator--6f078549-aead-4f76-bf6d-95c745599eef", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--739a21e1-7a18-4a13-9f11-42884824dea7", "sighting_of_ref": "indicator--4e1b8105-32f0-4d96-a098-762aa85093fc", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--942d9490-16f1-4f28-b7d4-972bad0df868", "sighting_of_ref": "indicator--4e1b8105-32f0-4d96-a098-762aa85093fc", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44d21969-11fd-4465-a3b0-892b5cab7caf", "sighting_of_ref": "indicator--d9bcea94-5cd7-496c-b9b3-3b82af5e1ce7", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f61e2df9-38aa-4959-9910-b97c4976c0bb", "sighting_of_ref": "indicator--d9bcea94-5cd7-496c-b9b3-3b82af5e1ce7", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cfc5d55-9f9e-4cb7-afa8-99dff24fbf26", "sighting_of_ref": "indicator--d9bcea94-5cd7-496c-b9b3-3b82af5e1ce7", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0bc1b79-54fe-47a0-9ee3-8f30d7caa5b5", "sighting_of_ref": "indicator--fc03201f-46c5-46e0-8183-cf99d7af4d89", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecc015b6-23a6-4f00-8d11-0de4ea050e16", "sighting_of_ref": "indicator--fc03201f-46c5-46e0-8183-cf99d7af4d89", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d1e6a99-2e4f-4fb5-99a2-d90e44bb9f9f", "sighting_of_ref": "indicator--fc03201f-46c5-46e0-8183-cf99d7af4d89", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c76091b-e11b-4e53-8e5a-a05853288903", "sighting_of_ref": "indicator--83d755ec-b09a-4dd9-8a40-99cba81a590c", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff354a3c-ad0e-4a25-9c0a-b6a7ecd6dc31", "sighting_of_ref": "indicator--83d755ec-b09a-4dd9-8a40-99cba81a590c", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e09dd231-c336-45f8-a8c0-96d08734d89f", "sighting_of_ref": "indicator--83d755ec-b09a-4dd9-8a40-99cba81a590c", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2259a86e-316e-4d99-8d97-e2a95845c179", "sighting_of_ref": "indicator--9b043dad-5acb-4f55-8074-5a6cbae9673a", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--508e6675-9134-4c5c-900b-636fb87419be", "sighting_of_ref": "indicator--9b043dad-5acb-4f55-8074-5a6cbae9673a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6e4c59a-6621-43b9-845b-3d30def9614d", "sighting_of_ref": "indicator--99dd5a7e-0fa7-4fec-ae6e-9d236c3ef84c", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e98e19e-8bca-4fef-818d-6a7428ec457e", "sighting_of_ref": "indicator--ae74ae0b-ce6e-47df-85e9-80383b84ef5b", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99c1781b-cd00-44a1-af6c-9d2023e12f7a", "sighting_of_ref": "indicator--8c0427a3-7fa9-40e5-bce8-85b5713d9500", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adb56e8d-3d9d-4769-b20c-6fa3770b96f6", "sighting_of_ref": "indicator--ca5edb2d-abfb-4670-8dfd-5a14c2098e68", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84664b6b-d6b7-4d2a-a861-17caa98f18ac", "sighting_of_ref": "indicator--772e06e0-423f-4c16-a2ad-19b2c98767a2", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53154359-fdcf-476b-8843-13b8ad68dd4f", "sighting_of_ref": "indicator--73d529ba-cb81-4b0a-9f71-b0feefa179d1", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e14e84e5-8fa5-4521-a561-ff9288cbc1e1", "sighting_of_ref": "indicator--85ae83b7-0cb3-4d25-80a8-082809be2b13", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f763d030-308d-47b1-bbb2-0f2e648a5109", "sighting_of_ref": "indicator--85ae83b7-0cb3-4d25-80a8-082809be2b13", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36046615-5d50-46ae-96c4-3707998de7bf", "sighting_of_ref": "indicator--85ae83b7-0cb3-4d25-80a8-082809be2b13", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a65be9ac-316c-485b-a543-fd06188df2fc", "sighting_of_ref": "indicator--46e92e2b-8ea4-4347-aeff-b7f0f6e76f36", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3fdbea0-104a-4807-9eb5-f574b9bea857", "sighting_of_ref": "indicator--46e92e2b-8ea4-4347-aeff-b7f0f6e76f36", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--103e3559-e56b-4265-8826-d4c2c6c7dac0", "sighting_of_ref": "indicator--46e92e2b-8ea4-4347-aeff-b7f0f6e76f36", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15c72f17-463f-4a8d-819b-858bbf982dc9", "sighting_of_ref": "indicator--b9fcc137-2f1b-4557-882c-7222294ff5ed", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e7a67d1-7f8f-43a5-bbf9-365a63ef13de", "sighting_of_ref": "indicator--b9fcc137-2f1b-4557-882c-7222294ff5ed", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bef96570-3945-4b4d-b7c0-7cbcfed51afe", "sighting_of_ref": "indicator--b9fcc137-2f1b-4557-882c-7222294ff5ed", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7866c61a-1196-4220-9bc9-334b398f6639", "sighting_of_ref": "indicator--466f6c50-a04a-4167-afb2-eb7e580d61c1", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eebdd360-1f64-43e7-9b76-206ea8a7322e", "sighting_of_ref": "indicator--7a501658-84b1-48de-a08c-8b3a822bb8de", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1647a811-5cf4-4238-8289-f351d12c210d", "sighting_of_ref": "indicator--2038023d-8de1-4e9b-830d-f20cc460cbfc", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e523240-3e40-4a05-afc4-16f194ea9314", "sighting_of_ref": "indicator--edbc9ffa-5602-408d-9298-854135809496", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adae33f4-a809-400a-b845-c6fe94874940", "sighting_of_ref": "indicator--1f964c9f-57e0-49dc-bf7c-bf70efe69203", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cd2a276-69bb-4776-9b85-68c667910d0a", "sighting_of_ref": "indicator--1479c62f-a37f-483c-8359-df45bdf00162", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fa44dd8-f55b-4621-b974-94d9f58f582d", "sighting_of_ref": "indicator--5ef53699-938a-41cf-8aaa-28c8f681cca6", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd9e2ee6-69c1-4546-bdef-1d5230a32ccd", "sighting_of_ref": "indicator--190a7cb6-136f-4c97-b2c8-135287164f11", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2047c01e-1676-4f88-842e-712e3070cc0c", "sighting_of_ref": "indicator--e9c6dfb6-ce46-47f1-9be9-5ea4e784dacc", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa367ba1-a934-437f-b91f-c2d28e37da8c", "sighting_of_ref": "indicator--d4291c37-704f-42b4-9700-930cce6ec585", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6f2fd29-7a7c-46a5-88e7-2019227097ef", "sighting_of_ref": "indicator--e9a4ffb2-f0d1-4a03-887e-497f84a40366", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b94b1c4a-358a-47d9-9e31-a6ce712d58a5", "sighting_of_ref": "indicator--642c67d2-b48a-46df-bb3c-363fa61d5763", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cbc1142-3d31-470f-bc7e-72808805114c", "sighting_of_ref": "indicator--aa7c2ffd-9b39-431c-bebc-505a043b4546", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89dd6e56-c60d-47d8-93d5-dbb8cdd4ff49", "sighting_of_ref": "indicator--3089dd6d-9fb0-4bea-8db2-90017828c933", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdcfe2e5-a54a-49e5-8b3b-c57f6b09df6f", "sighting_of_ref": "indicator--e75b86cb-55b1-4b0d-b09d-7e039edc5a74", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c36c6b24-f3b5-4c3e-b1d2-bad96c36d22b", "sighting_of_ref": "indicator--7635bb75-a9ae-418e-9eec-0c3444154a15", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72033b21-c788-4a27-b619-349f98ff3244", "sighting_of_ref": "indicator--d963cf8e-76d7-49f6-ba0f-d407427e65f3", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43fdf9ce-3280-4961-b7d5-3598e1e34850", "sighting_of_ref": "indicator--d963cf8e-76d7-49f6-ba0f-d407427e65f3", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0932c1b6-34e0-4a6a-95b1-6f28943c9722", "sighting_of_ref": "indicator--9c8149c3-3eec-407b-bd2f-2bf7017ced98", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0883ddac-a3cc-4e04-a6d9-06f31c2170a4", "sighting_of_ref": "indicator--dd32cf4b-f439-4cd7-bc60-2e23223007c8", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b975001b-f009-4008-80fc-d9580550c487", "sighting_of_ref": "indicator--a00416fd-3db0-4e5c-9459-8a4c2ecd1c12", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02e989b4-6e64-495a-b1bb-6e0e41be097c", "sighting_of_ref": "indicator--a00416fd-3db0-4e5c-9459-8a4c2ecd1c12", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--935e1844-b461-45b7-9f62-7786d143632c", "sighting_of_ref": "indicator--a00416fd-3db0-4e5c-9459-8a4c2ecd1c12", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ce31410-42a2-4316-a698-100f8308ad27", "sighting_of_ref": "indicator--4e87b969-9332-4d14-a178-f134b8ec0869", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32fb5957-c3ee-4205-b632-b5c341b04fee", "sighting_of_ref": "indicator--abc13635-d580-49ff-ada0-795cdab03467", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92077efb-d12f-48e7-be55-f31ed3fc5730", "sighting_of_ref": "indicator--edbb2370-e9ed-448e-b7d8-ecfeafde52ed", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e6077a7-ddcd-46a1-8658-53295704bab2", "sighting_of_ref": "indicator--edbb2370-e9ed-448e-b7d8-ecfeafde52ed", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e1ff3ad-dc6b-462f-b54a-f77b1635297f", "sighting_of_ref": "indicator--49407007-83da-426c-bc64-5784497b846c", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85d07c59-b16f-4720-91f2-1b50551a2f20", "sighting_of_ref": "indicator--cdea645b-1c47-4004-98dd-d6c6f92b4c8e", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63de6b5a-91a4-46ee-ba07-b47c5f71a5de", "sighting_of_ref": "indicator--cdea645b-1c47-4004-98dd-d6c6f92b4c8e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--673b2719-11de-40a9-886e-6fd41e9a9722", "sighting_of_ref": "indicator--cdea645b-1c47-4004-98dd-d6c6f92b4c8e", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98f37128-dbb1-49e5-8310-9452fc0c9240", "sighting_of_ref": "indicator--3251e084-9405-44c0-bf70-565b8c30bfc3", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae756e61-8dd7-492d-9373-348b7d84c012", "sighting_of_ref": "indicator--3251e084-9405-44c0-bf70-565b8c30bfc3", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51a7904b-b91f-4936-848b-fcc0ce9c64f9", "sighting_of_ref": "indicator--3251e084-9405-44c0-bf70-565b8c30bfc3", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e92a242f-9890-494c-b8ce-92b6f9ead94f", "sighting_of_ref": "indicator--8de9cdc0-cffd-401c-8dd2-4655968ca268", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ae25e01-9e5c-4820-939c-7cf90d01dbc3", "sighting_of_ref": "indicator--164af2d1-0fb1-4d0d-a9df-de54ddee7eaf", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a2c11b7-d291-4263-80fc-ee22f105322d", "sighting_of_ref": "indicator--7acb8378-5fe3-4752-baec-1eb792d15d75", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91327305-c4fb-41b3-8727-89b2c1c0dc55", "sighting_of_ref": "indicator--869b47eb-28fa-4ab8-8087-7f18271542e0", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6093a828-76ed-4631-9f21-f4d349286b92", "sighting_of_ref": "indicator--869b47eb-28fa-4ab8-8087-7f18271542e0", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26b0abb5-8915-4b01-af48-34b47c44223c", "sighting_of_ref": "indicator--869b47eb-28fa-4ab8-8087-7f18271542e0", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e71c0fe1-cb1b-46ba-8c76-be07d152258b", "sighting_of_ref": "indicator--a8264f28-48f2-4c94-b190-27b6255ed2b7", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a757b72d-7a50-448a-8ebd-c79871eea3ba", "sighting_of_ref": "indicator--17e11063-159b-4cf8-9dbc-20879ea6c58c", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6f85e3a-795e-4488-ab97-f92253489411", "sighting_of_ref": "indicator--b985b5bb-5e17-4196-afd7-80eb75786d46", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40ab6bdc-7c42-4b8e-9907-9c4457c3728d", "sighting_of_ref": "indicator--4d30f8ce-5e05-4166-9a31-63e3320b0a4d", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48e4c1ef-f2c2-4b77-99af-adb2f0cf6519", "sighting_of_ref": "indicator--4d30f8ce-5e05-4166-9a31-63e3320b0a4d", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56660170-099d-4e3c-b3a3-eacc856ebb71", "sighting_of_ref": "indicator--bcdb8c85-aee0-4a81-9137-0a77a02e457c", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d02abd3-e2db-4c43-b89e-de605ea6b1f3", "sighting_of_ref": "indicator--bcdb8c85-aee0-4a81-9137-0a77a02e457c", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95f8e895-9afe-4aea-944a-0e26bfde1c6c", "sighting_of_ref": "indicator--97f8e0cb-59d7-40e9-964d-447b0d0ada99", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b0b3c48-084c-4b41-a66b-298dc9b76a9e", "sighting_of_ref": "indicator--97f8e0cb-59d7-40e9-964d-447b0d0ada99", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03625fc0-734e-4551-8461-0168ce845a9a", "sighting_of_ref": "indicator--1c4451e7-14ec-4425-b9c1-250a0e8db6ad", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff4540a7-2022-414a-805d-e75f56dc360f", "sighting_of_ref": "indicator--1c4451e7-14ec-4425-b9c1-250a0e8db6ad", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cad2a55f-affc-446c-a659-e693871fc8e1", "sighting_of_ref": "indicator--a154a057-a134-44a0-8b81-2f5a244443a1", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--532a9f6a-16a8-4b34-bfa9-003f9f350866", "sighting_of_ref": "indicator--f494aae5-1a45-456d-b3ad-44b4e8eab9b8", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cca6f18-837d-49c1-a8cd-cc57f0ce451b", "sighting_of_ref": "indicator--4e9feb3f-32f9-498a-a22b-fa608e742f46", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0ff386d-f171-4736-88b0-bd9b0f060431", "sighting_of_ref": "indicator--4e9feb3f-32f9-498a-a22b-fa608e742f46", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a27a19a-418a-4d0d-bcc0-c2f7628a5fe9", "sighting_of_ref": "indicator--f88b3d97-95a5-456d-847d-9de011210154", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35eeada9-4f94-4f30-b3eb-2aa866d0b10c", "sighting_of_ref": "indicator--f88b3d97-95a5-456d-847d-9de011210154", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--032b5cd0-7ba0-4f66-add0-981a6288270b", "sighting_of_ref": "indicator--8a142d2b-dd47-4e83-bf4d-e1ef15e8a3d2", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f0320db-9dbe-452a-b1a2-4f4da963afb3", "sighting_of_ref": "indicator--8a142d2b-dd47-4e83-bf4d-e1ef15e8a3d2", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5f80f1c-1837-48b3-8ed9-dea8248d9a12", "sighting_of_ref": "indicator--e58ea59a-c9ff-4f09-946c-46ddb376c7ea", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e1f6a68-5f3a-49b1-a1f3-eaf526316603", "sighting_of_ref": "indicator--e58ea59a-c9ff-4f09-946c-46ddb376c7ea", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--829012bd-dbd4-4539-96ed-ef5fe974be73", "sighting_of_ref": "indicator--d83b93f4-d63d-4a21-901b-af308ae0749b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7125b3f5-a9ec-4dbd-8da3-13f2fefddde4", "sighting_of_ref": "indicator--d83b93f4-d63d-4a21-901b-af308ae0749b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47fc9742-5140-493f-9124-195c3deb7161", "sighting_of_ref": "indicator--5d061d22-c3ed-4d86-8fc8-9b2c0b4ce68d", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--476ab179-6fc0-4fec-a53d-8fbf37fb4650", "sighting_of_ref": "indicator--5d061d22-c3ed-4d86-8fc8-9b2c0b4ce68d", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61b3d00c-b9ff-4803-87f2-977c25d1d1ea", "sighting_of_ref": "indicator--8b1d0762-256f-4d03-8fc8-d17be63d4c8e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f304c3b-26b8-44b4-aaac-64d1bd8e77f0", "sighting_of_ref": "indicator--8b1d0762-256f-4d03-8fc8-d17be63d4c8e", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39b00b4e-a11e-42a3-91ac-063ffe6a2761", "sighting_of_ref": "indicator--f3aeff90-1109-4411-a973-b0af643e087f", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57254ccc-4a02-468a-b69f-682c7d52e143", "sighting_of_ref": "indicator--f3aeff90-1109-4411-a973-b0af643e087f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42542b73-dfbb-4cbf-a191-3f70b16782a1", "sighting_of_ref": "indicator--76611325-32ea-4bdc-8ab4-2fe555990e1e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4678d42a-f932-4a00-ae11-f308c8a74303", "sighting_of_ref": "indicator--c6790d46-efc4-4249-9c51-04a833e1fecf", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d14aebb-97bc-411f-89f9-abf3e3a1cc97", "sighting_of_ref": "indicator--9712dfa3-9cf7-494a-84bd-9f47cdcb91f6", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f142e3e8-9e65-42de-a0d5-3cf1a6067266", "sighting_of_ref": "indicator--9712dfa3-9cf7-494a-84bd-9f47cdcb91f6", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2104a447-0490-4de4-93e7-05c0da5b32da", "sighting_of_ref": "indicator--2c84f2b9-15ea-4c11-9855-1627881a5310", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0aba4fa-8177-432c-84fd-5328f6ecc95e", "sighting_of_ref": "indicator--2c84f2b9-15ea-4c11-9855-1627881a5310", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--678afa45-8ac3-4146-8a3e-dd8b0ac8fd5c", "sighting_of_ref": "indicator--24426209-b7f8-4c81-8660-aaddbc9c2082", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9489545a-44ef-4363-b981-0c2ffd1a1ce3", "sighting_of_ref": "indicator--24426209-b7f8-4c81-8660-aaddbc9c2082", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--568c286e-111c-4127-83cf-7d2503360d2a", "sighting_of_ref": "indicator--2dcdc1ed-b780-4b14-aa62-7956b8959228", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5ccf4ad-3697-48d6-af41-ba9ba2c59b3c", "sighting_of_ref": "indicator--2dcdc1ed-b780-4b14-aa62-7956b8959228", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85362c71-42e0-4839-8821-046c482a08d7", "sighting_of_ref": "indicator--677ffa43-bc1c-4b49-b1b0-4c91b9315506", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64e81c59-e02f-4046-a7d8-f4b3366ae32f", "sighting_of_ref": "indicator--677ffa43-bc1c-4b49-b1b0-4c91b9315506", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9106526-7e1f-4c3b-aef4-baedd4d51108", "sighting_of_ref": "indicator--f67e25fa-a76a-4854-aef4-ed63749baf18", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9b18b4d-2ff2-4cd6-a583-76ce0b2cf9ff", "sighting_of_ref": "indicator--f67e25fa-a76a-4854-aef4-ed63749baf18", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a897e73-5dc0-4bf9-8f84-f3f828e16409", "sighting_of_ref": "indicator--4274857f-f0ae-45b6-a172-089b971d6d70", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63b42188-4e8e-4160-b5ff-4692476de3b9", "sighting_of_ref": "indicator--4274857f-f0ae-45b6-a172-089b971d6d70", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73de6744-ab50-4538-a733-81e1b1f3cbfe", "sighting_of_ref": "indicator--0b5a640e-cb06-4f22-b1f3-e48c4aa0591e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba9ae1a7-a995-4a16-975f-12bd1634176c", "sighting_of_ref": "indicator--0b5a640e-cb06-4f22-b1f3-e48c4aa0591e", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7eb54b9-dc52-45a5-93e6-1bf80b7dd73e", "sighting_of_ref": "indicator--5f21784c-0ad8-41c8-871d-ac5eaacc1820", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3b2b8d4-cdb9-4e5f-806e-f03602286912", "sighting_of_ref": "indicator--5f21784c-0ad8-41c8-871d-ac5eaacc1820", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb79dbe7-ee72-45c5-8eec-eb13ff6fbf68", "sighting_of_ref": "indicator--7b218931-143f-4eb8-acc2-d6b711551592", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b729a4b4-32ee-4c01-b14f-800b21f4dc13", "sighting_of_ref": "indicator--7b218931-143f-4eb8-acc2-d6b711551592", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87334861-9018-42b2-a3d2-da8b39a45393", "sighting_of_ref": "indicator--391d95ad-dcb1-4d57-ab74-e1ca9d9786d4", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--428cb944-75a6-4c99-b941-d0615355b197", "sighting_of_ref": "indicator--391d95ad-dcb1-4d57-ab74-e1ca9d9786d4", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b8f0941-32dd-43b0-89b1-2e323b7c5a32", "sighting_of_ref": "indicator--03b23204-09f9-409e-93d5-87d676432335", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--196b4db2-57dc-4fe6-a9f1-7b19ea1e69d9", "sighting_of_ref": "indicator--03b23204-09f9-409e-93d5-87d676432335", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ba19301-983f-4d98-af72-1b54e4ae2968", "sighting_of_ref": "indicator--34437fe0-1d07-4489-b182-f0000c02d120", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdb4de7c-b7ed-4219-a03c-7e9c8ca3a053", "sighting_of_ref": "indicator--34437fe0-1d07-4489-b182-f0000c02d120", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed1c1567-0bec-4c29-a9b4-d7606b3a1a47", "sighting_of_ref": "indicator--6af7c7b7-96d4-43a9-9390-299caca93329", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1308c388-1189-4fc1-9226-a484b6c3bca4", "sighting_of_ref": "indicator--6af7c7b7-96d4-43a9-9390-299caca93329", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0bb5faf-fde4-4648-980d-020ee8e6cbc5", "sighting_of_ref": "indicator--eb21a33e-3268-4ecf-b498-f21b32b6d78d", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69bb4b0b-70a1-49b3-859c-8d376e5a2716", "sighting_of_ref": "indicator--2f7a0f39-8146-4fe4-9c65-dc6905cdf355", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11492b28-cb74-4503-b0bc-f8d44ac3083c", "sighting_of_ref": "indicator--2f7a0f39-8146-4fe4-9c65-dc6905cdf355", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3c8b1e3-0b29-4d33-acdb-0f339a597a77", "sighting_of_ref": "indicator--718b5053-2692-4b25-bd3c-10439724e49b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--913eda75-616c-4cf1-82ae-2c930de69368", "sighting_of_ref": "indicator--718b5053-2692-4b25-bd3c-10439724e49b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5de57d3f-84f1-424b-b5ee-a7e4d7355faa", "sighting_of_ref": "indicator--a08fa628-8236-4ac7-b92e-9d4c36812e65", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec9410d0-4218-432d-9ef6-142e3c172027", "sighting_of_ref": "indicator--a08fa628-8236-4ac7-b92e-9d4c36812e65", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bea40329-359b-4ded-88aa-b22f89442029", "sighting_of_ref": "indicator--59f188e7-25a6-4877-ae76-69b176952f93", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd19202a-0b8b-4ba6-b8c5-d22b9ffd81c3", "sighting_of_ref": "indicator--59f188e7-25a6-4877-ae76-69b176952f93", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cf089fb-705a-41a1-b835-eb23027a3cb2", "sighting_of_ref": "indicator--99867ac2-3057-4e81-beb0-7a7d8eaa765e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd0a308b-ab02-4775-8ec7-8e6f9263b1ed", "sighting_of_ref": "indicator--99867ac2-3057-4e81-beb0-7a7d8eaa765e", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2352d8aa-556c-41cb-a089-41c044b54541", "sighting_of_ref": "indicator--0192e06b-922f-4223-83ae-06b69043c9d0", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e21c529-d711-4e4b-942b-6e1c4553764d", "sighting_of_ref": "indicator--0192e06b-922f-4223-83ae-06b69043c9d0", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--552c7863-1d2e-4c24-8bc3-2ee46850e4c5", "sighting_of_ref": "indicator--9e2cb2f4-6857-4cb7-8ed7-76ef26ae31e9", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f527d90b-a6c6-46c2-8bf0-eb217f4007c5", "sighting_of_ref": "indicator--9e2cb2f4-6857-4cb7-8ed7-76ef26ae31e9", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5496d7a2-557c-408e-b6bb-e31e2fd1877d", "sighting_of_ref": "indicator--9da6b802-b15f-462a-bb53-f3e5acef253f", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15e19519-325e-4383-9070-400a29884cd1", "sighting_of_ref": "indicator--9da6b802-b15f-462a-bb53-f3e5acef253f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9599addb-0d0a-4f77-8aa9-4d1778086297", "sighting_of_ref": "indicator--3b3af449-99a2-4c3e-942c-93d968390316", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad9917af-a7c7-49ef-8651-48f8125d8e4c", "sighting_of_ref": "indicator--3b3af449-99a2-4c3e-942c-93d968390316", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9e7596a-6762-468f-ba73-75f73a1d78fb", "sighting_of_ref": "indicator--a423b228-872d-4185-96f2-eb6b9b563378", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--522b95d3-8e7d-4feb-84bb-c6ecef8faef0", "sighting_of_ref": "indicator--a423b228-872d-4185-96f2-eb6b9b563378", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d84bf066-7ca1-4152-b7ed-95fd73a07eef", "sighting_of_ref": "indicator--6c013951-4ab3-4d29-9d4f-33eaa8611684", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04051504-e97a-4015-80c2-dd1a79612cb5", "sighting_of_ref": "indicator--6c013951-4ab3-4d29-9d4f-33eaa8611684", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25f97ec2-bf3a-4d29-bdb3-06b033bd7252", "sighting_of_ref": "indicator--84734d78-a872-4e24-a338-70d1bf04204a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ada7313d-b8b7-42d6-9db6-c3e8a98705ca", "sighting_of_ref": "indicator--84734d78-a872-4e24-a338-70d1bf04204a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76c2c66f-b0eb-47f8-8c25-16faeb8d09d8", "sighting_of_ref": "indicator--fd4c05ea-1b9c-42b1-99d2-826157830f0d", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2a7967f-5971-44bc-b64d-8da48a8ea853", "sighting_of_ref": "indicator--fd4c05ea-1b9c-42b1-99d2-826157830f0d", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a228830b-dc97-42de-9d97-5d2261bae33d", "sighting_of_ref": "indicator--7de3272a-c525-41af-813b-d92f2a28fb6d", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--224d3764-dd73-4aab-9c33-bffa914b104c", "sighting_of_ref": "indicator--5fd5bd11-98e5-4c5b-9c68-f9161cf1cad5", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74c9f0d5-c8a1-4a8b-882c-71dc00dff4f0", "sighting_of_ref": "indicator--4c52d6e2-b1bf-4d9d-9214-ca6db422d7b6", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fd4afa1-8133-47fe-9ad1-f29e5360a155", "sighting_of_ref": "indicator--4c52d6e2-b1bf-4d9d-9214-ca6db422d7b6", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e03c99a1-0366-4b3c-9d5d-d7513d7524d6", "sighting_of_ref": "indicator--38f8a341-4e30-4a3c-a2a1-914d3846716e", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--088266a3-c471-4233-80f1-3d8a81f67f62", "sighting_of_ref": "indicator--133e1498-a23e-4b75-a8b4-169230fbe37f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbc70056-2b98-472f-90bc-03dcbaf65c66", "sighting_of_ref": "indicator--57941f8d-0a9c-4b7f-b2df-2d58bce8b517", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8726f05-65c0-4448-92d5-17c18dfea3ab", "sighting_of_ref": "indicator--57941f8d-0a9c-4b7f-b2df-2d58bce8b517", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6df4693b-3744-43d4-9d90-a7dc1076460d", "sighting_of_ref": "indicator--6147d9b2-4ff4-43d2-a8e5-a9b73a6997e7", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f026b0c8-8d64-4f7c-80f1-9862bc42c2b0", "sighting_of_ref": "indicator--6147d9b2-4ff4-43d2-a8e5-a9b73a6997e7", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b90b090-6b7c-46ec-bcb4-7f83c3ad675e", "sighting_of_ref": "indicator--4a55873f-acb2-48dd-94ed-9858c11d663a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19b1f4cb-2a04-4b56-9836-96630d0c6107", "sighting_of_ref": "indicator--4a55873f-acb2-48dd-94ed-9858c11d663a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35564c9d-9f5b-4210-b82b-ddba459b75d4", "sighting_of_ref": "indicator--75c25be5-a834-4ef6-8f69-4961b3da48d7", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1723fbac-8ff1-44f5-97ca-dcfe25840a8c", "sighting_of_ref": "indicator--75c25be5-a834-4ef6-8f69-4961b3da48d7", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bb27cf8-25b3-4616-ba43-7117907ab482", "sighting_of_ref": "indicator--8ca8bb31-3772-4533-b195-6ebd79421384", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab38b3be-8fc2-4a28-8197-4fb5026e7a18", "sighting_of_ref": "indicator--60609131-b99a-4f7d-8254-e9e448b89099", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7639f9f7-eb51-479e-9998-8bc87d92881e", "sighting_of_ref": "indicator--ee2c18cf-5f5c-4fd1-a733-525e57cd08ee", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16a9ecad-425e-4998-93ee-11405e337cee", "sighting_of_ref": "indicator--ee2c18cf-5f5c-4fd1-a733-525e57cd08ee", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02b15dcf-0e2f-473b-bfca-933ecacb4172", "sighting_of_ref": "indicator--0a592fdd-75d2-4054-a7ec-0e7f969e748a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3981e105-298b-4ece-99c7-75742915d32b", "sighting_of_ref": "indicator--0a592fdd-75d2-4054-a7ec-0e7f969e748a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29254ffa-fb2d-461b-b5f6-b7da70b023b6", "sighting_of_ref": "indicator--ade115da-6ccb-4e8a-bd3f-c8c219c2ea17", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--802bb68f-4bc7-43cd-8458-8287a51a2ca8", "sighting_of_ref": "indicator--ade115da-6ccb-4e8a-bd3f-c8c219c2ea17", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27786628-090d-4aa0-abca-971d79449d66", "sighting_of_ref": "indicator--bd4cf98a-f285-4218-82c1-726839b6735b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--255ec1fa-1dd7-4bc0-9bbb-e95a1f455b3e", "sighting_of_ref": "indicator--bd4cf98a-f285-4218-82c1-726839b6735b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e675233a-319e-4632-a17a-e77ec36f5845", "sighting_of_ref": "indicator--0073d47c-a0eb-4863-9a59-c32aef1b53cb", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--119ad9f2-64db-4189-946e-f4ca592276ab", "sighting_of_ref": "indicator--0073d47c-a0eb-4863-9a59-c32aef1b53cb", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b341a2b-b8fe-4386-9589-73e096af159f", "sighting_of_ref": "indicator--5e0b30e3-84e6-499b-bf9a-1a49e04ad0c6", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6809f8ba-92c5-4816-86ab-f44ab4e1e35e", "sighting_of_ref": "indicator--5e0b30e3-84e6-499b-bf9a-1a49e04ad0c6", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3906736-d209-4df0-aa1d-bd56d4446375", "sighting_of_ref": "indicator--6da08f0a-5f42-484e-b7c1-200be5658f79", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d97e62f-aec2-4395-84dc-10567f10f4ac", "sighting_of_ref": "indicator--6da08f0a-5f42-484e-b7c1-200be5658f79", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b90cbd2e-90da-412b-9459-375362c4a941", "sighting_of_ref": "indicator--64f92cc2-08e8-4011-9cad-2a86f200ec54", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92814765-fc0c-4c9d-9696-0c2b19ead7f7", "sighting_of_ref": "indicator--64f92cc2-08e8-4011-9cad-2a86f200ec54", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c948f285-61b7-4c43-ab69-fbf23be9d272", "sighting_of_ref": "indicator--6659af48-d172-4992-a637-2505fd790945", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f59faef-fd0d-4463-982b-a70fd37be399", "sighting_of_ref": "indicator--4fbd0a1f-c017-4980-8846-1d12979dfa22", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6cdc743-8404-4efd-9cfe-0fcfa8c56760", "sighting_of_ref": "indicator--a59dac2a-5590-4c27-aa99-a2f93d581b10", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbfea8fe-ad1d-4cee-9347-18056bfa8443", "sighting_of_ref": "indicator--ecc5828a-7718-4470-8979-8bbde9e40a15", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--936a50a5-c31e-4e51-9567-94422ca0af77", "sighting_of_ref": "indicator--c81808a2-5aa5-4416-8c06-8ef533f3c1da", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a163d1e-ffe8-441e-9899-b730993e3dce", "sighting_of_ref": "indicator--c81808a2-5aa5-4416-8c06-8ef533f3c1da", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a00128c3-007b-4529-891b-e6cb2420d54c", "sighting_of_ref": "indicator--0d281417-304b-44db-b7bf-f6c031dd56a9", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e0281a9-58f2-4825-b782-9935eeeeb524", "sighting_of_ref": "indicator--0d281417-304b-44db-b7bf-f6c031dd56a9", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79de79fe-5dab-4b2b-a925-550031bc9924", "sighting_of_ref": "indicator--17c862e6-5469-422a-b53a-d92622c48472", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--965eb2fb-7cdf-41e2-bff8-a54c2fe9de68", "sighting_of_ref": "indicator--17c862e6-5469-422a-b53a-d92622c48472", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e19d0a92-9747-4454-aac9-5432a8a47f2f", "sighting_of_ref": "indicator--ff386db4-6061-48c8-aa0c-0ed937d4159f", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72e2a4cc-d231-493c-aef1-48eee3fd3fd2", "sighting_of_ref": "indicator--ff386db4-6061-48c8-aa0c-0ed937d4159f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9668aea7-6480-47bb-abb2-3160d5adc1fb", "sighting_of_ref": "indicator--fa783f38-f79d-4fbd-a660-51bcc7c22689", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d43a58a-214a-45d2-9a63-44ae8c632f48", "sighting_of_ref": "indicator--d001e27f-5b0c-4f09-afbb-65519400bc93", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--210599f8-7206-40b1-80da-67faa975c1af", "sighting_of_ref": "indicator--31e31f1f-d704-4b63-a325-deb5d1dbd749", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4cae31d-2736-4585-b1dd-c2712a5feb82", "sighting_of_ref": "indicator--b21b0591-86ec-4cbe-8465-9fbc63fc286b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--018b6f32-ad9d-4b80-94c0-b4ba6d671ea5", "sighting_of_ref": "indicator--945a0afb-989d-481e-8730-6bbffeb9b246", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a589c25-02dc-476f-b90e-eead925005ab", "sighting_of_ref": "indicator--945a0afb-989d-481e-8730-6bbffeb9b246", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f922579d-b75c-4b07-bda2-9fa3402c9bbc", "sighting_of_ref": "indicator--3f55567d-0231-4c45-a411-2eacc23d71d3", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--542772e5-abfb-4310-b373-b9df7de694cb", "sighting_of_ref": "indicator--3f55567d-0231-4c45-a411-2eacc23d71d3", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c73ebf2-75ea-4630-9104-dfe42f9dd836", "sighting_of_ref": "indicator--4da73b94-1f68-4c7e-802c-9285ce5f5841", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--969a41e8-06e2-4f7f-b486-2af734ec4eaa", "sighting_of_ref": "indicator--4da73b94-1f68-4c7e-802c-9285ce5f5841", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87fa1204-f3f6-4449-9e55-53e91f696d6d", "sighting_of_ref": "indicator--9cecb039-521f-4eb7-acff-2447ca43329b", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ececb3ed-12da-42fe-8499-57c4c6fd1f41", "sighting_of_ref": "indicator--93ee4c6d-c8e3-4eb4-b36d-62bf256f3c8b", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66b29101-daf9-4924-9b17-38c232c7887d", "sighting_of_ref": "indicator--93ee4c6d-c8e3-4eb4-b36d-62bf256f3c8b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50cb296e-bf2c-4f76-8911-cccc1d44625c", "sighting_of_ref": "indicator--a5f8cb1e-a89d-40c0-be9b-e2355d030afd", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22763c44-9e84-474e-9460-da04c26f023c", "sighting_of_ref": "indicator--e96b3266-8e06-4f53-88ac-fe9e1cf44afd", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6de9df36-bfd9-4919-9587-7e1ea2c69545", "sighting_of_ref": "indicator--e96b3266-8e06-4f53-88ac-fe9e1cf44afd", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f601599c-22d2-4320-91af-3679ed110227", "sighting_of_ref": "indicator--e96b3266-8e06-4f53-88ac-fe9e1cf44afd", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--688acf2d-5a8f-440c-9573-24c0ec403b3e", "sighting_of_ref": "indicator--1ebefcc5-b1fa-4301-a641-09455839dae2", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--790f4715-7584-4683-b2fc-6f7b6032a466", "sighting_of_ref": "indicator--1ebefcc5-b1fa-4301-a641-09455839dae2", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e254e0ac-8647-4bcf-9d45-bfd480f487f6", "sighting_of_ref": "indicator--b390e853-ae14-40b2-9e0d-55968d856d14", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2725c4ce-4f30-4437-89d6-324fa46d102f", "sighting_of_ref": "indicator--b390e853-ae14-40b2-9e0d-55968d856d14", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f144b5d4-321a-4e82-b96b-51f9b9a72a00", "sighting_of_ref": "indicator--b6a37795-5f77-480f-bade-3aa658bd4eff", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a1fa1d2-660b-490d-9792-d08641c2e9b3", "sighting_of_ref": "indicator--5d4b3012-f304-4d11-8a36-42e7ff9b87e7", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c17f521d-a30e-4062-a754-a57b6e5986e5", "sighting_of_ref": "indicator--71efdeea-f159-464d-87d1-fa75c5f2da45", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef21a7c7-57cd-42e4-9727-a3009b8f94ad", "sighting_of_ref": "indicator--823090b5-5aab-4a18-91fe-05f4b8f417af", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--148694e3-b1f5-4442-b2f1-acbabf7e9d0c", "sighting_of_ref": "indicator--328fb780-11b9-4695-bcf2-b779781ac5b0", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--594f759b-6201-4a07-9b1e-9d721a508978", "sighting_of_ref": "indicator--28c29418-2307-4dfd-bd14-24e69213e304", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99d8ae8b-887c-43c0-9402-48b47867f2b5", "sighting_of_ref": "indicator--421b56a6-77c5-4ed5-bee2-e6f5f6124fb0", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0db526f6-bc8d-4c33-88ac-23cd88e5fbf1", "sighting_of_ref": "indicator--e8737e95-1714-44c8-8553-794070cfb897", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79174e02-0b1a-4ff3-8ff7-def3daf95676", "sighting_of_ref": "indicator--a84a5a5c-93e8-4a4d-b7f1-763381b1a002", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b8379d2-36a1-4874-acdf-b36aeb01e641", "sighting_of_ref": "indicator--20b90949-6a20-4da9-990e-73df5a3407e5", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dfc4fd6-250f-49e3-886b-cf104ede0b17", "sighting_of_ref": "indicator--3521f9a3-2617-4eeb-b2b3-060dcb58aa6c", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5cf0ab1-a259-45dc-9edf-a5cd7da70d25", "sighting_of_ref": "indicator--bea9ac91-385f-4e12-b01f-0fd25da4e590", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a2e5807-8197-4b50-9b1e-60b6e4b4b89c", "sighting_of_ref": "indicator--553ba862-de24-4fb7-9448-b52410d450a7", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2a8f600-b92e-4881-8682-e653841d5f42", "sighting_of_ref": "indicator--553ba862-de24-4fb7-9448-b52410d450a7", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8309fb55-cd9f-4258-8bbc-447a57cefc9c", "sighting_of_ref": "indicator--dd8e6e0f-17ab-4eeb-9e5c-5742d89f5cfa", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1d5a983-475d-4561-8434-87e1ac06ff6e", "sighting_of_ref": "indicator--a6201c77-92c4-4610-8552-d9f0b0fc6e36", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b950fb0f-f75c-4d34-9408-a62fac514e36", "sighting_of_ref": "indicator--cf8656db-958c-4ec7-b118-c2ff56ba79d2", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40f11fd9-4434-4162-bed4-47bb39b4c6b0", "sighting_of_ref": "indicator--9991a692-b012-442e-8534-bc821ff5bf76", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3e2b5ec-a4e1-4e9c-abd2-183cd234840d", "sighting_of_ref": "indicator--ec9fda0d-4bd1-431f-9f35-d7954038b4f9", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82fb6e2d-172a-494a-9166-83897f395f77", "sighting_of_ref": "indicator--1469f619-a7a3-47af-b679-5cc55486acf0", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c975bc6b-2fd1-4969-8d0b-3223b564bd5c", "sighting_of_ref": "indicator--4ae4bd5a-9076-442e-a52a-0316a7214995", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab736cac-383f-4a28-a917-de7c47d34065", "sighting_of_ref": "indicator--539e9e16-83a9-4570-b089-d6cf17e6fc5e", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30211a87-1a40-46c1-a63d-4d99591ea7d0", "sighting_of_ref": "indicator--539e9e16-83a9-4570-b089-d6cf17e6fc5e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c20d989d-3e2c-4eda-bc8a-ecab2f152b82", "sighting_of_ref": "indicator--a542f012-c025-4e35-bac7-75c80b21b084", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4afd8edc-1c91-48e7-9ec4-e7d532608a8a", "sighting_of_ref": "indicator--4f211626-fb2f-4a0b-99be-4611cbd2a238", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bf4f894-670d-458a-ab85-dc29b5e037e3", "sighting_of_ref": "indicator--abf4f111-1451-400f-bdb1-6e8c6bad0519", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51c01750-2b4a-4925-b019-b18b538afa70", "sighting_of_ref": "indicator--0963ef74-988d-4a9a-b295-6d2cf5a1bf7a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e676ee58-39a0-4e29-a17e-2f46da038282", "sighting_of_ref": "indicator--fb40b11f-077e-46b7-938f-199a3a736162", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d40f1a4-f6c8-42ae-8f46-a6b5a9b0aed2", "sighting_of_ref": "indicator--fb40b11f-077e-46b7-938f-199a3a736162", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ff45bee-dc39-47fb-bbb7-b0ea61ae6a54", "sighting_of_ref": "indicator--6338617d-5a27-4ca9-a704-1c47f874566a", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f02837c9-0ea4-4ec3-a843-45f86ff0eb55", "sighting_of_ref": "indicator--6338617d-5a27-4ca9-a704-1c47f874566a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--890c5fcb-7c34-4034-b326-4d851ec5b51b", "sighting_of_ref": "indicator--6338617d-5a27-4ca9-a704-1c47f874566a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52816a93-8d0d-4a40-b80f-a41196d3be86", "sighting_of_ref": "indicator--17f44e01-1c85-41ff-af55-83355afe18a4", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d928408-d078-4072-aed9-cb5d6a2571ff", "sighting_of_ref": "indicator--17f44e01-1c85-41ff-af55-83355afe18a4", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--322edf56-77eb-46c2-bacc-034cd8693865", "sighting_of_ref": "indicator--17f44e01-1c85-41ff-af55-83355afe18a4", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b2e2098-02ed-4647-b66f-ef42b96c95b9", "sighting_of_ref": "indicator--cb13bf32-daf0-4e4f-9262-a7fd64f4f517", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--172a778f-d54b-4af6-8eec-41f0e0945cc9", "sighting_of_ref": "indicator--cb13bf32-daf0-4e4f-9262-a7fd64f4f517", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cf619ce-51e3-4446-9c71-c3bfdbfc458d", "sighting_of_ref": "indicator--79d85e37-4a58-4f70-bb0a-bc862c63452d", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b86e8fa6-bf32-4f1d-bff9-82a5771a5904", "sighting_of_ref": "indicator--79d85e37-4a58-4f70-bb0a-bc862c63452d", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b927dbd7-82a9-4b5f-adf4-7ae888fc1495", "sighting_of_ref": "indicator--23c1b5ab-5926-453c-b768-2d795c672212", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd753e75-f53a-4d12-ad8b-93ac3ed666bb", "sighting_of_ref": "indicator--23c1b5ab-5926-453c-b768-2d795c672212", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81b35f6e-b3f1-4937-b873-c5f95b136026", "sighting_of_ref": "indicator--6d767bec-61db-4565-a187-e8123bfcf5ec", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fbf115f-ed30-40b3-b8a7-21328106a08e", "sighting_of_ref": "indicator--6d767bec-61db-4565-a187-e8123bfcf5ec", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4497da31-0833-4479-8166-1f4d2eff3a73", "sighting_of_ref": "indicator--764f12f8-74ce-4083-81ac-cccf3944f4a0", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0a04e4e-128c-437c-8031-713e772a13b4", "sighting_of_ref": "indicator--764f12f8-74ce-4083-81ac-cccf3944f4a0", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1549826-fe93-4e7c-9ba1-4c8c0727da81", "sighting_of_ref": "indicator--0c1cfd77-5142-4aaa-afcf-07c1ced3e4ac", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46171d29-f610-4073-8ddd-54b3f0eabbf1", "sighting_of_ref": "indicator--0d12b743-34d8-47b5-b590-d25af4ea44d1", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ca634e2-fa6f-4b34-848b-88d76b337bd3", "sighting_of_ref": "indicator--791bad32-3e28-4357-9d98-a9d12db0513d", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b50bd7ab-ca17-4374-86df-2a30e27a1e85", "sighting_of_ref": "indicator--791bad32-3e28-4357-9d98-a9d12db0513d", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b440934-1d9a-475b-9130-8c6e077bed53", "sighting_of_ref": "indicator--0fd78fe3-3549-46b2-89f0-09c0eff0f5b6", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a27ffba3-169b-491b-8de7-ab2f460fcd9d", "sighting_of_ref": "indicator--53414d0e-e786-470b-8f2b-3d07248fcb0c", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--179633a7-3a11-4d22-9b44-b22a32872725", "sighting_of_ref": "indicator--53414d0e-e786-470b-8f2b-3d07248fcb0c", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c57c6f52-c13a-4467-9338-c45551d1e9d6", "sighting_of_ref": "indicator--53414d0e-e786-470b-8f2b-3d07248fcb0c", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cdefd24-a0f8-456a-b02f-740057e9beff", "sighting_of_ref": "indicator--55991586-b04e-4887-b04e-4ee481579659", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2719737-4c7b-47db-a0d1-d3374ca2fa46", "sighting_of_ref": "indicator--b1e93158-c382-4393-b2b3-c174cf950c9d", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--811ac901-995b-4719-a226-2ecc4b19c1d7", "sighting_of_ref": "indicator--b1e93158-c382-4393-b2b3-c174cf950c9d", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26d906da-638e-428d-a07f-07174722a764", "sighting_of_ref": "indicator--b1e93158-c382-4393-b2b3-c174cf950c9d", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bf9bc11-c8be-4ce3-bc5d-f0efff7db643", "sighting_of_ref": "indicator--13db6c14-162f-4c87-8f4d-3e29aadf2017", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3ff7d02-c298-4601-8977-0135f3a01826", "sighting_of_ref": "indicator--8ff72aa1-1d1c-4c54-869b-3a0f39e49dc3", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c901b7e-3e31-466f-96bf-21600aa4456d", "sighting_of_ref": "indicator--8ff72aa1-1d1c-4c54-869b-3a0f39e49dc3", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2948d7c-fe1d-4139-a87e-540ea4dbb81d", "sighting_of_ref": "indicator--8ff72aa1-1d1c-4c54-869b-3a0f39e49dc3", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ebe851b-d3d9-4d60-b128-50eda462ce97", "sighting_of_ref": "indicator--b6844a91-ded3-4fbf-8942-fe818513e217", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9120e7a-7e9d-4996-8a40-2f990a71252c", "sighting_of_ref": "indicator--b6844a91-ded3-4fbf-8942-fe818513e217", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84f1d52e-1bff-4fec-8b44-67856c7066c6", "sighting_of_ref": "indicator--b6844a91-ded3-4fbf-8942-fe818513e217", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11e87fec-65b3-4004-99e0-66a7d8824c42", "sighting_of_ref": "indicator--51369254-6052-4930-be06-ee9a150b6f06", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6bedeb2-fdc5-4007-9422-beffe38f7052", "sighting_of_ref": "indicator--51369254-6052-4930-be06-ee9a150b6f06", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ef8e56b-da63-450d-9070-a8a512a06fb0", "sighting_of_ref": "indicator--51369254-6052-4930-be06-ee9a150b6f06", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3164a35-ec35-41e8-8f64-196562ebc99b", "sighting_of_ref": "indicator--4bf27382-824f-4bd1-956d-25cbcaf79e06", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfcf4dd5-e340-4f05-bfd4-0e70cec3d7ca", "sighting_of_ref": "indicator--4bf27382-824f-4bd1-956d-25cbcaf79e06", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f44cfe24-badb-47b2-835b-b2b3a6dfcb80", "sighting_of_ref": "indicator--b259635d-f7e5-404f-b104-63113098d588", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ed82792-8c71-48bd-b6e7-fc5757d5ce46", "sighting_of_ref": "indicator--b259635d-f7e5-404f-b104-63113098d588", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed47d105-d754-4528-9b2d-f51ac2274b91", "sighting_of_ref": "indicator--c298c075-6945-4189-a5b5-575a7fa4fff9", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0054adf2-384f-4e0f-98f2-acfe37524457", "sighting_of_ref": "indicator--c298c075-6945-4189-a5b5-575a7fa4fff9", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dd0bd7a-aeba-4b58-85d5-6303a4f2566f", "sighting_of_ref": "indicator--8316fed1-3f74-4500-9c4e-9a2d4f00a152", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01753f32-cd82-4800-bc21-6b3d27a465d6", "sighting_of_ref": "indicator--2d179c69-e02f-4f01-9437-e28671edb5b3", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa1eada8-d7b3-4a97-a052-3643c5a3d538", "sighting_of_ref": "indicator--2d179c69-e02f-4f01-9437-e28671edb5b3", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5e10eac-74bd-4adb-93b0-44d1644ef4ce", "sighting_of_ref": "indicator--72c03199-fada-4c0f-9069-57f8250e0d9c", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e3036df-5df2-47ad-93c9-afd2cc86d3e3", "sighting_of_ref": "indicator--a8e2578b-c93f-4718-abd2-305068273f80", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61d26782-8252-4cfb-9385-662753ded355", "sighting_of_ref": "indicator--34db08b7-ac38-49e0-b6a0-ba6231a71ed9", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--093571c9-9532-4382-832f-8545905443d4", "sighting_of_ref": "indicator--8f5603b6-38d3-4553-92bb-73dfa57a20af", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d8b6c00-58e2-48b8-8a18-b1283f7739ab", "sighting_of_ref": "indicator--802fa0b3-283a-4973-91e4-9412a7615154", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1d59fe0-673c-4bef-8664-96a971c520ac", "sighting_of_ref": "indicator--802fa0b3-283a-4973-91e4-9412a7615154", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b25456c8-49a8-423f-9d78-c9fca1ad5f67", "sighting_of_ref": "indicator--e9e899d5-d462-4f9d-85c2-84cac154a755", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27c0a2e8-d9de-42fd-9bee-517a6d82d391", "sighting_of_ref": "indicator--bf7f008c-61db-4bbb-989c-cb61d80c22ca", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8e559f6-d1dc-4c27-bea1-5d217e300862", "sighting_of_ref": "indicator--bf7f008c-61db-4bbb-989c-cb61d80c22ca", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33223d46-4fe7-42f5-a2f6-e32794402e98", "sighting_of_ref": "indicator--8c8bbd8a-0ae7-4fc2-b831-98e352e428cf", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f4d0728-b206-4a7e-b89e-7b1259c06a59", "sighting_of_ref": "indicator--8325da1a-502b-4d84-b872-83802c67772c", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fca88c0-dedf-4413-9043-dca70f131252", "sighting_of_ref": "indicator--242e86df-0569-4dff-a24b-fd3ae9fb9ecb", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7254f963-aa37-4d5a-842f-3ea5b2335bf2", "sighting_of_ref": "indicator--91143128-ff7d-463d-b063-4a59d5424076", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e86f4266-e514-4867-8fd9-d7723d0931ca", "sighting_of_ref": "indicator--91143128-ff7d-463d-b063-4a59d5424076", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a08680b-282f-48c3-9e4c-6c28934ec809", "sighting_of_ref": "indicator--05a848e3-277d-4248-828a-a6c071f225bc", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93766ad7-8acd-4338-bb0d-969a721ac20d", "sighting_of_ref": "indicator--dc4b820a-4fb4-43d8-9f6d-d700d67dbaae", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea6365f0-e71e-4cff-bfae-fce175e4f982", "sighting_of_ref": "indicator--26e56ff5-fe51-4a9a-aefa-efdc1a904c98", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01ec6ef5-acc7-4cdb-ac99-5ec86f7bd699", "sighting_of_ref": "indicator--357cf6bd-50b4-4d36-8fa7-f3f9e7a53530", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e90bb36-cd6c-40e1-8c96-dbe622c8f814", "sighting_of_ref": "indicator--c1a41d41-e0aa-4e31-a0b9-760cb60cae76", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40429cc2-0412-463c-9f82-d52be114b09b", "sighting_of_ref": "indicator--e8770449-782f-4bc7-b637-87c746e73d78", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcc4555e-0be7-4cf3-a57a-8733a57bb12e", "sighting_of_ref": "indicator--af5f65b2-f782-4a58-a9ec-94140f07e80d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8787aff-14ef-4aa4-aa01-799f9966d4dd", "sighting_of_ref": "indicator--77b3b209-58bf-4ae7-af92-753348cef191", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--445e6edb-efd8-449e-b220-de9bc74dc4c7", "sighting_of_ref": "indicator--117b7f4d-7cb1-4d5d-bd69-b0300eb61f6b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb2eedab-2f45-48a4-a089-636608b304a1", "sighting_of_ref": "indicator--9b4b99de-dc85-4ee7-99b4-5371a85d91fe", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ed996d5-0b6a-4d44-842a-35157e50be54", "sighting_of_ref": "indicator--9f213928-3921-4719-beed-e83ffda5d59b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82eb3d54-ad4d-4217-9fc9-e63621ae813d", "sighting_of_ref": "indicator--bc2147c5-6821-4533-9e0f-4b52c261e366", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10634a3d-895f-4341-b856-c8c9104de86c", "sighting_of_ref": "indicator--8a62666e-52e8-4b5a-bc29-048757efcb13", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e96f3fc-b1c8-4674-9395-09de75ee0d1e", "sighting_of_ref": "indicator--8a62666e-52e8-4b5a-bc29-048757efcb13", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d9a2e42-255b-4206-a1b2-0e5f213ac855", "sighting_of_ref": "indicator--f1f3d872-be06-48e3-836a-8557539df75f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f95cd66-f1bf-4137-b975-a20330c27e45", "sighting_of_ref": "indicator--0d384d14-8584-412e-a189-1d1821265fbe", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abfe0c23-d6c6-4636-9f43-4b9acb55f967", "sighting_of_ref": "indicator--1ea94d00-5fbe-4d0e-ac67-ed67af92ddb5", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d6dbe0b-3e7b-4bc8-934f-ac56b148f463", "sighting_of_ref": "indicator--1ea94d00-5fbe-4d0e-ac67-ed67af92ddb5", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47a7ec1c-10b4-47dd-b0c6-c64b7c8a92fe", "sighting_of_ref": "indicator--53f4a722-6c57-48c2-b60e-79b63fdd92a5", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ef10543-742c-40ad-a9a7-7fae1831c7d4", "sighting_of_ref": "indicator--d6af0183-6903-48a2-b96b-a6eb11cce7b8", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be34bdf1-35e5-4171-a8e0-31ea553ebbed", "sighting_of_ref": "indicator--d6af0183-6903-48a2-b96b-a6eb11cce7b8", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a2148c0-8374-4a8d-aa19-a28395f01455", "sighting_of_ref": "indicator--e551c6d1-5fbb-4867-b71a-d0b86048b8e2", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fea461b-1e58-46b4-8200-bc4e8bfea190", "sighting_of_ref": "indicator--efc3b2f7-543d-4afd-af05-18fdd45fc102", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27204c15-f3a0-4fdb-bdde-c35a8a383cb2", "sighting_of_ref": "indicator--efc3b2f7-543d-4afd-af05-18fdd45fc102", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a411c40-8033-40c7-988b-4fe43646074a", "sighting_of_ref": "indicator--69d51311-405f-4cbc-a99f-d89fe4138c29", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72074c61-617a-4b34-939d-dbdf0d2a4fc7", "sighting_of_ref": "indicator--0d2444b6-a6da-46ec-a2dc-7199e56d4558", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b49f0906-6aed-40ea-829e-5fe4bc82fb2e", "sighting_of_ref": "indicator--50bee4ca-b5d9-4ee9-b1aa-e89a9e5c67ff", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ace2c6c-d357-4e68-b37d-a21b1876e759", "sighting_of_ref": "indicator--96f4af01-688a-4a94-b0ac-d4be75758e02", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcfb1ac3-689c-4d2a-aec6-169b07020f5c", "sighting_of_ref": "indicator--ad5bead2-eb40-4473-838c-7e34b158effa", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd02ef08-80d2-4abb-95d5-9390d3224924", "sighting_of_ref": "indicator--ad5bead2-eb40-4473-838c-7e34b158effa", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e823b5a-38b9-4a04-a457-4d095d2d9942", "sighting_of_ref": "indicator--ad5bead2-eb40-4473-838c-7e34b158effa", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17cab54c-2865-4edd-bb16-f04fcdfa0134", "sighting_of_ref": "indicator--1d0264ee-15e9-4a4e-bdb8-bd681b6504c3", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6af4c553-a05c-404c-a662-540c979ee724", "sighting_of_ref": "indicator--1d0264ee-15e9-4a4e-bdb8-bd681b6504c3", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5792d9d-3480-4cf9-a395-ff083fd6e348", "sighting_of_ref": "indicator--1d0264ee-15e9-4a4e-bdb8-bd681b6504c3", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf7489ce-d39f-43c6-9bdb-d26dc665ef60", "sighting_of_ref": "indicator--355d6833-fb13-4572-867b-f040758c74d9", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c06b6700-4571-4806-a6a7-1cc1352c0d65", "sighting_of_ref": "indicator--355d6833-fb13-4572-867b-f040758c74d9", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ed75390-e6fa-4cda-8dad-8747fffb0eec", "sighting_of_ref": "indicator--355d6833-fb13-4572-867b-f040758c74d9", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54d72d8f-f567-4425-a34a-cafca8fb2959", "sighting_of_ref": "indicator--be305629-a00e-424a-91b0-c672b8373f1f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--075fd4f8-ec68-47ac-9fdf-4d1f763b1ecc", "sighting_of_ref": "indicator--be305629-a00e-424a-91b0-c672b8373f1f", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b570e1c-d92d-4a64-bb61-5753049b80ca", "sighting_of_ref": "indicator--2a169bf1-edcd-457a-b304-ebbed9418141", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f869f2ff-76d9-4b51-ac0e-74055b4ff0e0", "sighting_of_ref": "indicator--2a169bf1-edcd-457a-b304-ebbed9418141", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c91f4691-4b12-4b3e-90f9-d89fe49cc4d7", "sighting_of_ref": "indicator--b29ecf14-30d0-4d55-869b-fc9bef348fb9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fd72f8e-ce3c-4bbd-9439-1eff937b06ae", "sighting_of_ref": "indicator--b699bc0f-314e-43dc-8a9b-d12fd5caaed0", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8004df7-baf1-4dec-9bef-a244a91e9c16", "sighting_of_ref": "indicator--e07dd997-6bb9-4754-b5e8-1c0cdbfb3838", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bddb83b-c3f9-4701-a4e2-8d7c73f2705a", "sighting_of_ref": "indicator--41829d8f-02bc-4daf-8a9f-11d5ced96087", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3659ef5a-9012-42b5-a0a7-b2f04b974d53", "sighting_of_ref": "indicator--41829d8f-02bc-4daf-8a9f-11d5ced96087", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2568267-3f00-4318-ae5a-1fb6405e5cfc", "sighting_of_ref": "indicator--384e9356-8be8-4255-b236-ae655e91b15c", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b9c7e3a-ed99-48f3-9b7c-38d46b41af49", "sighting_of_ref": "indicator--384e9356-8be8-4255-b236-ae655e91b15c", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd1ae6f1-c115-4022-8726-db9d811c42b3", "sighting_of_ref": "indicator--f092b644-a276-4aff-b58c-2c1ba8c8c8ce", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--853df134-03d7-46b6-ac21-33b7af8ac145", "sighting_of_ref": "indicator--f092b644-a276-4aff-b58c-2c1ba8c8c8ce", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52c29330-96b4-4f7e-bff8-b1b898acc151", "sighting_of_ref": "indicator--ad4a31ff-dea3-4af7-a51e-196fd9d0c04c", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ebdc6fc-8bfe-4d0c-a06e-4fb42c156623", "sighting_of_ref": "indicator--b40db2e7-56bf-4e45-b99a-683ac2456c9d", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8116d86f-b3f6-4ba5-abfd-1e46a38b5fb7", "sighting_of_ref": "indicator--ad09d785-0fa4-40db-90ab-fd35565414bf", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--903027b5-6c27-4188-b2a3-ed2e9d7f9a7e", "sighting_of_ref": "indicator--ad09d785-0fa4-40db-90ab-fd35565414bf", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a425083d-f655-4dee-8c3a-3633458e62d1", "sighting_of_ref": "indicator--ad09d785-0fa4-40db-90ab-fd35565414bf", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bc77ced-8c51-4bdf-85fe-f4180fea3388", "sighting_of_ref": "indicator--9620b1ca-2bfe-494e-9fa4-9f07a89ba376", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c140f19-b559-4f10-aee3-966f59d74d82", "sighting_of_ref": "indicator--d83e9d4f-b4c3-4fd3-b646-6199e4aaf80b", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6855a4d-3ee3-4111-a3f6-c258796487c6", "sighting_of_ref": "indicator--521b3cfd-2f5f-4f7c-b7a2-3db827478297", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d127abcf-4f70-4fa1-ac2d-e307d81370a7", "sighting_of_ref": "indicator--521b3cfd-2f5f-4f7c-b7a2-3db827478297", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--215e1f9d-a3cc-4ad1-840c-2a89cefc25c3", "sighting_of_ref": "indicator--5f78aba8-d1e8-4158-864a-37b5e1ebb836", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b379ac3-880b-48b6-b639-fcec5549c6ac", "sighting_of_ref": "indicator--5f78aba8-d1e8-4158-864a-37b5e1ebb836", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70c18064-6678-4e5b-ac60-fd77d7b8f345", "sighting_of_ref": "indicator--c772b76a-dca6-436b-b64e-69001795ae30", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21abe16a-d182-4647-b61d-5e122b5ef0e4", "sighting_of_ref": "indicator--c772b76a-dca6-436b-b64e-69001795ae30", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--689fcd16-244b-4f5a-a0de-e42d00d92452", "sighting_of_ref": "indicator--b5ebb103-4d8c-47ac-9639-d4af0951eea6", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aca112a2-f751-4887-b260-3d065d69b3c3", "sighting_of_ref": "indicator--b5ebb103-4d8c-47ac-9639-d4af0951eea6", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6735d2a2-9f8a-4990-b396-49fe11e1015b", "sighting_of_ref": "indicator--b5ebb103-4d8c-47ac-9639-d4af0951eea6", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c21ff0d0-b006-432b-b86d-a35c79a7b5e5", "sighting_of_ref": "indicator--414e0fc3-f95d-4951-a352-ec0262f2820c", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55c709b0-c247-46e7-84bd-ac9fd097e774", "sighting_of_ref": "indicator--eb590ffd-d17b-438d-bf14-2f047308101f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75ee9d67-877f-42b2-9a8d-ce4b35a88882", "sighting_of_ref": "indicator--eb590ffd-d17b-438d-bf14-2f047308101f", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbcb9d51-5b06-4fa4-bbc3-41051fbd10d5", "sighting_of_ref": "indicator--416d079d-ea0a-4a4d-9c59-b4ceacb0effe", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a49ad331-dfc2-4f3c-816a-7edb35e3a93b", "sighting_of_ref": "indicator--f04f6c3d-b7fd-4cda-9e0f-edecdab6d199", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67e04716-544b-4fb0-a15e-a367a8bb136c", "sighting_of_ref": "indicator--f04f6c3d-b7fd-4cda-9e0f-edecdab6d199", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccb03cd6-2a99-428a-9ed9-4659c28eba5c", "sighting_of_ref": "indicator--ca4250f3-8070-4a09-b9f9-ae3223eb12b2", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5558afc1-e4f8-4059-9bb6-314f4f5b0de5", "sighting_of_ref": "indicator--576e954e-1ada-408b-a385-927c663a7938", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f8fa068-4004-4ef3-b4fa-36cf77ef5b87", "sighting_of_ref": "indicator--aef3d133-9d46-47e7-9846-18b77bb5b774", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--312e4c63-2c53-43c2-9980-132c4b4fa8db", "sighting_of_ref": "indicator--aef3d133-9d46-47e7-9846-18b77bb5b774", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--787d7881-fe73-4fb7-b996-3e224a486e0e", "sighting_of_ref": "indicator--fa37150c-af97-413b-8865-a319954f2261", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf31f188-7dca-48c9-980c-c0dfab6dd40c", "sighting_of_ref": "indicator--29e01686-2e6b-4f65-b5de-ad5df799c6e0", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cd43372-dc93-4d17-8bc7-870e2767e55a", "sighting_of_ref": "indicator--29e01686-2e6b-4f65-b5de-ad5df799c6e0", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b25da2e-dd38-4516-b50a-52c5c236fe74", "sighting_of_ref": "indicator--8ad96865-180b-4d20-804a-424056576148", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57344f08-5dd0-4193-ba73-0270cc3be8d2", "sighting_of_ref": "indicator--3254ddbc-d72f-4fcd-a1e0-66e1faf7ddab", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1544b421-95ea-422c-8352-afbfd19b6c9f", "sighting_of_ref": "indicator--3254ddbc-d72f-4fcd-a1e0-66e1faf7ddab", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd7675ce-e1c9-44f8-8dea-bcc8c60aaa12", "sighting_of_ref": "indicator--0c943284-3077-4dd1-8110-016ba45c1069", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--993a5053-23f2-4018-b0f8-a6a71145215b", "sighting_of_ref": "indicator--0c943284-3077-4dd1-8110-016ba45c1069", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95665bda-91f9-4537-8ef8-cb643a6765a1", "sighting_of_ref": "indicator--0c943284-3077-4dd1-8110-016ba45c1069", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0365bea-c696-4100-bc93-f1fccc21ffde", "sighting_of_ref": "indicator--b22b5c8e-53f3-4e53-a4c5-cebe27bad0c4", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57741fef-8433-40c0-a152-dd3edd0e76d4", "sighting_of_ref": "indicator--b22b5c8e-53f3-4e53-a4c5-cebe27bad0c4", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5afa284-6411-44bc-94e0-0551e66247c3", "sighting_of_ref": "indicator--aba9cd2f-7b6c-4c59-9138-91a9f2aeba24", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38e95636-4668-40ab-822e-223d199d9738", "sighting_of_ref": "indicator--aba9cd2f-7b6c-4c59-9138-91a9f2aeba24", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75c42758-c1b0-4912-b7ad-457db562a25f", "sighting_of_ref": "indicator--33505c2b-9fe7-41b3-9184-bfb430544da1", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4c57e3e-b25e-4c01-9bb2-f10d53256613", "sighting_of_ref": "indicator--33505c2b-9fe7-41b3-9184-bfb430544da1", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efdb4538-1175-40d0-b0c7-5d90a143ec16", "sighting_of_ref": "indicator--240a958f-7b42-4913-a916-55d7a3f2146a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f528853-512e-47f8-b73e-e4cefc3d32a7", "sighting_of_ref": "indicator--f8645b42-e920-4557-b6b2-a70f58af70cb", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef43a9c1-8d67-433c-b2b8-d6c4fe7bb5ae", "sighting_of_ref": "indicator--f8645b42-e920-4557-b6b2-a70f58af70cb", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98830c1b-8cab-441f-a3f1-50c8b19d474c", "sighting_of_ref": "indicator--77adb569-f9fb-4d55-93a4-b267376f8d2a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--268a1808-aea8-422b-869e-d7bfa359a18a", "sighting_of_ref": "indicator--77adb569-f9fb-4d55-93a4-b267376f8d2a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89188ed2-fd22-4a41-bde0-b719530178f4", "sighting_of_ref": "indicator--53f17234-78ce-4730-ae5b-04fde10c2663", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17a29e71-e9cb-45f3-a8cb-807b1f093301", "sighting_of_ref": "indicator--458f308a-6e50-439d-85db-45f08dde8137", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa78ce9f-1731-4860-89d0-9d864f021c41", "sighting_of_ref": "indicator--458f308a-6e50-439d-85db-45f08dde8137", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--273d40b0-5769-46e8-ba9a-dbd242f89c13", "sighting_of_ref": "indicator--458f308a-6e50-439d-85db-45f08dde8137", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a11c5c95-f1cf-4b30-b73b-3bdcf9919244", "sighting_of_ref": "indicator--b3c1c158-1a1a-4151-bd52-49aecce7bd3e", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b849bc23-9144-4f2a-9dd0-ea7d12b0400b", "sighting_of_ref": "indicator--910760fe-9e77-4345-9686-1f78ba00108b", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccf42959-7af3-43be-b357-f76c99dba1c8", "sighting_of_ref": "indicator--910760fe-9e77-4345-9686-1f78ba00108b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7c1c606-4790-4e11-9461-26fea060bc47", "sighting_of_ref": "indicator--3c1d350d-ecf5-492b-98e8-25c2c2ae5449", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59c3cd3f-6a83-4950-867a-683b7f8b98cd", "sighting_of_ref": "indicator--68b555a1-6459-462f-8856-01a116ece873", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eacda33c-a7b5-4ac0-b546-b0e302dfdbb7", "sighting_of_ref": "indicator--1d1a336a-2f72-43df-8106-a9c60841be7f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fa04780-c517-49ff-b7cb-65061ed83ca6", "sighting_of_ref": "indicator--d94fd6c9-757b-494f-a6e9-bcd5bc9cbefb", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--debf0d66-0546-4bd9-b282-7a71bbd04971", "sighting_of_ref": "indicator--d94fd6c9-757b-494f-a6e9-bcd5bc9cbefb", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c53972d4-a7f8-45e7-b085-8753ef579e40", "sighting_of_ref": "indicator--d0cefb29-facb-46af-b93c-b20b51cd52bd", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b84f7f60-dcb6-494a-9819-145c53df2096", "sighting_of_ref": "indicator--d0cefb29-facb-46af-b93c-b20b51cd52bd", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--923fb458-2952-46fb-9fe4-3d147c3e951e", "sighting_of_ref": "indicator--d0cefb29-facb-46af-b93c-b20b51cd52bd", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c72043d-30fa-46a9-b411-fe4586077d8a", "sighting_of_ref": "indicator--76f926ff-fb83-438c-bbf7-5ae8ee129f47", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58f17e29-6074-495d-b1d0-5356724e2219", "sighting_of_ref": "indicator--73689580-d984-452e-adb1-5490067db43b", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2e7fcd6-4d4d-474f-892a-280c0d1692fb", "sighting_of_ref": "indicator--73689580-d984-452e-adb1-5490067db43b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--318c6f1d-0a51-4647-bd0b-022006e73082", "sighting_of_ref": "indicator--73689580-d984-452e-adb1-5490067db43b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcff3675-9570-4714-8f66-41500541f0f8", "sighting_of_ref": "indicator--6806d635-2d3b-47f1-b9e6-964d4bb62203", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8da0495f-3ae3-414e-bc13-833d5ea58801", "sighting_of_ref": "indicator--aa17d302-a855-411b-b8b2-c35dcd240fde", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8381aa41-fe6b-48f9-b5d8-8f1cdb70896b", "sighting_of_ref": "indicator--aa17d302-a855-411b-b8b2-c35dcd240fde", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7210dd0b-2f18-4eda-83ba-c53b6cff458c", "sighting_of_ref": "indicator--c004b562-f76d-483f-8b84-a223e5dec5ea", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1157b90-bee0-4b8c-9fda-a926d42f9f85", "sighting_of_ref": "indicator--a34f8e07-b679-49ba-a322-6996e0bea13d", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e10c4960-77f8-41a5-a6c3-58a41a4ef911", "sighting_of_ref": "indicator--a34f8e07-b679-49ba-a322-6996e0bea13d", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5bdd5b5-1261-4168-bf62-9d2741ed4c75", "sighting_of_ref": "indicator--2c443667-6840-43d0-8a7b-17784a6e645b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b39c5c93-4f1f-4b69-9fcc-ce2f00860a70", "sighting_of_ref": "indicator--a55fed76-357b-4267-bb12-562e38a7f0b9", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a4592ac-b995-4559-ab67-c3c9c4d0ef41", "sighting_of_ref": "indicator--9c4a1fcf-5f67-4db8-807d-d6f02f909f6a", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47bdad9e-ffc6-47d2-9a79-22f16488b4f9", "sighting_of_ref": "indicator--9c4a1fcf-5f67-4db8-807d-d6f02f909f6a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9913444b-fdd6-4726-ad20-1ca955f2432c", "sighting_of_ref": "indicator--ff8fbbde-31d1-4997-862f-47375a3be13c", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--138be1b1-8d63-482a-b44e-d5ff697490e1", "sighting_of_ref": "indicator--2138d3c0-2ee4-4337-8cf1-ab69452ad35c", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b64fc46-1f36-4c33-b30b-eaa8c6da9a61", "sighting_of_ref": "indicator--10461c35-aac1-426b-8d67-47149659a6c6", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6a2efdf-5663-4138-b1c2-092e1180ddd3", "sighting_of_ref": "indicator--ceca06ec-56da-4aa5-b4ff-33c4bfa4b9f0", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f704ed06-3eb3-4dcb-8f7e-9d11efbdd5b8", "sighting_of_ref": "indicator--8f957c63-2a9a-4ba3-8ffb-b0f12a875dfd", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e473d4a-5f83-471f-9b18-e3312b602ab7", "sighting_of_ref": "indicator--4d435ec6-cb0b-4da3-ac8f-9e2c165cd938", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d699886-cf52-43d5-a6c8-ceceeee9a64a", "sighting_of_ref": "indicator--e9338e41-f685-4598-aead-402e5245019f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--288ee844-6763-43a4-a1b3-87dde9de78d1", "sighting_of_ref": "indicator--e9338e41-f685-4598-aead-402e5245019f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ba8d5a7-f8a7-4486-931e-e022453496ce", "sighting_of_ref": "indicator--d7328d58-c82d-4083-a8d9-e34a90ec673b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61f61ec6-32ab-422b-87c7-1e69f5becad4", "sighting_of_ref": "indicator--d7328d58-c82d-4083-a8d9-e34a90ec673b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a72c35b-ac46-4b53-b43b-8890bcd54c48", "sighting_of_ref": "indicator--f0a6bd93-f192-4ab6-8d6f-6264df434028", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc9cb7ad-0b95-4fc6-9ef4-4a060dfbd6b0", "sighting_of_ref": "indicator--f0a6bd93-f192-4ab6-8d6f-6264df434028", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d3ed2e3-5816-4a5e-a15d-463e8a0fc902", "sighting_of_ref": "indicator--a13e2168-186b-4e6c-a3d7-4b9c37e826bd", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4417b93d-efde-4359-9844-844b57927562", "sighting_of_ref": "indicator--a13e2168-186b-4e6c-a3d7-4b9c37e826bd", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--198dab92-3538-448b-b404-ba94bb0f520e", "sighting_of_ref": "indicator--4f02807d-48e2-4689-be45-09e93487ec6e", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19e1070b-6004-42e7-ae2e-ef883055c4c5", "sighting_of_ref": "indicator--3657f825-35c0-45d0-bba3-5cafead026b0", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e24dac25-645d-479f-bab7-7466c4e76fb2", "sighting_of_ref": "indicator--e33d49fb-d3bf-4a6d-ba72-a87d599e625f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a073275f-e591-477d-a74e-f3b7de06e681", "sighting_of_ref": "indicator--e33d49fb-d3bf-4a6d-ba72-a87d599e625f", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d75f8ba0-cf3d-4045-b553-49dbcdf42422", "sighting_of_ref": "indicator--3d2a1bdd-c7be-4654-8c74-40cf10b1fa87", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cee3fd8b-8468-4690-92d2-a94a59ec5e16", "sighting_of_ref": "indicator--1febba40-500b-45e9-a1b5-56d023d0a19b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa0d6502-2b0e-406a-abe5-b095709bb8bc", "sighting_of_ref": "indicator--d99b4a0c-9f13-4738-b7d4-0c3407c6c246", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be0d76ed-4540-4597-8cfc-e72f538bc09d", "sighting_of_ref": "indicator--d99b4a0c-9f13-4738-b7d4-0c3407c6c246", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09fe1b11-753a-4d0d-a6c5-dd66a8d849f9", "sighting_of_ref": "indicator--8c66301f-480e-407f-8574-a836232b4df3", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5947ca3a-8d4f-40f9-a1ff-5fd4bb97bce7", "sighting_of_ref": "indicator--3a3905f1-f527-4c16-9959-0e3c33fda1b4", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a39ac719-7f84-4c94-b1d5-8fcb6680b515", "sighting_of_ref": "indicator--3a3905f1-f527-4c16-9959-0e3c33fda1b4", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b66bc9b-4e2b-4618-b996-00809d31e3f5", "sighting_of_ref": "indicator--c6f4f7ad-32dd-4029-af6f-93d51b1c1384", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2d847bc-3e2c-427b-835a-c3d210104d19", "sighting_of_ref": "indicator--c6f4f7ad-32dd-4029-af6f-93d51b1c1384", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b2f675c-b376-41fa-8ce2-853508fca162", "sighting_of_ref": "indicator--6d8f9c24-4c88-42e9-9dda-93feef92ed4c", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be750361-fbf3-4e31-86c3-7d78ff96c912", "sighting_of_ref": "indicator--31a9bc93-1ec9-4b1b-ba12-58e84a25fa1d", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb1da4d3-0f9f-439c-bfb9-f39dfdc9662b", "sighting_of_ref": "indicator--62a37c8e-addc-4400-bd73-90f23e7172cd", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37642cc0-3345-44f9-852a-eb0abc5d74d6", "sighting_of_ref": "indicator--07e45f26-71dc-4078-842a-90fa9d08e746", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--172c748e-fe24-4d5e-bea3-d6f1a26a11af", "sighting_of_ref": "indicator--3cf7a473-6734-4c00-b189-e076d6344e70", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdf9afd0-7956-4ea4-877c-c2f673059987", "sighting_of_ref": "indicator--744149fd-45a3-4c5b-a24c-d246fb3caefe", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5887712-91ff-4aa5-a4d7-d1ddd92333ca", "sighting_of_ref": "indicator--666ce5f5-8f91-4537-b7c0-960db1ff1601", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82671143-f549-4efe-9dcd-9849c14577e5", "sighting_of_ref": "indicator--36a4219b-06b0-4739-9e46-57e77e3dc983", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16d4880e-eadc-4cb2-9cc8-18b31e9c1b35", "sighting_of_ref": "indicator--87440ba1-0005-4c14-ae60-5cb00b6b96be", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e93c7726-d52a-46fa-915d-f6d8cc425a0c", "sighting_of_ref": "indicator--87440ba1-0005-4c14-ae60-5cb00b6b96be", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66b20c22-f0ac-48e8-bc60-fd0079d9c1ad", "sighting_of_ref": "indicator--f98836fa-ac22-43e7-b8ee-9f7e72a2b17a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c36e845d-cdf0-44a3-85df-6dd98b85de61", "sighting_of_ref": "indicator--f98836fa-ac22-43e7-b8ee-9f7e72a2b17a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56c78e0b-71b0-41b3-87f8-220be9004cae", "sighting_of_ref": "indicator--a09dc3d6-4b15-4e4d-a4b6-f94dabc4eb1b", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b0da56b-04bf-4b80-8284-49b35557fb5f", "sighting_of_ref": "indicator--a09dc3d6-4b15-4e4d-a4b6-f94dabc4eb1b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64b4c171-6dd2-47f8-b07c-99ceef701b44", "sighting_of_ref": "indicator--8f56038e-446e-433b-842a-100070473fdf", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c59bbc8-cd46-46da-85fc-a30802f8e5fb", "sighting_of_ref": "indicator--8f56038e-446e-433b-842a-100070473fdf", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e9adfa5-705b-4ce8-b54f-8ec512991fc3", "sighting_of_ref": "indicator--697de3af-80f8-4928-a55d-94dfd26346c4", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--142ab7d5-b7ec-48b2-946a-469145f4eac9", "sighting_of_ref": "indicator--697de3af-80f8-4928-a55d-94dfd26346c4", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccfc6da5-0e7c-428c-b54c-99a16a7dcbb7", "sighting_of_ref": "indicator--9066963f-2eb5-4d7d-9ebd-a85a8a8400f0", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01bfad96-265d-473a-bac1-302690ff9441", "sighting_of_ref": "indicator--267444b8-afaa-4f89-8779-8a8699b0878b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b87a714-3d6a-44e2-8a0b-9cbdc21808f9", "sighting_of_ref": "indicator--f384a65d-9f1b-43df-9cb5-7b1537bf8224", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dec54e61-697c-425b-b2cf-9af5fc7f8382", "sighting_of_ref": "indicator--f384a65d-9f1b-43df-9cb5-7b1537bf8224", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61de3c1f-6d1d-4446-8104-ba46a209f2fe", "sighting_of_ref": "indicator--78c441c0-dd90-44a1-8592-f51d5a7a341b", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--137f82ec-db15-4815-a299-7dd4c6edde87", "sighting_of_ref": "indicator--78c441c0-dd90-44a1-8592-f51d5a7a341b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--335db6c9-82ad-4cd1-a310-c62756cb1bef", "sighting_of_ref": "indicator--4212cebb-5e43-4724-bbda-7c9365be37f6", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e51ad3f3-32aa-407b-92d8-864606fff4e4", "sighting_of_ref": "indicator--4212cebb-5e43-4724-bbda-7c9365be37f6", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1420d1f3-e551-4737-99bf-7e46f950c7bd", "sighting_of_ref": "indicator--c9494325-2a8b-47dc-95be-e98b94effcde", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94862cd8-9e12-4fde-861c-da3665db3451", "sighting_of_ref": "indicator--e60b9dd7-9f83-4d29-b0ef-cc565ffa6928", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad58c5e9-5814-4e33-a2cc-cad219c27ea5", "sighting_of_ref": "indicator--e60b9dd7-9f83-4d29-b0ef-cc565ffa6928", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e3a1eed-8ede-4e50-8e9c-c7cbf9f52b45", "sighting_of_ref": "indicator--801cb08a-02b3-4a76-99ea-f372e1c1e620", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00e35e33-3f2a-46a2-8a81-d7818880a0d1", "sighting_of_ref": "indicator--d723b4a1-38aa-4441-86c8-50baec50e9c0", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dff6bc13-ae00-4b1e-baea-557185d08275", "sighting_of_ref": "indicator--7f670cdf-ed42-4a1a-9e03-90a18f64a35e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddcd5497-de61-4876-a28e-3dfcc1183691", "sighting_of_ref": "indicator--7f670cdf-ed42-4a1a-9e03-90a18f64a35e", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--822cce39-2459-430c-a9cc-5782d90d0bbe", "sighting_of_ref": "indicator--cd3f7b6e-37ae-41af-ae2d-2137292766ea", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--827746fc-9aa6-4e66-9d66-63e2ece3f253", "sighting_of_ref": "indicator--09a31db6-5056-453a-8977-235f5ad2b293", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2d3e25f-f361-49d0-af36-411bf5dd8e21", "sighting_of_ref": "indicator--09a31db6-5056-453a-8977-235f5ad2b293", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--faf0db29-a78d-4d9e-bfec-167848e1d13d", "sighting_of_ref": "indicator--5b4be0bc-fb0d-4b38-9e39-78a3836d4446", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53c45590-b714-44dd-bdcd-e2da89b9e80e", "sighting_of_ref": "indicator--5b4be0bc-fb0d-4b38-9e39-78a3836d4446", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5753ccd0-562a-4056-bf12-7eaf489e55e4", "sighting_of_ref": "indicator--324b1aea-40d1-46dc-b144-731ff52abb48", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7171ea0c-ba98-4a1d-8505-adee322dd87b", "sighting_of_ref": "indicator--324b1aea-40d1-46dc-b144-731ff52abb48", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2400f5a3-732e-454b-9d33-db21700fed98", "sighting_of_ref": "indicator--69a42711-4565-4b63-8b64-cc488ae91ca6", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bac821a8-5110-4ec5-8107-81f8d5f17bc8", "sighting_of_ref": "indicator--c9f483bc-be97-4cbf-a0c4-c9100c0da0e1", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c184041-c552-4f9c-b941-b9b340ad664c", "sighting_of_ref": "indicator--c9f483bc-be97-4cbf-a0c4-c9100c0da0e1", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9cf7b61-6837-4168-840a-b981b169a350", "sighting_of_ref": "indicator--d2a0bcfa-cf44-4ea5-b92d-0264e47053ec", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7f7aefd-c6ec-47f6-9128-ffa00e15d560", "sighting_of_ref": "indicator--cd323617-87ee-413b-b39f-b1cde4231b04", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acbbe68e-1e6b-468a-a534-f7984d01ae23", "sighting_of_ref": "indicator--cd323617-87ee-413b-b39f-b1cde4231b04", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d97bbb2c-6d2c-4040-b090-9be300dee8ce", "sighting_of_ref": "indicator--d48f04fd-ef40-445b-bbdf-12c4c4073cf6", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a3640f5-c5ad-490f-b7aa-65f853f1232c", "sighting_of_ref": "indicator--d48f04fd-ef40-445b-bbdf-12c4c4073cf6", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6329303b-65be-4897-b838-4c328fef54f6", "sighting_of_ref": "indicator--f9862389-97b6-4298-a1e7-b84cadc4752a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfa25eb5-d766-4129-a459-d9ee839df868", "sighting_of_ref": "indicator--27aa2c6e-7e2d-44f1-9eba-403f578dc97c", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ecfcb0f-e934-4d66-bd11-4d047b588e38", "sighting_of_ref": "indicator--69bfab8a-6eeb-4d81-b7fe-9fbd25d197b7", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15107c73-be99-4f83-bf92-bc0cb2f0d623", "sighting_of_ref": "indicator--35433a9d-bebf-4931-a263-f71ddd61a085", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb333de9-0606-4f77-a5e6-33e6207a4b21", "sighting_of_ref": "indicator--35433a9d-bebf-4931-a263-f71ddd61a085", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b9c37c2-7729-4d9d-a48b-d93699d4aae9", "sighting_of_ref": "indicator--de1bcbd2-3e6d-4956-9661-3bfc8a7865a6", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e257e5b-3bd3-4144-a593-8c95c19d08e3", "sighting_of_ref": "indicator--de1bcbd2-3e6d-4956-9661-3bfc8a7865a6", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0b1a005-a96e-4955-b219-ca14405b31f8", "sighting_of_ref": "indicator--8b732b6e-13ae-4e57-b5d3-d48095c91d0f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30b31e1c-3fa3-4da9-b7d1-60cd2463fb56", "sighting_of_ref": "indicator--a2abdfc0-979e-4a53-b05c-0f4c7f9553bb", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2aac5d46-c9ea-4ed8-b61a-89d5a21cef42", "sighting_of_ref": "indicator--1eb36d70-d40e-43a8-996e-6e5e3dae2ecc", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--171be41c-28f2-45a1-a1f0-2d5758d4baeb", "sighting_of_ref": "indicator--1eb36d70-d40e-43a8-996e-6e5e3dae2ecc", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdabdada-0e7d-4a86-81d1-bb6c67c9d1f4", "sighting_of_ref": "indicator--b598b0a5-40bd-486c-902c-19edd508de64", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62f471c1-5c59-404e-811e-dbbec2e03ef3", "sighting_of_ref": "indicator--b598b0a5-40bd-486c-902c-19edd508de64", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d361b631-e4a0-4bf2-a7c0-e163928a6ea2", "sighting_of_ref": "indicator--c99f6161-8a42-40e3-adb2-ef41299d0309", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ada3340b-63e4-4a1a-8eb1-579885bb30e2", "sighting_of_ref": "indicator--eda22a82-abb5-4c78-8049-cd2b1ea922a8", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12872b8a-3eb6-4f5f-b2bc-17ab8e58070e", "sighting_of_ref": "indicator--eda22a82-abb5-4c78-8049-cd2b1ea922a8", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8e24249-3cd2-4efb-b0d4-2bc03b633f65", "sighting_of_ref": "indicator--eda22a82-abb5-4c78-8049-cd2b1ea922a8", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5f32433-aa00-4630-bce6-d3b204d6cebe", "sighting_of_ref": "indicator--8ac885b6-3055-45cf-930e-a8fdb4056397", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dea587c-5553-4282-83e4-bbeffe823917", "sighting_of_ref": "indicator--df3ce6d5-3e96-4db1-a88f-6aafe688020d", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c49989d-d089-4de1-9798-991a701b2313", "sighting_of_ref": "indicator--df3ce6d5-3e96-4db1-a88f-6aafe688020d", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2dd40d5-99a8-47c0-a154-8ba413583a40", "sighting_of_ref": "indicator--4e103371-3d47-43fe-b1a5-ab4e57f40299", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f74dbd86-dc19-48ca-b160-3a8e5649af52", "sighting_of_ref": "indicator--0e0669d3-1705-4784-bfd1-c50c1456c80e", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a42c30a-cc4e-40d6-8891-82b9f4e69e75", "sighting_of_ref": "indicator--0e0669d3-1705-4784-bfd1-c50c1456c80e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a24f6c6-5528-483d-944d-0192abd9d3cf", "sighting_of_ref": "indicator--f11c1000-d669-4a16-98e3-faf1c7389516", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a5cdfc7-9c2c-40b7-a52e-c80b225cded2", "sighting_of_ref": "indicator--fdd36aeb-0ca3-4c64-a894-b9e5ea574466", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc3d698e-d9e3-4656-a452-12081fe04196", "sighting_of_ref": "indicator--15260cd7-1930-4b3f-b36c-dfb1e67144f6", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89f7de8c-5529-4d90-b61b-2487b1452f12", "sighting_of_ref": "indicator--a78afabc-b965-488d-9977-7f08024d75ea", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a71674a0-d078-4d32-af88-650e3616cc9b", "sighting_of_ref": "indicator--a78afabc-b965-488d-9977-7f08024d75ea", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dfa1bdf-afce-4849-9caf-43dd13fc5a54", "sighting_of_ref": "indicator--a78afabc-b965-488d-9977-7f08024d75ea", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56903256-2357-4d75-8166-541cc294c1b2", "sighting_of_ref": "indicator--96a238b0-e5ac-4309-a0fd-20c7ab2186f7", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d314d83-9afc-4833-b21b-92e56c66a15d", "sighting_of_ref": "indicator--590478dc-376d-4370-ad22-bec0ffbbdfbf", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e1fdb7f-4829-488f-acca-706f31d04809", "sighting_of_ref": "indicator--3c85a492-a8ac-4e1d-b70c-fbf43bdc38f2", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68c70f9e-5242-463d-9839-0036170d5fef", "sighting_of_ref": "indicator--3c85a492-a8ac-4e1d-b70c-fbf43bdc38f2", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5682674e-c9fa-42a0-b34e-7ee14553928e", "sighting_of_ref": "indicator--d223dbf5-b1f2-4ab0-b049-be56a5d10cfe", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea14b14c-61e9-4a45-b30b-a6c94f75c454", "sighting_of_ref": "indicator--341d125c-ed96-4bb3-9057-03c53622e98a", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9da3ae9f-68bd-4518-b716-5984b2641b40", "sighting_of_ref": "indicator--d7896370-84a3-4b1d-a314-ca652b8cfd64", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc656a47-f6f8-4e91-844d-84bc60f45802", "sighting_of_ref": "indicator--b18fdb6b-6b66-4c81-94ce-cd6df7fc80db", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cb7fe64-1450-4407-b465-9f8c95684447", "sighting_of_ref": "indicator--397d8415-cd22-42e3-8364-1e88e30b4494", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b578d3e-af81-4f33-a47f-bf6f68f5d2eb", "sighting_of_ref": "indicator--9523398c-b050-41b2-a4b9-34181cafa9f5", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c264d7e-a83a-4a44-b4ec-47e4f019a772", "sighting_of_ref": "indicator--ca6f0efa-4a9a-4f1a-8f8c-26eabf7ea7e8", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91d654e4-2d6a-489b-83cf-cb1117678665", "sighting_of_ref": "indicator--6491880d-e5ec-4265-9b40-d954c2059221", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0ce807e-a53c-4980-9b9e-d5d8d0929a3f", "sighting_of_ref": "indicator--1b5ab18c-e0cf-4031-bec7-dce06daac1bf", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca97cedc-b3a0-4b07-b762-5dee4b956fb0", "sighting_of_ref": "indicator--491b6570-0c35-4d46-9f80-9bf631443f71", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baf36dca-9f5a-40da-8ab7-98e365ef4d62", "sighting_of_ref": "indicator--491b6570-0c35-4d46-9f80-9bf631443f71", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd0f5640-3a3d-4f30-8b95-5817c98683cd", "sighting_of_ref": "indicator--7fdf26b0-3322-4b7e-924a-2524697b6c40", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edc24ba6-b84b-4a83-b324-bfb963fba781", "sighting_of_ref": "indicator--4ad2dbc6-bd33-4a01-abb3-ed607753df53", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b073db0-6607-4a18-9592-f9f978ec8ee2", "sighting_of_ref": "indicator--9aa41c76-2f85-4f05-a276-863b4479364a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba5872ba-4173-4db4-b636-960324d75303", "sighting_of_ref": "indicator--da346cfb-14e0-4a18-846e-4685912f05f3", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--560bb369-7cb0-4c5a-b681-637b1705e700", "sighting_of_ref": "indicator--d1a95385-1ce0-4203-9cfa-fb885f8c9269", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d076e86-dd46-49b3-a68a-64f0f1104fb5", "sighting_of_ref": "indicator--d1a95385-1ce0-4203-9cfa-fb885f8c9269", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--257e5d0f-eb33-4375-85a5-59ab6d869b75", "sighting_of_ref": "indicator--d1a95385-1ce0-4203-9cfa-fb885f8c9269", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1633030c-c4a4-46f1-b6d4-3e38d8053dd6", "sighting_of_ref": "indicator--82ba9ba6-aced-4c03-9891-363e0dbb5218", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--665c1ce8-495a-4096-962e-12e20f271eca", "sighting_of_ref": "indicator--6c8085a2-7fd9-4246-82c8-6f6543d49a29", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8e2a48b-cc3f-4fab-b7be-ba686a2bd8fe", "sighting_of_ref": "indicator--01d05300-c010-4cf9-be75-e5771b7bb48c", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--043412f2-60ad-4607-929c-da4b21a3f3b5", "sighting_of_ref": "indicator--01d05300-c010-4cf9-be75-e5771b7bb48c", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58108960-29f5-46d3-aaca-6ebdbd38842f", "sighting_of_ref": "indicator--a4a1ca11-bd74-417d-9267-5ca01b95b1cc", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee354a97-7de1-426e-811a-4463d1ccd026", "sighting_of_ref": "indicator--a4a1ca11-bd74-417d-9267-5ca01b95b1cc", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e9fe4c6-1b22-4992-8884-4f6ddf7d5e26", "sighting_of_ref": "indicator--a4a1ca11-bd74-417d-9267-5ca01b95b1cc", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86dd1686-0ab8-4538-a266-890d33815395", "sighting_of_ref": "indicator--6dab6ec8-a73e-45c7-8e7f-75814a61b386", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79355f2d-89c0-42fe-9f8f-cedb579cfd36", "sighting_of_ref": "indicator--e0711572-58df-4d67-b717-79b4f32a6240", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb27c5d5-c1c0-49ba-acef-d3a5d4c315a2", "sighting_of_ref": "indicator--64be8ecd-1884-436b-804b-1fdd754a7987", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94f8f5f8-84e0-4646-bd09-84abfcb5f335", "sighting_of_ref": "indicator--425e0711-e130-4091-a141-369551eaa8fd", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba16db69-63b6-4049-a3ef-c9510c45517c", "sighting_of_ref": "indicator--f2ea1448-269b-42f7-bfd0-d7ac1beba324", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ef5b658-5c6c-4373-9425-1173771c68bf", "sighting_of_ref": "indicator--f2ea1448-269b-42f7-bfd0-d7ac1beba324", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6df9d414-0e27-45ee-82bd-90e15fcecc8d", "sighting_of_ref": "indicator--6021d2ee-10b4-47e4-8712-789b9b2d028e", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85130f0b-2256-4aa6-b1e8-a9d00a1b749f", "sighting_of_ref": "indicator--6021d2ee-10b4-47e4-8712-789b9b2d028e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4387c1b4-a879-4d46-a58f-5385fb59aa0b", "sighting_of_ref": "indicator--86db3d95-b080-43ad-ac45-0a529caf8597", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a182353-1a2c-4993-a188-e6a0dcd31797", "sighting_of_ref": "indicator--86db3d95-b080-43ad-ac45-0a529caf8597", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a52f4b9-3370-4c6c-9d4a-d15924dbcd99", "sighting_of_ref": "indicator--24d4c28b-56c4-45b5-8395-68438dc68c94", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f7fe67c-a781-4c5a-bc26-8175f2816eff", "sighting_of_ref": "indicator--37a0c33a-4328-40d8-90b4-77711a37ee55", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e9b3432-4bb0-4b8f-86f3-905487f3c906", "sighting_of_ref": "indicator--226eaca0-dcca-459a-b54d-ef5a4806b953", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a65bf78-3087-4479-8a4b-e0d0ffab7c99", "sighting_of_ref": "indicator--c3423f41-1ca5-4cce-9f5f-b0e7c22f80f3", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff8b8080-426b-4f7e-8d94-ece4b631447b", "sighting_of_ref": "indicator--3587b796-6724-4f79-ab4e-d020b282b4a3", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b632c54-6cfa-4118-bb40-3b8a2f64b19b", "sighting_of_ref": "indicator--3587b796-6724-4f79-ab4e-d020b282b4a3", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--047c8e31-b272-4f82-94e0-2413d6239c49", "sighting_of_ref": "indicator--61b3ff2d-a4eb-4651-b91d-575b9271a2d4", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9933a652-3f2c-421e-be45-430023341095", "sighting_of_ref": "indicator--2af98123-f9e4-4dad-925f-6f1442be3a96", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c7d610b-136c-464a-8758-0afd097e3c95", "sighting_of_ref": "indicator--09826c90-5cda-4a4e-992d-c0f6b92efaca", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4365724e-2b5f-40bc-b385-29abfcd14e7d", "sighting_of_ref": "indicator--3dc7390e-a93c-4eaf-95b1-442634ee170f", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7de18fc-6579-434f-b78a-c7d7c270d230", "sighting_of_ref": "indicator--ae61c757-7a58-4e67-bf7c-7c3a46cb13cd", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01dda7fb-1460-45c6-8437-73e987e456f0", "sighting_of_ref": "indicator--ae61c757-7a58-4e67-bf7c-7c3a46cb13cd", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df915f90-f3ca-40e3-9ff1-4c70cd4c3f0b", "sighting_of_ref": "indicator--1a9425e5-35e5-441e-8e95-cb4fe8d7080c", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7ea4a71-5a71-4a21-a1bf-c8c5dd055478", "sighting_of_ref": "indicator--1a9425e5-35e5-441e-8e95-cb4fe8d7080c", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77f55d2a-ed8d-4ba3-af14-9c7321fdeed8", "sighting_of_ref": "indicator--1a9425e5-35e5-441e-8e95-cb4fe8d7080c", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca6b0ee9-5e98-416e-9c54-dc11602534d8", "sighting_of_ref": "indicator--b5d1db40-556a-4515-9e2d-9cd4e96e6536", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5437927d-11f6-4904-bbda-59ffa3eaf130", "sighting_of_ref": "indicator--b5d1db40-556a-4515-9e2d-9cd4e96e6536", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--355727cb-1ae6-4017-abdf-40b4b440eea1", "sighting_of_ref": "indicator--d2633e6c-77c5-477c-b79f-9176109ad247", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f424e87f-5cdc-476a-87cb-6d29252d9737", "sighting_of_ref": "indicator--d2633e6c-77c5-477c-b79f-9176109ad247", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b7b15ee-14d5-4f12-9cbc-3ee49836132a", "sighting_of_ref": "indicator--d2633e6c-77c5-477c-b79f-9176109ad247", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d492f9e4-2f0a-4095-ba7c-3658e3a7f856", "sighting_of_ref": "indicator--57751f55-358d-4a4e-99e2-c9c7b5368400", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c675b1b-d06b-4c38-b34c-516ec99a2d83", "sighting_of_ref": "indicator--57751f55-358d-4a4e-99e2-c9c7b5368400", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b547783-fa4e-4cbe-ba31-fb92ad413f2f", "sighting_of_ref": "indicator--01063629-a950-4b74-a721-1e30d3a15782", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92ef5171-c622-46f1-bb19-231a9d394d3f", "sighting_of_ref": "indicator--01063629-a950-4b74-a721-1e30d3a15782", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ad72dcb-196c-4e9b-b4c8-426be3babfd3", "sighting_of_ref": "indicator--01063629-a950-4b74-a721-1e30d3a15782", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b152be09-dde0-433e-959f-c95085413cac", "sighting_of_ref": "indicator--69050783-a2cc-4880-be62-e410d3dfd156", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38bf5e03-741b-41a6-8c34-b8a85bcd55c8", "sighting_of_ref": "indicator--69050783-a2cc-4880-be62-e410d3dfd156", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b48207a3-0d60-497a-b403-9b7161c22013", "sighting_of_ref": "indicator--69050783-a2cc-4880-be62-e410d3dfd156", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62f43298-17b2-434f-bbf5-7fdedb863ebf", "sighting_of_ref": "indicator--4fae31ea-f69f-420d-9e18-239eb66d66c5", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d871dfad-be43-4d47-8907-0e4c4e9204db", "sighting_of_ref": "indicator--4fae31ea-f69f-420d-9e18-239eb66d66c5", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0171561-7409-4b06-af8b-4c3149dd307d", "sighting_of_ref": "indicator--4fae31ea-f69f-420d-9e18-239eb66d66c5", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7dd2fee-5539-4053-9491-13e0c85fac2f", "sighting_of_ref": "indicator--950ba4d3-0022-4444-9d24-0f1dc2ad4636", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6da179a6-2b62-4613-97f8-492e2f3c8817", "sighting_of_ref": "indicator--950ba4d3-0022-4444-9d24-0f1dc2ad4636", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cce76f47-934c-4a5c-84d6-27d6363c66bf", "sighting_of_ref": "indicator--950ba4d3-0022-4444-9d24-0f1dc2ad4636", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e5abe6f-a5d7-4af1-8720-ed9674a63107", "sighting_of_ref": "indicator--d7aa9374-a691-4558-b71e-5fe2da1ef0be", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b28ca0fe-f276-47a3-b9d5-dd74bc5fe560", "sighting_of_ref": "indicator--d7aa9374-a691-4558-b71e-5fe2da1ef0be", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--417da505-ab2a-4aa5-af99-8ff02555e9b8", "sighting_of_ref": "indicator--691d705d-16f8-43fd-b536-5ffb8d8c153e", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--039e4bb0-5219-4382-b38a-53277800d3af", "sighting_of_ref": "indicator--691d705d-16f8-43fd-b536-5ffb8d8c153e", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4622015-3fe1-4bc5-8e9d-dc3d65d421b4", "sighting_of_ref": "indicator--358166c8-39e2-4be5-acb3-a7eeb47a2e03", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8668befb-1534-4909-84fa-24c2105ae398", "sighting_of_ref": "indicator--358166c8-39e2-4be5-acb3-a7eeb47a2e03", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1373202f-fe59-4248-93a5-cc2619603102", "sighting_of_ref": "indicator--c6b21110-ff23-4a8f-b118-97a290d5af54", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d55b1ea-9f09-4b0d-9ee5-9c73a4fdd1a8", "sighting_of_ref": "indicator--c6b21110-ff23-4a8f-b118-97a290d5af54", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69b59f9d-05e7-46b3-96ea-33d556049856", "sighting_of_ref": "indicator--c6b21110-ff23-4a8f-b118-97a290d5af54", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--783f0c57-2293-40d1-ac7c-ed42aea08844", "sighting_of_ref": "indicator--33024420-8e97-4813-9709-88c0db019081", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f113914-be65-4804-9171-42b515b9036c", "sighting_of_ref": "indicator--33024420-8e97-4813-9709-88c0db019081", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bf16bf5-f166-42d6-97a9-008c124da945", "sighting_of_ref": "indicator--33024420-8e97-4813-9709-88c0db019081", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8d6545c-0fb7-4c14-a0ab-f704924c49d4", "sighting_of_ref": "indicator--8bd2f1b6-29db-48cd-966d-076a28348d55", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4730e9d4-f559-46c1-ba60-49438788d0df", "sighting_of_ref": "indicator--8bd2f1b6-29db-48cd-966d-076a28348d55", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68ae353c-f47e-46ab-a402-7868fdb2600e", "sighting_of_ref": "indicator--b4dbc1d0-3d7b-4465-b4ad-b1287a1c3112", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35f2fc45-0eb6-4198-91b8-2aec71980b3c", "sighting_of_ref": "indicator--b4dbc1d0-3d7b-4465-b4ad-b1287a1c3112", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a1232ce-0a4b-4a09-beee-94db522870f0", "sighting_of_ref": "indicator--b4dbc1d0-3d7b-4465-b4ad-b1287a1c3112", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55710160-8c48-4468-99aa-6ae3a65c7de9", "sighting_of_ref": "indicator--b1303376-aa0e-439b-9de3-c8ba0bdad685", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c569cce9-ff1b-4f06-ad22-e1d4ec9646f0", "sighting_of_ref": "indicator--b1303376-aa0e-439b-9de3-c8ba0bdad685", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--629601dd-cc40-4043-91ff-1da0d7aa9936", "sighting_of_ref": "indicator--b1303376-aa0e-439b-9de3-c8ba0bdad685", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51fa0527-5d4a-4c86-8f86-7a7376333505", "sighting_of_ref": "indicator--7389900a-1fc5-48f9-9b52-7483ed7d85fe", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c29a71a3-259d-4952-8a89-03b77dbacb86", "sighting_of_ref": "indicator--ffbcc70c-126f-40d4-83e6-06569ff8ee57", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93652e41-cfb3-4688-8ca1-d0bfcd85d681", "sighting_of_ref": "indicator--d50d26a0-dbb5-4d49-b134-f4adfd5f61e0", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1eb4110-6607-4beb-94b7-8c6cdb6d7361", "sighting_of_ref": "indicator--d50d26a0-dbb5-4d49-b134-f4adfd5f61e0", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78e169c0-562b-4f5d-a7dd-f3f635b4e956", "sighting_of_ref": "indicator--18859306-5805-4e0e-bf06-b2717cedffe4", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bd0e225-d4a3-4c84-96c0-326986d1725b", "sighting_of_ref": "indicator--ec1357ae-2b74-4803-ace6-277d87f3ef8c", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6142a849-9da4-4c28-8259-b40aec551235", "sighting_of_ref": "indicator--8b7bb9be-a138-4eeb-a0a9-7d65a9d9898d", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dda69960-4ba1-40bf-9292-b6343e9cd517", "sighting_of_ref": "indicator--05bbb2e2-3fbb-4434-a2c4-3587ec95a249", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27a0a034-dc75-4fcf-9cc1-08ab54ba7f5d", "sighting_of_ref": "indicator--a2adc81b-5296-43a5-a555-81ecd04a042a", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--056c64c6-1b8a-4c5e-a88f-99c85cd32029", "sighting_of_ref": "indicator--a2adc81b-5296-43a5-a555-81ecd04a042a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--107afcee-58b2-4ad1-8dc1-fafb729989ff", "sighting_of_ref": "indicator--a2adc81b-5296-43a5-a555-81ecd04a042a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc9ce194-e322-4972-968c-7787da1c0f01", "sighting_of_ref": "indicator--d888cbc0-8a3a-4f92-b4da-bbbf1c3ad39b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22d2197b-e081-4e64-8330-f99704d61fcb", "sighting_of_ref": "indicator--040885e7-0eca-4790-91b2-dfb7c622157c", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24a2a144-055d-49d8-9bd0-36320d44217a", "sighting_of_ref": "indicator--f31b9c86-bb7d-46cc-8814-6d667ec49274", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a968f3fd-cf57-4745-9ae6-44ae3bb2a0ef", "sighting_of_ref": "indicator--d15ae98a-70b8-42d0-8572-568d97cd1472", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adcf357d-93e5-407b-a05e-b92c2420df9c", "sighting_of_ref": "indicator--3c2bce40-8a92-4f18-8d22-3eafd7f27047", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84712ca2-65f2-499a-8eb8-d0a3241a3c33", "sighting_of_ref": "indicator--0b5f80db-53c9-4ad0-a578-857a0725c1f2", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be3a12ce-4391-4031-b229-dafd20d3948f", "sighting_of_ref": "indicator--66744c78-51b1-4182-a07f-f2c3ee6354b2", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8af567cd-e0b4-4f11-acec-a1d2ba3532e5", "sighting_of_ref": "indicator--24de57f7-1e18-42a3-9377-5d1b3d8873a8", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3858c76-ea2d-4ccc-bb02-f8b4c8681101", "sighting_of_ref": "indicator--8538fab3-99fd-4a10-a8f6-9e626f2673ad", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29202bde-c508-4c3b-aeb8-1aa7486bb714", "sighting_of_ref": "indicator--8538fab3-99fd-4a10-a8f6-9e626f2673ad", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e1aaf61-ba0f-430d-9a2d-ad19e40981ca", "sighting_of_ref": "indicator--da6f91a1-9988-4ed9-b353-acd171c9b1ce", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30c54d2a-075c-4c39-9ae2-cd469e4e80a2", "sighting_of_ref": "indicator--baacb0ea-1bc6-4e73-9c28-d252bbbc263b", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a79c039-8213-409f-91fc-7a7cf5a89f8a", "sighting_of_ref": "indicator--e5307bbd-6008-4caf-9e10-64d1fdbd41e8", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e61dd391-a5be-4ccb-977a-73acb7d80800", "sighting_of_ref": "indicator--7dedc153-1915-4c5c-b6c3-d7325dcc8f37", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab8bf37a-549e-481d-a830-4ab18266c583", "sighting_of_ref": "indicator--cd292d33-608f-4462-9749-f902694ca9c9", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--518e1dd3-3a48-436e-8064-9fd220a1a43f", "sighting_of_ref": "indicator--dff7c93e-6c08-4fa3-9442-12fa9b0dde13", "where_sighted_refs": ["location--cc47317e-2c18-43a6-8938-dea748a56ad5"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cf8901f-4d00-4d55-a200-267963329381", "sighting_of_ref": "indicator--084fe078-8c10-4670-a673-64f637774caa", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e12e8acd-d346-4a65-936b-e07d548f5bba", "sighting_of_ref": "indicator--06c7a643-781c-440d-88e5-2b90bf404f58", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87f45a7f-d626-49ba-8746-481f32b76252", "sighting_of_ref": "indicator--84340e12-1881-43b7-b226-4f21fd50474e", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea20000b-aa2f-46fa-be51-462257d2d272", "sighting_of_ref": "indicator--02821cf6-c82f-4c69-ad41-e9425471ed2d", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3db7687-76fb-44d3-8c0f-8ef43587869e", "sighting_of_ref": "indicator--02821cf6-c82f-4c69-ad41-e9425471ed2d", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5ad641d-2f75-4be6-84e1-9e6d132beee8", "sighting_of_ref": "indicator--dcf79244-08f7-42cc-99c8-835705df68fc", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc3ea677-e31c-425e-8fc4-bf1a0d405c23", "sighting_of_ref": "indicator--dcf79244-08f7-42cc-99c8-835705df68fc", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f5750e9-37fc-47ff-9387-c59db6211258", "sighting_of_ref": "indicator--dcf79244-08f7-42cc-99c8-835705df68fc", "where_sighted_refs": ["location--cc47317e-2c18-43a6-8938-dea748a56ad5"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b3118f9-192f-4985-ae96-165dd0d1eddb", "sighting_of_ref": "indicator--f9db7eb6-948a-4705-8e30-b772469827a7", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d4bd9eb-8b4e-4c7d-a3bc-46dbfa4bba53", "sighting_of_ref": "indicator--f9db7eb6-948a-4705-8e30-b772469827a7", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68d2df1c-c255-4023-b78b-8efcb3578166", "sighting_of_ref": "indicator--f9db7eb6-948a-4705-8e30-b772469827a7", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--789b642c-fdd6-4831-8acf-fed41380c930", "sighting_of_ref": "indicator--f9db7eb6-948a-4705-8e30-b772469827a7", "where_sighted_refs": ["location--cc47317e-2c18-43a6-8938-dea748a56ad5"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecb061fe-7e9b-4ce2-b8e6-4fea3579422b", "sighting_of_ref": "indicator--a6777b6a-44ef-4ad4-b2e2-c6631edcf2ce", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4f97fdf-4615-4153-a716-e1264ede0cb6", "sighting_of_ref": "indicator--a6777b6a-44ef-4ad4-b2e2-c6631edcf2ce", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e2256c0-1847-44f6-b280-ed836b24ec8b", "sighting_of_ref": "indicator--a6777b6a-44ef-4ad4-b2e2-c6631edcf2ce", "where_sighted_refs": ["location--cc47317e-2c18-43a6-8938-dea748a56ad5"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--373439fc-7669-4117-a514-55929773bbc0", "sighting_of_ref": "indicator--3fe35ab7-c1e6-466d-9dec-8fd63c846536", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b59fee0e-41d1-4d20-a10f-0dbf9a46eefc", "sighting_of_ref": "indicator--cb372e13-fd6d-49ea-88a3-a634bc32af15", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7672b6c-3749-4213-adad-f7acc92328cd", "sighting_of_ref": "indicator--7899060e-ee6f-491e-9e18-c0c174dabd73", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e39906b-8c2d-430a-8ce9-fc5e936aab87", "sighting_of_ref": "indicator--8ab235b3-4989-42cd-8226-a7794f482301", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90ffbd6a-f19a-411f-a5c4-9c1ae10d532b", "sighting_of_ref": "indicator--5946c699-26c0-4597-8141-97737c9ecd0a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e34598f-e1ab-4727-97cd-899f6e5517e6", "sighting_of_ref": "indicator--dc534ddf-4514-4f0a-9064-ddca286a00bc", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c719452a-858e-440b-bd9b-24e0d504d323", "sighting_of_ref": "indicator--7f177f2d-9699-4131-94f3-bd6f8eaa80d9", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13376113-9c74-4b11-8fef-c6860963155d", "sighting_of_ref": "indicator--9d74a866-7e56-4a91-9fd2-d0191ff3aa06", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12ab22db-d2c7-43c8-bf9d-c0996ab9fe1f", "sighting_of_ref": "indicator--19dc0d35-413b-46d5-bc2e-ceac371305d1", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--938b6071-ed00-463c-a97c-a5b2e6c7d2d3", "sighting_of_ref": "indicator--761160da-5dc7-431e-93d5-ba51cb0af7e0", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae13d731-540b-4bbe-a9b9-010d86aa93b8", "sighting_of_ref": "indicator--48ccf56c-3de3-4c43-a47a-0b0a710a9d85", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5565bd93-0068-4972-9c08-7ee587076742", "sighting_of_ref": "indicator--80d08285-d630-43ec-92aa-c7ea859f150d", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dcba878-0dc3-4aad-b627-cb2fdb47f8f9", "sighting_of_ref": "indicator--561a6bc3-2f2d-4e14-9d47-529b6f740ba7", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c05fcfa2-0581-4fbc-8bbc-5fca2386554b", "sighting_of_ref": "indicator--35b7bf1d-eb9a-4d92-999a-1922c486a46f", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1550a212-67b4-4506-99a2-7018d913c47e", "sighting_of_ref": "indicator--7f37cd34-151a-4182-8413-a2d4385d351b", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--553fa3c6-f005-4992-8157-0fb853643ed2", "sighting_of_ref": "indicator--c7551251-5176-49f0-a05e-f1cc520360fa", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b5a2a80-827b-4e18-ad9b-d90430707460", "sighting_of_ref": "indicator--c7551251-5176-49f0-a05e-f1cc520360fa", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3764d84-a732-4ec7-ad79-64c57870b1ca", "sighting_of_ref": "indicator--d98235a9-6471-49f5-b1b1-716df5df513b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--778e26c7-d247-4966-8e79-109d3c869f91", "sighting_of_ref": "indicator--222f14aa-efa6-44c7-8eb6-215f2c3303a1", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--001e8da8-fc22-4d88-b161-dddfa480f5a5", "sighting_of_ref": "indicator--454249b1-7509-4f20-b45a-b73b472600b3", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a96c0b50-dcd3-4f28-9514-761b4ab24db1", "sighting_of_ref": "indicator--03f89d1f-477c-4bbd-b7ef-d2b1a71945f9", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21120d37-1ca3-4778-869c-1d3a93dee19b", "sighting_of_ref": "indicator--ba521ae4-215a-4ee3-96af-cf91ac786a4b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d3b3fb3-ed9e-49dc-a2a6-80a4ada44352", "sighting_of_ref": "indicator--770d633d-51ce-465d-a6ae-97946e881b40", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82559d26-ba90-45cd-bfac-2adc0527c635", "sighting_of_ref": "indicator--0a4448ee-724c-4bef-be12-eeced57372ad", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--213240fa-fe39-42db-8c99-8610278dcb78", "sighting_of_ref": "indicator--f2a700ac-aa41-4f1e-976f-c4f8e389ada3", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abb7a87b-9b79-4df9-91cf-66d067a047df", "sighting_of_ref": "indicator--fa08f964-3c13-4652-abd5-47c7284f8284", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24997104-3c9f-44bc-9a54-98bd9d1ce117", "sighting_of_ref": "indicator--c5924874-c356-41f3-8020-336e5a048721", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9febda25-84ef-42c0-bdaa-afca5ee56840", "sighting_of_ref": "indicator--cb1ea002-ac99-494b-8e99-11275573f48f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3bcca66-b6ae-45fb-aa7b-f133017beff3", "sighting_of_ref": "indicator--cb1ea002-ac99-494b-8e99-11275573f48f", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d933e999-07d1-4b9e-9526-073fa961c86f", "sighting_of_ref": "indicator--596dfa1c-c859-4338-9045-feb81568490a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6addbca-520f-419e-bbaa-304371efc798", "sighting_of_ref": "indicator--596dfa1c-c859-4338-9045-feb81568490a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3af91fd8-4e91-41e3-b57b-d44c3f53efdf", "sighting_of_ref": "indicator--fe7fe2e5-14d8-4504-8fae-d1f33f992fec", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4e70de2-31ca-44d6-a81e-6d1643e7a756", "sighting_of_ref": "indicator--9c0c584d-fee3-4f78-bd31-0f9f8866a37d", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93fd226b-b8a7-403c-9965-9880f161a9ba", "sighting_of_ref": "indicator--18067c54-f3f1-4a1e-886f-4024f0f32502", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95d1d613-2c2e-4561-93d6-b69fd644c800", "sighting_of_ref": "indicator--8da1837e-4351-4a32-8f52-e0e35eaf9221", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a2e0ad2-9de7-4925-bedd-2067ed3944ae", "sighting_of_ref": "indicator--8da1837e-4351-4a32-8f52-e0e35eaf9221", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d606b1b-adaa-407c-b135-6903730bd289", "sighting_of_ref": "indicator--9b474ca2-796c-48ef-a881-45a219ddeabb", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ece3952a-963c-4c50-ae84-eeb7897b499a", "sighting_of_ref": "indicator--eaf77641-30d3-4f51-9de1-de0b49bc225c", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e256b79-fadc-4845-a8ad-94f757825ac3", "sighting_of_ref": "indicator--ede05421-d3fe-4a2f-a479-0246cd55e0de", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66e69557-0b00-475f-b677-7b3220f0bf51", "sighting_of_ref": "indicator--37021722-267b-4045-995e-34372f034a3a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2889718e-97d9-44d0-9f7c-a7349f87d97e", "sighting_of_ref": "indicator--6be479ac-c65c-48f9-863e-247821ba92a2", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--222f667e-66fa-4b50-85c3-753fcf5ad6c6", "sighting_of_ref": "indicator--fec4cefb-e3f7-437e-8793-e8bd19c2664c", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fdd812e-ac00-4ca9-bb3b-179f104b5683", "sighting_of_ref": "indicator--fec4cefb-e3f7-437e-8793-e8bd19c2664c", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4597fa6-4f8a-4b27-a79e-b5d211018e1a", "sighting_of_ref": "indicator--4b87d584-1922-4e5a-8a0f-24b7e6420140", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81d80e93-4b2c-4b6b-8eeb-27d14085c002", "sighting_of_ref": "indicator--e46f348a-7f4a-4317-b9fd-8c3289237947", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f5af82d-4a48-40ad-abfc-9dc66ad8073f", "sighting_of_ref": "indicator--56ed92f8-7b30-4d36-943f-12a32f5da4d9", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3146ebca-ef67-4f55-82d5-ad20799f43b5", "sighting_of_ref": "indicator--22d64e27-6c8b-480d-8662-2b83154ba4b2", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b50336a8-0155-495f-9da5-9c3c7062fc81", "sighting_of_ref": "indicator--bb712cbf-c4af-4e55-a13b-8905eb68f2ee", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4c96e83-7d5e-4c54-9dfe-49b92586a643", "sighting_of_ref": "indicator--81a139ac-be3e-4fba-a32d-2c914da113bf", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e4e5ac5-4f32-43ab-9f3e-50511627974c", "sighting_of_ref": "indicator--ca410952-7ed7-4721-b50f-9d9f70dd73da", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1c115d3-3791-4588-bdc9-7821c1da8521", "sighting_of_ref": "indicator--9cc18feb-1fc7-4ddf-afcf-db5ed64fe341", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88c4e859-897b-4adb-b105-eeeb3163780b", "sighting_of_ref": "indicator--1fd33fa4-cf1b-4003-9585-bd97eadbafb6", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--988fcd72-0add-4bd2-b695-da25d18d2320", "sighting_of_ref": "indicator--9eb03170-0cd5-4026-8033-d45f5778c714", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1259fbc7-892e-4768-a22e-097907af114a", "sighting_of_ref": "indicator--0cecbba9-7e4a-46f8-90db-b6e1212c24ae", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2e88e4c-60c5-44d5-ad7d-2caad09f70b2", "sighting_of_ref": "indicator--375aa802-bea3-423c-9cf6-6f1568fa3d03", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41506417-61e0-4612-a31b-ba7eb97dbe79", "sighting_of_ref": "indicator--1a68c641-1f69-49c2-baf5-2dda18bc3c21", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0dd1bff-fd48-4645-b7b0-e5841d113745", "sighting_of_ref": "indicator--3de13aa6-67c5-4c77-8596-f882c4518271", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e6a9bbb-23c2-4a85-8bdd-9d3f4be7b726", "sighting_of_ref": "indicator--026c35a0-4e57-4f52-958f-1c02014ddcf8", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c8dfdc6-f401-4fba-a2b6-d4359997fe63", "sighting_of_ref": "indicator--026c35a0-4e57-4f52-958f-1c02014ddcf8", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b0ebd98-4627-4cc2-8bc3-ee70bace78ff", "sighting_of_ref": "indicator--0da2b727-dbfa-4935-8153-800499aa379e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53e15138-f395-42a3-be6a-b5264c602dc1", "sighting_of_ref": "indicator--4b76ddb8-5fb0-44b2-afd0-f976851723f5", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5632daf3-1926-4b6a-9c33-20606b204b87", "sighting_of_ref": "indicator--02510e66-5698-4688-ad3a-2c68064f8aec", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d6f76c3-1602-4a3c-8148-56cbb71acc53", "sighting_of_ref": "indicator--9bbfb5b8-ef87-4c86-a8ec-41ed8ab79dc6", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c068989c-f19f-4c20-8cfd-29f69135eb4a", "sighting_of_ref": "indicator--9095aefb-3c6c-41c1-b8a6-52038ffbf6e1", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4a2fa0e-19cf-47a5-91d5-f30fee1b2395", "sighting_of_ref": "indicator--46de057a-561a-42a8-abe1-1a1795078efb", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfd0848c-ef65-431b-94dc-5000d1765178", "sighting_of_ref": "indicator--dd98e201-556c-4d53-9bbc-0c848a4dba15", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--186ef83e-d312-41aa-8315-700b96c210b3", "sighting_of_ref": "indicator--7d6f01e8-3c0d-46a1-8390-e1b7b74d8cfa", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6ddbc6b-0eeb-4e0a-a3e6-8454dbdb4e54", "sighting_of_ref": "indicator--2f768066-9111-43aa-8204-3f630537d49f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74fa7b04-6b47-4d8c-8508-d3ffacf595ce", "sighting_of_ref": "indicator--2f0f4317-755f-4419-8d73-605dd383b21c", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13e27375-b885-4e92-acc7-9030919fdc9d", "sighting_of_ref": "indicator--679c49ea-96b9-4d44-a664-7d46faeca573", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc6b6232-4343-47e7-9bf7-37e6a51da365", "sighting_of_ref": "indicator--97081127-724f-4530-84fc-0b6b04adf923", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e654776-a04d-469a-b7fa-bea530d07e60", "sighting_of_ref": "indicator--3a2f205f-4213-4a39-948d-5525a8e9611b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5b85afe-95ab-4f2b-a214-78897c9f37eb", "sighting_of_ref": "indicator--687b775d-450b-451c-ad55-9aff9eb7cc61", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2eda6906-0473-4668-a88f-aca06756285e", "sighting_of_ref": "indicator--d3da905f-6fa0-4191-b5bb-ed21cb17bc0d", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--431ae4b5-efcf-4799-9cf7-e7eb980154d3", "sighting_of_ref": "indicator--37f9b3bf-931e-4374-b9f0-464d5c68b893", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5ad0cc7-f06f-4a86-892b-50ac88d6cf9e", "sighting_of_ref": "indicator--70d76b8b-c92b-449c-af7a-9eba7e817dac", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7d814cf-f13d-4fcf-bea6-89f8912043bf", "sighting_of_ref": "indicator--245b6505-eaaf-4a57-b65c-5ee4cab74dc6", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09549e54-3137-48dc-8970-1cd8efc2a0ff", "sighting_of_ref": "indicator--61c5d39d-b3a6-4a1a-8f09-1f0116ac703b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4d34e70-a823-471c-8d8a-b183f7d31f61", "sighting_of_ref": "indicator--61c5d39d-b3a6-4a1a-8f09-1f0116ac703b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5dbc36d-867a-496c-aff1-953bb522b0ac", "sighting_of_ref": "indicator--dbbf01f9-cc94-43b6-9dfe-154ae017297b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29f01ecc-787f-4388-af50-ee64e96badf0", "sighting_of_ref": "indicator--a44fbfa1-00ff-4fdb-93fb-db71e249f6cb", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64e453bf-1b6b-4f94-92a2-e4a18cb0a5df", "sighting_of_ref": "indicator--03096ed9-0344-420b-86e2-e33b70192162", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7383108b-d37a-4f0c-b051-ad07fd1b8207", "sighting_of_ref": "indicator--03096ed9-0344-420b-86e2-e33b70192162", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73a1ceb9-452f-482c-b953-a0ab132490f0", "sighting_of_ref": "indicator--79d5c973-3c37-413a-aeb6-4cebf70aae96", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79a36dcf-7fbe-4d22-9b0a-8c1884ff63bc", "sighting_of_ref": "indicator--677d3f08-b8cc-4e95-b370-c70440384b18", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9193af8c-7423-4a0b-9b6c-860581dd5c78", "sighting_of_ref": "indicator--99507975-1f49-4aa2-a1a5-015a329e11b9", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d941e30-3c1e-4e5f-bf07-1e28a00864c5", "sighting_of_ref": "indicator--71f6660b-9b50-4a07-99b6-e0ac4da7c2a6", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09228961-0084-4d3b-83cb-eeb790bd74aa", "sighting_of_ref": "indicator--668e0447-1026-4957-b416-ca889eaad7df", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c1dfe32-f190-4565-88ea-21ab6606de02", "sighting_of_ref": "indicator--c8f22d6c-4deb-4c64-9502-8d40df4b98e8", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c397304d-85da-4465-aa62-670928ee1dc5", "sighting_of_ref": "indicator--ab0651e2-409d-4b0c-9d0a-e1dbbdbbb92a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48c19f02-709e-4494-b1d2-74869aed215c", "sighting_of_ref": "indicator--2fc7a598-9d22-4b1d-aafd-b02113ebc2cd", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8312433d-5e1d-4cbc-ae87-5b83bc55a9f8", "sighting_of_ref": "indicator--2fc7a598-9d22-4b1d-aafd-b02113ebc2cd", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4421d783-1dba-4969-bf24-de954d4a9f04", "sighting_of_ref": "indicator--2fc7a598-9d22-4b1d-aafd-b02113ebc2cd", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45460922-c787-4926-8ef7-3fbe50d45e8e", "sighting_of_ref": "indicator--1dde8e41-f0e1-4f53-9393-7c5e95e5ef70", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83708e97-2f14-4c4e-bde8-dffefa50e976", "sighting_of_ref": "indicator--94bc81d5-5bab-45a5-aa8c-6913f6a1be0a", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dbade3b-47ef-47fc-ad27-17b0e58efba9", "sighting_of_ref": "indicator--62539910-e3e9-48ae-8885-4d73f5c91f4f", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eadcd099-8753-4e46-8904-16c9c65d8e29", "sighting_of_ref": "indicator--eff6310a-3600-4f62-aca1-d359dd95b9e5", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f83ea36-b69d-4989-bea8-4f56bfd677ec", "sighting_of_ref": "indicator--eff6310a-3600-4f62-aca1-d359dd95b9e5", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a7d4593-a7c1-44a7-bbdb-4fcd007703c8", "sighting_of_ref": "indicator--a4b83844-cc08-49c3-bcd0-1fa2767682f5", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--032fd57b-9aea-403e-a453-1a10d601e3b3", "sighting_of_ref": "indicator--2efd2d2e-e2bc-4fce-a67d-188e4bbe0da6", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0aac9a4-b43c-4dfd-b2e1-b8e9f8855a72", "sighting_of_ref": "indicator--93acaffa-4119-4b23-93e4-35e618a47ace", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7de4068-3310-4b13-8eff-d3ec52c33417", "sighting_of_ref": "indicator--f89e54de-5eaf-41e4-963e-39356ad324f3", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9eae735c-293a-43f4-9bce-526875b00f71", "sighting_of_ref": "indicator--f89e54de-5eaf-41e4-963e-39356ad324f3", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82ba4a5c-5a72-4863-9e04-921308cf95ce", "sighting_of_ref": "indicator--aa1830a3-98d0-4e36-a25b-7224c4e5b401", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b145976-61c8-47eb-a7b9-e1cb2dd8ef03", "sighting_of_ref": "indicator--e8acf84a-a54f-4efb-8a2b-546b600af179", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ce1abbf-b718-4b29-b79d-40bd71a2dd0d", "sighting_of_ref": "indicator--f645d96c-ab49-4fe1-a4ae-b31e3f9619aa", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0be129c-79ab-4e7f-bcc5-94bcfbe61578", "sighting_of_ref": "indicator--40b54abb-ea6f-455b-b53d-8fd676d94bc8", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70177786-c012-4dbd-8f68-3ee8ef53f7cf", "sighting_of_ref": "indicator--40b54abb-ea6f-455b-b53d-8fd676d94bc8", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6c30bcf-73cf-4570-89c2-ce00ab855161", "sighting_of_ref": "indicator--8f60ce58-758d-4a06-8b41-3b437baa67cc", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1650b9a3-c22b-4303-9aa1-b5d07a0bab3f", "sighting_of_ref": "indicator--8f60ce58-758d-4a06-8b41-3b437baa67cc", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f19e04f-568b-4fc3-bddc-3c839c9b1552", "sighting_of_ref": "indicator--2b5a612e-85f9-41f9-87f3-0a2a28ff7659", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce43cbd2-5e28-4f11-a293-eec1c803fd8c", "sighting_of_ref": "indicator--2b5a612e-85f9-41f9-87f3-0a2a28ff7659", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e017b956-ae01-4f92-b431-b3dcee4f4a63", "sighting_of_ref": "indicator--8db986e1-e90f-4112-a3cf-da9c4b5f166f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6b50eb7-9fcf-4d66-9f9b-9edb30feed1c", "sighting_of_ref": "indicator--8db986e1-e90f-4112-a3cf-da9c4b5f166f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--390c6705-3585-4add-a962-1448e8e6084a", "sighting_of_ref": "indicator--a4259f2c-28f6-4d27-af71-cfa645ff106b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e9b9629-a24f-42a1-aa9a-c6e0254119a4", "sighting_of_ref": "indicator--0cd59615-b87c-4b97-a23d-1217486fe879", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38415a82-4497-448c-ac4c-e7df84f1e858", "sighting_of_ref": "indicator--629850cb-2b44-40af-8b00-9225d240c21e", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c068f00-db49-4213-8eab-171003e21f74", "sighting_of_ref": "indicator--fd9ed553-d480-4000-9af2-f1be6fde3d29", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b1b07c5-d058-4cdb-93d9-db3fe5e8d08d", "sighting_of_ref": "indicator--f8ac5d63-6f28-4f76-a45d-e38dff29aa7a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09567593-0314-488e-a932-5d8b20675e25", "sighting_of_ref": "indicator--42124fb3-37c2-4d96-b20e-d17f1760904f", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d205f30e-5066-4d09-9e61-c7401e2854aa", "sighting_of_ref": "indicator--f96985a4-5ff9-49fd-9490-fb042a95ba56", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--600a0c6a-87f7-4ce1-9ae4-b3eecb504658", "sighting_of_ref": "indicator--c818fc3f-57db-4b32-80c8-2424079975f9", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26b9f87b-d1b8-4b46-ab77-1020e60c383e", "sighting_of_ref": "indicator--57c21adb-e9d5-4772-9436-7ca941614041", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd64764a-5c55-4aa5-aedb-e8a14eaf4911", "sighting_of_ref": "indicator--d1d0a15a-3fd3-4d5e-a489-9ae7df2f99d9", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71c213e3-d633-47b5-bb71-7b36f5b438b6", "sighting_of_ref": "indicator--7a21ed39-15f4-4f4b-bef4-47b5761ef0c5", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96a66b48-71a0-4c8c-8bef-69b015cf2b85", "sighting_of_ref": "indicator--7a21ed39-15f4-4f4b-bef4-47b5761ef0c5", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69f2916f-02bd-40f9-a140-3947e3a730a4", "sighting_of_ref": "indicator--7a21ed39-15f4-4f4b-bef4-47b5761ef0c5", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42aef362-fd88-4424-97fc-51ec285da2ad", "sighting_of_ref": "indicator--8f34242f-fc31-4558-a82a-7652ef5ca082", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3df927e7-2589-4c5e-9298-13beb44f9062", "sighting_of_ref": "indicator--9a19fa10-1325-475b-934b-a02cfd6efc70", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4440ee99-f4f2-431b-95aa-b1d3db46902d", "sighting_of_ref": "indicator--2d6363e2-3b84-487d-8802-83861e3708c4", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fb79be5-0b02-43b9-a77a-4d172ae5be38", "sighting_of_ref": "indicator--2d6363e2-3b84-487d-8802-83861e3708c4", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9adb197-4b53-40a6-947d-aec953a0e163", "sighting_of_ref": "indicator--2454982f-b9ef-4539-b97f-b511cd7e0c97", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0667d53-af20-4a8d-b400-063a691dbb80", "sighting_of_ref": "indicator--711d4a71-e03a-4e54-b0d4-fb36b491994e", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e30cb32-6fa5-41e2-967a-7e94bdffb6ef", "sighting_of_ref": "indicator--1fb725d2-d7da-40b8-9aa3-128a6baf81ae", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf93d3c3-3008-4ae2-a515-9073459285e4", "sighting_of_ref": "indicator--4642aa1b-fe7f-4935-85cb-cef8cd0a7058", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f2e5757-68e8-4d43-9ff9-fcfa1a130e10", "sighting_of_ref": "indicator--fed9fcbd-6ddb-4226-b869-e40228338b90", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--387c549e-ceba-4454-afc9-96ce91c7425e", "sighting_of_ref": "indicator--a47b7e3e-c283-492f-8562-7ae6a679d8f2", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f71469b0-680e-42ee-9e5c-565a4f3f92c1", "sighting_of_ref": "indicator--07a7d4ab-56a1-49cc-bd63-bb817596e2e7", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0576811-a080-44cb-b484-b4cc86452371", "sighting_of_ref": "indicator--e59d1f7a-f33a-4710-ab59-742240a400bb", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5aa4320c-4b5c-4fbe-97cd-9b902ac2a328", "sighting_of_ref": "indicator--1d1c95bc-f983-41d3-8a28-1b4edda36d30", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42ec3cda-5b14-4a03-b20b-be1d33daf192", "sighting_of_ref": "indicator--1d1c95bc-f983-41d3-8a28-1b4edda36d30", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3262b6a3-dbb5-49d9-909f-a7ada0609539", "sighting_of_ref": "indicator--1d1c95bc-f983-41d3-8a28-1b4edda36d30", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0bebe82-6877-496b-b4bc-a55be187cecd", "sighting_of_ref": "indicator--e7b975b0-4857-424a-bbb4-c777bf1f7c5a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c4e850e-76a4-4073-9a37-59490c1ee541", "sighting_of_ref": "indicator--ee0050ce-4418-47ab-80e0-d87bc1b32403", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7c2a073-3d77-493e-8347-501e2149edd8", "sighting_of_ref": "indicator--3f28ba83-2a39-420b-9ce7-9d3325100191", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5441df08-1b44-4d6d-87d9-72d9b52128cf", "sighting_of_ref": "indicator--ad996d32-ebbf-45b7-ba3e-cb01afae9c34", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccd9ee0c-4aa4-468f-91c7-287957bd631f", "sighting_of_ref": "indicator--345e9f1f-0705-4a08-bbe2-7e0125011c95", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1cac976-b53f-4103-8e41-596f8e44e81d", "sighting_of_ref": "indicator--db580ba0-bcac-4399-925e-20ae45725b90", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b96cfe19-4979-4ce0-8478-acd618392ad5", "sighting_of_ref": "indicator--2ff4216c-27d0-4f06-89eb-fd7475107280", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a6002d8-a1a9-40e0-8ea1-62d7cb639ba6", "sighting_of_ref": "indicator--f210ded9-f707-479c-ac8b-c6a4f1c0e3fc", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--643e9f01-444a-4006-b0d8-038132c86b40", "sighting_of_ref": "indicator--6b3f5243-bd73-4d1c-a042-fd70fc22bfbd", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaf37431-bf0a-498d-8b3c-38464d9bc33b", "sighting_of_ref": "indicator--019255d4-d57f-49a9-91e6-990a3c8c978d", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fd78321-93b1-4faf-814b-2e64aa8c6977", "sighting_of_ref": "indicator--019255d4-d57f-49a9-91e6-990a3c8c978d", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3709dbbd-dde0-4972-9673-3e8a562af8e0", "sighting_of_ref": "indicator--22b2ba41-5ad4-477f-83d1-a17f4667c3e7", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26a858c7-9ae6-466b-95c6-e38f7ed80d89", "sighting_of_ref": "indicator--b8349b59-1856-4211-881e-53107398f4d9", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c8fc232-8dfb-44c6-a130-44bcfc7a3abd", "sighting_of_ref": "indicator--6119da6d-4dba-49e9-975a-d08e104bc66d", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7afc5089-4eb3-41f0-b930-f96e732df3d1", "sighting_of_ref": "indicator--10099feb-a821-4c99-b9ea-c6dfd7890424", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e83fc353-ba22-4ba5-93ad-01ad020f431d", "sighting_of_ref": "indicator--eaac7081-2f87-42b2-9e6b-5f77be8242c5", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--129c01d2-fee3-4cc3-b942-7932e9115d46", "sighting_of_ref": "indicator--501033a0-ebae-4fb7-9109-85bc153187eb", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c9305fb-6168-4edb-9a21-f697e68cb089", "sighting_of_ref": "indicator--ca716313-7f36-490d-a306-4c68da77ec81", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3aeb2586-a15d-48f1-87af-5c0732b4c6df", "sighting_of_ref": "indicator--6ece259f-9195-4ce6-90bc-05f80b46d69c", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7057ea14-7223-4965-aaff-c033d1c9391e", "sighting_of_ref": "indicator--9ec98932-2a61-4f6d-8866-8bafa98c21d0", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46265a53-d52f-44e3-b989-f1dec4afc16e", "sighting_of_ref": "indicator--cd5186fe-8838-4682-9a15-5cb78c62e60d", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9538619d-9f22-449f-83a4-150bce3498d7", "sighting_of_ref": "indicator--573952ea-0b13-4ae7-9ff3-97bdc8bf8c72", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da150300-1c6c-4401-b220-920ebb31c36f", "sighting_of_ref": "indicator--573952ea-0b13-4ae7-9ff3-97bdc8bf8c72", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3de7b4fd-e792-4ea9-82f6-f12aae85c216", "sighting_of_ref": "indicator--8de91caa-5f7e-40f8-bfb2-6c2465e5c06f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--297013ba-6101-43ef-8036-145f2bcf5f97", "sighting_of_ref": "indicator--d303f406-a829-477c-a1ac-47e8e0518683", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28e2f925-9a98-4afa-8478-a76a4d445737", "sighting_of_ref": "indicator--2d62d7d0-b9be-4026-8fef-f1a1eece7c27", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba45f253-114e-419c-b911-fb8821923107", "sighting_of_ref": "indicator--4a0061df-1ec3-4957-9d09-f3f5c77db7f4", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fa0511a-ab0f-4fbe-80de-bbcbf66b6399", "sighting_of_ref": "indicator--b18a137e-861d-4ddc-9774-41bd5b8fd3bd", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dabb367-0aba-4d57-882a-4a06a8e88c1b", "sighting_of_ref": "indicator--3e668d0f-f040-448b-a1db-b2ccdd6b1138", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fda6b767-1c67-47e5-9d67-85eb63dbb3c1", "sighting_of_ref": "indicator--1e40fade-2f68-4208-a1d5-1766ed85014b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50d040ef-97df-4c20-b9ec-7e79e2eec696", "sighting_of_ref": "indicator--2b123a6e-c41b-48e3-bbb7-cbb1771f585e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2a6bd8f-a773-4770-ae17-de34edb1bdda", "sighting_of_ref": "indicator--3e7160a5-bfd5-420d-9020-8ac59389210c", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c67ad04-d28f-46c9-8b11-34d0a5f0a60a", "sighting_of_ref": "indicator--cf914a3a-19fc-4ca0-9cae-e03f6479346c", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3cc21a2-de3a-4264-83e8-75fbc0805045", "sighting_of_ref": "indicator--89e4739e-d277-400b-85cc-85137987db2a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d74a5f5-ca98-4446-9443-f83ddb5a179e", "sighting_of_ref": "indicator--a0e8bb73-771d-4bb6-83ab-b8991224c1dc", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca058c9c-7c1c-4882-9eae-ea61b371a6db", "sighting_of_ref": "indicator--b7b9d36b-1b8a-4f44-b760-eb74372d9fc0", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33a4a2f0-e4df-4b25-b4c3-55a1e50a4e5f", "sighting_of_ref": "indicator--f190f7ab-e088-42df-9a31-64ed42d9cc60", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83367c8c-b49d-473f-b018-195e0883c82a", "sighting_of_ref": "indicator--1921e44c-2c2f-442c-96d2-9c4297895469", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6f24724-5b45-4e7c-bdbd-79f4d30bb171", "sighting_of_ref": "indicator--d6b0a7e3-98b2-4c74-9018-ec88c50178bd", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e86b043a-0d80-4372-a525-d0ee9a654e25", "sighting_of_ref": "indicator--401933ec-e89e-4bf5-8015-91eb63207c33", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a658c70-38b1-40cf-97b9-8a45bd394842", "sighting_of_ref": "indicator--2cd59ab9-843e-42a6-b3e7-7d46ca051fe7", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d30ce2a8-0680-4010-a946-55568952b6e9", "sighting_of_ref": "indicator--a5723dcb-3cef-4b66-8c3e-f7c1f7be630c", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eaa5aa6d-0dea-4aa0-b633-002cb2f5a063", "sighting_of_ref": "indicator--c22ea168-f76c-4d34-a177-ef3c4e3bc63e", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95605b32-6cee-4186-8d06-9f6f203cc84a", "sighting_of_ref": "indicator--70f3f94d-4524-4f2b-92b7-52fb9f02e4ba", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59590579-008a-4395-ad85-6b0b1dcf293c", "sighting_of_ref": "indicator--1f831e28-115d-4bf2-9f23-9fc7739bcfca", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c3bedb6-19c9-4453-b6e3-7fddc1f66d35", "sighting_of_ref": "indicator--db2031fb-811b-435d-88f6-805d180eac9d", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69fb23ad-0c28-4ace-af21-12d997f98965", "sighting_of_ref": "indicator--cf23532a-9f74-4bf0-8e11-85f521cb55c5", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8498416e-2ca5-4be6-8b30-7f18058b9f7f", "sighting_of_ref": "indicator--c7f73b2c-970a-4f21-a1a0-8f626ab5f821", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccb1e64f-0727-463e-99cf-c6b5d529e9a7", "sighting_of_ref": "indicator--2fec2b1a-5516-4e17-9c5f-e9096fd4cbb3", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89a722cb-fc5d-4e81-8e2f-69f748162511", "sighting_of_ref": "indicator--d90fe722-15b9-4cbf-bd03-263822646c4b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a2be24b-d463-4d15-a9a1-cf3d1ecab43f", "sighting_of_ref": "indicator--6be0b23d-5c61-4555-9e5b-56a43988c09a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e379d0b2-0a63-4ff9-b6c3-3be8fa186ec6", "sighting_of_ref": "indicator--c375e9a5-cb0c-4ef7-802a-cdf9f8c9e5ce", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e166b1ba-f00f-4fc4-a74d-9441b7ba85bb", "sighting_of_ref": "indicator--d8a99952-9b84-4d27-bb29-3e14da158546", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8676b5fc-0693-4bee-b455-f79ddecf96f5", "sighting_of_ref": "indicator--ebb5b083-dfe0-43c0-bfa3-c17b7b4a17b9", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4cd1954-d372-4ede-9361-b43a300c998e", "sighting_of_ref": "indicator--450da03f-c459-471f-b19e-2dd74344253d", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18b81763-6e6a-40e3-987c-ceed3c051687", "sighting_of_ref": "indicator--88d3194a-ebf9-4da1-b0c9-70e297a45f5c", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69c0f351-ceb4-408d-ae5a-713ec433a415", "sighting_of_ref": "indicator--c8449063-4a44-40d0-bc60-70fd416f4220", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13ec1dcb-f652-4ce3-9c34-677a00fe9bff", "sighting_of_ref": "indicator--c7f56630-8b5b-4452-9ca4-c35c358bf522", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab8cbf65-84f7-468a-9343-200923421790", "sighting_of_ref": "indicator--10095c9b-7a14-4f66-9447-6f5fd090b4fe", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20d4b959-5f0d-4418-900f-11300e360285", "sighting_of_ref": "indicator--10095c9b-7a14-4f66-9447-6f5fd090b4fe", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e93a37ee-eb81-42b6-a9c0-d7ac888c41d7", "sighting_of_ref": "indicator--80e2ae1e-5380-4437-aeb2-c80d839d01cd", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcc11b92-94fa-4734-ac37-5b164f018fb5", "sighting_of_ref": "indicator--4c6fe148-fb61-4e67-b176-fe5ca6d85c08", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--492cf8c1-44b9-45a4-a293-bcfe2d327801", "sighting_of_ref": "indicator--a3f1a1b5-6b6d-42f9-98db-70148cbcfa89", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49a5ea6c-ecc2-47c9-87b2-479a67f9f702", "sighting_of_ref": "indicator--a3f1a1b5-6b6d-42f9-98db-70148cbcfa89", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56d11ba7-630e-412b-9121-845b86cd254f", "sighting_of_ref": "indicator--1146a0c6-16ed-4804-9570-6b5443dfe67d", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c41a8a5f-07d0-48a2-9a9b-25d62a9a2b99", "sighting_of_ref": "indicator--aa91ba57-49c8-4912-b053-b24ba0853be9", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6d239dd-0b1c-4f26-8bfe-4fffeb40f6c0", "sighting_of_ref": "indicator--757bf77c-3c73-4a50-9490-ab6eda218f2b", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36fb6212-571d-44e9-8d54-f3b87cfaa5bc", "sighting_of_ref": "indicator--d81f149e-29aa-4cc8-8ea7-826873e54c69", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a47702d9-879e-41ca-9816-50c7e648e360", "sighting_of_ref": "indicator--bb8e4afd-8465-4a06-bced-524629ff7cf3", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a210436-a6cc-4f96-aa54-db6bdbcbd58e", "sighting_of_ref": "indicator--bb8e4afd-8465-4a06-bced-524629ff7cf3", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42dffffd-202d-406b-b46f-dd01f3167f06", "sighting_of_ref": "indicator--d59e5619-a02a-4bc7-a06c-1df98a66e565", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fc6fdd1-9133-4235-b099-800310241aed", "sighting_of_ref": "indicator--c1dcf433-4722-426b-a69e-c01a83938735", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--251ccb52-4c99-4064-ad54-0afa77940b64", "sighting_of_ref": "indicator--17974040-2cda-4572-9088-90865f740a25", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d34467f-b057-4f3e-a7dc-85e545bcb330", "sighting_of_ref": "indicator--9599cd80-146e-4746-b3c5-7c2dea53bc6c", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c186a1d2-7caa-4c8b-a556-18bbe58e53b0", "sighting_of_ref": "indicator--9599cd80-146e-4746-b3c5-7c2dea53bc6c", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46774436-e67d-4b9a-8d79-8ac27bc01d32", "sighting_of_ref": "indicator--ab9fffbe-590a-4130-b2ec-3365ecc3afe4", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d62b236-24b1-478e-8d33-36ab52651677", "sighting_of_ref": "indicator--c9f25d2f-e360-480c-974a-746fa5c51e55", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7df68301-41e6-4560-88bf-94a7282f3c81", "sighting_of_ref": "indicator--eb7dee4e-2104-4344-9764-d73fcc6d2ee4", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2bcff03-f5a9-44bf-8b25-b34150c51eff", "sighting_of_ref": "indicator--8686cd72-fa7e-4077-b1f7-75859d32dac9", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb0c3cc7-cccf-4349-9d86-0388f18036a2", "sighting_of_ref": "indicator--308cfbb0-396d-4a50-80dc-f3810381c240", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--792ad0f6-7e65-4bdb-a8dc-3a1949d6adff", "sighting_of_ref": "indicator--0c2ca4b5-e87f-42eb-8298-3422871852f9", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c0a77d9-c261-43ec-82b1-a561cbc8566d", "sighting_of_ref": "indicator--0c2ca4b5-e87f-42eb-8298-3422871852f9", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38724cdf-40c1-43ca-8d25-717dc66cfae4", "sighting_of_ref": "indicator--5a36a4e1-7ed2-4807-8766-9aac89e51169", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffc5b768-9c28-4a7c-8426-02d4baa50060", "sighting_of_ref": "indicator--5f14d5c4-03e2-46f4-a4a1-92f865127cca", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a84ff7e6-868a-47ae-b3b4-dfe41484cada", "sighting_of_ref": "indicator--e5572d90-5530-46ce-94ec-c2d17f936d8f", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e979c8b6-e8d3-4bf2-868d-8001cbb80f1e", "sighting_of_ref": "indicator--627370a0-39da-41bd-a09f-784fa9910a94", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce741ed9-1503-49b7-8844-74f9bafc088c", "sighting_of_ref": "indicator--88e1fb93-99b0-47df-9883-5bc966cb3c45", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fb3b3ea-f272-4b20-9da1-a57505e86f72", "sighting_of_ref": "indicator--0f370352-948e-4735-901c-be4a9c39b462", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2621145e-a53d-48e4-8192-54b6f977054e", "sighting_of_ref": "indicator--0f370352-948e-4735-901c-be4a9c39b462", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--934b99aa-88f5-491f-b981-9485be9a1944", "sighting_of_ref": "indicator--80d41f93-5ec6-45d8-a7cb-ea96e8dcbc20", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5213c4cb-d251-44b3-b2a8-46c91136345e", "sighting_of_ref": "indicator--6e58c7a2-3f53-4c62-9857-f974e2386e78", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d2db423-f4e5-463f-9fe7-148ebc101c10", "sighting_of_ref": "indicator--607a2809-a1de-43eb-957a-ca4e5f05ed94", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99f5abf9-230f-453a-8420-0524df0a04c3", "sighting_of_ref": "indicator--9e33b28d-7f7f-4439-a459-254ca18dfb26", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f55628e-9ff3-47e3-bb6b-b8fa4bece04d", "sighting_of_ref": "indicator--51a3b7d5-b698-48ce-ba6d-e4ab27a92b53", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f548cb8b-ca75-4840-935c-37929190d6e1", "sighting_of_ref": "indicator--484d554d-b564-499e-b921-7ec7d24a5972", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbc50933-6590-4050-b9e7-934a5f46d38d", "sighting_of_ref": "indicator--b2f0aaff-3d93-4a3a-8f58-8c58dba1271a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77ced8d7-aabd-4e57-b13f-bf190f87ea85", "sighting_of_ref": "indicator--370e7d7a-c224-443b-b4a8-eedbd05d8eb4", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d06be62-6b10-40ad-a829-a8e19df7c7b0", "sighting_of_ref": "indicator--6ba171be-76f2-462d-8f13-043de728580d", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2513f785-1a10-4276-875c-f023e9bb9ebe", "sighting_of_ref": "indicator--49367c6f-bec7-43fe-b7fe-245840ef1ddf", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16aa632d-962a-464d-9ecc-0615452e7fc3", "sighting_of_ref": "indicator--c5454ba0-dc8e-4929-9d76-812562a6d7ee", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5e9c261-6c28-4e40-a4b1-8003efd3ab60", "sighting_of_ref": "indicator--bcff88f8-0dfb-49f9-b0d5-83ddc03c5726", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f209748e-ab4e-467d-b0e8-94789901fbbb", "sighting_of_ref": "indicator--364f96e3-f0e1-4e98-b25e-12f2bcbad204", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d09841a4-20c3-4b7d-bc91-9621d59993fb", "sighting_of_ref": "indicator--cbf5bb5b-f303-4e8e-85b1-14c4b1eb2733", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70b5107d-fd28-4797-84f0-6eb259c1e95c", "sighting_of_ref": "indicator--b5e1ac35-ccb3-4967-9a86-39407f011b5c", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--735976dc-19fa-4e18-bebc-fc5cf251034d", "sighting_of_ref": "indicator--d8574d1f-3e8b-494e-8047-8bf183daea83", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fa7db55-57da-46d1-954b-b2d9a02a5fac", "sighting_of_ref": "indicator--c1204510-3f52-41c7-8a99-124024ffb393", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87f0e81b-7db1-46dd-99c3-f1620eb2e67d", "sighting_of_ref": "indicator--07d9c8e1-03cb-42fe-9f92-176caca7d88e", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22ea4ff3-3399-487c-8f2b-9f02b9485850", "sighting_of_ref": "indicator--e942ef6a-5d35-47e5-87db-3784c976a48e", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c0ced1a-8abd-470c-8a37-3d721d3f2373", "sighting_of_ref": "indicator--ad2fba7b-19fb-43b7-bdd6-620447feb69a", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c9a7e24-3b1b-446f-be5a-1d2b08621ab6", "sighting_of_ref": "indicator--a4e6c5ff-8399-497e-b400-e1f641027275", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64197bb8-16f8-4ae5-b58f-847abb762bf7", "sighting_of_ref": "indicator--80522e63-da3e-4482-b4e9-be1c2f83fe90", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a507f95-d883-4943-bc0f-5399621e7cc2", "sighting_of_ref": "indicator--80522e63-da3e-4482-b4e9-be1c2f83fe90", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c385d21-41ce-4689-a17e-e569029ef148", "sighting_of_ref": "indicator--9c97cacf-4062-4c38-9bc8-2930b102bd04", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d142c3cc-da75-4363-af31-906143d003c7", "sighting_of_ref": "indicator--ef9f8276-cd3e-4b30-8daa-d5dd1f40a9bb", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e742184-3b93-482f-ab26-ce94d9c4c19b", "sighting_of_ref": "indicator--da87db39-8cf1-4d98-b24b-cc9c0140162a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abbccae2-ef82-4a04-9dfa-3ec7910c41f7", "sighting_of_ref": "indicator--7a57f8a9-3758-4476-b7ea-abe2ee60a289", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bfac4b7-ca7d-4713-bff5-da1ca139ea8a", "sighting_of_ref": "indicator--10e25937-7bca-4349-8db7-d84bcf76b5c6", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7438da08-ae35-47d6-a032-d9fe30067fd1", "sighting_of_ref": "indicator--3cc52216-5d9d-4b79-b985-09ca8a9ed152", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0428c73-7c2a-4291-901c-03b4412c8394", "sighting_of_ref": "indicator--5077282a-e595-4348-b89f-62b502c826d1", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--038164ab-0a5e-4948-b28f-962638c3dd87", "sighting_of_ref": "indicator--6c7177a8-cf6e-4844-9edf-ff77c1267427", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c7fb6ed-bd72-428e-9a96-8631be0beac5", "sighting_of_ref": "indicator--def57ec5-8912-46d6-87ce-fb059a3aa35a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c98a9e54-e107-490b-9faa-96922f35b7d3", "sighting_of_ref": "indicator--6a1f8b38-701b-417a-9687-92ba1f2537f4", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b4e6e3c-f6e2-467e-b448-85b37847ef49", "sighting_of_ref": "indicator--f5d41800-0dd0-43aa-86bb-9a5a66616651", "where_sighted_refs": ["location--cc47317e-2c18-43a6-8938-dea748a56ad5"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3277fc9e-aef2-4c43-a2fd-8a244e129805", "sighting_of_ref": "indicator--5acaf12c-b600-4116-9dba-e1c660c7e755", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ed5e3b8-5877-410d-90d5-0ffd2b36f2fa", "sighting_of_ref": "indicator--79a22022-2af0-4e3c-a587-7897eca3ecee", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--852595e7-8c38-4eab-8c7d-5184f0a70405", "sighting_of_ref": "indicator--b235ebe6-f649-45e2-9f08-82eb0f27b648", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9dfe550-26fc-497c-aea6-578c7619209c", "sighting_of_ref": "indicator--97654d7c-ebce-4de9-94ca-6f76a578a082", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b16cd928-5a7a-4352-b8e2-ed9a9bd7d917", "sighting_of_ref": "indicator--4c6258dd-d5f5-4165-b503-d42e008fc7e7", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94f17782-6e46-4bf1-8252-fe1ec3a52471", "sighting_of_ref": "indicator--b8876594-8fbc-4bcd-9eb3-91db5ae77ec7", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--358ce4a1-a67c-413b-a48a-af9656e4e447", "sighting_of_ref": "indicator--96199f40-a05d-4123-b02d-6a3caf355de6", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0568fc1-2d04-4e03-907a-b40e7c094618", "sighting_of_ref": "indicator--2ca7ccf2-37aa-4022-a2ac-501fb949512c", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3fa5008-4722-40bb-be63-e3ad8f6d7fe9", "sighting_of_ref": "indicator--25030934-58bf-45ac-a17c-dca48336aed0", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98b7fde0-eea2-4415-94a1-2e751619a76d", "sighting_of_ref": "indicator--20e52b3e-9d1c-41c2-b151-2d10cc5f2f94", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5eb5e97f-72f9-4267-a1aa-7d94c644ded5", "sighting_of_ref": "indicator--c54a55fd-2a45-40c1-9f3c-896ac04ab4de", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4873813f-080a-4994-8cfd-7f5d5d56fbbd", "sighting_of_ref": "indicator--95e0e9f9-70a4-4068-af56-daa2b6aee0d4", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c582136-4b34-43d4-ac63-dca69235a8a3", "sighting_of_ref": "indicator--2efc6f57-fef5-4672-800e-52c6a1930e59", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64fd26e8-a1ed-4f96-b930-3e987e28de75", "sighting_of_ref": "indicator--2efc6f57-fef5-4672-800e-52c6a1930e59", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e97cba1-dd11-4505-b232-427bfb9f1953", "sighting_of_ref": "indicator--1fb96218-7f6b-4021-9460-cb1f720cbd38", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eebba5ce-d34f-4045-8341-4e44b88a1510", "sighting_of_ref": "indicator--5d77ace6-1768-4544-b494-b273cd4e8225", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ee236f2-3d1f-42fe-b6b6-f1ca75858ad4", "sighting_of_ref": "indicator--5d77ace6-1768-4544-b494-b273cd4e8225", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e28efdd-16ae-4b2f-a2c9-99ee4d49d354", "sighting_of_ref": "indicator--9f04903a-1bfd-45fd-8b54-2f839696219a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6944da9a-20af-4865-b3d7-febf66f59c31", "sighting_of_ref": "indicator--0c93f4c7-a0b2-4738-8ec0-def8f99c629c", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9e26721-6235-4e34-a2e2-569a652a7938", "sighting_of_ref": "indicator--f09f07bc-a4cc-407b-b947-4111b8cc1493", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--865ab658-b005-406b-99b9-9e52a0616047", "sighting_of_ref": "indicator--dcabdcec-9b89-4bf2-9bd7-d73387dcf38a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9751c763-16e3-420d-a824-8120304c488a", "sighting_of_ref": "indicator--dcabdcec-9b89-4bf2-9bd7-d73387dcf38a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--173f2055-cf7d-448a-8412-7eee3fa95611", "sighting_of_ref": "indicator--2b22da19-1a97-4767-b1d0-8436dd303e22", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b99ef155-59f9-4ed7-a468-a6f461ed4c65", "sighting_of_ref": "indicator--4a1388f2-9661-442d-aa53-46770a2fe5c1", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e184b323-23da-47df-b6c8-6a8efb7f6ece", "sighting_of_ref": "indicator--4a1388f2-9661-442d-aa53-46770a2fe5c1", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79bf885f-a60c-4948-b9e3-ef54df3dd878", "sighting_of_ref": "indicator--8f96a8f7-2bb0-4b67-bfcf-a3b5a1ef1fb3", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91800542-47bf-4686-80a3-57e29cd6939f", "sighting_of_ref": "indicator--8f96a8f7-2bb0-4b67-bfcf-a3b5a1ef1fb3", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b5e07b9-9261-47f5-b456-2f272a761bca", "sighting_of_ref": "indicator--f8267014-a90d-4150-a81b-621218a58620", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5a5fcb8-1cae-468c-9e1e-72619fbd8914", "sighting_of_ref": "indicator--50368b61-2299-4092-871d-bbfeaa48b93b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3450a6f1-8181-4a30-ade1-307bbf4c3388", "sighting_of_ref": "indicator--e639f023-731c-4552-8634-a27f2cd80098", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--237671b9-caee-4d09-9c38-668d570afed8", "sighting_of_ref": "indicator--e639f023-731c-4552-8634-a27f2cd80098", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c08d6cec-d39d-4e08-afa3-b727b9e38565", "sighting_of_ref": "indicator--79a7be44-f61d-4d4e-bfe6-0ab98b58cf1f", "where_sighted_refs": ["location--cc47317e-2c18-43a6-8938-dea748a56ad5"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d36d6415-dbb1-4803-8c71-d7ecd68ca896", "sighting_of_ref": "indicator--9adaaf56-2e94-417b-a416-18917c9c6a44", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f698c7c-4479-40c1-b089-f0f597298db3", "sighting_of_ref": "indicator--7ca2d123-a848-42fa-805d-08bde4d8e1d0", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72f04eef-5b34-41ee-b5bb-1ca845abc5c6", "sighting_of_ref": "indicator--e69363a8-8ea1-4abf-a4db-96b9a24db10e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c847f46-ba8a-49a4-83f4-c2fd391a850a", "sighting_of_ref": "indicator--9f0dd1fa-4c5a-426a-98a1-abb3aa1028c6", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f33a3a28-069d-4503-abd3-4979233a9587", "sighting_of_ref": "indicator--71da62da-b9df-47be-bbd6-c51c9622dff0", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01b472ee-f694-47cf-b28c-994abe196e03", "sighting_of_ref": "indicator--71da62da-b9df-47be-bbd6-c51c9622dff0", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--736be6d3-ed1a-46c2-a090-e8e4b2950b72", "sighting_of_ref": "indicator--9aa6e578-905f-4745-8dc7-65acc4d334e3", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e6b4d5b-48e6-4cc1-80b7-bc3b18c3101a", "sighting_of_ref": "indicator--47cc89c8-607c-4d4d-884d-13d4cb6a3e56", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f9cb708-6fc0-46e3-b423-0e37fec81d06", "sighting_of_ref": "indicator--ee898851-dd7f-4158-b8eb-38b77ffd686d", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8bfabc2-866d-4920-b022-1c1ccef4f542", "sighting_of_ref": "indicator--430c95c6-aa3a-4d18-bf57-4e848867a193", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79ae4e1d-46de-40cb-aacc-b3601b3794cc", "sighting_of_ref": "indicator--430c95c6-aa3a-4d18-bf57-4e848867a193", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26f1786d-0b6a-4d5e-89d5-941bd154e05b", "sighting_of_ref": "indicator--417e5097-96a3-4013-9b84-36a4bbf82ef4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a2f8447-d505-4b09-8503-974e76ab4c5c", "sighting_of_ref": "indicator--417e5097-96a3-4013-9b84-36a4bbf82ef4", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ca5d69f-74b0-4aed-b14d-96d004703080", "sighting_of_ref": "indicator--4d4272d0-8791-4b7f-9b13-66d746aef3e1", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--494eea5f-52f4-4deb-a72e-f8d978ce62c3", "sighting_of_ref": "indicator--4d4272d0-8791-4b7f-9b13-66d746aef3e1", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2eacdbe3-9738-45ee-a3e4-6be107ae245e", "sighting_of_ref": "indicator--2162ce3f-878d-4194-bafb-9baed1ae191c", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ea03ac6-f32c-428d-9a58-948ff17d05f6", "sighting_of_ref": "indicator--9d487954-d336-4283-a636-f11474934307", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a02521b3-4676-431b-9b02-23d512400ef9", "sighting_of_ref": "indicator--788abc9e-72d0-48a9-b0e8-9af596a36f62", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a258e135-c672-46e8-8bb0-f8cd4572c1ef", "sighting_of_ref": "indicator--788abc9e-72d0-48a9-b0e8-9af596a36f62", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b64bf919-fd01-4fbe-9194-9cd804bc3b5e", "sighting_of_ref": "indicator--48771ec1-06a0-48e8-a650-13acd8dfcb46", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e09730c-15c9-4790-87b6-e6f417b87c9e", "sighting_of_ref": "indicator--ade1d4fe-8978-4ee1-8901-34044a3a10e1", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b88ee2eb-8307-47f4-b58f-dcae90dc55d2", "sighting_of_ref": "indicator--48ca7077-b114-4cec-a915-a39253ee4a39", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac10db84-406a-4cc6-8f56-8cccd70efccf", "sighting_of_ref": "indicator--c04f053c-0b5f-46a9-87ae-48138d5f7262", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbd787e8-2119-4989-b2e0-d6a4df97f43a", "sighting_of_ref": "indicator--fad9de56-5f09-4286-a691-417369c1b539", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dde74585-0e28-4486-aa6d-660c9b160dd0", "sighting_of_ref": "indicator--fad9de56-5f09-4286-a691-417369c1b539", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--934c575e-b8dd-4ef0-b8d4-2a2d3a0f66fa", "sighting_of_ref": "indicator--dcf6166d-e19f-4d07-b6c1-64f03d305b1b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bfc7428-d838-4a70-9af8-38c3843a0d6c", "sighting_of_ref": "indicator--8b59815d-d233-4fad-8abf-728f885beef5", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6669279d-73e9-49fa-a9b4-03419f440a57", "sighting_of_ref": "indicator--2211439b-1235-49b7-802b-e05e6d2771b9", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf863e2c-b750-4dc5-a622-9aa1e9ad69e3", "sighting_of_ref": "indicator--2211439b-1235-49b7-802b-e05e6d2771b9", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e1ca764-ddbe-4177-aec8-a7cab07b95c8", "sighting_of_ref": "indicator--729f4e4d-722b-4daa-a9f5-0676fc5ce130", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9a9c8b1-6fb9-4cd1-944a-fe9c1bda73a2", "sighting_of_ref": "indicator--ecc36207-1456-4df3-983e-2f31eb91d2db", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1028448-3eb8-4a21-ad73-0ca9607b486d", "sighting_of_ref": "indicator--714f7e60-4356-4aeb-9cc2-531e23024a44", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c222f465-81eb-4fed-95d5-690b2752e89d", "sighting_of_ref": "indicator--0087be82-6167-4be3-ac24-07bc152f484a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5134ca33-d899-4dfc-9ea0-05b999448134", "sighting_of_ref": "indicator--983e44c1-0476-44d4-9a49-ff557c2af21c", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fee90390-60a7-47a6-8806-b046b78f9f96", "sighting_of_ref": "indicator--77ce82c6-0813-44e7-9153-31d7415c6a81", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46a12306-4ae0-4502-b05c-78f11851a7a0", "sighting_of_ref": "indicator--56d41971-98e5-4d9b-b2fc-2d6beebdc933", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c0c472e-a501-447f-a1c4-1c9097c2171d", "sighting_of_ref": "indicator--56d41971-98e5-4d9b-b2fc-2d6beebdc933", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a0f4c31-1ab2-4b16-a2d6-432d6beaad37", "sighting_of_ref": "indicator--56d41971-98e5-4d9b-b2fc-2d6beebdc933", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8c49b17-cc9e-4df3-88af-ef2440459031", "sighting_of_ref": "indicator--3af4dbc2-0112-464a-a700-ad5c550a8e22", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d57cf4b5-18ac-4514-8866-447c682309c9", "sighting_of_ref": "indicator--01303aae-3861-46f7-861c-b19ea07273db", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed407b9b-4ec1-48de-98b0-07f77d61bd13", "sighting_of_ref": "indicator--f201a360-f659-45d4-8171-a2bc2a04cc20", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--688a97e0-9695-4c62-9e87-4e4e5bbefdc4", "sighting_of_ref": "indicator--3af87560-5c6d-4dab-be20-e0b5822e8f39", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3b8f7ea-7a3a-4a7f-951a-04f7d32fed4d", "sighting_of_ref": "indicator--0320a99a-ac91-424d-8c4b-6e6d4a98ad6e", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e545424-d604-4860-b93e-a83a8e28bd60", "sighting_of_ref": "indicator--0320a99a-ac91-424d-8c4b-6e6d4a98ad6e", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec16aba4-ca74-4d10-9de8-a303ab632476", "sighting_of_ref": "indicator--23f7f615-cb53-41c6-b34e-de47cc632c7a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c65c35e-99c8-41d8-a77f-5e73578c306b", "sighting_of_ref": "indicator--4ef06bcd-b6d3-4934-a89b-f6e3aac62f76", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53847122-2240-4b2d-9e83-cc7184227585", "sighting_of_ref": "indicator--275b06e2-ba17-421f-a09a-32357c9831fc", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6be07ad3-0706-444f-9f45-cb896c4ba694", "sighting_of_ref": "indicator--f25dd8ed-6908-4714-a00c-49d9ee67e11f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3db4717f-3b3d-48c0-acbc-ecda900427aa", "sighting_of_ref": "indicator--14201e72-55b7-45f3-8af4-63e30b5c3626", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d95414da-3354-4442-9a40-50858437ebcf", "sighting_of_ref": "indicator--1c406633-b6ea-4ee8-a669-0eb5d16cc908", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93d8c01d-05b5-4f2d-ace4-1ae17b5a161d", "sighting_of_ref": "indicator--9c918907-c343-452e-8249-0fb0f2991f3e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d564fbe-6460-44ad-8ba5-2ff4fa7de20e", "sighting_of_ref": "indicator--e5bb5d47-029b-4e3c-9d0b-19fe8046a3b7", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d87edbd-b55b-45a5-8bfd-4fd81b090271", "sighting_of_ref": "indicator--0e45af65-32fd-4c59-ae15-fe13ca460d0f", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--116807f7-d077-4398-868a-24ab98ff2c72", "sighting_of_ref": "indicator--0dc5a24f-6e02-48f7-8371-37cd98b55879", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c3e452b-53f0-41b2-a84f-d77b472b2dbf", "sighting_of_ref": "indicator--26fd5338-5fd4-48a7-9f28-5c986e4b14b5", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df23da46-df31-442a-9aa1-b4d09ff7401c", "sighting_of_ref": "indicator--fbe26e7a-1138-4a0b-aeb3-0372cff40212", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7c37058-d727-46b3-b817-f7d2092b24b9", "sighting_of_ref": "indicator--87e854d3-a981-43bf-bccf-f04bbb062209", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6e9b2be-1749-4823-8e6c-6687db7d93db", "sighting_of_ref": "indicator--ea4cb1de-c8df-41db-a62d-0dd0372833a1", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e9a3ed2-29e2-4fb8-9756-469f3cf34e4a", "sighting_of_ref": "indicator--5e8dd941-7ff5-4f4a-83e5-afc92d80a8e5", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42488cf8-cfaa-4654-a4d2-e40fcc823548", "sighting_of_ref": "indicator--1c08e69f-930e-4a9f-971c-1602c38979f0", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db630cf5-b267-49ef-a06a-61134218254e", "sighting_of_ref": "indicator--5cd2250d-709b-4b93-ae9f-d3910fd0556c", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a5be17b-409e-4cb5-90a7-4ab30168972b", "sighting_of_ref": "indicator--a3f939a7-fd7c-4a14-9d05-4adc50d10d17", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--964ca755-72a1-43c7-8cc2-92245f2d394e", "sighting_of_ref": "indicator--37a83493-1c54-4a16-8292-a7dd48f9a625", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98149db1-1ada-45fd-8726-0afa1becd93d", "sighting_of_ref": "indicator--b9f13b35-6de5-49a3-aaeb-58a3498c67bd", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--554c5854-4303-4746-8ef7-09e632cde53f", "sighting_of_ref": "indicator--c2474d64-81ee-498c-8e65-a8a6d4292d3d", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ef2b964-09d1-4521-87f2-953d5d40b42e", "sighting_of_ref": "indicator--401ef317-1007-4a10-a76f-d1d84275aa5c", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21901955-ef3b-49ec-8e24-3b4189b2bf4b", "sighting_of_ref": "indicator--401ef317-1007-4a10-a76f-d1d84275aa5c", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b762701-9d02-4adf-9dc7-a25f5e03462c", "sighting_of_ref": "indicator--401ef317-1007-4a10-a76f-d1d84275aa5c", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75e23bb6-2ef6-49ff-861b-9dd7bd601dcd", "sighting_of_ref": "indicator--3d8db28e-896c-4053-a96d-f8baa557cf7e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5165edfd-6f3f-4451-a1fd-838d64883b35", "sighting_of_ref": "indicator--8f6ed70e-ec80-426e-8a76-e568ee3a5b88", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d84a8243-db0b-4116-8f2d-16a40237aebc", "sighting_of_ref": "indicator--8f6ed70e-ec80-426e-8a76-e568ee3a5b88", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ef2b555-2847-4eb9-b566-be135b775e22", "sighting_of_ref": "indicator--5247ab31-1259-4b32-85af-2ee3150db3df", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--824f7080-72ce-45b2-a159-050cd38c1de5", "sighting_of_ref": "indicator--0104336d-8627-448b-80cb-4a12e4394c55", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--711251d8-cacf-4acd-aa59-1fbd9ea0180e", "sighting_of_ref": "indicator--d100c23e-7dcd-43cd-9b8d-ba0d9432d86f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c42df9e-1dca-4e91-ac16-e3368ab5532e", "sighting_of_ref": "indicator--40452792-0672-4337-bbc4-70199b72a9ce", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--384495f3-0739-4bd1-9be3-2622981e6d9c", "sighting_of_ref": "indicator--ae1adc4d-fe56-42a3-bd73-8c2146fc16c6", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdb3c158-02d5-4676-bed0-b6a68d13171a", "sighting_of_ref": "indicator--ae1adc4d-fe56-42a3-bd73-8c2146fc16c6", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53a03ee7-ae36-4902-a7d9-44dee47fbb0a", "sighting_of_ref": "indicator--c32c8b79-d6e4-47c3-82d0-5556950ac93d", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4716da6-3c2e-4259-ba81-05d05fa7b69c", "sighting_of_ref": "indicator--3c2c2018-1dec-4546-9408-f2eabb018032", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9eba6581-ef6a-4cf5-8781-68d3e8fd751c", "sighting_of_ref": "indicator--8b4d8056-532d-4be6-a555-90c8178f86e7", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fbd6429-902a-4a16-ad33-b9737a83351b", "sighting_of_ref": "indicator--8b4d8056-532d-4be6-a555-90c8178f86e7", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5d8ad86-241e-4870-9532-9bf8b411adaf", "sighting_of_ref": "indicator--ba958b84-feae-4005-b973-87a0e7ce8772", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc458a26-9c09-4651-a08b-d79317899907", "sighting_of_ref": "indicator--5eef7500-534b-4ebc-85fc-399c7d0797f3", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fad72d5-8547-45ad-acc3-be7894f47f42", "sighting_of_ref": "indicator--23906d15-645c-44d0-9d14-4433ce7a5461", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7257ebaa-a0d1-4426-a8b7-5a75cf814154", "sighting_of_ref": "indicator--8dab048d-768e-4d4e-b26e-46e864b5891c", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90920389-e2ea-4dc7-922c-2de063c55267", "sighting_of_ref": "indicator--ee55c0e5-391d-403e-bb1b-213632a90024", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc87b8eb-541d-40a3-aaa8-02869cbc7e86", "sighting_of_ref": "indicator--ee55c0e5-391d-403e-bb1b-213632a90024", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1265cc65-7a18-41db-a63b-961b1ab91e0d", "sighting_of_ref": "indicator--ee55c0e5-391d-403e-bb1b-213632a90024", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6880409c-681c-42af-bc80-109ca02e94f6", "sighting_of_ref": "indicator--45f991c3-60ab-45a5-891a-92c84e99638b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5f3e1c1-13b4-47d8-95fb-3f136e1df043", "sighting_of_ref": "indicator--cc1e2205-6e2a-46a2-981e-4d1230994138", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78cfd091-f705-4205-9d23-758b460740c9", "sighting_of_ref": "indicator--cc1e2205-6e2a-46a2-981e-4d1230994138", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac3ef3be-b793-4bd8-a011-2511e938c6ec", "sighting_of_ref": "indicator--932143e5-51ae-46a0-b938-ce77d679d747", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb0bb747-fec6-4d2a-9836-3ede6aed96ce", "sighting_of_ref": "indicator--932143e5-51ae-46a0-b938-ce77d679d747", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51cbd290-7a58-4790-be80-592bc3d8908f", "sighting_of_ref": "indicator--544485da-605f-473d-9cbe-b05bcf8b01c4", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d40c6212-d7c4-4fb5-953f-fb546920f2b4", "sighting_of_ref": "indicator--5886b334-eb20-473e-b93a-99885ef4a82f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--071ee850-5ef6-4247-a8d0-28aebdf372ce", "sighting_of_ref": "indicator--5a23f5e0-265d-4b27-bd37-ea6a53fa5e1c", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--113d1198-36d9-4271-b1f1-69984649bcd7", "sighting_of_ref": "indicator--f02165d5-9694-4ec8-ba48-092a68475d11", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bdaa3e6-215e-493b-bb56-accc809d4f86", "sighting_of_ref": "indicator--289947f9-5b86-47a5-ad10-d859db478348", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd16b80c-a7d0-47b4-8cd7-d16caa878df2", "sighting_of_ref": "indicator--159d3981-5ed5-48ec-a8ae-959e3efd87a0", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04b4e44c-f70a-4e7c-9021-d9bc3bd48b3a", "sighting_of_ref": "indicator--52ac8136-a7d5-4257-ae1b-7438fae5f351", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--740aafe3-b542-476a-98ab-6be248005249", "sighting_of_ref": "indicator--1558f7d5-8bc4-43b5-aad4-ab4784bf80bd", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd05eddd-f548-49cd-a3f6-9b3497a8380e", "sighting_of_ref": "indicator--644ff65f-76c7-4c82-8743-008acf1de38a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9eeb8e4c-0bcc-4a90-bc03-0d912460415b", "sighting_of_ref": "indicator--fbe290e1-86b0-41ce-9155-cbf681478638", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5677351-8ffe-4054-88c8-c3d443ab8699", "sighting_of_ref": "indicator--09f47533-6f72-417d-ae9d-3e879b15c28c", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2389de02-25f7-4583-998a-2cfc8d57cf5f", "sighting_of_ref": "indicator--be0f3e00-ae17-4cd8-863c-6833ddd397b1", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c7a689b-059d-454a-84d3-4fc654a20a4b", "sighting_of_ref": "indicator--353e8d56-9c91-4743-a456-9c8aeee33043", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--503e5d74-0424-4317-a338-6644724e45c6", "sighting_of_ref": "indicator--81939c9d-df70-4fcc-838d-fdd46dcd3446", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--927c8ef0-3403-4686-87c6-c2e32e60cfcc", "sighting_of_ref": "indicator--60053f05-67ba-464d-96a6-b8f1dc2941e0", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--074c2ba5-360f-46ae-a708-a022c4d578c7", "sighting_of_ref": "indicator--3db46b95-f12d-4948-8bdc-6db463901f91", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3763e519-4df2-464a-9d9f-fa542808f122", "sighting_of_ref": "indicator--5b021497-6bb4-4338-adc9-ed1a0f43fa12", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc752425-f7af-4f8a-a1f8-62f08e6c0a00", "sighting_of_ref": "indicator--f0509a0e-3bfe-4f8e-821a-c9c1ccae85de", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39735a2b-805d-466e-b238-a7bf8f216e80", "sighting_of_ref": "indicator--c2b7959a-24db-406a-8c64-b8a6986cd162", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8b1a2c0-dd7a-4faa-aff0-60f4d78789a7", "sighting_of_ref": "indicator--c2b7959a-24db-406a-8c64-b8a6986cd162", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d38b5cb3-241b-4675-964b-0a87679f472c", "sighting_of_ref": "indicator--35b75d98-76b6-434e-957a-2a9d98a49963", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea955aa0-1874-41a4-8466-6d183d25800c", "sighting_of_ref": "indicator--14e1012a-e84f-4026-9922-a9a53497269e", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07737db5-2ee0-458e-8c16-b6bd04093a1a", "sighting_of_ref": "indicator--cdbb2975-f423-47b1-b80c-55cc94b7fa6c", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3823c622-35e2-48ab-8cee-8e498817e096", "sighting_of_ref": "indicator--fa37c945-1b9c-4e54-8b55-37a085e466e0", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6e57105-1a19-4ba0-bd3b-53b0275cd86d", "sighting_of_ref": "indicator--fa37c945-1b9c-4e54-8b55-37a085e466e0", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6442ee20-92f3-4ca0-a45d-14b8c7373e7e", "sighting_of_ref": "indicator--27f3eeec-ca45-4985-b650-03ff1e51dab4", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d563e0d-7eb4-4081-a812-8d2b31d9d63d", "sighting_of_ref": "indicator--ea3e5dc0-b1a3-49ed-83cb-5599b33470af", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4e59ba5-fb46-4de1-9c38-fe726b766b40", "sighting_of_ref": "indicator--ea3e5dc0-b1a3-49ed-83cb-5599b33470af", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68457084-3b18-4331-8131-ba957401d5dc", "sighting_of_ref": "indicator--3c919b56-7d24-4edd-8e67-c32e85faec6a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38612e78-ba4d-4701-a201-bc6e2b9aaf8d", "sighting_of_ref": "indicator--3c919b56-7d24-4edd-8e67-c32e85faec6a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11d69a58-f76b-4846-8392-b8267c1d3097", "sighting_of_ref": "indicator--26689fd7-cfc8-4633-97ff-cb10b65d6c72", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e586137-c17e-447e-a7f0-852f12ebeaac", "sighting_of_ref": "indicator--fa53a4d3-5272-4665-a701-bacb34482879", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87d7784d-db9a-42b0-bd9f-b715e721bd1b", "sighting_of_ref": "indicator--ff3447dc-ffb3-4fc6-9339-e862843c8bc6", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dd2fdec-61d0-4164-bb40-5f032f41de21", "sighting_of_ref": "indicator--16a47de2-e3ab-4830-8598-66e38c77b67c", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c9cc509-6fc4-4ed4-84ad-ad36691c639f", "sighting_of_ref": "indicator--4da403a3-5398-4273-ab23-cd3e81cfbfcf", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--304979fc-c46a-441a-9551-67a82885f2e5", "sighting_of_ref": "indicator--4da403a3-5398-4273-ab23-cd3e81cfbfcf", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--899e99fa-df7a-4583-beb6-b051da09aead", "sighting_of_ref": "indicator--7f239f08-00c0-4620-984a-81c2a77048e7", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--608204f6-32e9-4232-ada1-a7a84a9116ed", "sighting_of_ref": "indicator--12fce7f2-c388-400e-be4c-d495afad7bb7", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60561f4f-c83d-40a4-ad20-a1828720bfa5", "sighting_of_ref": "indicator--2f70281a-dd8e-48c6-91b0-b21a307ee076", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34aafcaf-23ad-49c5-9edb-5af19771f4c9", "sighting_of_ref": "indicator--42906343-15e9-4ed8-b309-8beb127ed1b6", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00f1099c-4c46-48c6-9f38-788700133db7", "sighting_of_ref": "indicator--f3195d07-2826-4362-bd35-36d95e35a28e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7148ac21-f23a-4fb3-8321-ece9e6e3c198", "sighting_of_ref": "indicator--63753562-f6c1-4f52-8779-d46cf8c60130", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e62521da-0299-47ff-8c61-2fafeaa7a51c", "sighting_of_ref": "indicator--63753562-f6c1-4f52-8779-d46cf8c60130", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72178d48-43a0-4588-a9a3-87d6a0c8ba6a", "sighting_of_ref": "indicator--6c67ba6b-60cd-4828-91e3-84791434e81e", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--041c4414-284e-4ec6-8dcc-20146f9221db", "sighting_of_ref": "indicator--6a2d81c6-6972-47ad-877d-34cf6849d63f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0833c6a-a76b-49b9-9446-bc40ef2f88da", "sighting_of_ref": "indicator--6a2d81c6-6972-47ad-877d-34cf6849d63f", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0d26703-38c2-4fe5-a0bd-d23c01e5297a", "sighting_of_ref": "indicator--7bbf1345-d254-4a86-b2f3-528aaa00b7e8", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12bfd7c2-3e82-4d30-a1b7-29cbf3d0843a", "sighting_of_ref": "indicator--ac49257d-7b23-48d1-9b72-e9b525345451", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08783d81-3153-4249-8f69-146858f4c10f", "sighting_of_ref": "indicator--e0ad9183-b02d-4f55-8a1c-7d56881558dd", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a269e5c4-11d4-4149-97f8-52b88f062caa", "sighting_of_ref": "indicator--3f54fd80-ed88-4314-b08d-f8a9a18a31be", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee9a9dc4-6d31-49d6-8f4c-a012e5f81771", "sighting_of_ref": "indicator--f0b539e6-40bf-4125-8388-f77f9cb1b835", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07830505-6477-43e5-b56e-322d2e3587f9", "sighting_of_ref": "indicator--6723a331-093e-49d4-91a6-11ddae77b898", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97e0a173-954e-4c34-bcb3-dd4d6c78f646", "sighting_of_ref": "indicator--6723a331-093e-49d4-91a6-11ddae77b898", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43323d8e-71b7-4cff-8b33-726cd0069336", "sighting_of_ref": "indicator--76c7f10f-8703-4460-815e-3486e2205ada", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd345cd5-8710-4c5e-a70a-0e785a1430e8", "sighting_of_ref": "indicator--82a074bd-ac0d-4294-92cf-8305e7f8ff89", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04637acd-b9e2-4383-a157-9d36f5963bdf", "sighting_of_ref": "indicator--43ce281c-bbb7-430f-910f-d19d192504f2", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad4d9833-2571-4a8f-96a3-85f1cc97e48a", "sighting_of_ref": "indicator--43ce281c-bbb7-430f-910f-d19d192504f2", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b66d9e2-cf9d-4985-b1b4-b97d050083f9", "sighting_of_ref": "indicator--5bae8b0d-3c29-4976-b07e-61c5229e607a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dc44839-0cdb-430e-a2e2-a58e2c9fea89", "sighting_of_ref": "indicator--29b8f8ea-253d-4892-8d4f-5d06e68105ec", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--839763fb-7a99-4da2-89ed-1563f1c2d73b", "sighting_of_ref": "indicator--12f22a47-b684-4001-a7f8-84a52dbba8f1", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f224c16-9d23-4c19-a022-e80e5852e646", "sighting_of_ref": "indicator--b74a16d2-a5d2-4787-babf-a2c9bacd3dfd", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12400b0f-b984-45cf-bd84-27a8812d2669", "sighting_of_ref": "indicator--b74a16d2-a5d2-4787-babf-a2c9bacd3dfd", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7810d669-2b70-4f21-adce-61420c7fefa2", "sighting_of_ref": "indicator--13133b06-d317-4346-9a3e-8b6120c8a2d3", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bb4f5d1-2527-4d5e-8fda-423c3c18d5b4", "sighting_of_ref": "indicator--7cd4e451-e57c-4b92-9d86-1044c52cc94d", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb5416b0-5d34-480c-9efc-ca296a76ba76", "sighting_of_ref": "indicator--e7f51e65-9d3f-4b52-8d73-c5e91fe4e734", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3138af2-252e-452f-88b0-4f6c8decf7d8", "sighting_of_ref": "indicator--30cdcf09-614a-475c-b824-a7e668a8ecd2", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8202ce8a-f085-429e-850f-d0514fa3a954", "sighting_of_ref": "indicator--bc19e153-34cc-46db-a6c0-5298a6141565", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fff2d673-4ee0-49fd-8bbe-0fbb648c52fc", "sighting_of_ref": "indicator--bc19e153-34cc-46db-a6c0-5298a6141565", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--939630dd-ec95-40f1-93f4-b7ad30ba0f48", "sighting_of_ref": "indicator--e0a03964-2df4-4c62-85d5-14bc5b26e5d0", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f91a072-0ed8-41b2-88f5-f11856b7b9f7", "sighting_of_ref": "indicator--d349636a-d368-4a5d-b7d7-9f9cdec44aec", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fb62d43-fe93-4fbb-b534-d78d530167e6", "sighting_of_ref": "indicator--81b1dcc5-c243-4bb3-bc2a-83d4543f45aa", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a63bcc3-4b72-48e5-8f4f-de4984d20ca8", "sighting_of_ref": "indicator--81b1dcc5-c243-4bb3-bc2a-83d4543f45aa", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfc472e6-4aae-4db7-b346-82208f349607", "sighting_of_ref": "indicator--81b1dcc5-c243-4bb3-bc2a-83d4543f45aa", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3beb83b-f241-44a7-ab6c-23782a20002f", "sighting_of_ref": "indicator--abb2b4d9-0457-4f78-b1f5-aca78b89892e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31266414-c594-4ed8-ad76-ad0b1af65edc", "sighting_of_ref": "indicator--a570247b-f028-4c8e-8e08-ce64b92071c9", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afb613f2-4a70-4f96-83f1-cefe9aa48f39", "sighting_of_ref": "indicator--a570247b-f028-4c8e-8e08-ce64b92071c9", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acc8a4e8-72c5-4637-8b23-917b924a308f", "sighting_of_ref": "indicator--436cdc14-cac0-4c66-8fa2-dbc80918d3a0", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9969f3a-aaa4-46d6-b8b1-69f98b76b4f1", "sighting_of_ref": "indicator--319833f6-f0b1-4869-8c2a-6bb228d9c62f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3031a067-2e8f-478b-a7b4-e0c144e65253", "sighting_of_ref": "indicator--e632195a-a745-4df2-98d9-6d8e6db1e7b8", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f643f789-4c4c-4bed-9197-2e34fae837ad", "sighting_of_ref": "indicator--d012e290-34f9-4dc2-889e-39b519495e71", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8b13084-f5e7-406b-a2f6-f7383e76f600", "sighting_of_ref": "indicator--729550e0-9537-4188-b246-92d6d5910780", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41c0be1c-0856-4960-9fd5-d68093906c20", "sighting_of_ref": "indicator--b0e32b9a-d963-495b-8517-17b9c85cfdfd", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecc6e6aa-63e3-42f7-adf2-41a1c363d2ab", "sighting_of_ref": "indicator--68a14719-ab8f-4262-889b-57f057cf67c1", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19f44d37-5e74-4b79-a161-db7afd571ef2", "sighting_of_ref": "indicator--46a20894-e914-477c-bccc-b3ac7c79b027", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c073ef1-47e7-401a-9531-e9f43a32cac0", "sighting_of_ref": "indicator--62530a95-5072-4503-bc7c-5aaf54e8c321", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e95ed72d-9e02-489d-b365-c3d008c457ab", "sighting_of_ref": "indicator--74e2c7c4-cdc7-475c-8c32-6cd27f9cc404", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1304e4bb-70c4-4116-9177-4dddc0020eb8", "sighting_of_ref": "indicator--5b278bf8-c632-40dd-b37f-f0286e765081", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d032fb9d-babb-4d20-9e7e-329d142cf336", "sighting_of_ref": "indicator--f923ff62-d07d-48d5-8522-ef06ac4fd5b8", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5966d84-da12-4dd7-a329-2b8e4af2f75d", "sighting_of_ref": "indicator--404b4b7a-ea65-4c42-940e-0310bb4aa6eb", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc44face-588d-4c2f-9150-5c8600732fd1", "sighting_of_ref": "indicator--92c0d42e-3692-4c4e-84da-1114f9a9a24d", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d81adb9c-49eb-411f-afa3-5a0f38b46834", "sighting_of_ref": "indicator--ad266b6f-17c1-4a9c-adfb-0fadd22806fc", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6cb47e4-c14f-4963-bedc-40805e80e666", "sighting_of_ref": "indicator--5e461df3-3f2c-4327-bd05-c0acbe76aad8", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c38bc39e-22bc-43d3-9c6d-3aa69959ef7a", "sighting_of_ref": "indicator--8fe7da9d-95ee-4bb4-87bb-980fcbc17a64", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--908c3783-9783-48a4-9c19-cc699c8e45cc", "sighting_of_ref": "indicator--83916a02-696b-413c-9296-4adb6850412e", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdc301fe-476e-426b-8b43-881edbd7ec97", "sighting_of_ref": "indicator--ec5d4be0-4840-42af-8ba8-477e8711619b", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89cf14a3-761d-4e59-82cc-2c47ec800b7f", "sighting_of_ref": "indicator--ec5d4be0-4840-42af-8ba8-477e8711619b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8fa1cd9-d960-4dba-a3dd-f6195e7805c1", "sighting_of_ref": "indicator--93cb514c-fee2-4c9d-92d1-23c86cd41c70", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--029aeaf2-4cba-4d98-96ad-1254828750bf", "sighting_of_ref": "indicator--d115c70f-3d65-484e-a662-c0776a069672", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de220c6f-af5e-4de4-b3fc-987ea9f7b3de", "sighting_of_ref": "indicator--d115c70f-3d65-484e-a662-c0776a069672", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a765807-0c35-4930-847f-6e2e5080861c", "sighting_of_ref": "indicator--824f2602-e849-41ae-a983-b257070dc712", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1fbc375-eac6-407c-887d-41acbe44dce6", "sighting_of_ref": "indicator--824f2602-e849-41ae-a983-b257070dc712", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e8d0e08-eba5-4261-a5e2-9059807c4a59", "sighting_of_ref": "indicator--a42a3fbe-feed-4ed3-8474-13d01e2a3e80", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81132b8b-aaf2-4f8b-b879-996d154eaee4", "sighting_of_ref": "indicator--52c4414c-79c8-47b1-b44d-bed3e9462108", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c244b1c-74e2-46e8-a6d6-8c2a51e1a5a9", "sighting_of_ref": "indicator--52c4414c-79c8-47b1-b44d-bed3e9462108", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93e97952-1000-4f60-8fd2-53f01d8d36c7", "sighting_of_ref": "indicator--70766df1-be82-46d6-8033-0fc9a43bd3e3", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c75d1538-9c89-4a90-b085-8cce0bb4b769", "sighting_of_ref": "indicator--71fd52d4-ef2a-498d-b5c9-666753211434", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90c01482-b9a0-48f2-a117-c58a04ca9eb0", "sighting_of_ref": "indicator--53b1d3b4-5ead-4807-822f-e6104067e70f", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79c1d5c3-e930-4b0b-99d5-4373f60157d3", "sighting_of_ref": "indicator--80fe34b7-4631-4205-ba03-2cef4e4aac95", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7507b845-752c-42fe-8403-76ba1718a50e", "sighting_of_ref": "indicator--57841475-fb01-41e1-861f-fcff5b325c0c", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f243f63-f179-4a5c-847d-72bf57b8d763", "sighting_of_ref": "indicator--81a34ec0-9cdd-4ae7-9e1e-bf80b66c6cda", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3132c3e2-1df7-46c8-8cac-c14e99194592", "sighting_of_ref": "indicator--c123de48-0fc2-46fd-bf42-4a825e11cff7", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8163b771-3272-4273-ac39-d7cdc52b68c5", "sighting_of_ref": "indicator--fa8e21ba-4fba-4b2e-a723-c6b50953d6e0", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fe972b5-80d1-4763-aee9-5b1349827c3b", "sighting_of_ref": "indicator--fa8e21ba-4fba-4b2e-a723-c6b50953d6e0", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddaf4095-ee13-4df5-8482-f8905ab0a267", "sighting_of_ref": "indicator--6f247362-4274-441e-a0a0-7ecd206547d8", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fe895c6-c004-4749-9471-03abd7a5a697", "sighting_of_ref": "indicator--6f247362-4274-441e-a0a0-7ecd206547d8", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9edd54f7-faca-42b5-b738-04e53f394fc7", "sighting_of_ref": "indicator--6f247362-4274-441e-a0a0-7ecd206547d8", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4f06b4a-a23a-4962-912b-4f763dc2ca32", "sighting_of_ref": "indicator--5dc3bce3-60a7-4293-b20e-915964640541", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--825f34e9-0ca5-44ba-a7d6-bf26d1286e0e", "sighting_of_ref": "indicator--cadc445d-ebbc-48a5-ac8a-62a4e8a9fa2a", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afac3ed5-50f1-4817-b985-734e1c97d215", "sighting_of_ref": "indicator--20ab5a4b-ecd4-47c1-90a0-f0279a1208a7", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbd55769-9056-4104-ad47-116b8e6eacb0", "sighting_of_ref": "indicator--62f757b3-3c3b-42ca-8fc1-5bb97816d72e", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41a556d2-106f-4edd-91d5-a4697a80a405", "sighting_of_ref": "indicator--2a865a3f-61c3-4754-b8a6-765cfaa2a1e3", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0061c10b-73b9-4356-92c0-a66b8c8c4f02", "sighting_of_ref": "indicator--1072a2a0-845b-4f92-b5e2-b1841888336e", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8771307-fe5d-45a7-97b2-a411441a982a", "sighting_of_ref": "indicator--f6ff451f-276a-4070-9b6c-2e56145dad56", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be680cf9-658d-409b-a439-65f572d5b554", "sighting_of_ref": "indicator--2683ec25-f9cb-4c45-b6d2-ba9f513bf3ae", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d323daa-268e-4b13-b0cf-04c29f99a2c5", "sighting_of_ref": "indicator--ff91e558-0e9c-4a22-aa18-74673bdcf605", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebec5ce7-2910-41d1-8746-8d0e3cfc9ea1", "sighting_of_ref": "indicator--581935ed-d95c-4d81-ad70-1fea5bdf8c82", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65508839-2fe9-4434-ac7d-c80e1f4f4c9b", "sighting_of_ref": "indicator--581935ed-d95c-4d81-ad70-1fea5bdf8c82", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b9d36ff-bafb-4ffe-be41-a779ab8ee394", "sighting_of_ref": "indicator--581935ed-d95c-4d81-ad70-1fea5bdf8c82", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edac7b57-ac0f-41c0-b649-2b3107902246", "sighting_of_ref": "indicator--e511201f-e520-4bbd-baf2-c5f33a515ed0", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e99ab251-65b4-4393-842e-d5001d640120", "sighting_of_ref": "indicator--4c0fa3f8-6a97-45dc-8ced-91167673abf5", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0ef6de9-a325-4d4a-adc2-7a597512310b", "sighting_of_ref": "indicator--4c0fa3f8-6a97-45dc-8ced-91167673abf5", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86fa1bfb-0537-469b-8030-83f94ba15085", "sighting_of_ref": "indicator--4c0fa3f8-6a97-45dc-8ced-91167673abf5", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31754fc4-dcea-432e-9bc4-68e7733a86ce", "sighting_of_ref": "indicator--92540127-f052-4479-9bba-5cd30d497a35", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24cc16a7-528f-49cf-9e17-8d867534c195", "sighting_of_ref": "indicator--4f4fb3e2-b498-4e68-8a50-d1285ce8d6d6", "where_sighted_refs": ["location--cc47317e-2c18-43a6-8938-dea748a56ad5"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--587c0f03-9d82-4a00-b022-84a206d72958", "sighting_of_ref": "indicator--dd67602d-be13-4a8f-8a6a-3cc0f24aa08d", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ca79971-f342-48a5-a42e-4bd458ba2daa", "sighting_of_ref": "indicator--da816432-5c99-4704-84f6-9a88ce0d1777", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cbd2e9e-9113-4479-8bab-f19a058d91b6", "sighting_of_ref": "indicator--da816432-5c99-4704-84f6-9a88ce0d1777", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a37f62b-ddd2-48c3-84f0-1faeb5c0d7c2", "sighting_of_ref": "indicator--be2259d3-bbf2-41d7-b4d1-d3f06cac1cf9", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c3223fe-78d9-4da1-99ac-d1c72645d42a", "sighting_of_ref": "indicator--fb9553bf-a486-4b10-b906-b1aabfd13c45", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6286c5af-801c-48fc-9eac-2349f578ee64", "sighting_of_ref": "indicator--fea459f3-115f-4c9c-952c-e4c1f088ad7f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92fa20c8-080e-4ea2-b95c-f4b876117065", "sighting_of_ref": "indicator--21930742-799e-4856-83e0-3e9f2d0bb502", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--465a514e-843c-4918-85a8-75fa0de0137b", "sighting_of_ref": "indicator--87bea29d-6354-4bf0-bd4b-3d229477aa9d", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebd15fcc-24f6-433c-9284-20409d3f969a", "sighting_of_ref": "indicator--87bea29d-6354-4bf0-bd4b-3d229477aa9d", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c2de351-d00f-4ed7-890d-4a73bb2296e7", "sighting_of_ref": "indicator--87bea29d-6354-4bf0-bd4b-3d229477aa9d", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0100d5f5-87b7-4994-b599-9cc6f47b79de", "sighting_of_ref": "indicator--73838b3a-4508-49b6-bace-bbaf0dc54586", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2453d99a-3028-48e4-b293-6a5132e39f07", "sighting_of_ref": "indicator--e627ab16-bcbf-4dec-9521-e16659475a9a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2626cb99-959f-41ff-afa6-b50f0ed07470", "sighting_of_ref": "indicator--f45acfcc-751d-4c02-bb0c-542b94575f05", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52d5d4f7-14c2-4c71-becb-107cf62c181c", "sighting_of_ref": "indicator--1781add1-5229-4328-a67b-fd7bcfbdc9ec", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--420bc32b-68c9-4267-a81d-55bc7102bd0f", "sighting_of_ref": "indicator--1781add1-5229-4328-a67b-fd7bcfbdc9ec", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80a6f4f6-4c0b-4eb2-9fc7-78c11045cdf3", "sighting_of_ref": "indicator--ed789cf4-ad32-4f55-bdbb-a69bd01bd629", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83387a2a-cead-4dc1-ac6a-d61e01754b7b", "sighting_of_ref": "indicator--c049c522-e000-46c2-9414-945c6d8c2f01", "where_sighted_refs": ["location--cc47317e-2c18-43a6-8938-dea748a56ad5"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eddb4341-e72e-478a-ab04-ee23a90d0bca", "sighting_of_ref": "indicator--839ebc6d-964e-471b-9529-734da218536c", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db5cb1b6-c947-4c87-a1a5-eb251c94c79e", "sighting_of_ref": "indicator--2a7ccd3f-bc7b-4a47-bcf0-80ddd89d41e8", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89d4308a-0982-48f8-9676-0c026557ae6c", "sighting_of_ref": "indicator--2a7ccd3f-bc7b-4a47-bcf0-80ddd89d41e8", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5eab856c-943b-465d-ab90-f875dd263ef1", "sighting_of_ref": "indicator--7873a8bb-f4e0-46cd-8d3f-668833e1f7da", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2637674a-696a-4a40-bd61-3c27b4880061", "sighting_of_ref": "indicator--7873a8bb-f4e0-46cd-8d3f-668833e1f7da", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1770e2e3-8714-4302-84e1-388ea499e78e", "sighting_of_ref": "indicator--7873a8bb-f4e0-46cd-8d3f-668833e1f7da", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ab687ff-7c84-4d73-bb9d-8fa70edde50f", "sighting_of_ref": "indicator--69e653d5-76f1-490d-beca-418beefec4e0", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8321ab8d-c463-45f0-a9b3-d30edd31d826", "sighting_of_ref": "indicator--7f412581-c455-44ad-9fb2-5badb92e0b9e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2634b26-d6dd-4a6f-8a67-8fcbbf49a94a", "sighting_of_ref": "indicator--135c8a35-3a57-4b7f-b437-c07c4b4bef7d", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d85e339-c833-432a-a5c2-3c6d2da1ad31", "sighting_of_ref": "indicator--b2fe7b24-526c-4edf-bf44-6b4b6a1bc8ec", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ee341b4-7b75-4a6a-bcc8-5191c8a516a5", "sighting_of_ref": "indicator--6cfb88db-0c81-4473-944c-d045291ed184", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da857653-445c-4c1f-9935-a3014884db93", "sighting_of_ref": "indicator--5e3f5c33-6fe7-40ed-9d3f-e7a2d0ae8566", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9f871f6-44c3-4e91-9971-3637dbe3852b", "sighting_of_ref": "indicator--31fa83a7-3043-43b9-8b07-8fd914f49af5", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fd5a25f-d42e-4668-af03-5292b972c598", "sighting_of_ref": "indicator--c568bd6b-ba80-4c94-9824-d7c0a898a431", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0639321b-3274-4fdb-bf51-e6c51c8e7822", "sighting_of_ref": "indicator--8b7550b6-1e2c-4a2e-a3b6-5e09751d6678", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ec4ae1d-e868-4074-bf25-c2cd09f990cb", "sighting_of_ref": "indicator--8b7550b6-1e2c-4a2e-a3b6-5e09751d6678", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--038c1784-399e-454a-820d-6fe942393852", "sighting_of_ref": "indicator--6300338c-23ac-435d-b45d-ed01f134f4a3", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49ccbf7f-9317-4d80-b93d-56dacb9e84c8", "sighting_of_ref": "indicator--6300338c-23ac-435d-b45d-ed01f134f4a3", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19e82da8-43c9-4cff-ac9a-97a60421b355", "sighting_of_ref": "indicator--6300338c-23ac-435d-b45d-ed01f134f4a3", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64d446da-6e0c-427b-a13e-34680dbc3ade", "sighting_of_ref": "indicator--fd2f52af-907f-4ff9-9f7f-14dfbf26d45f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ae02956-c7af-47d7-8b47-1ed633a8c805", "sighting_of_ref": "indicator--8dd97d19-b91d-448d-a6bb-39eea51f4d9e", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98fce686-68ba-4bcd-9f00-04453e4131af", "sighting_of_ref": "indicator--c279d7c6-6137-4c2d-beb0-80513893dc15", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b8a73a8-f94d-4059-91d4-e88680261185", "sighting_of_ref": "indicator--e388898e-0fde-4ab8-a0d5-56abe5adb760", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38c736b6-cee7-4004-8759-e0e3c3d41ba6", "sighting_of_ref": "indicator--e388898e-0fde-4ab8-a0d5-56abe5adb760", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--294aa60f-856f-48bb-9125-ac7b3055656d", "sighting_of_ref": "indicator--e388898e-0fde-4ab8-a0d5-56abe5adb760", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39f2692e-238e-4f01-8532-f0b78f2c4c76", "sighting_of_ref": "indicator--0cae9193-a712-40eb-a3b1-8cc8f0fc71b5", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc8a8f5b-0052-4231-a37c-e84d85fbc76e", "sighting_of_ref": "indicator--ad760a86-bea2-4d09-b3e8-199fa0305913", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afbf4d39-1ebb-4cda-a9d6-73ca7b7b72ba", "sighting_of_ref": "indicator--25bc01c9-cbd2-4e58-aa1f-8d5ed5181d66", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31d082f8-2a94-4be3-a57b-4b8d82b383ac", "sighting_of_ref": "indicator--25bc01c9-cbd2-4e58-aa1f-8d5ed5181d66", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca0c6612-18b6-4c23-a688-1d23b898f1f6", "sighting_of_ref": "indicator--08b86047-1bfd-4a12-b27c-eddbfda585cf", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e33ffeb1-d11f-467d-97ba-75fa5081bb08", "sighting_of_ref": "indicator--77754e8e-7ecd-47d2-a342-53a2a5f9f494", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1959d1be-e2b8-4628-9080-1e6943121074", "sighting_of_ref": "indicator--77754e8e-7ecd-47d2-a342-53a2a5f9f494", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--034b8ef3-5b14-4583-86c2-5b19466a99db", "sighting_of_ref": "indicator--1a49d579-e6b8-4eab-b033-99ba239c5d04", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ce82ba6-1e86-4d8f-961f-8347d25843a0", "sighting_of_ref": "indicator--1a49d579-e6b8-4eab-b033-99ba239c5d04", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf441667-409b-41dc-abd6-f47fa024e87e", "sighting_of_ref": "indicator--8aa91101-5779-448e-996f-a7ed28efd325", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b5a02a3-026c-48d5-8aaf-5b806338f23a", "sighting_of_ref": "indicator--f66d00b4-2500-4baf-9229-9d68ca07dff6", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2aebe26-7a72-4345-9552-f4dd0d2b36be", "sighting_of_ref": "indicator--9eaad1da-ca46-4924-8ef9-74e5351d947e", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b548980-55a3-40d5-8528-ed60ee281003", "sighting_of_ref": "indicator--259dbf62-3fbd-4576-9e50-248863c7557c", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02e8c7d6-7f98-4b49-a561-70c1179d7c2f", "sighting_of_ref": "indicator--259dbf62-3fbd-4576-9e50-248863c7557c", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70d857ed-ae02-4552-a7c5-2aa13ff29332", "sighting_of_ref": "indicator--3e94192f-0325-42d2-9570-2913aec437e3", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc0b4d4a-28af-4553-9b5d-0842b5c0d475", "sighting_of_ref": "indicator--d731b954-24a0-4fac-9249-a588e1c2fd50", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5552eecd-20a4-4db4-8b44-89a45a342c4b", "sighting_of_ref": "indicator--0e19baf0-642b-40c1-a79a-d8bbd2c1d7d5", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd2abe05-b4d8-483b-bc07-4148de226672", "sighting_of_ref": "indicator--6f8a0092-4067-4d00-b1c3-8b6ce55a8d5a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5be88bb2-d65f-4ce2-8c1a-d2d2c85a3987", "sighting_of_ref": "indicator--052206e9-d7f0-4f31-a0e7-f530b373db79", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48965e10-a25d-4c71-bd54-b98ded19ed1c", "sighting_of_ref": "indicator--bb07cdd2-087b-4c64-9778-3caa58687755", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b703c9c0-1c3d-4e24-b630-02dd0ac5a39d", "sighting_of_ref": "indicator--fccf7946-6110-471e-936f-8bba80825afb", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--328c017d-ff96-4c7e-b6e2-2576ed39ca98", "sighting_of_ref": "indicator--a4194b68-899e-4ca3-9d36-c2a5c448e4ec", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1506099c-4666-4066-8905-aab10f82a5cb", "sighting_of_ref": "indicator--810205d3-862e-47e1-aabb-9bd01ca752a8", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--740a99cc-12f6-486e-a4b0-0d0f89b1102a", "sighting_of_ref": "indicator--6778d4ab-9f8b-4e21-be00-cbada45fbd99", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--860c3e6d-e9d4-4d36-9243-4b25d9c55934", "sighting_of_ref": "indicator--6778d4ab-9f8b-4e21-be00-cbada45fbd99", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34884eec-b63c-4679-9e5f-4a039dfe6a07", "sighting_of_ref": "indicator--78338f4a-7538-4e45-bd55-e5ab7399c0ae", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c71d451a-152c-4e5e-8135-838dbb4a1827", "sighting_of_ref": "indicator--4f80376c-1d65-42c8-be1a-13ff67d010dd", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d819c283-62ba-49f8-9d81-1cfe513b024d", "sighting_of_ref": "indicator--2c236edf-4198-4aec-be85-4e59360accba", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0cee43a-b10f-417e-aaac-a36defe2acf1", "sighting_of_ref": "indicator--b33a875d-9670-4fe3-a51f-5e035a4169b8", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ffd525e-d9da-42ce-b96f-134122af1ed8", "sighting_of_ref": "indicator--2e2656b1-9406-4899-81c5-411bbc4ebbf6", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd9f5fd1-7512-42ff-98bb-f455d8c389de", "sighting_of_ref": "indicator--eccbe9dd-1aa6-4ca1-b9f6-dbcf21378eaa", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37e6b392-8882-4fc1-adf7-10b4e3c35b50", "sighting_of_ref": "indicator--a9986b1d-14ed-47d9-9ed4-14530575cc03", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2f57fa8-d5d2-468f-a9c4-52c3c3310607", "sighting_of_ref": "indicator--63214148-5abb-4cfe-82dd-aecb86aefd32", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fb687f1-c21a-4e02-a13d-63c42c87a52a", "sighting_of_ref": "indicator--3f56a444-04d0-4919-b9db-168b546595f6", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1168c5eb-739a-46b2-9bad-927fff46710d", "sighting_of_ref": "indicator--6cab424b-da22-4550-be8a-b4ad81d1d321", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec96004a-6036-46b0-aec1-03c7eeaee915", "sighting_of_ref": "indicator--6cab424b-da22-4550-be8a-b4ad81d1d321", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a9c87d1-cbed-4850-a430-8961a7502831", "sighting_of_ref": "indicator--6cab424b-da22-4550-be8a-b4ad81d1d321", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa8b2535-a80e-446a-85b7-6f7b526657b7", "sighting_of_ref": "indicator--6cab424b-da22-4550-be8a-b4ad81d1d321", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb8d6c47-f3db-43ac-816e-8e15b572d476", "sighting_of_ref": "indicator--5bb769f5-4b56-476f-9196-633613274095", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29c8fc67-831a-4bd8-ac1e-7db8eebeafae", "sighting_of_ref": "indicator--5bb769f5-4b56-476f-9196-633613274095", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a910f6b-2bb2-48f3-b477-37d559f7fcc5", "sighting_of_ref": "indicator--a7128548-3b3d-40cb-a2b9-cbd7510e5c67", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbc615a8-a79a-4007-aa31-7081ffdbb5af", "sighting_of_ref": "indicator--ecc49362-ab1c-4519-926e-ae6b94266db5", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcd7a264-dffe-4b42-9e83-3420b2d0fda6", "sighting_of_ref": "indicator--22a33b49-91c6-45e5-989d-bdf07465fb01", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ebb9a95-ade3-498d-bfb6-11752c5a8e29", "sighting_of_ref": "indicator--22a33b49-91c6-45e5-989d-bdf07465fb01", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2b0740c-9fb0-4adc-8d07-70e947a4f173", "sighting_of_ref": "indicator--00045083-6576-4aca-92d0-fe7155b87dce", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e3c2236-48d6-40d9-90ae-7296004bd64c", "sighting_of_ref": "indicator--00045083-6576-4aca-92d0-fe7155b87dce", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0857d472-2da5-4681-bd58-7cdf4dbfa9e2", "sighting_of_ref": "indicator--00045083-6576-4aca-92d0-fe7155b87dce", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e659010b-6d87-4a5d-bf83-85c0d3b72a9a", "sighting_of_ref": "indicator--f28d3268-41ee-4310-a644-7116202a667e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e9ee993-c77a-456c-98e2-7c7b0bb95969", "sighting_of_ref": "indicator--f340500b-b68c-4abe-9fc0-888643c6617d", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b2f31c2-b215-4201-90aa-40a3ddca97b5", "sighting_of_ref": "indicator--f340500b-b68c-4abe-9fc0-888643c6617d", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f66659a-79bf-4fd6-a798-653aad56623a", "sighting_of_ref": "indicator--300c889d-9c38-4abf-a487-564db53d08f3", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f090a0a-f738-4bf5-a7dd-e62e9ba3f760", "sighting_of_ref": "indicator--300c889d-9c38-4abf-a487-564db53d08f3", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22181500-4dbd-4ef9-a872-057b2fe14f31", "sighting_of_ref": "indicator--083bbbc3-3b55-4a2c-a650-bb227479fe5d", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5cbbb07-1e97-4fbd-80e5-54d2b5d064fc", "sighting_of_ref": "indicator--083bbbc3-3b55-4a2c-a650-bb227479fe5d", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb3296d8-6cbd-4ec1-916b-b1b192db9b29", "sighting_of_ref": "indicator--42833a72-206c-4801-b3c3-c8efd04ac943", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6298dee1-240a-4803-a6b8-5fa433f593cd", "sighting_of_ref": "indicator--42833a72-206c-4801-b3c3-c8efd04ac943", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cb258a4-1f94-4ca1-b5f2-9f6d69a5854f", "sighting_of_ref": "indicator--cf7d4cf7-39c0-402d-8152-28759bcd0c12", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1249091e-d01a-4438-988d-fa5c97a188f9", "sighting_of_ref": "indicator--69ceaadd-923b-4303-b4df-63e40fc358a6", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc183721-596c-42fc-b071-63294e01be81", "sighting_of_ref": "indicator--e8ca3d15-e21c-436f-ba92-20543807b8c8", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--414a7b02-1a5c-433b-9873-fc9ec7fc10d3", "sighting_of_ref": "indicator--5bf7b59c-9122-433e-88a4-a34d1ff0857d", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5746be72-5d11-4dbc-a5da-6bc2877b7970", "sighting_of_ref": "indicator--5bf7b59c-9122-433e-88a4-a34d1ff0857d", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d43207d-b63e-4d26-b622-d8be5b745702", "sighting_of_ref": "indicator--7fa59841-e0bc-45e6-a10c-4fad5c9ebca3", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f80630ca-e486-401e-bb38-e747f81eeb35", "sighting_of_ref": "indicator--7fa59841-e0bc-45e6-a10c-4fad5c9ebca3", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10d89cc4-7ba6-485c-a581-72b1c7e7aa75", "sighting_of_ref": "indicator--90d3f329-e57c-4503-b9a6-cba128c4ad4e", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e163ae4-89d5-4ef6-b57f-f988814e4136", "sighting_of_ref": "indicator--90d3f329-e57c-4503-b9a6-cba128c4ad4e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4890920-8740-4176-baf4-a5a3952b3510", "sighting_of_ref": "indicator--df9f6aa8-5e62-40e1-9d0b-b3b1313fc804", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cf2c434-5d4f-4cab-be4a-9e8885111e7e", "sighting_of_ref": "indicator--df9f6aa8-5e62-40e1-9d0b-b3b1313fc804", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--441aa47f-f0f7-48e9-9045-6a930732100e", "sighting_of_ref": "indicator--d25a1648-b883-4fff-a839-39a8fc723221", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c99cc722-8570-436e-9bd4-a3273b7347f7", "sighting_of_ref": "indicator--b3795c28-50a7-4c7a-a265-a229b299bffd", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5e5b678-6e3e-451e-a548-dc0980a39fb4", "sighting_of_ref": "indicator--24d094bb-763e-4a82-87ce-3aeca7937d54", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89375f7c-f2ee-404a-ad14-f9c0f5e629aa", "sighting_of_ref": "indicator--eb37e5fd-5674-468b-bac4-1dc8447e8a41", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd357728-f1a2-4ff9-a35c-782a1d578ad8", "sighting_of_ref": "indicator--16a4ac41-c0ba-4109-8461-2148ce26774a", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dedcfc9c-a1ca-4932-8fc2-cd9ff83cabbe", "sighting_of_ref": "indicator--16a4ac41-c0ba-4109-8461-2148ce26774a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a844866-33b9-44e3-8a13-39fd012fdd0b", "sighting_of_ref": "indicator--4febb6d7-c0e3-498d-83e9-72c10dd489b6", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5856539d-46ac-47cd-8674-da4adafa075f", "sighting_of_ref": "indicator--4febb6d7-c0e3-498d-83e9-72c10dd489b6", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f29b8795-9479-41a3-a470-74d566cc6e0c", "sighting_of_ref": "indicator--b9aef03c-542e-4510-af7d-87d2e4b3ee9f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f79e15c-4ee2-4c88-9c0c-7b7b2f4967ec", "sighting_of_ref": "indicator--f71be61b-cbc5-4319-b9f7-46517c39ed2b", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--050a3507-7be2-48e2-a5ca-dca472bb60d0", "sighting_of_ref": "indicator--f71be61b-cbc5-4319-b9f7-46517c39ed2b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c18491a-e3cb-4948-82ad-810109cf6689", "sighting_of_ref": "indicator--f71be61b-cbc5-4319-b9f7-46517c39ed2b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a78173d-a1dc-4704-b581-2b38ae24186f", "sighting_of_ref": "indicator--f358a2f5-b448-484a-bfd5-553a554f7fb3", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64231d9f-66d1-4ba7-9193-712bb6695acb", "sighting_of_ref": "indicator--f358a2f5-b448-484a-bfd5-553a554f7fb3", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b596437-0c84-478d-8179-df0a045c8b34", "sighting_of_ref": "indicator--37ad6e3f-3d1b-47ed-ae0c-25f66f21302f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18e2b490-4a45-45c6-8de4-756d1a9e96a5", "sighting_of_ref": "indicator--37ad6e3f-3d1b-47ed-ae0c-25f66f21302f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df8ecdf1-7a46-4b28-a807-4b6c4788b968", "sighting_of_ref": "indicator--e096b779-ed0c-463a-8da2-422e0181b54b", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6883a5a-7711-482d-9336-4ea3d6428805", "sighting_of_ref": "indicator--e096b779-ed0c-463a-8da2-422e0181b54b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00ba6fbb-bf95-489c-954a-d95c0d253603", "sighting_of_ref": "indicator--1d08913b-5c3e-4313-a076-a4618bc90868", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a36c2e0-18a9-4b31-b134-b24df440adc8", "sighting_of_ref": "indicator--1d08913b-5c3e-4313-a076-a4618bc90868", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbf163c7-e200-4f49-9f4d-a8b833a0dd1d", "sighting_of_ref": "indicator--807b3060-aa25-4c39-a513-7c67974f3a65", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ff7b7af-26bc-471b-8fdd-cff70d966b81", "sighting_of_ref": "indicator--807b3060-aa25-4c39-a513-7c67974f3a65", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8e119de-a8c0-4da2-bbbf-31e48b4b7ce1", "sighting_of_ref": "indicator--807b3060-aa25-4c39-a513-7c67974f3a65", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01552241-1a41-4d79-8225-372fd1ab9a97", "sighting_of_ref": "indicator--c4c9f8ec-9f12-4a51-a0f3-a8ffa2886dba", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--886104cc-802c-46d9-8cd8-717376484334", "sighting_of_ref": "indicator--c4c9f8ec-9f12-4a51-a0f3-a8ffa2886dba", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--444949ae-5faf-49b6-89e4-13c20084cfe7", "sighting_of_ref": "indicator--47595069-6db6-425b-8b3a-10f6e7405ee2", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bde0632-d3e0-444b-af20-c6b4c5dbfeda", "sighting_of_ref": "indicator--b2b335cb-4e84-4d4a-abf1-5fc18c9a716b", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b5d8492-a71b-430e-b028-41ba1edc6c26", "sighting_of_ref": "indicator--b2b335cb-4e84-4d4a-abf1-5fc18c9a716b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd666fd3-7c08-47e8-86f7-409a63a4bbfa", "sighting_of_ref": "indicator--f3a84330-fbb5-41f1-a2dc-be755d158a1d", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--126133e4-6811-40bc-9143-bfb54b070a70", "sighting_of_ref": "indicator--ae8477d9-f9d3-482c-9187-472a4dc2b084", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97529175-93ae-43cc-8226-58f960d294b7", "sighting_of_ref": "indicator--26b42210-baad-43d9-be49-aac36efe8fb2", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffc5e37f-bb80-4c48-a441-8fdcabf41368", "sighting_of_ref": "indicator--26b42210-baad-43d9-be49-aac36efe8fb2", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63a1159b-7441-4714-8f63-966f1da07230", "sighting_of_ref": "indicator--9156742e-9198-49e0-beea-10ae3de9e0b1", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31637b01-6c6f-4a6d-a433-b570b7702b32", "sighting_of_ref": "indicator--076dc089-5021-413c-90c8-354c0bec9606", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24fc9c6f-0dbc-4918-9885-fde8441f0fa4", "sighting_of_ref": "indicator--5f5c832a-62de-42bb-8896-39f71bca70e7", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6086b17a-e17b-407a-a969-90a6eb630e72", "sighting_of_ref": "indicator--afbdbaf6-f630-4aa6-8135-17720607a869", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--172a351e-c8dc-48ab-8016-d813ebf1c669", "sighting_of_ref": "indicator--36d47ff8-fbe0-4353-9d9d-5e503660f16b", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acefa686-d019-49e1-a00c-578c64286a40", "sighting_of_ref": "indicator--36d47ff8-fbe0-4353-9d9d-5e503660f16b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f4f2c6c-b903-437a-8ea6-669da802aeb6", "sighting_of_ref": "indicator--c82f7384-6cd0-4a7a-b105-645e802a96bb", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c89cfaaf-b213-4fee-af80-26f512ed16f4", "sighting_of_ref": "indicator--c82f7384-6cd0-4a7a-b105-645e802a96bb", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--400d7e2c-40ff-45e8-9a42-17f3da681f76", "sighting_of_ref": "indicator--ca777df3-3859-4b24-ba89-d38dcb30f497", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ffb3913-afa4-49ec-851e-a675023ce49a", "sighting_of_ref": "indicator--ca777df3-3859-4b24-ba89-d38dcb30f497", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9f26503-01ff-4f03-9c24-f9b0ad39ebd2", "sighting_of_ref": "indicator--768f4c62-f736-4759-bf05-b3264b58d444", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d9756ac-a10e-4501-98fb-227b7f22e5f6", "sighting_of_ref": "indicator--768f4c62-f736-4759-bf05-b3264b58d444", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba93fce6-9042-41e2-bbfe-79e83f58a130", "sighting_of_ref": "indicator--60a66edc-8902-4317-914f-b3f203036d9e", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb3d793c-36b0-4e7e-ab59-f368722bb0fc", "sighting_of_ref": "indicator--cc74c914-0d60-48e7-9af0-b1935b249ada", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a8cc202-7ede-46d7-87ec-4e6cc8427fb9", "sighting_of_ref": "indicator--cc74c914-0d60-48e7-9af0-b1935b249ada", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c51acf0-9722-4041-8a37-00715a657f72", "sighting_of_ref": "indicator--0c275054-2fa0-4196-a57a-10b29039eb21", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbd2b699-60f6-4bd6-add8-35167ab51366", "sighting_of_ref": "indicator--0c275054-2fa0-4196-a57a-10b29039eb21", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a4b093e-64b8-479c-96ff-41ca22fc9dce", "sighting_of_ref": "indicator--0c275054-2fa0-4196-a57a-10b29039eb21", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32a9b058-3bc2-4e72-b7d1-5cf146e49acc", "sighting_of_ref": "indicator--661f0585-a141-4517-9116-d669ce12fbda", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7aec52f-7db7-4e34-9878-b4fe91c9e4ca", "sighting_of_ref": "indicator--661f0585-a141-4517-9116-d669ce12fbda", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a5b91c2-7494-4d36-9562-f649d960c270", "sighting_of_ref": "indicator--8ecdadbd-4120-49d1-a607-b0441834fb92", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac77f05f-b3d9-4ac9-991e-6d81b586c36b", "sighting_of_ref": "indicator--861054c2-8827-4a44-aca9-d13495ac7bcd", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51071c65-43f4-4ea0-9824-546fcb0cc315", "sighting_of_ref": "indicator--861054c2-8827-4a44-aca9-d13495ac7bcd", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66fb3a8f-d34a-4e12-a204-824b067d7dc9", "sighting_of_ref": "indicator--861054c2-8827-4a44-aca9-d13495ac7bcd", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37fae1a1-8a07-47af-871a-36b737d193e4", "sighting_of_ref": "indicator--d6f58a5f-10b8-4c88-9f51-56e565e068ed", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a5e3250-e651-4967-877e-78a885183c5e", "sighting_of_ref": "indicator--3842c7f7-95d8-470b-af02-2f7cc31c67b8", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0381ef0a-e852-4856-b326-caf5a7d565ee", "sighting_of_ref": "indicator--3842c7f7-95d8-470b-af02-2f7cc31c67b8", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5db7b2a8-17de-4429-b866-c4b731ef2271", "sighting_of_ref": "indicator--3842c7f7-95d8-470b-af02-2f7cc31c67b8", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cc8cee4-ffeb-4150-8f88-cf165b0251e3", "sighting_of_ref": "indicator--b76a8579-f53b-4a05-ad42-227949d827ef", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc9205fa-85e2-4de0-a4c2-2c75b01c9af5", "sighting_of_ref": "indicator--b76a8579-f53b-4a05-ad42-227949d827ef", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ea31bff-bd78-479e-ae79-6aaa0087ff14", "sighting_of_ref": "indicator--b76a8579-f53b-4a05-ad42-227949d827ef", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b188705-2549-45ba-80f2-6c94e57d224c", "sighting_of_ref": "indicator--c407e6a4-617a-4f64-9869-fbe10a81daeb", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c022b105-668b-4fea-844d-e78041aead9b", "sighting_of_ref": "indicator--c407e6a4-617a-4f64-9869-fbe10a81daeb", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82442c7f-a71f-421a-8e75-60a9ce8e80ca", "sighting_of_ref": "indicator--994bc037-2a4a-4188-9028-a28e9d628615", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef5d2d5f-aa20-4835-a161-996973e84dd4", "sighting_of_ref": "indicator--7062e4f6-88d2-4c2b-aaef-f3a56ec40ba0", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5219f36b-49b2-43eb-9991-0c72b7f90835", "sighting_of_ref": "indicator--7062e4f6-88d2-4c2b-aaef-f3a56ec40ba0", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74a3de95-66be-48c1-a47a-64cd1a0bdd57", "sighting_of_ref": "indicator--74b080e5-7c30-4ac1-9225-5dfc6875c6ce", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ef2427b-8b80-4198-bf0f-94cfd6d22db9", "sighting_of_ref": "indicator--74b080e5-7c30-4ac1-9225-5dfc6875c6ce", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--599533dd-36e3-4828-80d0-a634b7c58511", "sighting_of_ref": "indicator--74b080e5-7c30-4ac1-9225-5dfc6875c6ce", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb0e6657-1dae-459f-b9b5-0634b53c6654", "sighting_of_ref": "indicator--86d1e466-eb0c-4e0a-b6ad-6e974a7490b2", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a52c2b5f-b670-414f-aaed-21a95da7281d", "sighting_of_ref": "indicator--9b31e34f-c583-4334-8915-c36951cd85a9", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cbccf2b-160a-4f4d-b298-0f3a7809c4fd", "sighting_of_ref": "indicator--9b31e34f-c583-4334-8915-c36951cd85a9", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3022b234-ab93-48f5-a3e7-22b6f27b4cd3", "sighting_of_ref": "indicator--72874249-e389-411c-b7f6-d9e796aa2a30", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae650e2c-6532-491e-bcde-62f7b58edab9", "sighting_of_ref": "indicator--72874249-e389-411c-b7f6-d9e796aa2a30", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--097b958d-8855-496b-bdfa-ae868167774c", "sighting_of_ref": "indicator--29f1c50a-f3f2-4b85-bb06-56a039830189", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b67ee6d-66c7-485e-bf8d-ec0627b01f5f", "sighting_of_ref": "indicator--f5759449-bb64-4993-9514-3d6bd292fd93", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4ade364-8f87-4e8b-a959-9a0f4bd25a7d", "sighting_of_ref": "indicator--f5759449-bb64-4993-9514-3d6bd292fd93", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9166623-562a-4bdb-bb29-99ae231780b7", "sighting_of_ref": "indicator--06d92cfb-a092-4e83-adb4-ee6c5e173c78", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f89f5f3-0e7b-4b02-8153-a1b8d854c854", "sighting_of_ref": "indicator--06d92cfb-a092-4e83-adb4-ee6c5e173c78", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8155d43-3ca5-4c6a-b3c3-570cd2e5ab20", "sighting_of_ref": "indicator--d70baaa3-303c-4a40-8243-43fe487d4069", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--973cc1b0-3c8c-40d7-866f-b41499a5a9d1", "sighting_of_ref": "indicator--48b9278b-6a28-4c44-9b47-77e08e116230", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--023d6678-812d-4876-b0c2-8225201f2385", "sighting_of_ref": "indicator--4ff6a647-9d0a-4da9-9d92-cb85b455eae3", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc8133bc-ace7-4ed9-997b-aba9f40538ec", "sighting_of_ref": "indicator--4ff6a647-9d0a-4da9-9d92-cb85b455eae3", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9e7172c-fa7a-4c60-9d96-1fbabaca6888", "sighting_of_ref": "indicator--4ff6a647-9d0a-4da9-9d92-cb85b455eae3", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b95b4d02-6f8f-4fbf-aec9-7704c132208f", "sighting_of_ref": "indicator--9ad74ce8-8431-43ae-a1ab-561891476de9", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b487acaf-cbef-4619-9ea8-d1445688bf5d", "sighting_of_ref": "indicator--9ad74ce8-8431-43ae-a1ab-561891476de9", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16d036b0-22b4-49b4-af3f-68a9b422e29a", "sighting_of_ref": "indicator--d0a80fcd-6765-4119-972c-9b3d4b724e0b", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97f1d619-6b12-42cf-b063-607621d0af7b", "sighting_of_ref": "indicator--d0a80fcd-6765-4119-972c-9b3d4b724e0b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f91f5b9-5476-4742-bac4-5e801a2f4c81", "sighting_of_ref": "indicator--d0a80fcd-6765-4119-972c-9b3d4b724e0b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f71ca54e-c072-446b-97e9-49f1c115256c", "sighting_of_ref": "indicator--1f3f2a19-0fd5-434f-827c-dcf75db2c93a", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ce6080a-95b9-41bd-bf09-fb2d8a2d2dcc", "sighting_of_ref": "indicator--a0076220-4ab2-4050-ab84-87703e610680", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--081ba245-e531-43ed-beb2-eff01e60ec46", "sighting_of_ref": "indicator--a0076220-4ab2-4050-ab84-87703e610680", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--895110df-e076-48d5-8ed7-626792a7b752", "sighting_of_ref": "indicator--a0076220-4ab2-4050-ab84-87703e610680", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e28bc864-1466-4ba6-b840-450af189f051", "sighting_of_ref": "indicator--8cae2920-cff6-415f-88c1-f05446af43a3", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--246d1e7f-0d39-41ef-bf17-d6c87c96e5de", "sighting_of_ref": "indicator--b3424005-0a03-4561-a29a-cf65d2671b1e", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e25534d-4266-4e93-a695-2a5e6e4299be", "sighting_of_ref": "indicator--b3424005-0a03-4561-a29a-cf65d2671b1e", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--109aefb4-6abc-4967-a695-b12a6217bfcf", "sighting_of_ref": "indicator--f73d47df-b2dd-4083-823f-3d8227dcd62c", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--748dc015-5e47-455e-b757-b9ebeb2cf622", "sighting_of_ref": "indicator--f73d47df-b2dd-4083-823f-3d8227dcd62c", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9992ce76-6c2f-4e0f-abef-e219e14ca603", "sighting_of_ref": "indicator--f73d47df-b2dd-4083-823f-3d8227dcd62c", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ccae805-cb7a-4343-b563-6065ce336f12", "sighting_of_ref": "indicator--132c9155-d227-4413-b1c3-53e17b3249bd", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--076ae021-7130-4010-a8eb-15647ec08059", "sighting_of_ref": "indicator--eb84fac4-b3fb-4861-bfbf-6050e9ff1b09", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f6d8ab2-b9e7-4fae-b8e5-5b266c09f606", "sighting_of_ref": "indicator--eb84fac4-b3fb-4861-bfbf-6050e9ff1b09", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c7570b5-99ee-4ccf-b45e-8126ae7283d4", "sighting_of_ref": "indicator--6da1d558-5908-435b-b550-3bb0ac25b10c", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ee51cfa-fd6e-4305-a7eb-954f4ed12450", "sighting_of_ref": "indicator--a9f77d03-a30b-45f2-9560-bcde78aaa268", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90a8a2dd-b9af-4fa7-9ee1-b4d1bb13b5d2", "sighting_of_ref": "indicator--a9f77d03-a30b-45f2-9560-bcde78aaa268", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3ee0a65-47d7-45e1-a777-08da08173603", "sighting_of_ref": "indicator--59cb030d-2a84-447a-ae0e-fcae45c5f81f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ac6adb5-0925-4325-92e6-df37c67a1c05", "sighting_of_ref": "indicator--fb2fcd9c-8c84-441d-be75-200c867f2b21", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89513ff8-e57c-4adc-891b-6c5ade3c0380", "sighting_of_ref": "indicator--5e95e056-bc33-48d9-aa7f-9272bd388d65", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5721011-42f0-449f-99c6-b8177d92fb09", "sighting_of_ref": "indicator--67ec1df2-8f36-4021-b69b-0d331b7122dd", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3e66d28-cba9-440d-a38c-75c1cdc9c43d", "sighting_of_ref": "indicator--e6af537b-258a-46b6-8da1-039624f751db", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47f26290-64ed-4f70-af4d-26bd5bcb60dd", "sighting_of_ref": "indicator--dfd0561b-2189-4f06-889a-1b1d6b22bafd", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e65146c8-803f-45e0-9d48-089e7a2ce274", "sighting_of_ref": "indicator--dfd0561b-2189-4f06-889a-1b1d6b22bafd", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a9f0a7e-c567-4eff-9b14-287223fe11e4", "sighting_of_ref": "indicator--37c0c0a2-8e78-493f-9c73-861af7cd8031", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f94e634f-77b5-4979-a08e-282b78579d40", "sighting_of_ref": "indicator--37c0c0a2-8e78-493f-9c73-861af7cd8031", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf297fad-ec83-4624-be85-38446314849e", "sighting_of_ref": "indicator--b637044c-a1bb-467f-acef-422e48d6503a", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d22bd83-4504-4ed9-bf9a-e711f34560f7", "sighting_of_ref": "indicator--b637044c-a1bb-467f-acef-422e48d6503a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d4ea206-2860-43e8-bc64-936d3436eade", "sighting_of_ref": "indicator--c419dbc0-6f53-45d3-84d6-ed0e618e02b1", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15ae0c3b-7c07-44df-ba65-2ece33c3ee33", "sighting_of_ref": "indicator--c419dbc0-6f53-45d3-84d6-ed0e618e02b1", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d3bb73c-7e98-4793-ba57-7beb9820678f", "sighting_of_ref": "indicator--c419dbc0-6f53-45d3-84d6-ed0e618e02b1", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd8b4368-d66c-431d-a419-d7cba0390ad0", "sighting_of_ref": "indicator--44e55faf-b0be-4e36-9e59-8cee9a974cf2", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7024b746-33af-4040-b10b-3bd30386c336", "sighting_of_ref": "indicator--835f364c-3e61-4fcc-9c59-ab1324d5f995", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--431f42ee-6730-4e60-9696-438081ab625f", "sighting_of_ref": "indicator--835f364c-3e61-4fcc-9c59-ab1324d5f995", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6018d28-d245-41e9-beae-7d7e77a5c937", "sighting_of_ref": "indicator--2b7b3b25-b0e3-4b2e-8037-d9618cd5aca2", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9066b10-3d28-4c75-8914-f47c0cb242a5", "sighting_of_ref": "indicator--2b7b3b25-b0e3-4b2e-8037-d9618cd5aca2", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf9504c5-885e-41e1-b357-f237e2da7df5", "sighting_of_ref": "indicator--eba2092a-bfc3-49d0-94da-41f41152f06d", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffd488b8-4b5a-43e0-8c56-a8a316994bab", "sighting_of_ref": "indicator--eba2092a-bfc3-49d0-94da-41f41152f06d", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9402b7c-854d-4280-bed7-af11161da65f", "sighting_of_ref": "indicator--d1b052fd-1c3e-4b97-8cef-784c1d0ba4f7", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06f823e3-08bc-48b1-9377-c07e8f4e7a06", "sighting_of_ref": "indicator--d1b052fd-1c3e-4b97-8cef-784c1d0ba4f7", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a7e3b18-7eb7-4a96-89a8-2f6f1ca67bd9", "sighting_of_ref": "indicator--6e1e50b0-5130-4b51-8aac-1df596e20a10", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d6c0909-4bb8-4ddf-9cee-0a256fe04521", "sighting_of_ref": "indicator--6e1e50b0-5130-4b51-8aac-1df596e20a10", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2248abdb-aad0-4656-a540-5a9cef74df3e", "sighting_of_ref": "indicator--f14c53b5-6149-4ab1-beff-b1fb080322b0", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46dd7f76-f828-447c-b872-fd1a8aea302f", "sighting_of_ref": "indicator--8ff2e586-0465-4220-8691-704a2c080df3", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f2cd95b-ff92-48b7-a68f-3b94020e6f8a", "sighting_of_ref": "indicator--036e88b6-b515-4ac5-ac89-b1b14d708ad8", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd4a66b0-936b-45b8-8fe1-dee9fb9b92d8", "sighting_of_ref": "indicator--9c792deb-0f04-4a0d-9ee7-a983b228af7b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4d1cebe-d002-48bb-a688-5d54845715c4", "sighting_of_ref": "indicator--d678207b-d2bd-4314-a60b-01953a584902", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--500ac4a1-0889-4f4f-afa8-9244dc029342", "sighting_of_ref": "indicator--d678207b-d2bd-4314-a60b-01953a584902", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf1ba3bf-5d53-4a58-b7d0-ff21f4be7efe", "sighting_of_ref": "indicator--12b69bd6-cc88-4087-b5c7-af7f70008675", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0506cabe-13b5-4091-90d7-161d97bdf3fe", "sighting_of_ref": "indicator--12b69bd6-cc88-4087-b5c7-af7f70008675", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec4233b3-87b9-4f91-9f2a-4d6b73c3261c", "sighting_of_ref": "indicator--12b69bd6-cc88-4087-b5c7-af7f70008675", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c94a87f8-c954-41e8-8a66-fb18fb92bbb7", "sighting_of_ref": "indicator--29451fb0-fab8-46ca-9909-70e1f8c16014", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2934221a-30fb-4f1c-b34f-abaff3a932e4", "sighting_of_ref": "indicator--f8d8b873-fcd4-4651-a31e-1889b4321c08", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46b25f49-486a-4750-8f2a-9230b839f4a9", "sighting_of_ref": "indicator--920958d9-20d8-4f29-89cb-76939e9342ab", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94aa1edf-c54d-4c97-a220-c554ade172c6", "sighting_of_ref": "indicator--aaaac6dc-6d30-4b96-a698-202f2cb54140", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29d9099a-cb1c-4517-bb86-3da32b4bb583", "sighting_of_ref": "indicator--aaaac6dc-6d30-4b96-a698-202f2cb54140", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2860302-059b-4efe-bd41-9db2639daa31", "sighting_of_ref": "indicator--079bc513-0def-42cd-84a2-3d5567d8647e", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75128903-d2a7-4cf6-9056-e7d3e9c000aa", "sighting_of_ref": "indicator--bc117c9b-a5d7-4fef-a721-98b265da4e26", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4c478c6-e1cd-4e99-a089-20535f7f7c33", "sighting_of_ref": "indicator--bc117c9b-a5d7-4fef-a721-98b265da4e26", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47dfdbcc-1b41-4d89-b22c-62762c681ea1", "sighting_of_ref": "indicator--00fab018-00d9-477d-89ae-5655655cd6aa", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7e7488b-bd88-4def-be24-b0c1e7337147", "sighting_of_ref": "indicator--4f3b8ef8-fe3a-4ff0-9484-eaa5359f2f7e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4740e7f9-8e91-4f9c-b62d-ac95fcac9bc5", "sighting_of_ref": "indicator--deaf09fd-831f-4730-85df-7f35c93c5410", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d166cde6-26a5-48d2-a6f5-af676437a8a4", "sighting_of_ref": "indicator--40a80829-060d-4cc5-be40-90f4b4e050b2", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9158fa19-2763-4107-a13c-5cc604f1794a", "sighting_of_ref": "indicator--841af67c-f4b2-44a6-a416-685e6ef93334", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0eaf91e5-2611-4425-8d9c-b908f90f5228", "sighting_of_ref": "indicator--b623f451-e42d-4e96-ba7f-da1075aed0b6", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--089521a5-2325-46f3-b56f-43434517b54f", "sighting_of_ref": "indicator--ce12af97-3429-45e9-ab6a-e48930db88c2", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ecff49b-fee9-4188-b892-ddb656072c18", "sighting_of_ref": "indicator--b9f08688-2d76-4e8a-b597-da5d958d734b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--852edac7-75cf-4f46-8fd9-12c6f56cb14c", "sighting_of_ref": "indicator--b9f08688-2d76-4e8a-b597-da5d958d734b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06d275d0-69d1-4732-b553-16ec2d752e95", "sighting_of_ref": "indicator--e0242bed-404c-4fb0-be1b-672b43292bfb", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23870911-abe0-43dd-b771-72600f61d563", "sighting_of_ref": "indicator--e0242bed-404c-4fb0-be1b-672b43292bfb", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76c401d1-bd30-4668-929a-b3e038ad0c91", "sighting_of_ref": "indicator--13f08684-a86d-4a6e-9ba5-26ce56543b38", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57b95a08-4e60-4ca9-8e9a-29c9cbd20923", "sighting_of_ref": "indicator--13f08684-a86d-4a6e-9ba5-26ce56543b38", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72028055-825a-42a5-8869-c8978027bd5d", "sighting_of_ref": "indicator--b0bf0f89-532c-4b05-8c9d-74cb55c853cc", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a21f6c70-48dd-458f-9e69-f99bb6a6b5b1", "sighting_of_ref": "indicator--b0bf0f89-532c-4b05-8c9d-74cb55c853cc", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4eece2d0-28b7-4363-83f9-53fa68d906ae", "sighting_of_ref": "indicator--0eae4486-3637-4010-afdd-5521f805314c", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9790001-18f6-4bfd-9e8d-b25d8bdc1d7e", "sighting_of_ref": "indicator--0eae4486-3637-4010-afdd-5521f805314c", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20a0aa2f-3930-4359-abbc-7cd244b046e1", "sighting_of_ref": "indicator--0eae4486-3637-4010-afdd-5521f805314c", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de1d8cc5-d3f0-4ff7-a800-1beb46d4b60b", "sighting_of_ref": "indicator--fc3476f3-ecd3-4ef5-ae63-7bcd23c834e9", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--823cd719-2dcb-42c9-950e-78795ae62d68", "sighting_of_ref": "indicator--fc3476f3-ecd3-4ef5-ae63-7bcd23c834e9", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eecdc510-0b87-4f3d-aab0-0a2594c17815", "sighting_of_ref": "indicator--9684cef0-d1d5-4472-9264-8bf502b07e7e", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23710ab1-eb12-4945-976d-6f0e66d51bcd", "sighting_of_ref": "indicator--9684cef0-d1d5-4472-9264-8bf502b07e7e", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9aac5d6f-3822-4ae7-b559-2e4187ef3b1b", "sighting_of_ref": "indicator--9cc7d383-109f-4d49-a84a-2afb3353ed20", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f83ecd1f-623e-4946-b03e-d8d5fe5411f6", "sighting_of_ref": "indicator--fab45dc4-b7b1-4c44-b205-e107ad2a177f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8227b4bb-65dc-4c2d-bf5d-67e4ebbb90a8", "sighting_of_ref": "indicator--59ee3333-6e98-4fdd-b7a6-98420bd525f2", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d456354-beba-45c7-84d3-79eb431d0ce7", "sighting_of_ref": "indicator--59ee3333-6e98-4fdd-b7a6-98420bd525f2", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d637f39-d625-4a1a-a434-a0cb2fbf3391", "sighting_of_ref": "indicator--8e829fec-ee7c-4291-b662-4dc7ffe38cbe", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d78cbf7-7ba7-4b31-8a3b-934d8f425443", "sighting_of_ref": "indicator--47b1cbb7-3f4e-45ad-b0cc-73b81440b6d7", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2c950b8-68c4-47e5-9c80-2a6dcc823d15", "sighting_of_ref": "indicator--4104e804-91fc-41d3-9e95-294ddde17b55", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c500101d-5317-4177-b6d3-e0ec6e5495e3", "sighting_of_ref": "indicator--4104e804-91fc-41d3-9e95-294ddde17b55", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c499c1a7-0d38-4d3b-a731-ccc3f9b4b4f6", "sighting_of_ref": "indicator--4104e804-91fc-41d3-9e95-294ddde17b55", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--faef12a6-2cf3-4817-b30d-f2d7dd3af01a", "sighting_of_ref": "indicator--3715f3e0-a7e2-434b-bd84-eb208e9632a8", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8cfd3fa-885b-42a0-8a84-228ef833c5b5", "sighting_of_ref": "indicator--e655dd31-1909-41ba-ac98-aed02d950a34", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1eb61ea0-b991-49a3-aa8f-241ace8fcf4e", "sighting_of_ref": "indicator--e655dd31-1909-41ba-ac98-aed02d950a34", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1162b21e-c36f-48af-9e33-ce99affdf0b6", "sighting_of_ref": "indicator--1f66edb5-f20d-4a75-9fab-a008b485c076", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3841de7-c6bc-491e-897c-0aea9ce4f3b3", "sighting_of_ref": "indicator--2087edec-3d97-42d0-82c8-e50e3cda9144", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5790b99f-0d99-482b-957d-f494f6937ba7", "sighting_of_ref": "indicator--2087edec-3d97-42d0-82c8-e50e3cda9144", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5491b63b-a87f-4bd9-8800-440a77009d3f", "sighting_of_ref": "indicator--c7b581ce-ac5b-4662-b862-88eba02e69d8", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--576c297c-dfa8-4d85-8227-79240cabdf11", "sighting_of_ref": "indicator--c7b581ce-ac5b-4662-b862-88eba02e69d8", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f538079-a0f0-4a63-9b48-abaad94519d9", "sighting_of_ref": "indicator--57f7cd36-bce4-42c2-b6de-38ab65c0c2f6", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d418cadb-5943-45f3-8305-34a60fb16f64", "sighting_of_ref": "indicator--57f7cd36-bce4-42c2-b6de-38ab65c0c2f6", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--722e6b67-b80f-4625-84d1-4519a3fd085f", "sighting_of_ref": "indicator--73b55e92-39fd-4b12-8824-b2af55fba5c9", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40dcbbb0-3446-470c-9f77-e3d28db13256", "sighting_of_ref": "indicator--e9d06ae5-3a9e-4e18-a926-5f49c7425ed9", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d4ad136-d9f6-4e0b-a91b-9b4d8a0a01fb", "sighting_of_ref": "indicator--2a0ea6ff-98d9-4c01-8f40-55ed8443ed30", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11fd60b1-7d60-4691-a91e-9b1e1c44b835", "sighting_of_ref": "indicator--2a0ea6ff-98d9-4c01-8f40-55ed8443ed30", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96b97c2b-fa41-4263-8e6d-a53d52bc1cff", "sighting_of_ref": "indicator--2be63b36-92db-4c79-b29b-78b8dd3989be", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff6747b7-175c-4ffa-a31d-2b130653c66b", "sighting_of_ref": "indicator--67fb66c4-cfe7-40d4-b02f-3cc448f33bab", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6862c714-c247-4189-b5d1-05b458ea629f", "sighting_of_ref": "indicator--e789b111-7c84-4bfc-9c5a-703d3f25e74b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15e274ee-f785-4a56-89bb-3a2316ead76b", "sighting_of_ref": "indicator--05fff243-21e5-4aa0-84ba-be01573f8e12", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af520883-fa0e-4bf4-ae3e-2e7e0dfc6b20", "sighting_of_ref": "indicator--05fff243-21e5-4aa0-84ba-be01573f8e12", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--122ee9f5-45b9-41ee-94a9-cf22e292d26b", "sighting_of_ref": "indicator--6c587274-a831-4cfc-aa64-75db932e915a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9638915f-51eb-4a07-bced-eb791c8910d9", "sighting_of_ref": "indicator--6c587274-a831-4cfc-aa64-75db932e915a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--169ba744-b7a3-420f-82ca-1dd49217017a", "sighting_of_ref": "indicator--db7fc7b4-b49d-43d4-95e2-da49e79cb149", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dfd5f62-64a6-4432-adcf-4dada67af140", "sighting_of_ref": "indicator--245453d2-f28e-4eda-8b68-ec89717f7fc9", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f598ec0-5897-4d50-bf0f-8be3bb2e7bad", "sighting_of_ref": "indicator--230031ec-c3f0-482c-8770-f520851948e3", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80b1bcb5-f148-4acf-962c-5c771e342631", "sighting_of_ref": "indicator--230031ec-c3f0-482c-8770-f520851948e3", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e218b725-e06b-4a72-8a09-6566ffbc6453", "sighting_of_ref": "indicator--c60a9ecf-1b1a-418f-947d-133e58bf75ca", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7593345-0fd9-4f11-8681-1c66b5595feb", "sighting_of_ref": "indicator--c60a9ecf-1b1a-418f-947d-133e58bf75ca", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08ab632d-7f97-4953-b40e-7c8260d1bca3", "sighting_of_ref": "indicator--c60a9ecf-1b1a-418f-947d-133e58bf75ca", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb7c138e-11ca-4692-83e3-ffd3b80516f8", "sighting_of_ref": "indicator--1b2bacfc-ed01-4a14-b7bd-d8043be2520a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa73c5aa-1e4e-4d0f-8771-b09f8543aacf", "sighting_of_ref": "indicator--1b2bacfc-ed01-4a14-b7bd-d8043be2520a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6faad825-7b4c-43b8-b16c-8523f50c4c2d", "sighting_of_ref": "indicator--03db20af-6ffc-4236-b5aa-7f2ad4b69b96", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b4329fd-2b57-4254-81b6-bc9b6766f2e0", "sighting_of_ref": "indicator--14238dc5-a760-446a-8979-2f6a49b61616", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9d77150-955e-4137-b43e-f8ca90d49742", "sighting_of_ref": "indicator--f3223a0d-8b38-4503-a6c1-a002c2c06ee3", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6b7abf4-2db7-45d6-a338-0ba31d325ad6", "sighting_of_ref": "indicator--9dab9da3-067f-41ea-82ac-ea6a0e0ae0e9", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66b9c020-8db2-4453-9cb2-48d93b500cc6", "sighting_of_ref": "indicator--9dab9da3-067f-41ea-82ac-ea6a0e0ae0e9", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31244c48-00c8-47aa-bbd6-80339e8bf84f", "sighting_of_ref": "indicator--9dab9da3-067f-41ea-82ac-ea6a0e0ae0e9", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e14b528c-8731-49bf-b477-cc96f207b6d3", "sighting_of_ref": "indicator--8349df80-5264-45c2-9166-318dd99b0911", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7fec636-8d14-4ed1-861d-c6fd37f74bd2", "sighting_of_ref": "indicator--489fe14c-c9af-445f-95ed-f408d3574451", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53c7365b-9097-4cea-aa1e-91eb671b9aef", "sighting_of_ref": "indicator--f68eb1e8-23ab-49c7-90d8-c48bbbfc1d09", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73d1f4e9-5cbb-46bd-ace9-ada178218871", "sighting_of_ref": "indicator--dcd5b3f5-f818-4e7c-8877-4bcd70e56bbe", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e33ec900-7c88-4ced-bb93-a70ca9b0c385", "sighting_of_ref": "indicator--dcd5b3f5-f818-4e7c-8877-4bcd70e56bbe", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8e786b2-f2f7-481e-92ac-8c4024117079", "sighting_of_ref": "indicator--1f92c007-999d-4663-9f94-f931ade79702", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e57225b-3a80-499e-97ec-5b9a4f3b927e", "sighting_of_ref": "indicator--82439278-e5e9-41c4-b7df-b1e840c9274c", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16497236-2d2e-41d9-aec6-0fc9decad15e", "sighting_of_ref": "indicator--87d10d4d-28b7-45b7-973b-708d1eec39ed", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99534f06-4126-4ec8-b491-52ded56ebccf", "sighting_of_ref": "indicator--87d10d4d-28b7-45b7-973b-708d1eec39ed", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ef2cacb-3cda-4b96-a820-409db802d10c", "sighting_of_ref": "indicator--7c85b35f-d4b2-4166-aaca-58c6c4019c4c", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43389f09-ced7-4ac5-9b08-b899a8ef0cbb", "sighting_of_ref": "indicator--8846d93b-4e43-4baa-9d1a-a4abb78949d8", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb35c052-7b71-4ef5-95a9-e75d95bfd268", "sighting_of_ref": "indicator--8846d93b-4e43-4baa-9d1a-a4abb78949d8", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35758b79-7733-4b4e-abcb-7005461f2cf8", "sighting_of_ref": "indicator--8846d93b-4e43-4baa-9d1a-a4abb78949d8", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--616490c8-5e9b-481a-996a-9df3baca7ae1", "sighting_of_ref": "indicator--2d1c5563-a6ab-41a0-8a8f-fc0e0b6c6686", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e871010-f3c0-478e-815e-dd249854ed6b", "sighting_of_ref": "indicator--ed31b77b-2818-4cf7-95d5-3fbb38fd36d1", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3fda58d-2d9d-4779-ad70-612872431fe6", "sighting_of_ref": "indicator--61b5a9a4-7902-487b-ab61-49a5d0211d1f", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2175976-43e1-4563-bd65-ee009952d492", "sighting_of_ref": "indicator--88bd3a65-7c0a-4f55-a67f-84f370d6a88d", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ce7cd00-750f-4fe2-b172-e77e0c283ee2", "sighting_of_ref": "indicator--100a9443-1a19-455d-8716-eb4b20ff308b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6d2c582-8e6c-434a-8a5d-612f27e09c58", "sighting_of_ref": "indicator--3af8a0c0-ae41-44ae-a393-9fd0eae405c0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b678416-b150-41b1-8557-f1df84b8d113", "sighting_of_ref": "indicator--b5caf897-6742-410c-bb70-175c76940a9b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2d66153-6dde-4fef-8d9f-0153468b7d33", "sighting_of_ref": "indicator--5e1ce976-bf36-4d23-8847-bb1abbcca42a", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--808ef296-8a8c-4384-b497-2ba6d51ebec7", "sighting_of_ref": "indicator--7b98e694-f679-45ca-8579-32cb7a9ef8f3", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70959b5e-28ef-434a-b110-38d835ca3ae2", "sighting_of_ref": "indicator--7b98e694-f679-45ca-8579-32cb7a9ef8f3", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84b2a2dc-70df-42ef-abdb-cba1b3fc446e", "sighting_of_ref": "indicator--7b98e694-f679-45ca-8579-32cb7a9ef8f3", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfd0cba4-1da7-41d6-8975-5ba92bbd4487", "sighting_of_ref": "indicator--25ddfcf4-b3b2-4e86-951a-a343e8dbb269", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--769d1e6f-eb29-4b4c-8603-a0d4eece684f", "sighting_of_ref": "indicator--25ddfcf4-b3b2-4e86-951a-a343e8dbb269", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3ea2949-6d88-4f68-8159-159ad9667f27", "sighting_of_ref": "indicator--25ddfcf4-b3b2-4e86-951a-a343e8dbb269", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdbfb195-b4ec-4342-8638-046ca26e4ab7", "sighting_of_ref": "indicator--3ab2db66-befa-4c78-ad93-83c5e3785f92", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65b40c34-9021-4f2f-b2a4-d9c5dd8f37c4", "sighting_of_ref": "indicator--3ab2db66-befa-4c78-ad93-83c5e3785f92", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30903e75-1bc2-45e2-82f7-c809bab519e2", "sighting_of_ref": "indicator--3ab2db66-befa-4c78-ad93-83c5e3785f92", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be4fccec-e1c6-4d6b-b195-9a6db2ace700", "sighting_of_ref": "indicator--9cabea11-73d5-420d-bbaf-02b6ca9f5816", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e5b1b55-3dcb-4de3-b7bf-3e1b9a4406f7", "sighting_of_ref": "indicator--9cabea11-73d5-420d-bbaf-02b6ca9f5816", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd8d7c4a-ca88-4901-a3da-58d3ea75184d", "sighting_of_ref": "indicator--9cabea11-73d5-420d-bbaf-02b6ca9f5816", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2dae494-6f8a-49b3-bcca-cdd3de30b175", "sighting_of_ref": "indicator--d3ff5c59-24d7-4da1-a84b-da1171603b33", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fdca5ed-e05b-4868-8f38-3afd537f06c0", "sighting_of_ref": "indicator--d3ff5c59-24d7-4da1-a84b-da1171603b33", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--758d7b41-60ba-42cb-88b2-f7a6f4ce59d0", "sighting_of_ref": "indicator--44ec684b-f5b1-46ca-8aae-5f104e30d942", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74f2ac7f-bdb5-4dd4-8a24-2cee46498df6", "sighting_of_ref": "indicator--44ec684b-f5b1-46ca-8aae-5f104e30d942", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34d1cce6-133d-4325-bb5e-08b40a52f46d", "sighting_of_ref": "indicator--5d2381ac-3f54-445f-a903-8d64956bd2a2", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54ddd3f9-3fe8-40bd-b2c3-cf8996c0bd55", "sighting_of_ref": "indicator--4c20eda8-d0d5-4e04-91ab-91bc07fbf385", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbf64fc7-9530-4f50-8939-04a1bd11bd31", "sighting_of_ref": "indicator--e55610ea-e461-4a17-9db3-32474c7b405a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa061ce8-cef1-4425-9089-42c7e222ee29", "sighting_of_ref": "indicator--4c1cbf7a-ffac-4787-af8a-b3df8f6732c4", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--544d6b7b-f739-4f13-a472-3cc5f8aea6be", "sighting_of_ref": "indicator--4c1cbf7a-ffac-4787-af8a-b3df8f6732c4", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca262bc3-c3b2-41b8-b436-d5b27ce3b7a7", "sighting_of_ref": "indicator--a24ec1cb-e47b-412a-8c2b-c52b650e6e51", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ffb3f2e-8804-44bc-85a2-b0dac04e32d6", "sighting_of_ref": "indicator--18ee30ee-7dac-487a-b0cc-385469b48694", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--092b7c32-3c7b-4d3c-8377-13fb6507a4c6", "sighting_of_ref": "indicator--575dcf27-ad1f-4644-8870-f1d5b685d299", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db7c5caf-762e-400c-8a7c-52375639ee29", "sighting_of_ref": "indicator--8daad11d-cb8b-44fc-9277-5da8e75483b6", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91254e25-f0be-464e-a2a7-5041b3e1e961", "sighting_of_ref": "indicator--a40dbf80-5e31-4021-a5fe-f3bfdf166857", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c69371f5-c7d1-41f1-b882-423e09f79633", "sighting_of_ref": "indicator--cd4d36cb-314f-47cc-a68a-ec0b14dfc33d", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--995b6d9d-42e1-48aa-80a9-c39c86aba471", "sighting_of_ref": "indicator--cd4d36cb-314f-47cc-a68a-ec0b14dfc33d", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd6fbb93-cdd4-41be-af0f-13b02eeb4cbd", "sighting_of_ref": "indicator--cd4d36cb-314f-47cc-a68a-ec0b14dfc33d", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96bbead0-2c40-49e3-a603-d7d036fb0b32", "sighting_of_ref": "indicator--98118964-e8f8-4b77-a815-5b0d84c0e74b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47553f16-458e-4e21-bc26-4ae6aa638192", "sighting_of_ref": "indicator--bc063142-28f0-4093-a671-eadaa7da69e2", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70a269c8-d239-4d54-be42-772ee5baa926", "sighting_of_ref": "indicator--024e9a09-8b08-49c9-a685-c2559d7566d7", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b718d0bc-70b0-4133-abef-2cb12b53136a", "sighting_of_ref": "indicator--024e9a09-8b08-49c9-a685-c2559d7566d7", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6eddb05-c99e-4f27-b2bf-b7d9761233ec", "sighting_of_ref": "indicator--5abe48f2-2934-4609-b99a-0b97d1bcdbbb", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3846212a-0faa-46d7-9fa5-da40fdc072b4", "sighting_of_ref": "indicator--9692d9b5-591d-412b-94e1-f8e9d349b809", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--190064d1-e478-4ed3-ad5d-5f9a20fcc6a2", "sighting_of_ref": "indicator--9692d9b5-591d-412b-94e1-f8e9d349b809", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7d7f935-3108-4ec9-a8d3-132fc2539f58", "sighting_of_ref": "indicator--9692d9b5-591d-412b-94e1-f8e9d349b809", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93754f97-0bd9-44e3-8783-837f8401c922", "sighting_of_ref": "indicator--336ca166-7474-47dc-afac-58fb97e01c3d", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ca19cba-badf-4f52-b5fe-94526dfab88c", "sighting_of_ref": "indicator--21a5b7df-63d2-47a5-b873-b7e5666f3d3b", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71253b7f-34ad-44e5-9be7-c4403ad8f972", "sighting_of_ref": "indicator--21a5b7df-63d2-47a5-b873-b7e5666f3d3b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cba3081a-e2a4-48d3-99df-b99fec0b68a7", "sighting_of_ref": "indicator--a4db87e8-8c95-4580-8af7-33e3a49c5ed2", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a603cd1b-0b37-4642-8735-d34575021d5f", "sighting_of_ref": "indicator--a4db87e8-8c95-4580-8af7-33e3a49c5ed2", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8870315-8954-4bfe-ac5e-24f4c4f2618b", "sighting_of_ref": "indicator--d3232c6e-b038-4483-bb7a-11665796a3dc", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7965c8a-e143-4f3e-930d-25b7bcb1fe99", "sighting_of_ref": "indicator--70d565c3-2b55-462f-bf0c-7a5bfde79223", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13f1f32a-8659-4c0f-a8e4-dc53b81100b4", "sighting_of_ref": "indicator--70d565c3-2b55-462f-bf0c-7a5bfde79223", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8986e820-3852-4d6d-9b17-c327a7d7bd47", "sighting_of_ref": "indicator--cdbf45c6-6494-4ffa-a09c-ec1be8915844", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9f9810b-734e-4c77-87a5-38ef3235a29e", "sighting_of_ref": "indicator--cdbf45c6-6494-4ffa-a09c-ec1be8915844", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40769236-d236-407c-86c5-778a94e6bb27", "sighting_of_ref": "indicator--2a92607e-6301-45e6-803b-db94f165999d", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7da03ed-ba49-427c-acf1-3444dd0c208d", "sighting_of_ref": "indicator--cab9b81a-f10a-4a29-b15a-90b44d648827", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28652209-4209-4bc8-85ce-e5a92ff935f3", "sighting_of_ref": "indicator--14216e2d-bfc4-495a-ae0c-187d94a02e44", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67c4e6c5-d87b-4d96-af4f-855e0e3e84b9", "sighting_of_ref": "indicator--3506efd5-e85c-4208-bd57-022df8ba325b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a5470bc-4783-45fc-b1da-f5c2be640d37", "sighting_of_ref": "indicator--56029b33-b96b-4f27-850b-d6dbd6430654", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20953360-9b7c-4199-b3b5-8d58eb5bc27e", "sighting_of_ref": "indicator--d7b33ede-5789-4cc7-8322-2b2da6ae5b30", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--817149ae-3b72-4ccd-a410-d5af4fec54dd", "sighting_of_ref": "indicator--26123dc6-0861-4e16-a1e2-459ecb94020a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50210645-636c-4a2e-8882-ba563d74b077", "sighting_of_ref": "indicator--835ea696-2acf-4de8-a5bb-e77477907dd4", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8eb7219b-b0ee-4574-8bc3-fc298e8c18f7", "sighting_of_ref": "indicator--835ea696-2acf-4de8-a5bb-e77477907dd4", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06188892-550e-4ee5-b293-e08a4bd8028e", "sighting_of_ref": "indicator--835ea696-2acf-4de8-a5bb-e77477907dd4", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f5ea210-a295-4156-8fd6-659f8802ff0b", "sighting_of_ref": "indicator--9d65c5ba-7520-4da3-a606-13f6761c637a", "where_sighted_refs": ["location--cc47317e-2c18-43a6-8938-dea748a56ad5"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8714225-f1bb-4122-81f8-70347c441b6b", "sighting_of_ref": "indicator--5d18590e-481d-4713-b3d3-0c76f6bc3bc6", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97eeeb4d-def5-4213-9e90-f2d56eb3675f", "sighting_of_ref": "indicator--4e070028-ad15-4a33-adaa-504a40229862", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ea70b6e-9cff-421e-bbff-7123f5d4488c", "sighting_of_ref": "indicator--33dc4efe-9d1c-4b99-acbe-e6da775bfb22", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2a3451c-c9df-4517-96b4-be4b73095bc5", "sighting_of_ref": "indicator--4a3e9907-e781-491c-8a5a-7a02ec8a4478", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6235334-7af4-46e9-93b5-f044c5a31ab7", "sighting_of_ref": "indicator--4a3e9907-e781-491c-8a5a-7a02ec8a4478", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bc751d2-0fe4-4c83-9b9d-10b461e25f01", "sighting_of_ref": "indicator--4a3e9907-e781-491c-8a5a-7a02ec8a4478", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1aff7b7-2a76-4744-a794-a63138b69797", "sighting_of_ref": "indicator--f1b83f39-a1eb-4e4b-b3d4-e8d99a4c676d", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf20a8ec-24f8-4dfc-982f-541b26e68c86", "sighting_of_ref": "indicator--b446ff3f-3ede-48a5-8b36-92c4e92c863f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a185b5aa-30af-4ad1-8c29-70c2738e4100", "sighting_of_ref": "indicator--26237416-859b-42ef-9a03-106b99f53880", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bf15236-d45f-4a5a-94d0-8d19da0d9619", "sighting_of_ref": "indicator--4ef463e0-0ef9-452a-ad09-bb9489b70198", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--944c56fa-8643-4d11-9c78-7c8626a0e7f4", "sighting_of_ref": "indicator--19489f2e-0799-405a-805e-3133395802d9", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f65754e8-5309-41f4-852f-e0b82dd7b269", "sighting_of_ref": "indicator--19489f2e-0799-405a-805e-3133395802d9", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--301a69c0-d82b-4afb-b291-34890818642c", "sighting_of_ref": "indicator--ab23adc1-ad1f-4cc1-b829-0a5097cdd0ff", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de304934-4d53-4374-b477-406f57eb1d14", "sighting_of_ref": "indicator--a62245bf-ab72-4c19-ac29-c86844ed8f84", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e81d59d9-8160-4536-981e-4f88e7395d9e", "sighting_of_ref": "indicator--a62245bf-ab72-4c19-ac29-c86844ed8f84", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b285c82f-dfbc-4f77-98c2-edca32773001", "sighting_of_ref": "indicator--5309213e-6363-4077-ab96-c6f90242da20", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e83ba6a6-6506-4995-8883-3892ce1ff495", "sighting_of_ref": "indicator--5309213e-6363-4077-ab96-c6f90242da20", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15c9c26e-9959-4c31-9f07-531ae0362e5b", "sighting_of_ref": "indicator--41bbaab0-bb83-418f-94aa-c2ee67789d65", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d37d20e2-172f-4413-8455-24fc8c647ce3", "sighting_of_ref": "indicator--41bbaab0-bb83-418f-94aa-c2ee67789d65", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43615527-156e-4b28-9359-340f9f203cc5", "sighting_of_ref": "indicator--41bbaab0-bb83-418f-94aa-c2ee67789d65", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6eeb3ab2-9258-42ae-987c-97ec8dbc2a6d", "sighting_of_ref": "indicator--8797c971-13d3-4b4a-badb-ed83ea9a0224", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fecf794f-67c0-4648-9d5f-0f0d7d3946db", "sighting_of_ref": "indicator--5890a442-f325-48f6-a8a1-74174066507a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bfaabff-3381-4242-b272-a1ea3087d4b8", "sighting_of_ref": "indicator--0d407a60-be0a-442c-8bf5-db0aafc738d1", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4d1fb35-e684-4cbe-98e7-0e20f87cfa41", "sighting_of_ref": "indicator--4437c27d-414c-4dde-8506-7aff5f79d5b8", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--329da9f6-b29f-4bf3-b220-9d828d9dcd95", "sighting_of_ref": "indicator--4437c27d-414c-4dde-8506-7aff5f79d5b8", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6649cf81-868a-4638-9374-60f80ae7ef14", "sighting_of_ref": "indicator--40af976f-2c31-479f-bd87-58132f69b06f", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--436f3df3-f262-44f9-8235-cfdd4ff9ebbe", "sighting_of_ref": "indicator--40af976f-2c31-479f-bd87-58132f69b06f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8893bb7-226f-4c71-a9fd-06a7b3126dec", "sighting_of_ref": "indicator--2ad0542f-09e8-4a16-a479-1ecd0a5ceef1", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--160e67e6-9f06-4895-b0b2-91192f635cde", "sighting_of_ref": "indicator--2ad0542f-09e8-4a16-a479-1ecd0a5ceef1", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9771702-2cee-468a-bb80-bf1ecc2f8014", "sighting_of_ref": "indicator--35dcf77d-b6a6-4c8c-852d-4ca16d506aa6", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--348394df-187a-4a96-bb02-181772d70cc9", "sighting_of_ref": "indicator--7a48eff2-521a-4e3b-bc34-29dec3670c74", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa3095f8-5725-495c-b52b-64e86983f68e", "sighting_of_ref": "indicator--7491b4cc-cf8e-441a-a4e2-92c3d2ab810c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00bf74ce-7393-421a-bd54-506d0be52ef3", "sighting_of_ref": "indicator--c0e0dbbc-41a2-4c6d-b073-7d0481c6401a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--492e0ab9-8265-4b56-869c-e5294de42b27", "sighting_of_ref": "indicator--4a88d26c-8bc4-42d6-b973-6507607deeab", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ecaf75f-a364-40f3-b27d-6ba5662ccfed", "sighting_of_ref": "indicator--fa4e2061-66f2-4183-97f4-20a019a22337", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43d930c7-2ea9-44db-962c-cb3f15e5871b", "sighting_of_ref": "indicator--fa4e2061-66f2-4183-97f4-20a019a22337", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--513a8f17-c9e5-45d1-9abb-39049a1eeea7", "sighting_of_ref": "indicator--d420bd5b-b2c1-4532-ac4b-abeff11862ac", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b802ccc-35bf-4a51-88a3-646ee1b3e9e5", "sighting_of_ref": "indicator--d420bd5b-b2c1-4532-ac4b-abeff11862ac", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3562f375-51a4-41f3-9b38-15db92af2e1a", "sighting_of_ref": "indicator--f6f55bf7-d597-4df4-ae74-3cb0336f28ec", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c74f8a4-a986-41e7-986b-75ef7b87566f", "sighting_of_ref": "indicator--f6f55bf7-d597-4df4-ae74-3cb0336f28ec", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee9fa3d7-bb97-479b-85b8-3042a66c5c54", "sighting_of_ref": "indicator--f6f55bf7-d597-4df4-ae74-3cb0336f28ec", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4d8f83e-5cff-4e66-9162-39bfa56524d5", "sighting_of_ref": "indicator--f6f55bf7-d597-4df4-ae74-3cb0336f28ec", "where_sighted_refs": ["location--cc47317e-2c18-43a6-8938-dea748a56ad5"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e81a9b89-53f9-438e-8174-923865dabedd", "sighting_of_ref": "indicator--2c03106d-513f-42a0-9167-75b46412838a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4eac996-e5d0-40c4-8fda-d9d18da1ffee", "sighting_of_ref": "indicator--41257c0d-f4b0-4946-ac75-517b23797cf6", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--866864b5-395e-4fb5-a56f-19542e4f1931", "sighting_of_ref": "indicator--cb650252-a480-49a4-ad57-9d0214ddb6de", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdef6095-c426-4f58-81ab-bd99d9efffcf", "sighting_of_ref": "indicator--8cdd9b5f-0c0d-4202-9a9e-c22ac09202fd", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--364bcaf4-c222-4468-ba71-512214b6a144", "sighting_of_ref": "indicator--40bba588-8536-434d-9cc2-aa35b4a0230f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--673dc17c-4b08-48ce-babc-379da219575f", "sighting_of_ref": "indicator--9b00f195-b5be-4306-a93a-9c9c6e04b3c2", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b02aa35-e894-4846-8193-c7876bb402ff", "sighting_of_ref": "indicator--5e4328b6-5717-4ddb-ad4b-06522958574d", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a431580-2ef7-4783-9bab-e6bfb6dd5331", "sighting_of_ref": "indicator--95b1ed61-9b23-41ac-9bb5-fd527444a526", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8688329a-6d73-4974-a028-26d86f24ebdc", "sighting_of_ref": "indicator--21fd1845-0bb5-4bee-84a0-4cf99e4b991b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4141dfc1-9f26-4ec8-b931-297120606c46", "sighting_of_ref": "indicator--4f02d60d-34f7-43a3-8100-5894211b4a8c", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a09faf4-016e-4166-bca6-f95ce8bb7b95", "sighting_of_ref": "indicator--f1d5c97f-37f8-4641-a160-c84ebfe108b4", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d5d7cb5-c1b7-4d16-be89-7398689121ee", "sighting_of_ref": "indicator--3a31f45d-81a8-4d1d-8312-19dba02c5b55", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--417c2a69-49e7-4b2b-959a-4549c0c9d6f0", "sighting_of_ref": "indicator--5741a8cc-dfa6-49b3-909d-d6c10d9c74c2", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b53e14a-a5aa-4b10-8112-fca598804c34", "sighting_of_ref": "indicator--367df0be-efd0-43ec-b9f2-0fc8015bd41c", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--288cce42-c0b2-41b5-b232-bde1b515012c", "sighting_of_ref": "indicator--367df0be-efd0-43ec-b9f2-0fc8015bd41c", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31d0fbb1-806b-4b39-aa1d-779e09bdab19", "sighting_of_ref": "indicator--1550b13f-01f2-4199-bd81-b6205d8047d6", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fc41f2e-329a-4c51-a850-935fab3c470c", "sighting_of_ref": "indicator--1550b13f-01f2-4199-bd81-b6205d8047d6", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--638260e1-3a08-4d76-afef-99bc103ec7b2", "sighting_of_ref": "indicator--456e8204-d544-4a29-b5fd-742e43233ada", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf2df86c-c0da-458c-894e-c4f37ce3e48b", "sighting_of_ref": "indicator--448dec9d-d30c-41a7-a41d-1d1757e1273e", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--955bfb4d-f288-4ecc-821d-67456e5ff167", "sighting_of_ref": "indicator--735b9cd7-86ed-4f68-bbd3-25c6bc5486f2", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28cfdf62-3c23-4eb8-8f49-53beac1d7fdb", "sighting_of_ref": "indicator--df01891d-f08a-4e25-9f7c-9e035378066e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9546ebc3-ac7f-45ad-9f2e-be3eba1ea1bb", "sighting_of_ref": "indicator--a23989ea-4107-4732-8354-644096b83b54", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07f0e1de-521e-4e24-a54a-4383b890944c", "sighting_of_ref": "indicator--d68f8319-19c3-403a-89c6-6e90d58f3523", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69099754-6250-400c-908d-75c4aae390ff", "sighting_of_ref": "indicator--40db4201-d122-49ba-8bcb-1d0f3c8abaf4", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f455592-3416-4030-ab60-8294d931996b", "sighting_of_ref": "indicator--40db4201-d122-49ba-8bcb-1d0f3c8abaf4", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a037292c-8880-441a-b9ed-32dd9031bf24", "sighting_of_ref": "indicator--40db4201-d122-49ba-8bcb-1d0f3c8abaf4", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bebcf05c-c870-4c29-963f-21887d5ecf34", "sighting_of_ref": "indicator--8d10a519-addb-46df-9484-1bcafdc8ed11", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5be8668-1cf6-4420-a7cf-d71ef97f542f", "sighting_of_ref": "indicator--54b1ac81-aab6-4343-b61b-7097f4b8f5ca", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36d24023-427d-4e8d-bf4c-0ba0488db5b6", "sighting_of_ref": "indicator--4dacfc2c-63ea-4f65-9b3f-8860be0147e9", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f38b96ee-5aab-4e42-bfd6-2a7c4c820dfe", "sighting_of_ref": "indicator--0aae9193-d3f6-4ab2-a47b-a4e5b9a8a6ad", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b0ccda4-067a-4ba3-878d-3e5070ebfd5a", "sighting_of_ref": "indicator--5833caf6-cf7a-4121-88c1-37fdbb344d73", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c09e14c-700b-496b-981e-ab5dff553b7b", "sighting_of_ref": "indicator--9a1753c3-d28c-4b1b-836f-02f3250cb72d", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1db7ca10-bfb9-4e33-9bde-729194ec535b", "sighting_of_ref": "indicator--79bd505f-3fcf-4427-b66a-2f69752b7eb8", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c55771f6-cecf-4306-9886-f6d64c8225e3", "sighting_of_ref": "indicator--81f3fccd-9f1a-45dc-b239-685a6f7bfefb", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1adbd5e-392b-4fc4-96f9-900939283b20", "sighting_of_ref": "indicator--9e2882ba-d115-49a9-9661-8510723fc317", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67e97045-1712-412b-9a19-902ba3913e7d", "sighting_of_ref": "indicator--b5d21190-e599-47d4-8803-dd3b00ea85f2", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ec7cfe0-18fe-4b98-892f-2af6e539fd66", "sighting_of_ref": "indicator--9c933fce-33ea-4354-90b5-ae9d55c8880d", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5027b25-d06c-42a7-a1ac-d3f6a66463bd", "sighting_of_ref": "indicator--5a181263-04ec-4f18-85a1-d44df96c27d6", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c0bfb9e-c710-4135-a402-b0c0293a517e", "sighting_of_ref": "indicator--53ec6bf6-a9f8-4213-8cfb-c33d6e3d515d", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d69f99b-b124-4abd-b37d-1959557660de", "sighting_of_ref": "indicator--53ec6bf6-a9f8-4213-8cfb-c33d6e3d515d", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8d468e2-d88e-462c-aee0-543c2920d566", "sighting_of_ref": "indicator--17391e32-9065-4495-a582-5caac59d1bf8", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f916e439-db13-4944-a5f6-0cc64d797fb7", "sighting_of_ref": "indicator--5d3a0260-2f54-4847-9873-6bc332f9d7f3", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dc374f4-3d8f-426b-bfcc-c8b049b3c6b3", "sighting_of_ref": "indicator--5d3a0260-2f54-4847-9873-6bc332f9d7f3", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--460ec52f-2cd3-47f9-a635-10f21cdf4633", "sighting_of_ref": "indicator--56d203c2-50cc-45eb-b27b-51f7821df3ea", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68f9baa8-f3ae-41aa-9e37-7b3001523628", "sighting_of_ref": "indicator--56d203c2-50cc-45eb-b27b-51f7821df3ea", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39d5446a-a596-422c-b5f3-b60b43283ced", "sighting_of_ref": "indicator--56d203c2-50cc-45eb-b27b-51f7821df3ea", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--860f8d5a-c153-42ac-a9c4-ea27663c6bb4", "sighting_of_ref": "indicator--1edd38cd-bac3-4da7-a56f-ea52ae3cc8cf", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f526b7cb-dbfe-444f-b2be-e7163cabc0d4", "sighting_of_ref": "indicator--50902295-f108-480a-bbc1-9620f3bdbfec", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e638e53a-69ec-4d15-bb26-93d1d2b8b44f", "sighting_of_ref": "indicator--3c5a48a2-d22d-4d87-ba67-9fb24d219bd5", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99207e63-b98b-48e2-80ea-a839415ae7b2", "sighting_of_ref": "indicator--3c5a48a2-d22d-4d87-ba67-9fb24d219bd5", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68c551d5-a9fd-4622-ad0d-1a90f4bdeb9a", "sighting_of_ref": "indicator--3d473b50-4863-442c-9b29-a6c2e9b7f40f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c873c6a-fb1a-4980-a307-0e199001f03b", "sighting_of_ref": "indicator--3d473b50-4863-442c-9b29-a6c2e9b7f40f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9afc3ea8-64d2-40f7-b29f-e1da798ffb3d", "sighting_of_ref": "indicator--c5ca5293-ef8f-4068-aa34-17f99130af61", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4965c20-7d09-4d03-9fee-2ce2b644cd04", "sighting_of_ref": "indicator--c5ca5293-ef8f-4068-aa34-17f99130af61", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a93308c0-1062-459e-9e6f-838a1a5e70fc", "sighting_of_ref": "indicator--b9e05855-ceba-473c-9d45-4b5bd87e50ba", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83b638ce-8e73-4f79-b175-e67740925a6d", "sighting_of_ref": "indicator--cd62bcc0-f7c3-4abf-8052-28129f81d979", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d86c8554-e2c4-491f-9efc-73c5acd7bb7b", "sighting_of_ref": "indicator--5729980a-2c5e-4353-a83b-02feb12e09c9", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdda48ed-1f75-498a-be80-686bddb8c922", "sighting_of_ref": "indicator--9dce0e4a-c8ab-4701-9fc9-e46fa3d9da0d", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f83d3e18-eaa8-4e76-be3c-64bf4d99e528", "sighting_of_ref": "indicator--9dce0e4a-c8ab-4701-9fc9-e46fa3d9da0d", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12dad0e2-4467-4523-882b-36cedc041a12", "sighting_of_ref": "indicator--9dce0e4a-c8ab-4701-9fc9-e46fa3d9da0d", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7822a762-af37-4217-a2b5-505a9b7e3467", "sighting_of_ref": "indicator--fda84528-c5b0-4fc0-9093-ef08c1952cf4", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31088ea9-8394-4949-b15e-59f7f734e664", "sighting_of_ref": "indicator--fda84528-c5b0-4fc0-9093-ef08c1952cf4", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dabe12ee-cdef-47ef-ba56-79f2292cc217", "sighting_of_ref": "indicator--fda84528-c5b0-4fc0-9093-ef08c1952cf4", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2515ab9-a31e-4693-adb8-e9131b9acd8d", "sighting_of_ref": "indicator--492f809f-7d89-4704-b3de-e083afa058d9", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dfe20c5-d1da-4194-bfbd-515064c05db3", "sighting_of_ref": "indicator--492f809f-7d89-4704-b3de-e083afa058d9", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8877ca36-b8c1-4713-ba1e-ccc3347ed493", "sighting_of_ref": "indicator--6f458889-18bf-4cde-9d3a-d9be9ae0e15d", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6387224-dd1f-4550-9106-ebe49044e458", "sighting_of_ref": "indicator--9d73f93c-2ec6-4289-9365-b6414d29e187", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ea07938-e65e-4104-8ad3-05a177ada560", "sighting_of_ref": "indicator--ab7655df-4ab8-4c76-a484-bc535593e94f", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--063faee4-1e7c-415b-af1a-88560186e84c", "sighting_of_ref": "indicator--24185e3a-a510-4c87-a070-060210f179cf", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f7bb930-36ae-4f81-a1fc-6f7e83227b12", "sighting_of_ref": "indicator--288d776a-be26-4105-b600-f79c7a025d03", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a687512-f82a-446f-a4a0-b1ee74493ee8", "sighting_of_ref": "indicator--288d776a-be26-4105-b600-f79c7a025d03", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdabd569-436e-40be-bada-7b8337077de2", "sighting_of_ref": "indicator--727b0a61-b87e-49cd-8a52-46a679eec2f0", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbfd79bc-23d2-468a-a756-defd8239c374", "sighting_of_ref": "indicator--727b0a61-b87e-49cd-8a52-46a679eec2f0", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20aef6d4-11a8-4558-b815-f20301c513f9", "sighting_of_ref": "indicator--727b0a61-b87e-49cd-8a52-46a679eec2f0", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ddf5e41-668b-4008-bb78-f601a2816b80", "sighting_of_ref": "indicator--6a61f729-7fda-4cf8-a7b2-16b6cdfae28e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8cb970f-bedd-4ac3-9db0-6f294503c6be", "sighting_of_ref": "indicator--8c7e8c59-5c2b-4e31-95e3-0d9bf27e62a6", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2ef7ad9-5383-4db4-8f5f-fd25b73c07db", "sighting_of_ref": "indicator--ad1a5d11-fc6c-4903-9c4b-4de72669054b", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd5bd912-8b4a-4f7c-9d7a-1c4dc65229f4", "sighting_of_ref": "indicator--ad1a5d11-fc6c-4903-9c4b-4de72669054b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cad74fcd-7905-44de-a0c8-ef48f0e90669", "sighting_of_ref": "indicator--17586239-1d5b-4500-9d37-cc9843dfcded", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0689c931-5f9b-4264-adf3-c482a8396b55", "sighting_of_ref": "indicator--17586239-1d5b-4500-9d37-cc9843dfcded", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1fc415e-a578-462e-a1d6-5019404f7fd6", "sighting_of_ref": "indicator--e282633d-65e9-451e-8017-e3a625da0ded", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47228e04-67c1-48e9-9628-11743739ffa6", "sighting_of_ref": "indicator--cd04a822-115f-4b03-9c8e-bfb089631a96", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--125666fb-2598-4371-a2e5-222c4ac1ef77", "sighting_of_ref": "indicator--cd04a822-115f-4b03-9c8e-bfb089631a96", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcfb7c6f-0a33-430c-a2d5-d9ce0fac0ab1", "sighting_of_ref": "indicator--5d2dbcb6-a7e8-4155-9a2c-11de77fcd448", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd221f90-4702-4e5c-acb9-9b69a45f8036", "sighting_of_ref": "indicator--5d2dbcb6-a7e8-4155-9a2c-11de77fcd448", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e9425e4-c6ca-45ae-b900-e9d7f0b3fb43", "sighting_of_ref": "indicator--7d058d23-f0cd-4c45-a8d3-d8e0645adcba", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf20191f-6cb8-49bb-b77f-8647eb273c02", "sighting_of_ref": "indicator--38d7fbfb-6c8b-4821-9cba-3758619ab4ec", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85132a2a-5e00-4b9b-8db2-9021d68f94d4", "sighting_of_ref": "indicator--38d7fbfb-6c8b-4821-9cba-3758619ab4ec", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4ba1b97-592c-4b64-8b9a-a61cc052ba45", "sighting_of_ref": "indicator--4c2e085a-7b5f-47d4-b2e6-3def504e2ab3", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c65fe75-c90d-410b-8fde-52692b4ac30e", "sighting_of_ref": "indicator--512d3ac1-007c-4708-b4cb-b5f2b713426f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f735f41d-5211-4e40-876f-4e1676ebdf5b", "sighting_of_ref": "indicator--d91f634c-a97b-477a-ae4f-de19a6e24370", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01b7ba4a-9dd2-4377-893b-2f45f86670c0", "sighting_of_ref": "indicator--d1d92462-09d5-4576-93c4-68850969e471", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82106af9-1abd-4410-a143-144a181fa2d6", "sighting_of_ref": "indicator--e45e51e5-7cb1-4bae-999b-3a4a556b74c6", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7796a0f5-9aa7-40ae-8090-10d81a499245", "sighting_of_ref": "indicator--8bc3dad6-a30d-4127-a663-5412e5464867", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6743cb74-e0de-4754-8422-35d5dd9f24c2", "sighting_of_ref": "indicator--ba089256-a691-4fa4-af42-e895127c2e4b", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd6efa58-bc88-4b8e-a13b-e411a9023573", "sighting_of_ref": "indicator--ba089256-a691-4fa4-af42-e895127c2e4b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30679554-8d80-401a-89a6-7f27b6ba0da1", "sighting_of_ref": "indicator--ba089256-a691-4fa4-af42-e895127c2e4b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7e3840b-be69-4575-bc3d-fefd99ea770a", "sighting_of_ref": "indicator--025ae5a6-047b-4214-bd31-ba7086099236", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15feede9-f15e-4db4-ae48-c7505f00e7d7", "sighting_of_ref": "indicator--025ae5a6-047b-4214-bd31-ba7086099236", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a205b2cf-f726-434d-a936-ef2e281ff202", "sighting_of_ref": "indicator--1ff17adc-8d6d-4cbd-934b-488406e72fb8", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b94d7dd0-05bf-4674-9306-899284994d5d", "sighting_of_ref": "indicator--1ff17adc-8d6d-4cbd-934b-488406e72fb8", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7384bef8-05e3-4a88-b26c-55d71fbd7ff4", "sighting_of_ref": "indicator--4fc7c60c-78d0-44ea-be0d-c0ec20ae05e4", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec0a9aec-208b-40c4-8cdf-8ddd6a71478a", "sighting_of_ref": "indicator--15beca54-cbeb-43f5-9c62-737e0cd4865c", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd05150e-acf4-49a3-8425-1331b382db99", "sighting_of_ref": "indicator--15beca54-cbeb-43f5-9c62-737e0cd4865c", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d14fc37-6000-472a-b8cd-c2ee13f7c570", "sighting_of_ref": "indicator--15beca54-cbeb-43f5-9c62-737e0cd4865c", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b84c283e-ec56-467f-a9fc-4e52d13e825d", "sighting_of_ref": "indicator--23248271-b227-42b4-9d73-0b16a518906f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--296aeb10-2a5f-481e-8934-231157336df6", "sighting_of_ref": "indicator--23248271-b227-42b4-9d73-0b16a518906f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--206bffa0-0f92-4da1-9366-02cdd2a6dc51", "sighting_of_ref": "indicator--76aa8214-80f3-4363-b5e4-0766944b6b8f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baa05033-b122-40a4-8b1a-a0835a6d8af2", "sighting_of_ref": "indicator--1658e72f-71e8-49c7-95d2-47c42cadca9c", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef29923e-c0a1-4875-a274-3289c64b2b1f", "sighting_of_ref": "indicator--3147ea1b-5858-4973-aef3-a014538497cf", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05850ce1-1d88-4225-ae36-7b6c15da2b49", "sighting_of_ref": "indicator--3147ea1b-5858-4973-aef3-a014538497cf", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e0a524a-0657-4d79-8df5-59f833415aad", "sighting_of_ref": "indicator--0d024d15-4b80-44a7-88b3-6ca9dc88e32c", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a4993f0-a948-423c-9738-dc5a4e41179f", "sighting_of_ref": "indicator--1705fc38-a6f1-4d4b-a691-4aa68f9fd252", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d55dbf23-4bbe-4247-bb3d-5dd64a27b177", "sighting_of_ref": "indicator--1705fc38-a6f1-4d4b-a691-4aa68f9fd252", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a21aec4a-e793-409f-a2d1-7ea75eda8237", "sighting_of_ref": "indicator--1705fc38-a6f1-4d4b-a691-4aa68f9fd252", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa2836cb-6385-4508-895e-c6feb7b13cb1", "sighting_of_ref": "indicator--6c381e8e-6432-4e48-a14a-b4f31def6aea", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb3740d4-bc0a-472a-9f58-be2c49e00e65", "sighting_of_ref": "indicator--6c381e8e-6432-4e48-a14a-b4f31def6aea", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed0a0309-f42c-4187-8c8e-30981685885d", "sighting_of_ref": "indicator--6c381e8e-6432-4e48-a14a-b4f31def6aea", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e59a5fa-1ea2-4f14-b5a6-118869bedbd1", "sighting_of_ref": "indicator--516a0302-3e9a-4bc0-b0d6-2806fc4cc4b7", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9c68cbd-c46a-457f-97e8-43e09495a135", "sighting_of_ref": "indicator--516a0302-3e9a-4bc0-b0d6-2806fc4cc4b7", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0706f74e-66e1-4efe-857f-67b66a62e457", "sighting_of_ref": "indicator--516a0302-3e9a-4bc0-b0d6-2806fc4cc4b7", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f98b1d27-467a-4908-b699-df0d99e40f53", "sighting_of_ref": "indicator--5ad99b77-41c4-4fe8-966a-d9c63aa67c94", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--803bef21-3292-4daf-b01f-ecb8c6e62ca0", "sighting_of_ref": "indicator--5ad99b77-41c4-4fe8-966a-d9c63aa67c94", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd192659-2ef5-4ae9-9bf8-9d79205df540", "sighting_of_ref": "indicator--048e9c10-58b6-4e82-995a-135ed1e80af3", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40d6e997-2198-40d8-a312-eb9882ae6432", "sighting_of_ref": "indicator--048e9c10-58b6-4e82-995a-135ed1e80af3", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7c534af-51e0-42e9-a44d-e8023ec49a0f", "sighting_of_ref": "indicator--21df3b9a-af97-420e-8a8e-9753d956eee4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f300eb92-b71f-4b86-b6b7-7b02ab4e3040", "sighting_of_ref": "indicator--2743e577-dba2-42e8-bd0f-9f1f7c48e313", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4902455-7558-4df7-b6ad-f3bc55d7099e", "sighting_of_ref": "indicator--046b48a5-e4f2-4221-a8f3-5f41cf081fd3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--399964d0-5e08-4e5f-82a5-e66440fc0ed2", "sighting_of_ref": "indicator--fa369d1f-f10a-471f-ab9d-ba7a4065e2e9", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--621bc4a1-c18e-49c8-9d40-3179ea631e17", "sighting_of_ref": "indicator--a4c79d5d-a46b-41d1-abfb-e6f5602c9e01", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d254625c-db4f-48e7-a380-27dbb5904983", "sighting_of_ref": "indicator--359daef6-a98d-4652-b93f-18366d5b38a8", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--666d3cee-ba2c-42ab-b196-9d1094301352", "sighting_of_ref": "indicator--b634c70d-ff13-42d7-a24d-29a54dd95cce", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf332481-e3a2-4aac-97e0-2dc2497f170d", "sighting_of_ref": "indicator--4606a551-5948-4c0a-b2b5-edbe3fbe76c1", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfdb4847-21bb-4f9e-ac80-5810c8b6dc0d", "sighting_of_ref": "indicator--26873df5-899f-4d12-8c6b-93010b3c1386", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b3924be-e86e-43f1-ad6d-b69620b77ca0", "sighting_of_ref": "indicator--26873df5-899f-4d12-8c6b-93010b3c1386", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a1aa6fd-327f-437a-a1ca-a90b8a8cbda5", "sighting_of_ref": "indicator--26873df5-899f-4d12-8c6b-93010b3c1386", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34349375-a510-4bde-bf55-fc52bf4b9121", "sighting_of_ref": "indicator--3e2f0603-4777-4ea1-8bc9-2102832487ad", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e6bd529-2070-4ecd-a595-f1a9f6b0e2c6", "sighting_of_ref": "indicator--5e8d93a6-842a-4a5c-9d15-60e29982468d", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f88812e5-2377-48b2-8f11-d2c5d734bdef", "sighting_of_ref": "indicator--187f6971-0f0f-4ca0-bce6-0fe365ed7fc3", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1b1facc-36e2-4069-aa99-44f9751380c9", "sighting_of_ref": "indicator--44a0368b-47c0-4998-aad6-eb25d9f4fcd4", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3603f1f-65c7-4024-8a84-40fd8436bfca", "sighting_of_ref": "indicator--44a0368b-47c0-4998-aad6-eb25d9f4fcd4", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1fd89f3-1422-43cf-a7f9-3fec35c40f19", "sighting_of_ref": "indicator--28ad0efb-f89f-42bc-a322-6913595cabcb", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d61c2a3-03ea-42b6-b9a9-342f510f3377", "sighting_of_ref": "indicator--976ca1b2-7066-44f5-a4a1-29ec42a2d1ac", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e4950ba-47e5-4f4c-b9e8-69445b949f4e", "sighting_of_ref": "indicator--14e266b5-5975-41e3-8417-fd18676ad7a7", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17574225-2cdc-4d18-af7a-257da796396a", "sighting_of_ref": "indicator--14e266b5-5975-41e3-8417-fd18676ad7a7", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c95bdcbe-0fa9-4db0-a165-f4d87dad4b41", "sighting_of_ref": "indicator--14e266b5-5975-41e3-8417-fd18676ad7a7", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd977ca8-da45-450d-9f3a-ee3752f394ae", "sighting_of_ref": "indicator--6abf9c45-39d9-4ecd-b909-5a5e8f1436ab", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b64a050-2797-40ce-9fda-74fbb244147d", "sighting_of_ref": "indicator--6abf9c45-39d9-4ecd-b909-5a5e8f1436ab", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90a1f4cf-1993-4ffd-af38-e49de5751565", "sighting_of_ref": "indicator--06aada45-ede2-41a9-bd87-4d956c91d1c1", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0ee1524-315f-47bb-98f9-e6003b74e107", "sighting_of_ref": "indicator--c7d41c82-ad03-4396-a064-df2395080722", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c4603bd-847c-47a7-a61d-99f286e3fcfa", "sighting_of_ref": "indicator--d16163c8-ba88-4a88-a4ab-e0a2f080f0a3", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5322a3d7-de37-4a81-b85a-de13923b67ec", "sighting_of_ref": "indicator--70c0080c-28da-4643-95cf-154e4cba02eb", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6113840-78b7-470b-929c-1c72253ad55f", "sighting_of_ref": "indicator--2c09a2de-0e61-4831-8585-de4ef4ee74e0", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3be4591-4b9b-47a7-8db6-813dde69e7d6", "sighting_of_ref": "indicator--5a2bd1bc-5e76-4d4f-9fb3-c7e08a9a05c8", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4aa920aa-7a4c-4748-9870-a452567174c3", "sighting_of_ref": "indicator--ef5822dc-52b6-4b4e-a7f6-c1188db92df6", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77b78a0a-9510-41fa-bc9d-3e1c6b0b996e", "sighting_of_ref": "indicator--c60718cb-aa45-4300-b241-4d0cf975580a", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e21d6ae5-616e-4724-8121-db36dc50be03", "sighting_of_ref": "indicator--6c57f39f-abb5-4f8e-9e93-45e4e13c2f72", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfbea4a7-69b3-4ba4-916d-d3df080eb6d3", "sighting_of_ref": "indicator--b9d48e4c-4ce1-446b-83dc-d43beb1407b4", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3e66ad6-91e8-4e95-97a9-0c5145a59a4c", "sighting_of_ref": "indicator--5e1777fd-dac8-4f88-9d7a-b26e3a91aaca", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b47caa5-14cc-4bca-831e-17394707484b", "sighting_of_ref": "indicator--cfd776a2-2707-4ee2-92be-751f858ef36f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbf746dd-3286-4ccd-a3f5-562089ca6dc9", "sighting_of_ref": "indicator--386c6764-f244-40ec-8c56-eacc0f4cbc5a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6ea3b3f-da9e-42b3-9501-62cd4885b101", "sighting_of_ref": "indicator--ae063135-c7e8-4d75-9ad5-1e972ffdfc44", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4509219a-e033-4c96-b3d4-638e410226d7", "sighting_of_ref": "indicator--99f88fd1-5a0b-49ae-a3af-f2cad8965175", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc4811fc-e298-467b-8b6f-3830d21725da", "sighting_of_ref": "indicator--1449be45-91ab-4f52-94ec-d6f4df290157", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fd8ff88-4309-4925-b905-2802109ab5f0", "sighting_of_ref": "indicator--ab3b2044-de70-4ae2-8f21-3c63096d12f4", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de3f6ed4-49b0-4553-b4cf-31379d2b744b", "sighting_of_ref": "indicator--1cd388bd-d6a5-488f-a4ff-d2eff92eca2a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--144f317c-8d31-46b6-bb99-2f7b698f902d", "sighting_of_ref": "indicator--4a5b8d7a-5b13-43d7-b427-febeac51935a", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--334acee6-d9dd-4802-8365-7d68acf8fa3e", "sighting_of_ref": "indicator--d14c9791-8493-4d27-8397-3a3f0d00702e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f107e71d-0958-48a3-b4f8-9b9d19dbb390", "sighting_of_ref": "indicator--45b64602-b6dc-40c4-968d-aa729ffc571d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaf0db3b-bc34-406c-94ec-0c1f151c449a", "sighting_of_ref": "indicator--e27c3a20-d6b3-40b0-bb58-6b8d4c72a962", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22133bb8-22e1-4690-af96-122542b555fc", "sighting_of_ref": "indicator--def9b4d6-3031-4804-b528-d44d98659771", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04bbef3f-c676-4711-8adb-cf099ad43201", "sighting_of_ref": "indicator--72414383-338a-43ad-a416-07f87f6cd5d0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cbf11bb-db35-47b7-a25a-5fef1caa548c", "sighting_of_ref": "indicator--9f805136-da86-4ad7-871a-9869efda7641", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49e8dec8-bba7-4744-a355-d1ce2e531d02", "sighting_of_ref": "indicator--32895072-8499-44f9-a003-30fe0bb7e6d6", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a567c27-8e07-4975-88e4-6ce69436e534", "sighting_of_ref": "indicator--601710ed-346b-4d32-b028-a670d1ed4dea", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ce4441b-dec6-45c2-878c-825f063c955a", "sighting_of_ref": "indicator--81fefbb0-b764-42c1-8c9f-1b948663e212", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c4a0676-948f-4710-8a02-008d7a69220f", "sighting_of_ref": "indicator--bacf4f1e-ea70-4db9-8773-ef58b60f50a3", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a098871-7845-4021-b638-bcf00d0db4b3", "sighting_of_ref": "indicator--eb90d2fd-b01d-4aac-92b9-a33dd2912268", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b9b5e50-37ca-40e8-8345-bd7979fdef50", "sighting_of_ref": "indicator--1d7d1cde-0087-4448-b59c-8e1cd4277c0a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc17ee51-dca4-40d3-aa70-3170f2d8448d", "sighting_of_ref": "indicator--8ebf6dbb-ab16-4f2d-920f-3ecd63e7415a", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a11d6d98-cacc-478c-8e45-26a5342fd436", "sighting_of_ref": "indicator--67021f6d-a372-4784-9d17-f24e6292eb64", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2a1ef27-997d-481c-b6b3-7e389929ec41", "sighting_of_ref": "indicator--62c6871b-5097-4abe-9546-a35cee634381", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0197d8e8-0c71-4e78-a7af-b695578120bd", "sighting_of_ref": "indicator--ee64aec0-19b5-4db4-995b-48c069905812", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7d7ba52-104c-4376-a2dd-a4af1a4e5b1f", "sighting_of_ref": "indicator--8ecb9bd1-cc11-4347-b4b5-57e757cdd631", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cec5bcde-adbc-4c48-be18-0702c4a4f6c6", "sighting_of_ref": "indicator--96d74854-2c35-4293-a217-a6c6636bdf88", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--444eb262-131c-4808-abb0-2f1d902f6cb9", "sighting_of_ref": "indicator--988d21de-21cc-4f2d-9a3d-27ab8c57f44a", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5c51b1d-45dc-4d86-9fa5-a6b187ef36cf", "sighting_of_ref": "indicator--2cbe1244-ec24-4441-a97e-6218a66acd2c", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47707e1d-a84d-42c7-91a5-4eee5a0f8473", "sighting_of_ref": "indicator--20a50b78-4e3e-45eb-86c7-9d7ec6173db4", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac869ce6-76fc-4475-9078-df3d224de1e6", "sighting_of_ref": "indicator--744ad364-a0d9-4469-a33d-c42a1d1498d0", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad654ec1-5952-47a1-b473-ec73c632d163", "sighting_of_ref": "indicator--1e47ddaa-ca15-42b6-96c6-8a23c06a76ab", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa6bbf26-0e62-4f0c-9990-57d91c48ac0a", "sighting_of_ref": "indicator--1cd7ddc5-3d19-40cb-b89c-47160deae553", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--902a4e8b-bad6-4268-a2c6-ae7e6266d0c3", "sighting_of_ref": "indicator--1cd7ddc5-3d19-40cb-b89c-47160deae553", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79306918-bcc1-4876-90b5-c10d84c83ce5", "sighting_of_ref": "indicator--30f36e2d-88d2-4ae9-8b3f-7590b3fad889", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7adee8b0-7473-45cb-b3a9-a46be92dc3c8", "sighting_of_ref": "indicator--3e397aab-5123-41c9-9182-d71610c6deba", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65d7ac05-3042-430c-a50f-4e79a1d7f282", "sighting_of_ref": "indicator--d6e28bcc-7f80-45de-8f5c-8dfa8bd21b12", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f83baab1-4afe-4275-a386-131f60808893", "sighting_of_ref": "indicator--dd25bed1-a07c-4463-bbe4-8215413dd7e5", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77795a6d-dbc3-4d7b-8907-4af126b76dcb", "sighting_of_ref": "indicator--526fc252-7b22-4405-a326-2d4be6810dfc", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81d07425-176f-4c6e-8e17-23762981793e", "sighting_of_ref": "indicator--f3fa006c-b361-4afd-97a7-3ee2bf6f5193", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5171bad1-52ec-4ee6-88f9-f11047dbcaa7", "sighting_of_ref": "indicator--474d75cb-8304-4c5c-90d2-5f72ca258d49", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38ab2d50-a170-4813-a6c0-ca7e2bdd3743", "sighting_of_ref": "indicator--ef61cbfd-7cae-4789-b7c7-99f1f3969c2a", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9831265a-a964-40fe-94c7-eb0644d479da", "sighting_of_ref": "indicator--0260446f-fe1b-4971-8d21-305a64ba549f", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cd9f8bf-0f54-43ae-916b-ac0b0e2b7a15", "sighting_of_ref": "indicator--0260446f-fe1b-4971-8d21-305a64ba549f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e9b0eb0-e273-4a37-b1eb-b8728accb166", "sighting_of_ref": "indicator--51114bff-8330-434b-9b87-753bc92db403", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3747bd36-8a3c-4ff1-9b37-e08af62dbc0b", "sighting_of_ref": "indicator--c219a4ba-4b97-45db-a4cc-4c4520f9c534", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b967b87-d4fd-4e02-b5d0-b5f9b2da91d1", "sighting_of_ref": "indicator--1b1a1702-8719-4841-b9af-3aa36d7ac6f1", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5df8846-8f8c-4ef1-8ca0-81754e1903cb", "sighting_of_ref": "indicator--d345c0a6-1578-4b72-87a5-b2538e0ea411", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b91ab1f-a11e-4aed-bbc9-f6600ec045ec", "sighting_of_ref": "indicator--2c3b3c84-ae51-4773-bde2-97ac86b0115a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7bb3903-0019-49e2-afe8-2b88e76638a3", "sighting_of_ref": "indicator--ff61bfbd-c7f5-47b9-bf86-02f289eb9ef1", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--314f429d-2e6f-4e9e-9bdb-f459cd0489a9", "sighting_of_ref": "indicator--55f9d7a5-0329-420d-bd01-90da74b1a388", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--937ac077-6de3-4233-b54f-1a9a2634b932", "sighting_of_ref": "indicator--424afbda-e75d-41f8-8ad2-88f643148a68", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--258d28e7-145c-4d07-87c8-5f06ee63cc39", "sighting_of_ref": "indicator--bf9061bd-0751-4f06-9aa5-3335ca7a1d2b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f37b62a-3ffa-45da-a2bd-c523a5eb6806", "sighting_of_ref": "indicator--bf9061bd-0751-4f06-9aa5-3335ca7a1d2b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00022ba0-b841-46e0-a694-ccc4cf67257b", "sighting_of_ref": "indicator--fae948b2-eeb3-4c77-aaaf-339ba45fa5e1", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45df4149-26a5-49e7-973a-533086759124", "sighting_of_ref": "indicator--2e33e27d-0c85-4186-bccb-9f2557bd83cd", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd6fbc85-2362-4bf1-b117-01ff3a07768a", "sighting_of_ref": "indicator--dba9ba7f-0285-4ac2-8e7f-408ad6929e74", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fdbb5aa-cab3-4e21-bbdc-b2ad87441925", "sighting_of_ref": "indicator--2b5b3d08-8d3d-449e-91fc-00f275f584eb", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93f12a11-5f7c-42bf-be4d-ab7821f7bae4", "sighting_of_ref": "indicator--b4cda079-69ff-483a-82ea-3d841cd36512", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0ca30dc-a94d-412c-b94a-2abfcce3ee93", "sighting_of_ref": "indicator--ce145df4-9d5e-4c7b-b80a-df64e5192a0d", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48d6fa52-2f83-48b0-9967-89de7e483fd9", "sighting_of_ref": "indicator--a353aab4-df68-4b12-ac1c-dfe28c6549b4", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28af273d-2fec-49fc-add2-3dcb2393ae29", "sighting_of_ref": "indicator--b53c922a-b304-417b-8cd6-3df9bd414aa1", "where_sighted_refs": ["location--cc47317e-2c18-43a6-8938-dea748a56ad5"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--242aceec-fdae-4ce8-98e6-30a3b3b255e8", "sighting_of_ref": "indicator--7676f463-abe6-4e94-9837-bea7ebdba0f4", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d4cda6c-a637-4a11-b0d9-16aeba8b4d4c", "sighting_of_ref": "indicator--769c5d8a-494b-469b-a1e7-3b747ed52ba0", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68ed786b-852a-4523-bc47-07c8a3914844", "sighting_of_ref": "indicator--769c5d8a-494b-469b-a1e7-3b747ed52ba0", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87f5fab6-5b50-44fd-8324-029de8d025e2", "sighting_of_ref": "indicator--55ed122d-3510-4eb5-ab18-f1198604b5d8", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e77cd2f-dd94-40a1-897c-f82a1467356b", "sighting_of_ref": "indicator--55ed122d-3510-4eb5-ab18-f1198604b5d8", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f59b602-2c97-40c1-a440-150040aac7a5", "sighting_of_ref": "indicator--a0705512-b9e7-4e4d-9d4e-7ca45ee3f3f6", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c7de2d6-ff6e-45ad-9a2f-16ae9dae34bc", "sighting_of_ref": "indicator--0e438a94-6fcc-4707-a87b-f1ba38967771", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--918e14a6-7391-46dc-ad6c-96378cbc50ad", "sighting_of_ref": "indicator--0e438a94-6fcc-4707-a87b-f1ba38967771", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e466f091-c6ec-417d-a629-114ca4ef2bfc", "sighting_of_ref": "indicator--0e438a94-6fcc-4707-a87b-f1ba38967771", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e38437f-9e35-4527-925f-4558177e6bd0", "sighting_of_ref": "indicator--b48b47ac-5607-45b4-896a-4f2feed62433", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--045e80a9-0312-4cfd-894a-06fd9ccef776", "sighting_of_ref": "indicator--b48b47ac-5607-45b4-896a-4f2feed62433", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aec31097-3228-4a23-bab5-23a5eea775b8", "sighting_of_ref": "indicator--78b13002-a8c1-4c11-a0da-6f988fbc14ed", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04255700-6252-423c-831d-16fe1b229728", "sighting_of_ref": "indicator--dd2e9638-9a65-4f7d-a323-5c1ac27f38ad", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2f6d987-be60-4cbb-b211-30e59ea20e99", "sighting_of_ref": "indicator--79468184-8129-4372-859f-67358617e89a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--082c02d9-a3d5-4206-964a-274fc3708bbd", "sighting_of_ref": "indicator--4ac9bbf8-0a95-4b1c-b35e-91edc1d67ed4", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2417d2a-2822-434c-9cb6-2837bcf252e9", "sighting_of_ref": "indicator--4ac9bbf8-0a95-4b1c-b35e-91edc1d67ed4", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4223499-da21-4ff1-8c14-73808c0b359a", "sighting_of_ref": "indicator--4ac9bbf8-0a95-4b1c-b35e-91edc1d67ed4", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8e2c8ae-3a7e-4181-b4a9-c2f2cbbc7a43", "sighting_of_ref": "indicator--cf3dd514-339a-4d32-9ad5-5bb9ce387645", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5853cb7d-892a-4a2f-ae1f-362b22e01d81", "sighting_of_ref": "indicator--0ea50f59-c12a-4a4c-aa8b-36daabec4fc8", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d73d5f5-0bdd-4f04-abed-0159e10acc88", "sighting_of_ref": "indicator--5b95b59d-50f7-4007-93d9-507a98ce317b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e37ed281-35d8-4a22-9531-5ddd78f5e3a5", "sighting_of_ref": "indicator--9d3660f5-fcc8-4024-b5f6-52031753c1a8", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--415a11cd-4011-4c55-b2ff-3af3ddc03bdf", "sighting_of_ref": "indicator--082fa824-0c04-45f2-81db-921ae05a2676", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a125578-bdc1-480e-bfa1-7b9d878788b8", "sighting_of_ref": "indicator--cdf32b36-a3c3-490e-920a-5eecbd0dcbd3", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ebf4385-05bb-47a2-9872-a4d9baec0cfb", "sighting_of_ref": "indicator--eb93b0e3-54bd-44e6-9341-b8e2ef7f95ef", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2884cfc-ee8d-4d06-9ea7-536f32baf5df", "sighting_of_ref": "indicator--eb93b0e3-54bd-44e6-9341-b8e2ef7f95ef", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d2045a7-ba70-4c5a-9626-293ec233a3b9", "sighting_of_ref": "indicator--e388d6b9-f1b2-4320-93e3-fb8af79c34aa", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba698497-3106-4d1f-99ea-d5c587637dc2", "sighting_of_ref": "indicator--e388d6b9-f1b2-4320-93e3-fb8af79c34aa", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cfe9e8a-70c1-4543-8977-93fbc2652574", "sighting_of_ref": "indicator--e388d6b9-f1b2-4320-93e3-fb8af79c34aa", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9486051c-1e94-49cd-98d1-9729c3faff9a", "sighting_of_ref": "indicator--6f5f5286-91cf-4b9d-aa0f-40d7ddd98e1e", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a143fc1d-5b1e-46a6-a538-1c31acf4ce0c", "sighting_of_ref": "indicator--6f5f5286-91cf-4b9d-aa0f-40d7ddd98e1e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43fb71bf-0011-4644-966e-e3385fc1ce64", "sighting_of_ref": "indicator--6f5f5286-91cf-4b9d-aa0f-40d7ddd98e1e", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94d78977-6209-4b11-a4ad-f9b81cc993b6", "sighting_of_ref": "indicator--356aa82c-62f4-4b59-bd05-aba2775bbdaf", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a82ecfca-e235-409b-ae38-28d93542d79b", "sighting_of_ref": "indicator--47b39831-118f-43a6-b92c-eaf912580c35", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf96b2a2-c971-49d3-b62a-89f575bf3a64", "sighting_of_ref": "indicator--47b39831-118f-43a6-b92c-eaf912580c35", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e391cfb4-cf93-4751-8649-626e88a20602", "sighting_of_ref": "indicator--578f1c71-502c-414f-8b01-0a037a5b10c8", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--104c44fb-a7a2-4685-a8c8-5b723ca249ed", "sighting_of_ref": "indicator--578f1c71-502c-414f-8b01-0a037a5b10c8", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70892395-d87e-40df-a9e2-948109e48747", "sighting_of_ref": "indicator--d984dd97-7abe-45b2-a8a4-a69cdd46ce79", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e610ada0-3f54-403d-a2ff-3b2a2e389d5d", "sighting_of_ref": "indicator--53621b6f-3687-46a7-b213-bd8f33ab9bed", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cf6213a-2a04-4b5e-88bd-146d0bdaf29d", "sighting_of_ref": "indicator--53621b6f-3687-46a7-b213-bd8f33ab9bed", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efd46e42-40b8-431a-9264-67334f52b867", "sighting_of_ref": "indicator--53621b6f-3687-46a7-b213-bd8f33ab9bed", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b26c390-7d82-44e9-9504-ee83a3f9433e", "sighting_of_ref": "indicator--63421a83-5bb9-4367-9ad2-e086ef75794c", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3db9813-e8bd-4d26-90fd-8affb592ea39", "sighting_of_ref": "indicator--d553dac2-286a-43c4-b1ad-fc4eba028cab", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--847ea08e-7c2e-42ff-a302-0dee9f748ee6", "sighting_of_ref": "indicator--d553dac2-286a-43c4-b1ad-fc4eba028cab", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93774b76-d2f7-469d-9e48-3a4384fbdb64", "sighting_of_ref": "indicator--ce944102-40be-4255-90bd-3893e652cdfe", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bad0a284-0d46-4da7-b2bb-bda46faf1bf0", "sighting_of_ref": "indicator--c276625c-430a-4ca6-8ed2-18b22d91a3d6", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--867b2bb6-adf8-4562-b306-ca0edf147bc7", "sighting_of_ref": "indicator--9de378f6-a506-4cd4-baba-c55d0c5cde68", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5cb4916-39c6-426a-97b3-baab5365dabe", "sighting_of_ref": "indicator--9de378f6-a506-4cd4-baba-c55d0c5cde68", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b6f2c58-5945-4415-bea5-228da6d0aa84", "sighting_of_ref": "indicator--95c6ad0e-e780-4627-9ade-b4d85e4ec039", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d50f9f45-c868-4aff-a553-7d8230096bec", "sighting_of_ref": "indicator--95c6ad0e-e780-4627-9ade-b4d85e4ec039", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01441e08-2768-4be9-a8f9-3b1823b222d3", "sighting_of_ref": "indicator--2f44e97b-db02-459f-b079-4ed77c1f0cde", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a448bd6-61c0-49a0-89dd-c2b388d23b01", "sighting_of_ref": "indicator--853640c5-b412-4e04-b99a-1357e32232bb", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a9c8a84-fd1e-4e30-8b11-d9be0073760c", "sighting_of_ref": "indicator--37895657-58ea-4493-a9be-b7686292fcff", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ae55ec4-da61-4c10-9016-b065d52d75bf", "sighting_of_ref": "indicator--a25d33cc-aef1-4401-9b0e-f48f7d8b0f7f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d032fc4-a8c1-4b72-8b94-bfcd3fb84f40", "sighting_of_ref": "indicator--0f1d985a-8c4c-4df4-9b3c-76047a6b3815", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--936ac52c-ccd8-4cb1-b68c-f4d7912c41ce", "sighting_of_ref": "indicator--4904496e-f287-4d53-87ed-003a1e2a5900", "where_sighted_refs": ["location--cc47317e-2c18-43a6-8938-dea748a56ad5"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b65e2cc-880a-4116-9f5e-5ef3bae5ae8c", "sighting_of_ref": "indicator--e68bd526-6741-4e02-bb25-54d3b9d33be5", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b2863f1-9b0b-42a4-9f2c-0cb97ba4057f", "sighting_of_ref": "indicator--6da1e201-0550-441f-a836-44a71dc31e7f", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6efbcafd-92fa-48b8-899c-793850e87903", "sighting_of_ref": "indicator--72ee157c-4f79-4101-b5fd-c3c720d65cc6", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6e79844-d81b-487c-8620-2fcec622b3de", "sighting_of_ref": "indicator--b944d709-106c-4cd4-a2c4-5b8795ded818", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8073b47-aea2-4c76-ad7b-06b9b4fb6abe", "sighting_of_ref": "indicator--e0ecc316-7dd7-4b71-9de9-1692446d140a", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48fccb9e-bcda-4499-831a-b16b81c0f5bf", "sighting_of_ref": "indicator--af4d29e0-9308-4117-a11b-0e684058b82d", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb09b42f-84dd-45fa-a4ff-edf1a445bcc4", "sighting_of_ref": "indicator--357e2f77-7af5-42a7-a341-9cf11aeae80e", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11eb25ab-eebf-4b51-b927-0f1a084bb6b0", "sighting_of_ref": "indicator--79ad030d-3ed8-4d76-8d33-73609bf41ca7", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f23064fc-5e3e-4df7-9a02-dc79c70440b9", "sighting_of_ref": "indicator--feced753-9b55-4008-8df5-9d371d8c378c", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a956c781-5663-48be-af6a-e05157e76575", "sighting_of_ref": "indicator--dee95d83-5bad-4e29-aeb1-efd92ff87a8e", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a245008-0788-4500-b613-11d2a4a223c4", "sighting_of_ref": "indicator--053684d5-4897-4f2d-910a-66436d70b8e5", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c698a53-8a71-4e2e-be98-52b52adac031", "sighting_of_ref": "indicator--fadc9810-1351-4658-be80-5a270674c9fb", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cea761b-143f-47c9-93b0-31f55008f844", "sighting_of_ref": "indicator--ff1412e5-c585-4f7d-b9ca-136fc433e3b2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--886ec18f-9339-406b-8bc8-ae6362541473", "sighting_of_ref": "indicator--43918d39-5b60-46b9-bb6e-66c8445d185e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87674700-c04d-486f-b24d-b29100212f77", "sighting_of_ref": "indicator--77b32cdc-2ef7-4160-9eb0-ad1ce09bc972", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5692feb-a813-4b81-abb5-9cd40f3a9c22", "sighting_of_ref": "indicator--f640f5b9-ddc6-4e5a-9a33-29d085e4725c", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96e81240-35b7-48b1-8cbf-16a64824c614", "sighting_of_ref": "indicator--dc544960-493e-4b19-a807-38539fed6614", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--438eb9a2-4e7b-4d9e-a85c-cd88db1ad075", "sighting_of_ref": "indicator--dc544960-493e-4b19-a807-38539fed6614", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19a5a8ca-ce10-48a3-996f-dd78516f73ed", "sighting_of_ref": "indicator--dc544960-493e-4b19-a807-38539fed6614", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5b7ce5f-0924-4abd-8b89-dc11eede5869", "sighting_of_ref": "indicator--3275cf58-7579-4f2b-96ff-15516b0b737b", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e840a1b1-a5e5-4c2d-a400-7497c59d7f7e", "sighting_of_ref": "indicator--3275cf58-7579-4f2b-96ff-15516b0b737b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68cdae8e-121d-460a-8c4f-158582b3feef", "sighting_of_ref": "indicator--3275cf58-7579-4f2b-96ff-15516b0b737b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cf11339-61bb-447b-a9e4-66567d4aaafa", "sighting_of_ref": "indicator--55d138da-fa62-493d-9ff0-e0e256e73340", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da9d70f4-2c65-44be-8823-646890bcf0fc", "sighting_of_ref": "indicator--55d138da-fa62-493d-9ff0-e0e256e73340", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbf7d384-3026-4caf-aee8-3491254e1365", "sighting_of_ref": "indicator--6d0c3d40-72a1-47b1-b07c-43ae4773648b", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--077549f3-4685-49f5-8b62-0b15b22c4f7a", "sighting_of_ref": "indicator--6d0c3d40-72a1-47b1-b07c-43ae4773648b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ab504c6-d218-46e0-82f2-8fbb79c23a4d", "sighting_of_ref": "indicator--6d0c3d40-72a1-47b1-b07c-43ae4773648b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c611d04-a37b-4d94-9bbb-e0cbc4df3252", "sighting_of_ref": "indicator--7494e144-830b-4e0d-b1ce-16e01dcbe558", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd222213-71f0-4f75-8864-cb521c5d0ae3", "sighting_of_ref": "indicator--eaa938e9-9622-47a0-a6c7-133d14bebe5c", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23b7f012-7121-403d-9699-e65b070f956e", "sighting_of_ref": "indicator--c408a6d4-dc12-471e-80cf-08373587891e", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0f65797-13e4-4bb6-b2a7-43a76daff515", "sighting_of_ref": "indicator--345dabe0-b7d4-4ae3-9269-4eacc2dc1cce", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e9f8dcf-d37d-4e36-9ac5-612bfcaa5531", "sighting_of_ref": "indicator--b5796341-99a5-4932-8037-4c5cf79e1d81", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5eb1e72e-c452-4963-9bb7-964e2d678382", "sighting_of_ref": "indicator--b62217c3-8e3d-4a2b-b661-3c64262bdabd", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4651e216-4df3-4f4b-80de-b4c9ab833b85", "sighting_of_ref": "indicator--89166e94-b79e-478d-b206-8067df3254e9", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6efed3a0-1b2e-43bc-9338-75bf869d304a", "sighting_of_ref": "indicator--cc8ff3fe-f17b-45f2-b67f-e5ffa7da5b85", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09eea22e-65f5-44da-ab9f-0c293d7b534d", "sighting_of_ref": "indicator--ba9ee068-45a4-4d81-aefb-cc54bd0367d6", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99f49cdc-b93e-4a81-a91a-7ed50145ae11", "sighting_of_ref": "indicator--f7330b70-c281-4025-aa7f-a38d60142afc", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8f69cca-4a43-4c63-b38b-3a0a38d08924", "sighting_of_ref": "indicator--5b29e492-1ad0-4832-92b9-b1ce986ff736", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc23b2ee-6b47-4dbc-b09a-8f8c2488ebbb", "sighting_of_ref": "indicator--d01cd921-4542-469e-a2a7-7bcdb4e4d2dc", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32b7f041-e119-4e32-af73-253a83460190", "sighting_of_ref": "indicator--203193ef-5557-484a-baf0-97614c60e4c5", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54fb179b-03b9-4838-af53-2374e5663780", "sighting_of_ref": "indicator--52bd298f-4327-4e35-9d40-8b846ba0e05b", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--457115b2-fec3-46b8-a8e7-fd7b2e078759", "sighting_of_ref": "indicator--52bd298f-4327-4e35-9d40-8b846ba0e05b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c5345da-b118-483b-ad6a-f643c19bf62b", "sighting_of_ref": "indicator--c0ebdb76-4854-4aa9-a43a-2e5b30b263f9", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe2ed679-cd20-47a7-a79d-5a3113c0c8fe", "sighting_of_ref": "indicator--9ae0b282-de54-495f-a975-7832de29fb26", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45378a05-8a91-4c63-b0fb-24890110a4ac", "sighting_of_ref": "indicator--abc23e41-16c9-4ba0-8158-a8866dcedb2f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55b09622-5fed-43a6-a99d-e2fecb644504", "sighting_of_ref": "indicator--eb4e87f0-f1e3-47d2-8faa-b06106ed1757", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e5cad2e-70e9-4d49-a3a0-eda639129b8c", "sighting_of_ref": "indicator--a8feecc0-666e-4722-bf5d-f02a78e8a129", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adf411c7-9fce-4b8b-8a36-c50b3c661596", "sighting_of_ref": "indicator--a66b545c-5113-4691-a764-e1088956ef0c", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aac28c15-ff81-4afd-9b0f-8ba95f40334b", "sighting_of_ref": "indicator--a66b545c-5113-4691-a764-e1088956ef0c", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--714825ed-23c3-475a-bce2-29883b5ab3d0", "sighting_of_ref": "indicator--a66b545c-5113-4691-a764-e1088956ef0c", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8f95ac4-d8f7-44e8-a780-54775fe22199", "sighting_of_ref": "indicator--c66149ba-2da6-4c9c-b458-6c6152c8a913", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b744946d-0553-461c-b886-1d23c08f120a", "sighting_of_ref": "indicator--c66149ba-2da6-4c9c-b458-6c6152c8a913", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e01cae3-ed7a-4b6a-9dff-26de15ceb5bb", "sighting_of_ref": "indicator--ebbfd275-2817-4c6b-9974-069bfe0465d4", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fedc2c4-d1b1-461b-a740-f60c727682a1", "sighting_of_ref": "indicator--baef749b-6ea8-4d8b-8488-728469206d88", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a411ba8e-65f9-4e87-8e45-f9422fc9cf26", "sighting_of_ref": "indicator--7222d645-0c24-4c9e-be18-43410516b04d", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--870f2d6b-bad6-41e7-ba7a-053a27371268", "sighting_of_ref": "indicator--b5fb4ca9-f7df-41ee-8647-423d8259e0f6", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78223e88-bfe0-43ee-a75b-a82ea944a898", "sighting_of_ref": "indicator--480b30cc-6312-4e5a-ad05-00e3a60ed7aa", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8332f514-6806-45bd-8f55-ae306aff0e43", "sighting_of_ref": "indicator--3edd3407-543d-4c67-8b63-037cc5212049", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49506c62-dc13-4088-841b-daee39b21d58", "sighting_of_ref": "indicator--9435a6f8-a9d0-48b3-a531-a9847af8c674", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b9f5a8e-6174-4d61-ad07-46d3eb4045ad", "sighting_of_ref": "indicator--d09efb4e-5d51-425e-9806-fc9e3df2955c", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2efe43e3-d854-4af8-b000-5804e0c6bd45", "sighting_of_ref": "indicator--f5c21551-7da4-4d2a-b50a-1ac43410dfda", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d849921e-13b1-4f2c-bb89-bc827ec882a1", "sighting_of_ref": "indicator--f5c21551-7da4-4d2a-b50a-1ac43410dfda", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de352683-65c6-449a-960c-50298fd3765e", "sighting_of_ref": "indicator--22deaa34-6c55-4144-ab49-9a7fd6c4f6da", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb38d405-29e4-490d-a2e4-8f126abc27f9", "sighting_of_ref": "indicator--41215ba8-1f0a-4127-8cfe-6edfbdbd842d", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0ed088f-449c-45ed-981a-debf7ca12c05", "sighting_of_ref": "indicator--41215ba8-1f0a-4127-8cfe-6edfbdbd842d", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9aaa84e1-6da6-4dcc-a88d-4f922612d282", "sighting_of_ref": "indicator--41215ba8-1f0a-4127-8cfe-6edfbdbd842d", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0114a83e-9c46-41b4-a749-166c49c38d73", "sighting_of_ref": "indicator--9bff7a63-f7c1-4ee0-9c6f-5a032a945362", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d60309ef-1996-4a9e-8e0b-80983bc9e846", "sighting_of_ref": "indicator--3a7ee039-adbf-4503-9880-54ebf65f7f79", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8a820d2-44d9-489a-a1eb-4ff43f4300ff", "sighting_of_ref": "indicator--a7d3ce77-9c5f-4c80-9255-625410031cc4", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4240ad1c-391f-423d-8532-eaf0093f809d", "sighting_of_ref": "indicator--a7d3ce77-9c5f-4c80-9255-625410031cc4", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce69b5a6-8cd6-42cd-9293-63a1f06da8ff", "sighting_of_ref": "indicator--1b2fecac-fc71-479e-80fb-b57c894a18f4", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2da19d0c-1b7e-4749-bdb4-f9ca33b8dab4", "sighting_of_ref": "indicator--03bf9aa4-8ac1-4ee9-af6d-1e43015e8608", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaa7056d-d07c-49ec-aaf9-93a74a55572d", "sighting_of_ref": "indicator--03bf9aa4-8ac1-4ee9-af6d-1e43015e8608", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07b8659b-2d00-46b0-8448-5d7cf0ba8146", "sighting_of_ref": "indicator--b798f4c2-ced6-439d-bcaa-f5d7bc81b49c", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f17e57d-49d1-4220-b5a7-50aec3f47633", "sighting_of_ref": "indicator--b798f4c2-ced6-439d-bcaa-f5d7bc81b49c", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56c7f2ce-20c7-4307-bc7b-442daaedd27a", "sighting_of_ref": "indicator--65daaf34-8cca-403b-a70d-8bb51d2b8bf7", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb856ed2-da32-41eb-89b0-b65cec4cf5a0", "sighting_of_ref": "indicator--a0e3a8eb-eed0-49f1-8f46-c0c38761bad3", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87ba846f-c14b-4ba1-aa5e-6bcf84acec88", "sighting_of_ref": "indicator--3d454517-5fd0-4530-bb60-62dc943716fa", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fe1a40c-a60d-4370-9582-f85bcb06bd5e", "sighting_of_ref": "indicator--3d454517-5fd0-4530-bb60-62dc943716fa", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4809894-ad40-4f64-998e-8990237bcfdc", "sighting_of_ref": "indicator--580a4299-0f9e-406e-9abf-e8c5f15d13d3", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b89bc141-8c51-444d-bf38-b571122abb3c", "sighting_of_ref": "indicator--2eda4ec5-8cd7-41f6-92cb-9ae903e210f1", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--945d1b20-860d-4cad-abb1-13afef2bb302", "sighting_of_ref": "indicator--380b74a0-da20-425e-8f3b-2d7bdcfc6527", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f97160b-66dd-4abf-a18a-89d44d07014c", "sighting_of_ref": "indicator--d9be5d35-37c0-43cd-a8c2-cf241ce67ec6", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--177d7e4f-d2db-4946-a958-0aa89ae9f3a3", "sighting_of_ref": "indicator--3a7026fa-ee11-4ad4-90c2-0740559b3967", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b575074d-0b22-4bde-890d-d80775582f8a", "sighting_of_ref": "indicator--3a7026fa-ee11-4ad4-90c2-0740559b3967", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4c1c9bf-6514-437d-839f-32c9daeaaa98", "sighting_of_ref": "indicator--db4c6753-415a-4248-98aa-6771442e4765", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09e905b2-4387-433e-9e28-f2f2ed11f764", "sighting_of_ref": "indicator--b2900f5b-3724-4587-8591-5ca1d5d76070", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf4f9379-8d11-45f3-ad23-711ac5403832", "sighting_of_ref": "indicator--ee1d81ff-479a-44af-a949-1d17cd21c936", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b6ef0e0-5cc8-4fc7-b8f8-d8d8c445cb74", "sighting_of_ref": "indicator--91f584cb-18f1-43d6-908f-14f5063b76eb", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9aba9bb7-955d-4903-a9e6-ea6d4c733e45", "sighting_of_ref": "indicator--8f84b9bf-b194-477a-addd-d09300f02007", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7393845-bfa9-40b8-9a86-0b03c5db26f9", "sighting_of_ref": "indicator--49fe5923-c1ba-47b1-b432-67100412220a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbbd1120-5c22-4672-9f9a-e9f24274ada9", "sighting_of_ref": "indicator--49fe5923-c1ba-47b1-b432-67100412220a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e8b46c0-cbad-4e8c-acdc-25e41371da50", "sighting_of_ref": "indicator--f19cc5aa-d157-4460-aae4-d11196f0102a", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33baa23e-7328-4c27-a5ab-02602725474f", "sighting_of_ref": "indicator--f19cc5aa-d157-4460-aae4-d11196f0102a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fcb9aed-ed5b-45a1-83ab-a5e92595a44d", "sighting_of_ref": "indicator--05f96d28-1271-434e-857f-ea4063e1601f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f2df5c7-3016-4f94-b8d6-f3bd0426f2b9", "sighting_of_ref": "indicator--05f96d28-1271-434e-857f-ea4063e1601f", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9e47057-d1bb-45fa-b998-cf3d75592f60", "sighting_of_ref": "indicator--05f96d28-1271-434e-857f-ea4063e1601f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dc445b7-70e0-45de-9926-cb6605cb46d4", "sighting_of_ref": "indicator--e61e6a6d-9fc6-4ae6-97bb-38b3aea89198", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64019bb1-f3c6-431f-95a9-0619540227b9", "sighting_of_ref": "indicator--e61e6a6d-9fc6-4ae6-97bb-38b3aea89198", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de8d6a80-025e-4947-b268-cb80c3420d93", "sighting_of_ref": "indicator--8844da88-af28-4d3c-9a4d-934a814f7a88", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--654550fe-e4f0-4289-bb25-2e99581bfc6e", "sighting_of_ref": "indicator--06282023-8bf4-475b-996e-c27867fc4e20", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3fdfd2b-65d4-4b15-a6c6-d8abfb82d85e", "sighting_of_ref": "indicator--0caf9938-406f-42a8-9a31-1bffe6f27277", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb3a0238-cf9f-42ea-b6dc-1659ef312aa9", "sighting_of_ref": "indicator--9266c96e-5ef3-425f-b94a-50e4df90973b", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdb11d40-b699-415a-8cc7-e245bf70b89d", "sighting_of_ref": "indicator--9266c96e-5ef3-425f-b94a-50e4df90973b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e79669f-b8a8-4e8c-b525-dfdb90e3abf8", "sighting_of_ref": "indicator--9266c96e-5ef3-425f-b94a-50e4df90973b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ea1d999-d9a6-469c-8681-d8f3237a96cf", "sighting_of_ref": "indicator--00c3d0b1-d206-4c22-b7ec-262c47669e24", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0052936c-9c7f-4f9e-809c-6914059c286a", "sighting_of_ref": "indicator--00c3d0b1-d206-4c22-b7ec-262c47669e24", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ffd45c7-6bbe-4588-a913-ba48f27686ad", "sighting_of_ref": "indicator--30eff0b3-2b48-48b7-aa80-5d3f9c00adcc", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--811f096c-76aa-4d20-97ae-3e428ba813de", "sighting_of_ref": "indicator--30eff0b3-2b48-48b7-aa80-5d3f9c00adcc", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ddf8624-8198-4e18-ab2e-2b0dfeab6e03", "sighting_of_ref": "indicator--6ffa936e-1d26-4290-bad7-d968afe5ed53", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--faa6e92c-c4b8-4fbe-83f7-86b5b844de78", "sighting_of_ref": "indicator--6ffa936e-1d26-4290-bad7-d968afe5ed53", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88306428-00c2-4a76-a7ce-e96b6deef217", "sighting_of_ref": "indicator--6ffa936e-1d26-4290-bad7-d968afe5ed53", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59a391ad-bc68-43fe-9095-ad99ce24ebd9", "sighting_of_ref": "indicator--0acf0d6e-6654-4fed-97ca-a19f1f796dff", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9597e39b-0165-4502-8f59-144851984116", "sighting_of_ref": "indicator--072004cb-d7a4-40e5-a363-477675212a63", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db218ea8-75d8-40c8-8382-da159185018f", "sighting_of_ref": "indicator--aad636e0-730c-4a4c-a3cd-bf7166f9fe96", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98922f1e-e098-4d01-8871-7ea1c8cdc8b1", "sighting_of_ref": "indicator--f75e3822-80e9-408f-a082-c033188cfdbd", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0609fcb0-9067-44c8-828d-8cd656d565a6", "sighting_of_ref": "indicator--86249024-fe37-4308-b142-6a52a416a590", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51113154-f063-46e9-b16f-c0fba1f479ed", "sighting_of_ref": "indicator--c18f2d82-b6e3-4d19-97f1-c6b1294208c5", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30574542-b7ee-41b8-81e4-6d1279cd0321", "sighting_of_ref": "indicator--2299ccee-ec7b-43ae-b1d9-492632aec4a4", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c1de89f-9f60-4b34-99a0-660be5b93e3a", "sighting_of_ref": "indicator--5039a80d-b1ff-41af-92f0-85c7a1c5ffb4", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3037e985-b43b-4ba0-8fbf-b767d1c3d0a9", "sighting_of_ref": "indicator--5039a80d-b1ff-41af-92f0-85c7a1c5ffb4", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b5f6801-6f60-49eb-a0a7-9535436a92a8", "sighting_of_ref": "indicator--9c693540-5c68-4b1c-af6a-de928801d6c9", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3c66efd-3678-4779-9f68-dc2a3bd175cb", "sighting_of_ref": "indicator--9c693540-5c68-4b1c-af6a-de928801d6c9", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa2621a5-01d0-4d7f-a24b-5368d74b608b", "sighting_of_ref": "indicator--450cb8b1-7f19-430a-935a-04eaecafdaf2", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfe29ea3-a35c-485b-b057-96b9ad71069b", "sighting_of_ref": "indicator--c61f479f-1625-40c2-a966-a0f9d3117618", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ba32671-671c-43dd-b701-fa14c3b8e248", "sighting_of_ref": "indicator--cd3566cd-a798-46a1-9c57-6494993abf7f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6de1bd3f-b091-42d2-9e0b-06178d6a49a4", "sighting_of_ref": "indicator--8754a501-2cf5-4498-8ed5-d57ec3eb1621", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaa4f64b-c1cd-44f0-b69e-83a91217706f", "sighting_of_ref": "indicator--bd6039c1-b51b-4628-8c70-32d23453081b", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--343b1ca0-047a-41cf-88f2-2d7efa9aa09c", "sighting_of_ref": "indicator--bd6039c1-b51b-4628-8c70-32d23453081b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73386baf-ab86-4b56-9952-4040f2ea7cbe", "sighting_of_ref": "indicator--bd6039c1-b51b-4628-8c70-32d23453081b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f24a5223-410b-4c4c-9c63-1cf8db644f17", "sighting_of_ref": "indicator--7dcba76c-c48f-4510-8107-ddd51c0072e1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b833a38-a1d2-4b53-b425-6ae0a74a240d", "sighting_of_ref": "indicator--d17ccc59-c268-4d34-b412-08ab06816f05", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--025ff166-2f5b-4d6c-b1c6-b9286abb0a22", "sighting_of_ref": "indicator--22ec49d5-2647-42ee-a4ba-a885a19c8a7a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90784ba5-177a-4387-a8ec-2d8a23e47d87", "sighting_of_ref": "indicator--b83a4845-066f-4670-957b-8e3db92cc8ed", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0b34580-9fe5-4294-95f5-2ab82f9b3382", "sighting_of_ref": "indicator--b83a4845-066f-4670-957b-8e3db92cc8ed", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab988500-0cd0-48c4-9466-e6e1c3e45a26", "sighting_of_ref": "indicator--9fabc0ed-9de5-4769-93f4-27bb3c96dd26", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--538aee72-8d5d-4c1c-bb34-8a0c0e1b32f0", "sighting_of_ref": "indicator--057fd850-d376-44e4-8927-bd163cd14de0", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f58a25b6-6fe2-4cf9-ae23-a1ec0c4c8089", "sighting_of_ref": "indicator--f3ba70ff-8cb6-4667-a63b-74fa13699beb", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d95a980-7840-4281-99dd-ffbb905e8901", "sighting_of_ref": "indicator--f3ba70ff-8cb6-4667-a63b-74fa13699beb", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15fbe882-ab7e-43d4-abea-d31e8b6fd642", "sighting_of_ref": "indicator--f3ba70ff-8cb6-4667-a63b-74fa13699beb", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81ee7641-4c91-491b-966f-d0627674b49a", "sighting_of_ref": "indicator--c948335f-fb47-4de7-88f0-7f2c65e8aaaf", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--455d613c-916e-404c-ab67-c5101ba16ffc", "sighting_of_ref": "indicator--dbcf9231-e5a0-4889-aab3-4bdb4129c7c0", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adb62151-9557-4ef9-a099-648d3b3800e7", "sighting_of_ref": "indicator--dbcf9231-e5a0-4889-aab3-4bdb4129c7c0", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c16078e5-7198-4a73-a205-37963f9282a6", "sighting_of_ref": "indicator--dbcf9231-e5a0-4889-aab3-4bdb4129c7c0", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--250acf78-94dd-43b4-b9ff-614ba9568ada", "sighting_of_ref": "indicator--15ef91a9-24ab-4e51-9b78-f2a22dbc9f14", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--926d2978-1820-4566-a5b1-7aa9d5d9c807", "sighting_of_ref": "indicator--76baae52-4824-4f13-807d-a7b84f764b2f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b3c78c7-d628-4a08-9816-29183583e0a3", "sighting_of_ref": "indicator--8d363902-0990-4a33-857b-41d68bf27973", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--caece2c2-a325-46ec-a269-1dfb89a5232d", "sighting_of_ref": "indicator--f8f11241-3ee5-4fe5-831a-259acf590393", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1065e769-0a8b-47e4-a88d-839bb14ee727", "sighting_of_ref": "indicator--16ef3b9f-4d2a-4c06-9440-cbfd81f389fe", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0370df9a-5227-4cc9-b184-4db248132030", "sighting_of_ref": "indicator--16ef3b9f-4d2a-4c06-9440-cbfd81f389fe", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61eb94fe-f19a-4ada-ad38-c0c267c2ed5c", "sighting_of_ref": "indicator--13cf284d-094e-49bb-911c-b877811f5362", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41415128-84c9-4ac0-831b-0f2232e1e0c6", "sighting_of_ref": "indicator--9152ac4b-5876-4a7c-8122-9e4609f984b4", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a601432-8d75-4d27-81fc-f32da0191c9c", "sighting_of_ref": "indicator--98181e17-a7a8-4b27-8633-4cc39ceda88d", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2e28295-df28-4eca-aac7-e8e1597dbb43", "sighting_of_ref": "indicator--98181e17-a7a8-4b27-8633-4cc39ceda88d", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1247caa-fdba-4f7a-aee5-3ca174e92ed0", "sighting_of_ref": "indicator--98181e17-a7a8-4b27-8633-4cc39ceda88d", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7a3290f-5db2-4567-be45-091ef9204664", "sighting_of_ref": "indicator--1b0379bd-bac6-4bd8-981b-569e605e76fa", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60331e18-cbfa-43eb-be9e-0bbc436e0c30", "sighting_of_ref": "indicator--1be0f4c7-d6eb-454b-8742-e8e1dc250238", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01f6f277-c272-45d2-bb09-3146d8d7f6cb", "sighting_of_ref": "indicator--2e867a4f-0cb3-40f7-af51-6553979e55d7", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0e374bc-77a1-4865-a62f-705b2bcdceac", "sighting_of_ref": "indicator--41e31161-25b1-4d63-a00b-2cf2a903af6c", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb29e46e-4e23-47eb-8414-8d77d51f2dfb", "sighting_of_ref": "indicator--a23c020e-82d5-4a09-9459-87bcffdec74b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a49f0637-340f-4d92-9241-e622b136a03f", "sighting_of_ref": "indicator--143de3a7-bcf5-4a37-97b4-4031f911c01e", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85985f1a-2b81-4d6d-9e65-f8201ea32ebc", "sighting_of_ref": "indicator--143de3a7-bcf5-4a37-97b4-4031f911c01e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15311d6f-917b-4487-a524-74cf66222ae9", "sighting_of_ref": "indicator--143de3a7-bcf5-4a37-97b4-4031f911c01e", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a98c63a-6420-4df9-bfa8-36e0eeae0b40", "sighting_of_ref": "indicator--bf5d5c4d-adba-4cae-881f-d1f93655e294", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65045f58-7d16-4304-81a4-28f2b97dbbfc", "sighting_of_ref": "indicator--bf5d5c4d-adba-4cae-881f-d1f93655e294", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79c81d94-4d8a-43b8-8c3a-1780f95a938b", "sighting_of_ref": "indicator--bf5d5c4d-adba-4cae-881f-d1f93655e294", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ac26d1b-62cb-455b-953a-ec11580eab13", "sighting_of_ref": "indicator--4c0076da-1691-40f7-80c4-f9a0db441196", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b039f5a8-eb79-4b35-96b7-5613008dac16", "sighting_of_ref": "indicator--4c0076da-1691-40f7-80c4-f9a0db441196", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccd89ae8-1048-4a7d-8be9-d0f7a70d74be", "sighting_of_ref": "indicator--845ee3fc-12e0-46ff-9cbc-4adfb75d32f2", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21f10582-1278-450e-99fc-8542262f1502", "sighting_of_ref": "indicator--845ee3fc-12e0-46ff-9cbc-4adfb75d32f2", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1627eb92-b4a9-4796-9b50-1b5a5bc12b88", "sighting_of_ref": "indicator--845ee3fc-12e0-46ff-9cbc-4adfb75d32f2", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b746218-e365-4af0-bd80-12bbdc3228ef", "sighting_of_ref": "indicator--c92d2858-f3af-4636-8a6e-fb54958967a1", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51c71174-92f7-49fd-ae00-525a20513440", "sighting_of_ref": "indicator--964cad8c-02fe-4dac-b896-5e3a02790dbe", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--796f03ad-36d2-4e1d-8c61-57e4634295eb", "sighting_of_ref": "indicator--5eb00e2b-087d-4bc5-acbe-182a028d1c74", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2b24fa1-59dc-41eb-b12f-4f55df0b32d1", "sighting_of_ref": "indicator--5eb00e2b-087d-4bc5-acbe-182a028d1c74", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fed2d58-8b28-41eb-acf7-a744327443c3", "sighting_of_ref": "indicator--5eb00e2b-087d-4bc5-acbe-182a028d1c74", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab100d7d-cb60-4b8f-ba61-96480d96c35f", "sighting_of_ref": "indicator--3508d1b6-a6e0-4aa1-8465-2ad1033fce57", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d477106-c77a-4ea3-808c-5436bcbd1451", "sighting_of_ref": "indicator--18906eff-eb10-474c-b623-945df13674aa", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7129489-f7c7-4e5d-8c79-e0d0a3d06d65", "sighting_of_ref": "indicator--efe1f29f-555d-42f5-8487-ee31893b07c0", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67d8226e-e237-4de7-9b67-5511bd4a1034", "sighting_of_ref": "indicator--e01a9636-3c95-4be0-9e77-ddb7d0d58e26", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a30672a-121b-43b9-a86d-586c050fb69b", "sighting_of_ref": "indicator--0a6bd87d-faec-4bbc-820e-fb63fb9bf9bb", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5b467db-adb5-4179-bfad-f18d5ddc8d0b", "sighting_of_ref": "indicator--0a6bd87d-faec-4bbc-820e-fb63fb9bf9bb", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6b2587c-778a-45d8-b780-dfb457a26fa1", "sighting_of_ref": "indicator--0a6bd87d-faec-4bbc-820e-fb63fb9bf9bb", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eaff7ba9-457f-41d4-a17b-8ad4e62dfa63", "sighting_of_ref": "indicator--3c3f8509-115b-442f-9a45-17c48a68fbb7", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f13e285-0449-4754-be05-b6e95e086da7", "sighting_of_ref": "indicator--3c3f8509-115b-442f-9a45-17c48a68fbb7", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e88ab517-362b-42c0-89dd-60517a032b77", "sighting_of_ref": "indicator--eb66a01c-8bef-4aa1-83a5-0177ab4e2cfa", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b181f0f5-aef7-41be-ac5a-f9039d9e740c", "sighting_of_ref": "indicator--3f70423b-d6e9-48a8-b3cc-88a2916e5150", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eceedda8-e487-4bb9-9d2f-90fb3da01f05", "sighting_of_ref": "indicator--916eff1f-ef22-4748-9b99-55e421bc4ef0", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6fc44be-571b-4223-89e6-a7f5b3feecba", "sighting_of_ref": "indicator--916eff1f-ef22-4748-9b99-55e421bc4ef0", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4e318de-31ed-4a55-a101-1d956884f7da", "sighting_of_ref": "indicator--916eff1f-ef22-4748-9b99-55e421bc4ef0", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83cf832a-cc75-48a0-80f4-14927fd7ccff", "sighting_of_ref": "indicator--42993eaa-c647-4e92-a865-96051877f5aa", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6868fe8b-eec2-4f72-bbba-591029914590", "sighting_of_ref": "indicator--6f137c3f-264b-42a8-aab3-2662e183f109", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--750b914f-9e2f-4288-a243-780a7a769fa4", "sighting_of_ref": "indicator--6f137c3f-264b-42a8-aab3-2662e183f109", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47c33df4-2f77-4180-9975-696ef6bfa167", "sighting_of_ref": "indicator--6f137c3f-264b-42a8-aab3-2662e183f109", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4ea09dc-b945-4f51-85de-2b593b1c7355", "sighting_of_ref": "indicator--a4c3b2b1-950b-49cd-b19d-ffcde17fba03", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--085cd9a7-31cc-4687-b70b-a1aa46a940ed", "sighting_of_ref": "indicator--a4c3b2b1-950b-49cd-b19d-ffcde17fba03", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bae860c9-f6f4-4b69-bbbf-cdbd2ad7bbca", "sighting_of_ref": "indicator--a4c3b2b1-950b-49cd-b19d-ffcde17fba03", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--067b6f40-93e8-4e93-9908-a475975b7072", "sighting_of_ref": "indicator--84fd3389-08ee-40d4-b7fe-ad01238df411", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--105f5e96-66c7-40d2-bebe-82486a1169e8", "sighting_of_ref": "indicator--dc6c7ec9-07dd-4d78-9b4f-9b2dcddc0c9f", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27823576-5ed8-4be3-8802-b3d5315d2f82", "sighting_of_ref": "indicator--6e8ffabb-334f-4e4d-a5f5-f55cc707f4a2", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3231f655-9719-4d2d-a76b-6b9e9ff3977c", "sighting_of_ref": "indicator--3c5cc9d8-f6b8-4128-8385-0a009491641b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d456310-ffbb-4ff3-8485-d5477636ae87", "sighting_of_ref": "indicator--6feb51b7-64c9-47f1-afdb-61d06cd2af69", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e748e472-12d1-4967-960c-9e61b79b2ea7", "sighting_of_ref": "indicator--5cdf12fd-dc37-449d-afe5-3b6245e5c6f0", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddfea890-af44-4c65-8b59-064727ec71b5", "sighting_of_ref": "indicator--5cdf12fd-dc37-449d-afe5-3b6245e5c6f0", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--052fc200-b75d-4365-b071-959518f8e44e", "sighting_of_ref": "indicator--e22abb5b-6467-4969-923e-e9ade2843e4d", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c058a5c3-d374-4b62-b398-cb77ca0c4966", "sighting_of_ref": "indicator--e76f60fc-58be-44c3-9437-84375af5324c", "where_sighted_refs": ["location--cc47317e-2c18-43a6-8938-dea748a56ad5"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fc8f8b6-9d88-4b6a-a4a3-20d2e342ab5f", "sighting_of_ref": "indicator--2945ddfc-9b77-4824-800e-0fdca3fdc362", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4a15720-195d-4023-ac44-d5413d393725", "sighting_of_ref": "indicator--2945ddfc-9b77-4824-800e-0fdca3fdc362", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6074a068-6cb5-457c-a23f-d9be1fa9fcb1", "sighting_of_ref": "indicator--8358b0e0-7b8f-40bf-9f6c-e8654048a259", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad3ffd8d-d95b-4e08-b2a5-98bf698cbd3e", "sighting_of_ref": "indicator--8358b0e0-7b8f-40bf-9f6c-e8654048a259", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f124b5e8-8875-49f2-8595-05107d084cac", "sighting_of_ref": "indicator--f8272618-4beb-45fa-93f2-9404c0d73fda", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32f9587a-8068-44ad-9352-19a664012512", "sighting_of_ref": "indicator--bfd8abe1-2e51-4dc1-825b-cd0179303af5", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d61723f-77f7-4ec9-a6a4-e39130388bc1", "sighting_of_ref": "indicator--13c4e010-f225-445c-89a2-fdbb54b938f8", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c986092f-9bd2-4d12-9232-38510cce416b", "sighting_of_ref": "indicator--d1525b29-fa41-4a0b-8baa-b9128e8fc1ad", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7d89c14-f3f2-4f33-85dd-68e099c35c91", "sighting_of_ref": "indicator--d1525b29-fa41-4a0b-8baa-b9128e8fc1ad", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57b697f4-fe55-4aef-b3f2-145036d9ff7a", "sighting_of_ref": "indicator--6165c673-6a1e-4e3b-9a34-b290278d6bea", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a28c81c4-748d-4527-9ec1-bd0533d6f9c6", "sighting_of_ref": "indicator--14fcbbee-bd7a-472d-bd65-41870c5e19c7", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--202cb37c-d725-4540-b2f2-8bcedbf1b32e", "sighting_of_ref": "indicator--b0370f1a-c200-4e26-9b6a-f4e2597822fa", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aadeb5b9-b284-4999-9566-f219cb02d2dd", "sighting_of_ref": "indicator--58d6a739-8d81-402c-aece-2aa615bab411", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4d47ebc-7709-49fd-bb5f-f1b39ee8bb83", "sighting_of_ref": "indicator--58d6a739-8d81-402c-aece-2aa615bab411", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d83f6c37-adab-4b27-a101-7461345a3948", "sighting_of_ref": "indicator--519a2103-3c93-494e-bbc2-8dd8c5384f58", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b6f00b9-aeb8-4bb8-b560-3c7ed13df67d", "sighting_of_ref": "indicator--519a2103-3c93-494e-bbc2-8dd8c5384f58", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d590dfd4-e88a-4513-8753-061859c62daf", "sighting_of_ref": "indicator--519a2103-3c93-494e-bbc2-8dd8c5384f58", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eef805ad-d114-4524-b39e-84d6b4806219", "sighting_of_ref": "indicator--9422a0f3-c36e-40b8-9f39-650ff9f8a0c9", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26e33f0d-2dc3-4805-a13c-048a10d5e0e0", "sighting_of_ref": "indicator--932934c1-b568-43a2-810c-545274d92ae7", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2bf9b77-e529-4020-bde4-e8f2aef99429", "sighting_of_ref": "indicator--32f56e65-ce1f-47ae-bcd7-cc148f50f982", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5928fcf6-36dc-4763-be5a-b1f6a753f97b", "sighting_of_ref": "indicator--8fc68380-2b58-4293-a7d6-3ff4a6eb51b5", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eadd2a40-639a-4657-94e3-10fb4e57ff68", "sighting_of_ref": "indicator--2f3139bf-9192-4a8f-b101-920ed34c26a7", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16318381-5943-4fe5-8fcf-85fa9e129658", "sighting_of_ref": "indicator--2f3139bf-9192-4a8f-b101-920ed34c26a7", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--386c897d-ba22-4f12-89bc-66863896fda8", "sighting_of_ref": "indicator--2f3139bf-9192-4a8f-b101-920ed34c26a7", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdf7e51a-9668-47c4-b4e1-989aeb49003c", "sighting_of_ref": "indicator--d4f71390-741f-47ef-8aab-e28e865bfd73", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd99e157-6ad0-48c6-9864-62f23e3494b2", "sighting_of_ref": "indicator--9da171ff-859f-47b3-989b-1cf369347d0e", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9b5bfd1-963b-4b9d-bb0d-99d2f9ed3752", "sighting_of_ref": "indicator--9da171ff-859f-47b3-989b-1cf369347d0e", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--182ac015-55df-4946-90d1-f1eb72348b95", "sighting_of_ref": "indicator--6c5888a0-1a9a-433e-bd63-1d16bd78b952", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfd15fbe-71aa-4251-bd84-636345491338", "sighting_of_ref": "indicator--6c5888a0-1a9a-433e-bd63-1d16bd78b952", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a4186df-4b41-412a-94b3-758b60c0a846", "sighting_of_ref": "indicator--2fbc5c79-eadf-44a6-a61a-2d17c07df98d", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83ccb86d-7a3d-4d4c-a7d0-92db278998bd", "sighting_of_ref": "indicator--8deaa41d-89af-41c4-9636-27e87013a487", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49d6ef56-933c-42ba-85fd-ebef051aa483", "sighting_of_ref": "indicator--f1416fa4-6c27-4fba-835a-3610891ed430", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0775493f-2a90-4cb0-b0bb-73a4b36b6e4e", "sighting_of_ref": "indicator--b34dd32c-d416-448b-9412-9bbe6faeacd9", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84a5b5d9-3e4c-43f7-a6af-7c3e8dc53dfd", "sighting_of_ref": "indicator--b34dd32c-d416-448b-9412-9bbe6faeacd9", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0580621a-d9e0-4562-a47d-c8655c17f012", "sighting_of_ref": "indicator--ab3bf393-ce03-46ee-831d-568b725cd3bb", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db93e107-e4f1-4b88-ae24-4e9811572815", "sighting_of_ref": "indicator--21547935-c922-4bf8-ac02-ae1f199ca852", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--130e998d-9fcb-4898-9d0c-bfad12b3ec07", "sighting_of_ref": "indicator--bd9f10ae-9ac4-441c-a867-a82b51a8bee9", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e10a0c1-29f5-4ded-a98f-8f4299af26d8", "sighting_of_ref": "indicator--142a9619-eeeb-4809-a9f7-33f423d4e94e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1f00245-e069-4e0c-b7a8-999001e0d28f", "sighting_of_ref": "indicator--26e6e935-1040-4268-85e4-e2988344fe2f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78e16eb0-8679-4ee3-9eeb-ca5e5cf941fc", "sighting_of_ref": "indicator--53a48520-4c47-4ddf-89fb-1564a784b108", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0538494b-d004-49c6-8614-aa04cb23f381", "sighting_of_ref": "indicator--51983fe7-57e6-4916-bf1c-86a424b58b48", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3df4eb2-66d9-4d0c-89be-799b0b7cf54d", "sighting_of_ref": "indicator--60e9816e-3608-41e7-9218-9514ccc45a72", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f89f941-2f4e-4cea-a990-4a8d3a00c4f0", "sighting_of_ref": "indicator--1b572823-16d4-4f19-b871-71e0e17a9a42", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--809aa24c-6dcc-4cad-a9fc-a15e1427b4cd", "sighting_of_ref": "indicator--93d83dc6-556f-4daa-b390-c8e97da2341a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ed4d1ea-9e95-485c-997f-a52e527e1b1d", "sighting_of_ref": "indicator--0b9a2f24-8046-4cf2-bf08-8113a78286f8", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23cc8b1c-01be-424c-87c3-55f8447f1521", "sighting_of_ref": "indicator--6bab2768-4825-43f0-860e-be743b0a9a90", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9360d00-d5ea-489a-8cf0-0b9b48bdf806", "sighting_of_ref": "indicator--61bb3d96-5201-4590-b1c1-c869134edd21", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e248804f-0ec5-4737-ae0c-41f3d84d35d5", "sighting_of_ref": "indicator--643265f1-463e-49e7-9804-ed1302092f45", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4044046-5800-41ee-94ee-0a3563af2676", "sighting_of_ref": "indicator--06411ffd-90b5-4f47-b690-f07aa7feb255", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed66691c-8dc6-456f-80d2-404d435cdb13", "sighting_of_ref": "indicator--628dcdc0-1ca3-4136-8ceb-feb73b0150b5", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ea41feb-a1df-410e-be21-5d3f94892d92", "sighting_of_ref": "indicator--4d19a461-0dd0-4eb2-808b-426841e3e890", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce104db4-cfc0-48dd-af68-333b2b829d04", "sighting_of_ref": "indicator--3439844c-2ceb-40e8-b6b9-ea6c1f5e7a07", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3aee8a0d-5c9b-4de6-9a71-af34ffe5b44d", "sighting_of_ref": "indicator--a653215e-991b-453e-9c9f-f202417a1a53", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--303f79e7-21dc-4f7d-b02c-ef606244f5a3", "sighting_of_ref": "indicator--3e56842d-b0bc-4219-a772-7cc5bbe44ebd", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e52ef89a-942e-4b05-8025-03ab399afabd", "sighting_of_ref": "indicator--9a56bc1a-cf7d-4423-b395-25699eddf3b2", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36ef6205-22d8-4ae9-a737-9fffc0f800c9", "sighting_of_ref": "indicator--d09a13d6-1ab7-4a3d-9566-94a8a21417ed", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c23970ec-c00c-4009-8f7b-a5a245c13b6e", "sighting_of_ref": "indicator--8810478f-2af7-40f4-ab58-dd1feb95a432", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cea0771-4675-4ac3-a865-252661219081", "sighting_of_ref": "indicator--7d957866-3bd5-461c-9ccd-949d031dc801", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b76f6086-72a8-4b3f-800c-36549c82b63d", "sighting_of_ref": "indicator--eb79ed27-8ea9-4e9d-ad4c-7ef5ece04dd7", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a1c97ea-60e6-4f84-973e-24e9eca9ed71", "sighting_of_ref": "indicator--d36e7994-7732-4d59-91fd-024aa7fd3b3c", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec26bee5-cdce-4eb0-9a61-15def65aa675", "sighting_of_ref": "indicator--7caf856e-b121-47aa-9c61-d8a2ebc0e8a6", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cf5ce17-eb70-4362-a696-e36f403b167b", "sighting_of_ref": "indicator--d2bffcd3-1bfc-474c-85e0-54e29bd6b7d4", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9974e79-6361-40d0-b02c-1673c801e2e1", "sighting_of_ref": "indicator--aeee52ba-8122-48af-a402-fa11f88ddd8c", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--837103bf-24cd-4d59-8246-85ac7a487c3e", "sighting_of_ref": "indicator--f8751905-509b-4fd5-a032-508650ada49e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1788c29f-b3a3-45f0-bc5b-12eed386fd3e", "sighting_of_ref": "indicator--f8751905-509b-4fd5-a032-508650ada49e", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--052c7aa0-9a29-4dda-8302-15d945774e6f", "sighting_of_ref": "indicator--b99763c1-ea0c-4e3b-9e5d-da7ccb19e22d", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--138bdeac-2550-4aa7-8248-cbaf9959ba89", "sighting_of_ref": "indicator--12ac7de2-56a8-4576-98a8-e9b88f66b941", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df60f29b-eb65-4b7e-b68c-4be268f03e4d", "sighting_of_ref": "indicator--179a5271-d1d4-4e04-860a-8ab5002b0680", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d518caa0-8c68-483e-a7e7-43e406fcca83", "sighting_of_ref": "indicator--bf3b6983-d650-474d-be59-b106700b4d23", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6269680-e873-4ad9-a021-232b8bd85c01", "sighting_of_ref": "indicator--ead3d0e9-a05e-42b5-be69-fb4836c78fc8", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e03e7c3d-94d9-4d80-8234-a8e42bea12f0", "sighting_of_ref": "indicator--e11a8085-7f46-4d41-8223-b40afcf0778a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6a68e39-9c71-46d6-a8e2-94bcb4234136", "sighting_of_ref": "indicator--e11a8085-7f46-4d41-8223-b40afcf0778a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--444c7ac2-f3b6-41b7-8be4-525efd9c07f8", "sighting_of_ref": "indicator--73a226ab-1b8e-4646-bd6c-471e8f4d6799", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58eabc1e-2f88-44dd-b75f-f3d568f5521c", "sighting_of_ref": "indicator--e9c0160c-17f1-4d5b-b87f-4ac4ea16eae2", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd86b479-88af-4927-8981-ec7acaf02443", "sighting_of_ref": "indicator--c4ae01d0-ac89-4d9d-b291-24bc7988660f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ec5eda3-60e0-4317-a9b4-b275ad4aaea1", "sighting_of_ref": "indicator--7289b4d8-87a1-4e20-8802-a937e9a337e3", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb7ca9be-7abb-4b0a-b10d-1b770caf19b6", "sighting_of_ref": "indicator--7289b4d8-87a1-4e20-8802-a937e9a337e3", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c14de343-f645-4fec-978f-9ecf98910603", "sighting_of_ref": "indicator--4148abf7-2e0a-482f-864e-0167c7f031d3", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90f6b599-b638-4cd1-bba1-a65c3bbd17b0", "sighting_of_ref": "indicator--1cf16698-383c-4b31-a831-5d7065f51fca", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bd7c791-25c4-4b59-9ef0-acf83546f49e", "sighting_of_ref": "indicator--1cf16698-383c-4b31-a831-5d7065f51fca", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba81e7f0-c471-4421-99e7-a4e3b6480baa", "sighting_of_ref": "indicator--9bc58c9e-b96f-41cf-be05-8aa71409abe0", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25bd5c2b-bd88-4dfa-9e85-f747efcc494f", "sighting_of_ref": "indicator--74de50e6-2f98-47d4-86c9-cf259a3f78fa", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36c1be87-2dc0-45c5-b396-edc261d93736", "sighting_of_ref": "indicator--a895774e-631b-4b11-a4bd-ba6878a4d02e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62f364bc-663e-4e9b-b6ab-94353b0861ea", "sighting_of_ref": "indicator--79b089f5-290a-4a19-aff2-2d7fc8004bab", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c179ccf4-1d0a-4e52-b2ff-ad82bcfa5b94", "sighting_of_ref": "indicator--3fd5db9e-201c-4997-935a-a0f69fd68847", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69d99b42-c707-4146-9ed8-d160fcfabe18", "sighting_of_ref": "indicator--ffdb153b-b4e5-4d05-84dc-4b303afd613d", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3b9aaae-71a3-47ee-8b79-dff3bcb99b87", "sighting_of_ref": "indicator--26db50f8-e740-4e77-a453-ccf2694bec6d", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--219ccc52-1ae5-43b0-b25c-c28c4105d7c8", "sighting_of_ref": "indicator--bc90d947-e784-425e-ba53-f36c183676dd", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93f43bf7-be37-4531-b474-1275c2b410b5", "sighting_of_ref": "indicator--b553b47f-9a11-4ca5-bb07-ab53373fe7ab", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdebfca0-60b5-4c47-9f24-6d49bde39fe0", "sighting_of_ref": "indicator--6f6c8b5f-d5a3-4af9-bf37-ddaf3f285bda", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05635da2-5ff1-4553-94fc-de53e545a402", "sighting_of_ref": "indicator--dcb20691-0f1a-4779-94bb-51f136d1ca02", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5c333bd-74eb-4324-8e51-17bc16ed7f88", "sighting_of_ref": "indicator--218dae48-4da8-4a0f-8bab-104a4fd18439", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd813cb7-7add-4776-8b36-11e294279e03", "sighting_of_ref": "indicator--b5299189-227c-4969-a002-27b4cc3be408", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--614ea620-69c2-4815-af17-92f9f693496e", "sighting_of_ref": "indicator--929ee1dc-709d-4eb5-a456-c0716d9d7516", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20421ce3-2fbf-42b8-8140-dadc62d3b6f3", "sighting_of_ref": "indicator--1c0fecf2-a62a-4e97-9be8-b3c5d16dbeb1", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3613f43-ce84-4c48-aebc-cfc087527209", "sighting_of_ref": "indicator--5e25658d-af2a-4b41-88ce-e77aa5d97e8d", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d492f4c8-0734-4103-8df9-b382e723c67e", "sighting_of_ref": "indicator--e656ea86-2e2f-4bc1-80b2-0b90fa4f9571", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--667b27f4-b8d3-4bb3-b889-cd2d6f4f14d8", "sighting_of_ref": "indicator--15cf4ac4-cc44-4961-a099-239ec89db495", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--750d0958-4285-4126-ac29-eb67635107e3", "sighting_of_ref": "indicator--15cf4ac4-cc44-4961-a099-239ec89db495", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c21c78f-23c6-4499-9e13-4a964fd01fe2", "sighting_of_ref": "indicator--66501790-0b30-4495-a217-51fd34832e7a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f87eb1ca-0d27-4add-b8be-33d08fe18e38", "sighting_of_ref": "indicator--66501790-0b30-4495-a217-51fd34832e7a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fd415c3-b962-4c24-acfc-32eb5d533605", "sighting_of_ref": "indicator--d65d69eb-7fe7-4955-b0d8-26c9bb5bb1cf", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5de56364-644c-4bf0-9fec-255fcca05301", "sighting_of_ref": "indicator--847b6446-c37f-42b7-8af7-8c950a71c3ea", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bb96534-bc95-4de7-9c13-527b28b4055e", "sighting_of_ref": "indicator--c1952c8e-3266-4156-a8b8-0d4405b66e70", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40ee2006-02e6-40c8-bac1-14d83b654827", "sighting_of_ref": "indicator--8e61f4e1-4e48-4fb2-8419-fd06bce41e10", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46654bc8-69ad-41ca-983e-2102a73a19b4", "sighting_of_ref": "indicator--66863277-95bd-4290-b9b1-983004bb94eb", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51df460a-2962-415b-95d1-2b86797e3aeb", "sighting_of_ref": "indicator--d95867f4-2af0-4d56-aceb-8e019322ccc5", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cf17468-9634-4a2e-a964-c71ad28f55ad", "sighting_of_ref": "indicator--804099c9-a58e-4a38-8968-0afc570131ab", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef02be19-31c1-4320-b619-7b7dce753b70", "sighting_of_ref": "indicator--97986cef-44b4-47a1-be91-1a63eaed4edf", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efa46d0c-f4fa-4f32-8386-7a5b24de3284", "sighting_of_ref": "indicator--97bfaf58-5541-44d0-aa4e-dec0ac0a9e7c", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0c14d54-9e75-4870-8a9f-50dd643f75c1", "sighting_of_ref": "indicator--462b64a1-5354-474e-b05c-9a9733794403", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb6f7a4e-9ec7-41c9-b078-63fb87aa70e9", "sighting_of_ref": "indicator--028bd06b-4c2a-4ef5-8ed5-32d1ded846de", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fb9ed41-2f7a-4aa9-bbde-890069fab842", "sighting_of_ref": "indicator--ae373bbd-5e03-40e1-8469-940c9ed36ae9", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0df2acbd-d57e-4652-93f9-48d78e15388e", "sighting_of_ref": "indicator--69748efd-b21f-4f95-84a5-ad51c670f366", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8661bf1b-21d4-4b06-8ab8-f0c71868fd4b", "sighting_of_ref": "indicator--b55859fa-801e-47cf-89b6-c0e64b303757", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b2fee2d-cece-4145-a83b-bab0bd191258", "sighting_of_ref": "indicator--c55159dd-f15b-43e6-b1bd-6a321eb25dbb", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccc02f9b-ab52-4243-bf1d-1a6282e1fcd9", "sighting_of_ref": "indicator--7f5e5f20-4e8e-4a9c-b2e5-2ce1e2c8e137", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--288e9a52-fa4d-4a38-bf04-a9b08b5e2cda", "sighting_of_ref": "indicator--b1c81d3f-8d28-4f2e-8279-d355e8065d6a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2977b40-443e-4a48-a208-b4be497a7c55", "sighting_of_ref": "indicator--36c74dc3-27d0-40e2-b100-874c202fbc3a", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74562474-4767-43c4-b469-e7ba10a6f3e7", "sighting_of_ref": "indicator--555cc910-1a64-472b-b4e4-b2bb962fac03", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0083a4dd-0182-4b19-b9dc-85e36cefc102", "sighting_of_ref": "indicator--52fc361c-cc3c-443c-9641-46b6448be03a", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--265befc5-6d52-4396-8804-1a37662b26b9", "sighting_of_ref": "indicator--073f0da0-0bce-4912-b844-7834109ab8d5", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4268dae1-713f-4356-b49d-22c832287652", "sighting_of_ref": "indicator--2cbcdbde-bf66-401a-9502-0eae0907198b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89339fbf-ec82-4c90-862b-244fb5b09a8d", "sighting_of_ref": "indicator--9e380efa-fd1a-4343-a545-9656d365ff28", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc6f1b29-c4cf-4225-a857-a8cfabca3902", "sighting_of_ref": "indicator--b7d5f94a-ebd4-414a-bcbd-2dfcc740c0bc", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70777397-20d6-40c6-aa76-12fbe8ba997b", "sighting_of_ref": "indicator--58d6a9e0-5141-4605-b4f6-f569dd4bbe5b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcfb334c-8afe-426a-87cd-b40c9aa0e3c7", "sighting_of_ref": "indicator--58d6a9e0-5141-4605-b4f6-f569dd4bbe5b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b95ef306-c8ac-4d01-b7ea-bcd9c3c0e795", "sighting_of_ref": "indicator--d43b0d41-0f27-4afc-9dfb-8347da4042af", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a9d24aa-c75b-4599-9759-044182076adf", "sighting_of_ref": "indicator--aa267167-b205-4144-8979-468d178a2885", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--883d94ce-2841-4bf1-8f01-30d48609e130", "sighting_of_ref": "indicator--ff01b5a9-fd6d-4d47-b05b-5a9c296fe11e", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19347393-490c-41e3-9eed-14b0db6e8940", "sighting_of_ref": "indicator--f5c62c42-50f1-447a-8615-8d6822726598", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--251ff16f-bf48-4fd7-b47d-abee50f14f39", "sighting_of_ref": "indicator--e4ea0a24-d23e-43f4-95b3-cf49d89a53bc", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d760811-b124-4df9-a21e-bc4e3f4064b4", "sighting_of_ref": "indicator--ce642fe1-6755-43d8-96c2-e5dde88606f3", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a256e52-7a6c-48de-a183-221ae105e906", "sighting_of_ref": "indicator--9df0abff-a891-4212-83af-1d7f47eedffc", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a58237b-690c-4deb-9085-ff21017e5cdc", "sighting_of_ref": "indicator--f2ca9655-9508-47dc-9792-9b7e48033993", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26f84aa6-fa46-40dc-871a-c9c6afe6b138", "sighting_of_ref": "indicator--42bb90db-4ae6-44e0-9965-c0be40dc0e46", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f53bf6db-95d7-47fa-a7a4-c3f0270ae6d7", "sighting_of_ref": "indicator--32d2b6df-9f57-4bae-9685-ddf11ee52845", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32e1e9fe-ba9a-4227-8fb3-b52870f34b50", "sighting_of_ref": "indicator--2765d715-c312-44c9-a8be-6030b63b92ae", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33ba843a-ea31-4ce0-bb1a-3ab1577bbb86", "sighting_of_ref": "indicator--2765d715-c312-44c9-a8be-6030b63b92ae", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--932d93ed-9fa8-4234-b5d5-9048377d2c48", "sighting_of_ref": "indicator--00b0751b-07e6-4fbb-879f-dd367ce38625", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f51b31a-6b84-42f9-b247-fb2331b86f90", "sighting_of_ref": "indicator--4b209e3c-a8e4-4542-9ce3-2dcc8f7b6a68", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba73d15f-e2dc-4ffe-ad7d-3e0c7d6e6956", "sighting_of_ref": "indicator--adc0f115-7d69-4512-a24a-a820b9f7cf4b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c46261a-114b-4ece-b48b-7840cc7d0c46", "sighting_of_ref": "indicator--62098f4c-f58e-4bcf-9ac9-1ec55e4623ef", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27233f2b-9c25-40f6-9f81-e222a34ae405", "sighting_of_ref": "indicator--0266a71c-e071-4a71-85a0-50f915102559", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d9f3944-933a-44f2-85b8-29507cacc7d4", "sighting_of_ref": "indicator--8fc4fd13-d6a6-443d-942b-64cc2d0b09b7", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3473f904-3113-413c-a2c5-e6693b902af2", "sighting_of_ref": "indicator--326a8cd1-2b0f-4c2f-b50a-9b070f063f7c", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e255ba8-27b6-4506-b483-e65de72d4157", "sighting_of_ref": "indicator--aea058b9-d2bf-4fdb-a083-92810fe7586a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea042ac8-f136-486b-bcb7-4ad4ac6efe33", "sighting_of_ref": "indicator--3fdb7b74-fcb2-4089-bd80-1d51305b9401", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee2278f7-4e1b-4501-9829-7dbb68f2b9c8", "sighting_of_ref": "indicator--0c288223-2129-46fb-ac93-34045be75866", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26de688b-691e-4b2b-a111-93e22be3147a", "sighting_of_ref": "indicator--462edbae-9446-4fa0-a6f9-42f7da9f18e3", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4087b89e-1ffc-4af5-b505-6983797ff838", "sighting_of_ref": "indicator--680234a2-f91c-4232-973f-fa2c0cc2ddb2", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a50a97df-0390-4103-afde-c003abe950d3", "sighting_of_ref": "indicator--92a5e741-40ec-49f9-8114-f45fffb351f8", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89329f70-4447-4007-9466-fdd696b4f6ad", "sighting_of_ref": "indicator--ae5b7543-7c18-445b-be3c-fe1edf57fb6e", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63695314-420a-4287-9456-776de974d4de", "sighting_of_ref": "indicator--a6e1972c-0e37-49a2-9c6a-9bd34a919ea9", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4df9ab2e-a550-4135-8c13-62daf3e15542", "sighting_of_ref": "indicator--29bb30ff-ccf5-41c7-adfd-f98dabd3e6ba", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d44752aa-d8be-4c40-bb72-de9699f2af14", "sighting_of_ref": "indicator--afbd9d5a-d196-41d5-8c4b-ca4da623015e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e550279c-47ad-453e-8ebc-777499cd200b", "sighting_of_ref": "indicator--afbd9d5a-d196-41d5-8c4b-ca4da623015e", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc086610-9084-4c77-8f01-dee20faeb5f1", "sighting_of_ref": "indicator--64aa680f-7183-4905-aa1d-4a175cdc1303", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5b4608a-ae60-488e-846a-712f3f519562", "sighting_of_ref": "indicator--64aa680f-7183-4905-aa1d-4a175cdc1303", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7efb6f0-9ce6-4326-8ff5-1c578d77169e", "sighting_of_ref": "indicator--605062c3-5449-43eb-a96a-833f273b2577", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7338e7cd-6da3-4504-89c6-3bcad4480d9e", "sighting_of_ref": "indicator--ed95db8e-b6af-48be-91ea-a13639863b18", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0941eac6-13d6-4944-bbc4-625a4e51f68c", "sighting_of_ref": "indicator--d2660561-6434-4124-bb97-902de9333da4", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13c3668e-9daf-42d7-81c6-02c857a7d682", "sighting_of_ref": "indicator--d2660561-6434-4124-bb97-902de9333da4", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--721ec0b4-780f-42fa-b2e5-94f21b429dcb", "sighting_of_ref": "indicator--d2660561-6434-4124-bb97-902de9333da4", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43cbad9b-378c-4f5f-82ff-b6cc2dab0692", "sighting_of_ref": "indicator--10677d4a-041d-459a-91a2-8faca61dd3a0", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f593e391-455b-4032-8890-91c8965511e5", "sighting_of_ref": "indicator--10677d4a-041d-459a-91a2-8faca61dd3a0", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6a1c238-4561-4122-8cfa-b07727f2cd8a", "sighting_of_ref": "indicator--10677d4a-041d-459a-91a2-8faca61dd3a0", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a64ba7dd-71a7-4f21-b67b-293e26332aae", "sighting_of_ref": "indicator--a04e9a8c-4913-4dbb-81f2-a268d720d4dc", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd799b92-9fb7-4140-a9d1-fd95fd525947", "sighting_of_ref": "indicator--57b2044d-a957-449f-8943-432d3eae1bf3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50c8e9dc-12e3-4391-a11c-677ca984a2ba", "sighting_of_ref": "indicator--2d1890db-7446-4a74-83ed-435e8f3aa853", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--230d14f7-bb3a-496f-a176-01071e5e10dd", "sighting_of_ref": "indicator--dd7eebfb-1e7f-473b-8370-6374c1a70fe6", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e25f897e-ac7d-49cd-bf84-dfac1dc5c184", "sighting_of_ref": "indicator--80f38931-03b4-4e12-9918-42516010a837", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ce36b38-d97b-4789-ae09-4c9ec15103da", "sighting_of_ref": "indicator--db310c18-ff43-4daf-a61b-348fed5a5003", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d342ad8-6080-4ffa-884b-79033ea433e7", "sighting_of_ref": "indicator--db310c18-ff43-4daf-a61b-348fed5a5003", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35b7ad3a-908d-4cf5-b66e-0c5b8d980be8", "sighting_of_ref": "indicator--db310c18-ff43-4daf-a61b-348fed5a5003", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--795d6d77-2503-4e92-a5a8-f3d7491190dc", "sighting_of_ref": "indicator--69f301dd-c34c-420b-ac19-79e9d971e5ad", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5227faf7-5f70-4239-9c6c-a9394542637b", "sighting_of_ref": "indicator--dabd9034-f1ae-42bb-b82f-9e9d28ba34e2", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0d2158e-762f-49fe-9375-3eea0e70c79a", "sighting_of_ref": "indicator--f0d481ad-c86f-4c6f-bce1-c964b5796b7f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc3e4506-4e0e-49d6-a071-98dfacee20a1", "sighting_of_ref": "indicator--a68c974f-2997-4f6d-b9b9-5cc1a2a78240", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da7bbb79-92c3-4204-84d7-66fce5a074d1", "sighting_of_ref": "indicator--3bba8da0-6aa6-464d-8cf2-2457cb9dd3fb", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--057a67f9-f436-42d5-9e63-ce2d771bab0b", "sighting_of_ref": "indicator--3bba8da0-6aa6-464d-8cf2-2457cb9dd3fb", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a08def38-cb6b-4562-aadb-7f1779947f34", "sighting_of_ref": "indicator--69181dc4-f47f-4a02-960f-003a0581dfe3", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e650f47b-2a5a-4a86-91a8-b268acf3c2d9", "sighting_of_ref": "indicator--a5dc37df-cd36-4d2d-af2e-f27d3a4074fc", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9226463f-ba17-4509-a904-8154fef86b62", "sighting_of_ref": "indicator--8c31e66e-bfff-4eaf-b918-215efa27708a", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36a1532a-e5d7-4f73-b335-5c3851176f58", "sighting_of_ref": "indicator--8c31e66e-bfff-4eaf-b918-215efa27708a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be4b5b38-779d-4075-8c36-a53cb82cab97", "sighting_of_ref": "indicator--a6ec0f9f-3ebf-457b-964d-3109a694ea56", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--456fb031-f817-4fec-96f8-39a5d37725b7", "sighting_of_ref": "indicator--4e961df1-0416-4329-8e57-3d9c8a346837", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8b9502f-7fdc-4037-8722-e28929469868", "sighting_of_ref": "indicator--b8686ec6-ad0b-47c6-bc38-c01514db6d9e", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e368f973-6ce8-4809-9f31-4bc0f52115a4", "sighting_of_ref": "indicator--016736ec-a650-4962-beea-c052fe6cf593", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4af14f8-1dd6-47cd-b56c-6291b612236b", "sighting_of_ref": "indicator--49a307bd-246f-4018-a711-00a0dd33a956", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89690ae6-723c-4a58-993d-520ede3a67f3", "sighting_of_ref": "indicator--be91217d-0b38-43f9-9ba6-f475dc658581", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5eca4bed-81dc-4df0-9bad-cdc260e8328d", "sighting_of_ref": "indicator--e67795d8-8a54-44ad-8317-87ca32719003", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f96f8a91-759c-4b53-a35f-884161f04bc3", "sighting_of_ref": "indicator--2173e61f-4179-4bd1-a154-a0eee1080cc5", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10183263-61bd-4326-9792-bbc1ecc904f6", "sighting_of_ref": "indicator--e70124d6-659c-4843-8854-787546ebe2d5", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb22ca13-c257-46c1-87c6-ab3645adf577", "sighting_of_ref": "indicator--e70124d6-659c-4843-8854-787546ebe2d5", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--766cfde3-8a1b-4ad7-b43f-8347b9bd5c29", "sighting_of_ref": "indicator--6e3d6a71-c895-4204-b660-f6233c8395a0", "where_sighted_refs": ["location--cc47317e-2c18-43a6-8938-dea748a56ad5"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be47a663-127f-4cd2-9809-042cf9223f79", "sighting_of_ref": "indicator--9ca502e5-7422-4c45-81c7-3a43aec2bb9e", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65412055-3850-4c86-8482-6cec9352eca3", "sighting_of_ref": "indicator--fa7dab69-3221-4ec8-84a2-d7e45113f86f", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6039eb3-87bb-48ae-9815-3f88df10e980", "sighting_of_ref": "indicator--fa7dab69-3221-4ec8-84a2-d7e45113f86f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d07c3191-6009-4d35-95a3-979b6ee0597a", "sighting_of_ref": "indicator--d8346f54-95f2-4f37-93a9-9cc1ac2c607e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cee24e6c-feb8-4388-93a0-3cc782e27a96", "sighting_of_ref": "indicator--d8346f54-95f2-4f37-93a9-9cc1ac2c607e", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a84b56ab-c3b2-465c-91e8-556a91abde8f", "sighting_of_ref": "indicator--39bb1392-222c-46b0-a7a2-6d2a97d8c959", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--068ccee3-899d-4ac8-9a4a-0c4d6bb37e58", "sighting_of_ref": "indicator--a79b5a83-1104-410f-ba5d-211568679c0f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3259404-77f5-4e0f-be15-652ecffe7864", "sighting_of_ref": "indicator--fa65329a-a239-44cf-99d2-bd19d3e22407", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c2f10f4-6aef-4d88-8299-6099629c16ce", "sighting_of_ref": "indicator--2ecc6fe5-1ed0-447d-a33f-87df45b41f55", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d940d28-ec83-4a28-a6f1-efa4c76f1fbd", "sighting_of_ref": "indicator--38fe799e-bc67-49c6-8e1e-0e9b729e9f75", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea6a1dee-3969-4a12-ae7f-8ee6015cf64c", "sighting_of_ref": "indicator--038ad175-4bb5-4d18-bbc3-e014b81401d4", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c343e84-73bb-4240-a05b-d168722fd9a1", "sighting_of_ref": "indicator--4b7bb92c-e122-4b55-84ef-a28dbbbf4138", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52bf39f6-ef04-4744-b9a1-43cff7fe930b", "sighting_of_ref": "indicator--dc24c164-f48a-4eaf-89b5-e576be71421d", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f8353ba-2a7e-4f57-99d6-eb1f4d1d29ba", "sighting_of_ref": "indicator--dc7298a4-0f99-452c-aaf1-6b4dae3b8219", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6352e29f-d1df-449d-a9db-423dfb51df62", "sighting_of_ref": "indicator--9d72ef01-0f16-4ce4-bd7b-d6ed50e981d0", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27928d96-c737-4dfb-8e51-92d7f260621b", "sighting_of_ref": "indicator--9d72ef01-0f16-4ce4-bd7b-d6ed50e981d0", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c041a1a1-4724-44a0-9529-b70c1c9532b1", "sighting_of_ref": "indicator--9d72ef01-0f16-4ce4-bd7b-d6ed50e981d0", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--874fbf48-da10-4bb5-8b6a-e8df5028872b", "sighting_of_ref": "indicator--abed8a93-1380-4309-91d3-95635955b764", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fd58acb-2ed0-4285-9a35-a8450914e983", "sighting_of_ref": "indicator--73d6b149-de0b-4ff6-b630-51ba5dc78fff", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--983694e4-f1d2-4952-ba12-169079a9ae07", "sighting_of_ref": "indicator--31e6a11a-f0f5-4723-bef0-48318dede447", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c268e95c-c9aa-4c6a-8a2c-860850457300", "sighting_of_ref": "indicator--31e6a11a-f0f5-4723-bef0-48318dede447", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee17181f-e062-42e3-9b69-41bcdffca52d", "sighting_of_ref": "indicator--95994874-a741-4dab-97d0-52891d1df538", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fbb5ec8-afef-4372-b486-beaf5d46c602", "sighting_of_ref": "indicator--95994874-a741-4dab-97d0-52891d1df538", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddc63ba0-eee9-4e71-a34c-5b3216b7f167", "sighting_of_ref": "indicator--95994874-a741-4dab-97d0-52891d1df538", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9917c2b-e465-44cb-a065-df09cf6311bf", "sighting_of_ref": "indicator--5d94bba2-0d1b-466e-bd83-0da824e5b446", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e89e48d-158e-47cf-a07e-9f075ee15d92", "sighting_of_ref": "indicator--94afc281-7e69-486f-8cb8-8a638fca068c", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe2458ee-55ef-4a98-9bd4-b10800cc2d31", "sighting_of_ref": "indicator--2d4e4f80-e454-4156-bdfc-c13f540d4e74", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80e89e49-3ecf-4f8b-a148-dfe90a17dbf1", "sighting_of_ref": "indicator--2d4e4f80-e454-4156-bdfc-c13f540d4e74", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f832c00-2dd0-49bc-a6da-1e7ecb915f2b", "sighting_of_ref": "indicator--f4867f85-d0a3-4c2c-a6ea-2fe7aaca6162", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbf76371-efa5-4d5e-be55-0086748271a3", "sighting_of_ref": "indicator--c2ee3e4a-de2d-42ea-ac2d-fd401ec28f4b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29af9f95-e325-4f20-8740-c5631cf63277", "sighting_of_ref": "indicator--9626e877-22b8-4e45-9f97-11ebf016f565", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4e1dbce-b483-417a-92f3-1016b713e465", "sighting_of_ref": "indicator--9822ba27-8da2-4e87-a287-a1427fe83b54", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04eef432-9c60-4b24-9b13-83e8c41f8b4e", "sighting_of_ref": "indicator--9822ba27-8da2-4e87-a287-a1427fe83b54", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fd226ba-df7b-4d0d-b0af-fd8132a001ce", "sighting_of_ref": "indicator--ddd19339-43a9-417f-b564-d7c20e86f88f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d62d944-f676-4ed3-89e9-79cfcc0af936", "sighting_of_ref": "indicator--ddd19339-43a9-417f-b564-d7c20e86f88f", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4ed8fb7-fe7c-4183-bc49-a359e68b45a8", "sighting_of_ref": "indicator--e911202b-3ec9-477f-92ac-415de693e397", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3abe2e04-6d14-4590-827c-d8352718a7c1", "sighting_of_ref": "indicator--e81b458b-c70e-4692-a1f7-34b9d866589a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4a16a3e-e10c-4418-83a9-272d8bcb4ffd", "sighting_of_ref": "indicator--78b76f7f-800a-49e3-9dc8-d8307606612d", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cdc6864-43e6-4c67-811a-39e0a6eb052a", "sighting_of_ref": "indicator--657fb6c0-0fe1-4873-b985-7d586f23e78e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3aae2dd-7b2d-4f56-b504-61f8de3ed756", "sighting_of_ref": "indicator--a80c90cf-3c19-4c7a-b5dd-fa8b48d8523f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f727af07-fad3-40c8-a6a4-7409927b90a3", "sighting_of_ref": "indicator--7e9fb149-1c8d-4c26-9f80-e5adc5bb0a81", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0002fb9-e824-4c64-9b43-d08625cb9b54", "sighting_of_ref": "indicator--fc7cab0b-6955-45bd-b769-6f9782480cb4", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--790332dc-49c1-4b9c-b0ef-56b49dfc175d", "sighting_of_ref": "indicator--9a339dde-768e-43b6-9e28-aa701f879d15", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f5532ba-80bb-4578-a047-9af1077b5be6", "sighting_of_ref": "indicator--8d0ebfc1-7119-4976-adbe-5933c0f963dc", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9524d2b2-6c0d-4d3e-8494-7d658f615f13", "sighting_of_ref": "indicator--8d0ebfc1-7119-4976-adbe-5933c0f963dc", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0821c1ec-fbf5-48a9-93e6-bc249e091f1f", "sighting_of_ref": "indicator--a00a8464-0f34-4317-b6be-6637f55923d8", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28f9286b-9e93-42e2-9bfe-48e5ea9bb345", "sighting_of_ref": "indicator--3b965390-81af-48ab-99f7-8f6de22806ac", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40cd1dcd-9e56-4482-930f-f080b2825a74", "sighting_of_ref": "indicator--d6cd1e0d-7ab5-44c4-b408-d6af718c5452", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18598be3-c73c-4769-ac6d-108d084affaf", "sighting_of_ref": "indicator--94719179-3a9d-41db-96b6-ed9802d27b5f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9b3e3e5-4ab9-4d39-97fd-551dd6cbfd01", "sighting_of_ref": "indicator--70a0b25c-768a-4f93-9ae6-daa84e30c5cd", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d167cf97-79fb-42c7-8793-2d95c6c0a3ab", "sighting_of_ref": "indicator--6fefcb49-c010-4d1c-b0ee-d5fec4d33462", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cd2888e-fff0-432b-85d7-240c2bc6ccd6", "sighting_of_ref": "indicator--239b46bd-948b-421f-a78a-746b1c2050a2", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c95f6cba-d5cb-4c7e-a639-9bef153e1eae", "sighting_of_ref": "indicator--314eb002-69ce-4921-b507-bd390d032e95", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff217c2f-e836-467e-a1c8-2d9b5216b512", "sighting_of_ref": "indicator--936741f2-ede9-4855-b3ce-cfbdb1dd2158", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5254c9fe-437f-4eb2-b476-f8f6f8260b2a", "sighting_of_ref": "indicator--c6216820-0329-4d73-a531-1d7d3ef12ac7", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b6dc69a-013b-4483-ae28-ef1b654773a8", "sighting_of_ref": "indicator--c6216820-0329-4d73-a531-1d7d3ef12ac7", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc21f8c9-a1ea-4ee4-8eb9-b1f5796fe2e8", "sighting_of_ref": "indicator--049d6f4c-9065-452e-9406-5cccd5744f5d", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db49168a-7176-4e47-895c-f8e04132f0f1", "sighting_of_ref": "indicator--15afc060-f728-4e09-8bb9-3a5cb7603dbc", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e27fcee2-5469-4378-b814-a2d42b1cd4f6", "sighting_of_ref": "indicator--85b51f8e-4a0a-46e0-a18b-765f00048fa7", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d68a4bb5-9883-4fcf-a84b-7e1342adb1c5", "sighting_of_ref": "indicator--4ae15d32-cd06-432a-bc52-be4721b1721a", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c371f57d-289f-43bb-aa29-afe4923cf0fc", "sighting_of_ref": "indicator--4ae15d32-cd06-432a-bc52-be4721b1721a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--792d9f7a-7382-4f49-82b9-a86486ac3a3d", "sighting_of_ref": "indicator--4ae15d32-cd06-432a-bc52-be4721b1721a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d83ee62f-87ee-4726-b2f1-e244315619f5", "sighting_of_ref": "indicator--6574763a-50ac-414e-babf-b264eed4ffe5", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72ead35f-d4b4-40e2-b21c-e88b63743512", "sighting_of_ref": "indicator--6574763a-50ac-414e-babf-b264eed4ffe5", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46e07cf9-30f9-4856-a066-a1c2393b87ab", "sighting_of_ref": "indicator--d38243cc-1a7b-4a5a-af30-a5c71d250ec5", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d73c2ef5-b304-45ad-8dc5-6d0010c85e52", "sighting_of_ref": "indicator--7815e53b-48a8-4685-bd0d-20bb00293596", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa0ea282-52aa-449a-befe-74c10020b702", "sighting_of_ref": "indicator--6680a021-e3b8-476d-8eed-b079421ec77b", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fb88cbb-a1a6-4cf7-8b32-6a579243f248", "sighting_of_ref": "indicator--6601e67b-175b-4094-a8d3-878b0e1eaf7b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d3f86b8-5146-4cb7-a7c5-1d6391fa10b1", "sighting_of_ref": "indicator--6601e67b-175b-4094-a8d3-878b0e1eaf7b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0dec6e7-dd5c-479b-a664-4326e8adf374", "sighting_of_ref": "indicator--61965327-68da-4700-90df-0c4d8a87eccd", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b28a357f-a498-4318-94c1-35ecc7ad49c7", "sighting_of_ref": "indicator--4db68013-dc39-4166-8dce-e9d8c4399d92", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67c47d10-9f84-45a2-9268-39f5f0e1545d", "sighting_of_ref": "indicator--4db68013-dc39-4166-8dce-e9d8c4399d92", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b349503-ff32-47d2-8225-78b76e10d13f", "sighting_of_ref": "indicator--24e90a30-06c4-4c6f-bec9-5324170ae7e2", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb5d6106-1dfd-42e5-a2f2-0e337dcc0dd9", "sighting_of_ref": "indicator--df429439-5c3a-491d-a337-5086656fd208", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4824ee1-589a-4cf3-9a41-55d529dda22f", "sighting_of_ref": "indicator--43394c3b-c6b2-4611-a04e-7010a75d7ef1", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23f3e98d-fe41-4b2e-b3c6-bb8c2d30c5aa", "sighting_of_ref": "indicator--6aef10b9-292c-447f-9af1-85e8a3c6cf5c", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--796f6813-dcf6-47f7-8ec4-157d4af0047d", "sighting_of_ref": "indicator--17f514f8-c5d7-47df-bfc0-1983f6cc7caf", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e74be2d8-f017-4d2d-86c9-344d64cf2d91", "sighting_of_ref": "indicator--17f514f8-c5d7-47df-bfc0-1983f6cc7caf", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--107a765f-f015-4d7b-acb5-6e7715e2a94c", "sighting_of_ref": "indicator--8f4b7f20-839c-4433-915b-f16048a61547", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8846dc5-96e4-450f-998e-1810d0aca083", "sighting_of_ref": "indicator--a14885f7-e51b-4694-9077-e86b77d75a57", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dd721fa-0c50-466b-a2aa-4f83362640c0", "sighting_of_ref": "indicator--b0152e3e-53b5-4aef-8416-1442bd4b4edd", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--525c52e8-3f9c-4ef8-bb10-a3f2751d368f", "sighting_of_ref": "indicator--3fca908e-e1f3-4355-813f-fb6c4bda48a8", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6010f99a-4447-458c-906e-33ff6b4cf960", "sighting_of_ref": "indicator--b32332c6-93f7-44b9-8483-d57c32dcd0cf", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a1a91ff-6514-447e-9cb6-65835d906953", "sighting_of_ref": "indicator--1b848f83-a107-4b20-b6bc-35dc10f1c64f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09179032-46c6-4627-b2eb-ee59b2b85f3b", "sighting_of_ref": "indicator--47f53af4-b322-40ac-8029-6dd1a6dd16fb", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2339f0e-1c1c-4778-a4dc-c85f28daba31", "sighting_of_ref": "indicator--4909f29c-c4d3-48d1-a43d-d561ce0979a6", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a83d1a7b-f229-4e84-b0ba-70899da08c3f", "sighting_of_ref": "indicator--771d8745-b734-484a-90be-f169d3c78057", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--506aebfa-158d-4848-a5a0-a547a30aa55d", "sighting_of_ref": "indicator--a1c435bd-3b4f-4de8-b433-4162afe10aba", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d8fa899-2c6f-45af-9f0d-c81581bc0db0", "sighting_of_ref": "indicator--5d9d3c09-ac56-4d9c-bfd7-2144bdbda578", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9779aa24-2034-4d35-81eb-0afca3942478", "sighting_of_ref": "indicator--bb2b87d2-e0f9-4270-9234-b8a77f9273de", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4fbc985-1185-46d2-8053-a04bced4eeb5", "sighting_of_ref": "indicator--0c505d4d-4170-471d-92a7-f321f2c3d0d5", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fad1700e-0f89-41bf-8506-96adf4789fe5", "sighting_of_ref": "indicator--f08ac8cd-4033-42a7-9a21-f17b31c1b52b", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88e23b99-c1ce-497b-979e-fdabe1d5fd6d", "sighting_of_ref": "indicator--f08ac8cd-4033-42a7-9a21-f17b31c1b52b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01e4e000-9310-493f-8a75-a558c76c623b", "sighting_of_ref": "indicator--61f45515-b3e9-4d7d-ad14-9d6d9f5224f5", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3263386-b38d-494d-a499-6f8dd5cae611", "sighting_of_ref": "indicator--2c18cbe5-d6bd-41fe-a9cb-99712f5cdca1", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ded3bcdb-0dc0-4e1c-9d96-2120b9b40633", "sighting_of_ref": "indicator--2c18cbe5-d6bd-41fe-a9cb-99712f5cdca1", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19d4a4d0-1300-45b6-9174-1eb2ef674297", "sighting_of_ref": "indicator--b2c86a02-7d02-4107-9565-fd6d83c90fef", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93261482-ab97-44e9-bd20-0fa858a1e186", "sighting_of_ref": "indicator--cab97672-2808-48a9-be81-8d03d7817c28", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--753c1112-93da-41fc-b3b3-e08f3c79a5df", "sighting_of_ref": "indicator--a0eb166c-acaf-42d7-ad71-c8c217d43459", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9120aee-0f1a-461d-8877-639ab4270cc3", "sighting_of_ref": "indicator--74d38082-93ed-421f-87ef-eaa00a210b7d", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ebba24b-4156-4608-b8e7-1f79cc7bc71d", "sighting_of_ref": "indicator--c058a119-67a6-417e-b3bd-b6d14dacddbd", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fabadcb-dda7-4204-ba56-ff87490db2fb", "sighting_of_ref": "indicator--e67b1291-6621-41ea-9d6a-2721cc9a96d2", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eff3663d-2e50-4d72-86b6-88f5d9daaddd", "sighting_of_ref": "indicator--a3de0a23-0683-4b5d-99c6-3cd2d6de0beb", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6293ab72-3cf1-48f8-b8b8-93ed27b3ed96", "sighting_of_ref": "indicator--dbb6a328-94fe-4d6d-a1de-1d5f9dbaf22d", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--282d5c93-2114-4b08-b616-10a10a4b120d", "sighting_of_ref": "indicator--1f975380-78b8-4aa3-9eff-58f1bd24a2fe", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e53036d9-7d66-4a7e-9bda-ca9bd89e76e0", "sighting_of_ref": "indicator--1f975380-78b8-4aa3-9eff-58f1bd24a2fe", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1220ff4f-8e83-4735-8cc7-880c575b9a70", "sighting_of_ref": "indicator--f10c0b38-2a5b-4445-9faf-71ad5d838551", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dc3c837-0aae-4591-a411-5053aeacc02e", "sighting_of_ref": "indicator--e6b29c4e-f14d-40f3-9bc9-cf4b671114c8", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9d6f998-deb7-41b0-8c95-743b04af54eb", "sighting_of_ref": "indicator--e24b70db-92b0-4425-97de-9d7d69f9d1b9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1451a233-f311-4f5b-b7a5-19dd815b03cf", "sighting_of_ref": "indicator--297a2faf-1318-4fbc-aac2-e92b5f71b882", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73c18a10-d5f5-4d96-9203-68004b9d36c0", "sighting_of_ref": "indicator--4c1adbc4-226d-4e58-8ad9-b4bc976ab7eb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99109f21-406c-44e1-9a90-c6c8d36df0e8", "sighting_of_ref": "indicator--876091d7-48a2-4d1c-8c74-093da9978487", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10c3ba8d-417a-4549-8f70-d56295bb65fc", "sighting_of_ref": "indicator--de49b476-004d-4690-adeb-fae3b0288aa8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b417dfe-a235-44a1-af88-83cd18060c5a", "sighting_of_ref": "indicator--006f15cd-b74f-440f-b23c-54ebf93aa2f3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ec5c2b0-ca6e-4284-96ff-2f9e98af3659", "sighting_of_ref": "indicator--dd4da796-0d61-479b-8356-440cfa20a870", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd8eb320-6384-4e49-8395-60134a30f252", "sighting_of_ref": "indicator--ae84f752-b6bc-407b-8bfc-b7ecfb23fafc", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abfbcd27-7822-4fdd-ae3c-e892c52216de", "sighting_of_ref": "indicator--66310356-aa67-425b-ae7a-f54cf559c7c3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66969502-1aa9-4143-b759-fb9979c6de7b", "sighting_of_ref": "indicator--500ffd8a-0a31-4b0a-b2a7-1179368e93a6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a971fa3-7cbf-4ae4-9b7b-5a4195f987aa", "sighting_of_ref": "indicator--7a1593db-fe48-4b16-9818-347a3acb7c8c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b52b16b9-ecf2-4835-a1c1-545aa274a24b", "sighting_of_ref": "indicator--40825302-ed98-41c6-88b7-b2ea0426d4ec", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2b0dd3d-0833-4fb9-a563-1ae932170ef9", "sighting_of_ref": "indicator--7c43c740-17e9-446a-86cf-e2e4f2a6964e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3789064d-8791-4c0a-8962-f0ce2bbaff79", "sighting_of_ref": "indicator--2847ca2c-db6c-492b-8dbb-6780e162cfce", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d057ff60-6e9f-48a2-95a7-b652c1b83d5f", "sighting_of_ref": "indicator--ed587856-6c17-4763-9df6-39f20808b374", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fe1fbeb-a52c-48f9-ad19-7a087abc1596", "sighting_of_ref": "indicator--8c25083b-c907-4176-bd0a-9efb658de218", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad4459db-89d5-49ff-b0ea-029989028155", "sighting_of_ref": "indicator--3cd29274-627c-4ad6-accc-50a8109e3c24", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb6bd974-d990-450b-8024-8cd6766751ac", "sighting_of_ref": "indicator--7c0d99ee-253e-40fa-ab15-08ae2435c54e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8aa482c6-411a-4739-b6d0-2a385c34eb59", "sighting_of_ref": "indicator--f65f9dbe-f752-499c-a669-f686a2ecda7a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66ba3475-ed3c-42f9-a8dd-e550f6c36823", "sighting_of_ref": "indicator--281743be-04d8-4f40-aea7-78ce7ca54318", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29d03d42-2399-427a-913e-6283f00d53dd", "sighting_of_ref": "indicator--b7c579be-e0d6-4e2c-99c6-249194a13c0a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2e5433e-636d-4621-b3e5-2d0cf1e92b20", "sighting_of_ref": "indicator--731babd0-af90-43f2-8dcb-97d5a6a0bb0e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aeb14c16-f5e7-4477-b486-6c4898005a6b", "sighting_of_ref": "indicator--b682e2d0-0c12-4591-a379-37bf3ff43fce", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e0fa83f-61eb-49ff-8890-9e041d5d33cc", "sighting_of_ref": "indicator--7b989f41-049c-4ed2-bf59-e1e55b10db67", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--650c0683-9c8e-48de-abda-8bc0b5e4c697", "sighting_of_ref": "indicator--ca16a94a-d3a2-4c4b-9dbb-679652a522b7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85b0ba9e-fd9d-425b-8eb5-53b41b124e73", "sighting_of_ref": "indicator--b304c410-3e4d-4e68-9d62-3f518cf6c0a9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e041c947-9540-49e2-8079-103485dc29bb", "sighting_of_ref": "indicator--b7264108-ec75-46af-8ca7-7c0e73f0f8fe", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30e8fdeb-90d2-4696-89a2-e464e959ffeb", "sighting_of_ref": "indicator--5a7ddb2b-e7b6-4c6d-8e0e-ad472982a198", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--323eb180-61d9-4538-b81e-6456805c4831", "sighting_of_ref": "indicator--2977731a-5a6c-4996-a1dc-50f1adb73abf", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--452367f2-822b-4c72-93dc-29d62352ec0b", "sighting_of_ref": "indicator--dc83578b-d812-4e96-ab4f-d4b8cc19cfea", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1d826cd-b5ac-4ab4-ab68-294a128cc5e5", "sighting_of_ref": "indicator--c14e36c3-e611-4731-a702-af8a9b23f13f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aba22847-6339-4c45-a7c3-505f32e24a51", "sighting_of_ref": "indicator--931472cd-440b-409c-a880-814adefb9247", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--651645ff-3948-428c-b6be-7044a2d18783", "sighting_of_ref": "indicator--57bbad93-db08-4042-b3b5-0aabc983f227", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c628039d-e9ff-4c9b-bcdf-900280b168ff", "sighting_of_ref": "indicator--d5ba3b21-1679-4b2f-b467-ae05febc0591", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29a9df36-aa8a-488a-b16a-04c63a27df00", "sighting_of_ref": "indicator--9d959b7f-d2d7-4c88-904d-1842b1b2749d", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49a1b6c2-6f3c-4d06-8b3f-b0ada4d525d4", "sighting_of_ref": "indicator--c73f3b4b-4b64-4452-a20a-c45e0ac9dd87", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cff8ed55-a137-471d-bc14-6cabffbf5abc", "sighting_of_ref": "indicator--8991ffec-7c2d-4bb2-b26c-897941d25e46", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d071f11-964e-4b90-ac3f-96daf6b323ae", "sighting_of_ref": "indicator--7080e6e1-1d9b-446b-9eaa-21e790f91e3f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f69205a-5910-4f3d-8a4a-519c3d6fdf77", "sighting_of_ref": "indicator--6795435a-7c8d-4f84-b85a-bd8c66b0585c", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f03330ad-9b24-4a5d-a406-bf68256f14d4", "sighting_of_ref": "indicator--446d09d4-8a50-47bd-8b5e-241a57bed5d3", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58e3512e-fbe4-4616-8111-5ef405e44e86", "sighting_of_ref": "indicator--62b7d5c7-e6db-411b-af23-4e24f51031d0", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--854d1b2b-4bb9-4797-a13d-19b0104c4c36", "sighting_of_ref": "indicator--1b693992-7e05-4b47-81bb-d4a0c8426146", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--986760c8-3c7a-4ffd-821b-b78c9d5b4839", "sighting_of_ref": "indicator--6cf33598-3d3e-413c-ba27-39d7e5a684e3", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21a07419-a94a-4d89-aaf9-0bbeb88e4f4c", "sighting_of_ref": "indicator--6d1ebad0-a893-4c70-b704-8a809952a13d", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0d896f5-231f-4de9-8ff5-4f49793b4d8d", "sighting_of_ref": "indicator--cbe62ae9-9c34-41d8-a330-d208bb8e1e1e", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dbd4560-4f7b-449b-b6ff-8a6d0b262767", "sighting_of_ref": "indicator--5e219731-88b8-430f-9181-f34b10c1afc6", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76aeb673-53c3-4e19-b926-a099e6cc1d71", "sighting_of_ref": "indicator--9e14ca19-2081-41be-847f-039f74d10bb7", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1af6990b-7174-4743-98ae-2bdc923d2c97", "sighting_of_ref": "indicator--457b376e-f813-47da-a373-83274312c9b2", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35e410ac-efa9-4f63-b581-d8f44f265198", "sighting_of_ref": "indicator--51fc8e6d-0c8c-41e5-be28-1a501c9b2824", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22fdacd1-f7df-4a9d-ba8a-b9ca0238b85f", "sighting_of_ref": "indicator--36b07b8a-30ee-4553-ab63-00ef8dad0c24", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b027f54-1220-4e5c-a247-8b1fcaacaaa0", "sighting_of_ref": "indicator--c77a49dc-c143-41a1-8d09-2a0e725e9556", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--561d2b1d-0ba3-497f-a9cc-63a61ecfbdc1", "sighting_of_ref": "indicator--32b3abc6-8776-4f39-a1b0-ade7eaaedd30", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97f0d3b0-75da-42e0-9802-19b9086c6e19", "sighting_of_ref": "indicator--edc7cb00-084e-48b9-834b-a75392811864", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d32e501-7199-4da4-abc9-00f77d9daa20", "sighting_of_ref": "indicator--63fd1c7c-9367-4445-8ab2-d7d88999fffa", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e9d50ed-2ae9-43a8-89cb-6b489d1a0c3d", "sighting_of_ref": "indicator--54ee7acb-a239-41ef-87d4-24de7ba3c0a7", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9be05fc-288f-4fc3-853c-c8a3bbbf629a", "sighting_of_ref": "indicator--391a92f3-20dc-4abf-b739-fd5391beb005", "where_sighted_refs": ["location--cc47317e-2c18-43a6-8938-dea748a56ad5"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f48ffe7a-8e43-4bf6-92bb-b82e9e816fe3", "sighting_of_ref": "indicator--ebee1a7e-6486-42c9-bf1d-9a3f63f93942", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29af3170-8fe0-4262-8140-08d0e4ac78e5", "sighting_of_ref": "indicator--0ed486e4-4bed-41f0-9734-9c0241b8411e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca167f2e-cb83-4c5a-becc-2fe2db239740", "sighting_of_ref": "indicator--eab0fd3b-2e14-434b-87ac-d655cc128113", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4639e75f-5590-4ffd-b0b9-0797399121f7", "sighting_of_ref": "indicator--09cbc706-2cba-43c1-9b9a-fe2db74f1c47", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73bd44f2-9465-4730-a8a2-a95fd67490d4", "sighting_of_ref": "indicator--92ad5fc9-30db-4706-977f-665ace0fe7f8", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef2d20ac-cb33-463d-b83b-c3cb09fd24ad", "sighting_of_ref": "indicator--70c64525-f594-49e3-b9ba-bf01381a0ab8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2768c8ab-9e2e-4274-b474-5ea9cfcdf930", "sighting_of_ref": "indicator--99b43fc7-d6e5-463b-bf73-2e9c724c5698", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68669b21-7c21-4672-a003-a67621c1e49c", "sighting_of_ref": "indicator--23245b08-e4d9-4236-acfb-599ece491bbb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d409293e-efd8-4a48-9d2a-14db54196429", "sighting_of_ref": "indicator--dc5c87f0-da18-4056-b141-0b82a30656aa", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f29fda9c-ea33-4b0e-a21c-0a432f9e5386", "sighting_of_ref": "indicator--dc5c87f0-da18-4056-b141-0b82a30656aa", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b56485f7-a254-43b1-914c-af9e61e1cc92", "sighting_of_ref": "indicator--16e13496-2c58-45e2-a61f-c0988fc6edd4", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b141ea4-627b-4153-a77f-41b251e095d5", "sighting_of_ref": "indicator--53f95f11-a409-4a4c-acca-5844368ee5fb", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aeab70e3-f41b-4f7d-a40d-0e22594611b9", "sighting_of_ref": "indicator--5bb440f3-4ac5-45ff-a474-fa6f03925c6d", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2499a693-fcd4-4459-8e5e-b35c1b5a7c1d", "sighting_of_ref": "indicator--cb0184c3-c18e-4412-b55b-777956d66793", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1297148-11c3-4755-b638-ff1e522c25da", "sighting_of_ref": "indicator--228364d0-0bda-45ca-9ebc-3af02c734a4b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d75483b-4ead-41a8-aa10-047abfd81a38", "sighting_of_ref": "indicator--eff52cb8-3d9e-411a-9a44-24cad4fa2777", "where_sighted_refs": ["location--cc47317e-2c18-43a6-8938-dea748a56ad5"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b8067ba-414d-43e9-95e9-fa923a6eefa2", "sighting_of_ref": "indicator--a7b3550b-6cab-48c1-aaf5-216477f3b4ca", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5eda3fe9-6fe8-4b73-8799-1870f6c59dde", "sighting_of_ref": "indicator--0aa2962f-396f-4a52-9671-13690b51bc73", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--186f6ff8-d949-47de-b9e6-69cfbf17942d", "sighting_of_ref": "indicator--26cd80b4-5fbf-4e68-bae6-d3b66b45be68", "where_sighted_refs": ["location--cc47317e-2c18-43a6-8938-dea748a56ad5"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c965777-b46c-4e4b-bc6d-ed7fb3a9f588", "sighting_of_ref": "indicator--9e67289d-a88f-4f82-a988-715341872929", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--579b2cb5-8a80-4b2d-8d63-d413a0070aed", "sighting_of_ref": "indicator--d2f28963-504e-4a48-954b-ea941ae9ba29", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--349e9333-b3dc-4f35-8737-7d5b7f235169", "sighting_of_ref": "indicator--2c8dc0b4-82cf-4bed-8dd2-f6fdf8f61f84", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a66081f0-4ba1-4d21-b4cd-65c8d15a382c", "sighting_of_ref": "indicator--2c8dc0b4-82cf-4bed-8dd2-f6fdf8f61f84", "where_sighted_refs": ["location--cc47317e-2c18-43a6-8938-dea748a56ad5"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac641cc6-70d6-4d69-be66-ad0551c14a14", "sighting_of_ref": "indicator--0234db90-75ec-4015-8a92-72f249af9ad3", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2128771d-055f-4629-894e-9a1d099c90b6", "sighting_of_ref": "indicator--dc1edc9f-d839-4c72-813f-30fccb578386", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf5f1845-059b-481e-814e-2b9cb5d0a588", "sighting_of_ref": "indicator--14078246-209a-4262-af9d-3b916390823e", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6148951-9310-4a45-8eee-13b46c1c2c8d", "sighting_of_ref": "indicator--303ebca5-4a0c-49ed-a0fb-65549439c2b4", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5894c99-0846-4a7a-9ca7-b744e86f22b3", "sighting_of_ref": "indicator--91ead1d8-f2b9-411a-834b-bff21ca3ad37", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9970bb0-c51e-4513-afdd-207529669876", "sighting_of_ref": "indicator--071fe026-3699-4644-8184-b136f601e580", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6750d0b2-7ce8-4e88-9fc2-17cc4b4070e9", "sighting_of_ref": "indicator--bf10f6fa-9207-4d30-b566-42a1f2240b02", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69d8f9ec-00be-481a-8155-060186bbc721", "sighting_of_ref": "indicator--bf1d744d-04fb-480a-8199-a1df0184f367", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02a8d6ab-1813-4600-8cf3-54b48a4b3d39", "sighting_of_ref": "indicator--e3bc11c0-34d4-4dae-a8fd-2a69f7355577", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96d61554-298c-41d8-b6a9-8070d359ce5a", "sighting_of_ref": "indicator--4c945601-5423-469b-b9e1-a13d3c4c9607", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1a551fc-c9aa-4553-9b2d-9cb226e74b37", "sighting_of_ref": "indicator--b89ddbe9-128f-470a-ae75-459270e6d473", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--deceaa4b-a10c-4417-8daa-0d865c83e94e", "sighting_of_ref": "indicator--50f7ea95-ebd0-4961-8aed-937657e49c0b", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8802b40c-50ef-4e67-b96b-411fa1b6a4c2", "sighting_of_ref": "indicator--4181c266-2944-46f6-a7aa-8b98aab6f113", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8873f291-4bfc-49db-b3f4-2766c7858dba", "sighting_of_ref": "indicator--875667c2-0e4d-4936-b6e3-d143f6b71c9d", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3eb8c7ca-60a3-4775-870c-2111e296e4d2", "sighting_of_ref": "indicator--07652ffa-a20a-42f4-a079-f9bfb634e3e3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83bfeea9-b284-4694-9ab8-14915fceecc4", "sighting_of_ref": "indicator--aa31cff6-2a95-4afd-8c94-89cc4101f853", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45b9a700-00f3-40aa-8eae-34ea08d4d622", "sighting_of_ref": "indicator--daeae8d2-a3ab-445f-92bf-3ba9fdc192f8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66f8d709-0ec0-4da1-bcb0-899102548e51", "sighting_of_ref": "indicator--ad436c4a-aa77-46e6-9885-f2676e4e35a5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bc26b90-bbca-4c43-a570-f7dec05f0a1c", "sighting_of_ref": "indicator--ee86f398-e889-4727-91e3-b44040faa912", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9021209f-6b95-4281-a3fa-f979c247e35d", "sighting_of_ref": "indicator--f31bdcfe-1b6f-47c8-964d-6b465dd6f21e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b8b5350-7fea-4a6a-9b2e-db3c95613f8e", "sighting_of_ref": "indicator--484b5253-f93e-4a35-a785-c6792c9507e7", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdac3a60-739d-47bc-9467-9d9e56748c71", "sighting_of_ref": "indicator--a988aa12-3166-48db-9594-31acb0ff1325", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebfdc8f5-e3c1-466f-9538-1e013b09e257", "sighting_of_ref": "indicator--e53f84de-aed1-4939-af9c-0071cc83750a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a29a5c61-f73d-4037-9e60-3f1c38a27576", "sighting_of_ref": "indicator--e53f84de-aed1-4939-af9c-0071cc83750a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdc3cfce-ddae-4b8c-9058-2628d61d8cb2", "sighting_of_ref": "indicator--ad49ba5f-ec6c-47c1-80c7-420978c9e6d5", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6797a89f-a9e6-4945-8208-041873ad9f9c", "sighting_of_ref": "indicator--1e54cc27-6f14-4c9e-96d1-654730ef79c9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ce15dcc-130f-492d-97a6-ea246eec9dd1", "sighting_of_ref": "indicator--9aba29a3-392e-4e47-944c-4ce1b59d6bda", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19abc3ad-2f1c-4c28-9391-47bef81a320c", "sighting_of_ref": "indicator--9f8931c5-092d-4c49-b84c-7e594393ac6d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--467be6ab-f517-4424-b6aa-fb7e039e9372", "sighting_of_ref": "indicator--1ec35ad9-eb11-49c0-bf23-0365c0ea61f8", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5625cda-9209-4655-be16-ba9c47e6cf0f", "sighting_of_ref": "indicator--1ec35ad9-eb11-49c0-bf23-0365c0ea61f8", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93a0faa3-0b8a-498d-a1c4-464aa95e232f", "sighting_of_ref": "indicator--6a9b3ee5-a1dd-48c0-92da-00fb42ac443e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cafe0e8b-eac2-49d1-8c1e-709a87832a58", "sighting_of_ref": "indicator--6a9b3ee5-a1dd-48c0-92da-00fb42ac443e", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cc3e01b-5c88-423a-a02a-f0ffa0efec8b", "sighting_of_ref": "indicator--43b44691-0105-4592-a4d0-d1f4df0d826a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d68a1f2-033f-44fa-99aa-51ff5bb41140", "sighting_of_ref": "indicator--43b44691-0105-4592-a4d0-d1f4df0d826a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de2c3ed9-d38f-406f-a624-cc5ca7c69c3d", "sighting_of_ref": "indicator--cfb89830-8c8c-42a2-879e-a2c12f797fdd", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95e8c8ba-0ab7-451e-bd4e-9ec6acdf70a5", "sighting_of_ref": "indicator--49622423-b2e4-4554-8079-f66fa585bd36", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--721062b6-0b4f-4d73-a963-2c2e2e6ca42a", "sighting_of_ref": "indicator--a440d0aa-0b09-48a4-896d-26e1e1918a45", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0074b97-b619-4581-a715-6afda22a104c", "sighting_of_ref": "indicator--4bcc249c-f1d2-41ea-a3fe-4a847ce99cd7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bbcacc8-f76c-42c8-8352-5925dfe0b3df", "sighting_of_ref": "indicator--bc25b48e-ba10-4dbf-bd2d-2e5e06cc63ca", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8285bfab-0ee4-480c-9e20-fff6ae7ec11d", "sighting_of_ref": "indicator--bc25b48e-ba10-4dbf-bd2d-2e5e06cc63ca", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d87d91d-48d9-42b3-ace7-53ee5cdca4ee", "sighting_of_ref": "indicator--29303a9b-c6bd-4bcf-8e1f-fb1da5e94477", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50f1ab93-4588-416c-96a5-70d2839c637f", "sighting_of_ref": "indicator--9d7038b8-2d3b-41c5-ba5c-029a98f786d8", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54e5a3d9-8fa6-471d-b337-7325f342a9f7", "sighting_of_ref": "indicator--946fe0fa-a356-4eab-8d4e-e1c6fdf4ae31", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bfac6f2-48c8-4832-a647-6b67a49be634", "sighting_of_ref": "indicator--accc1579-b175-475e-bf24-a60574b86600", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ab4e173-c67d-4093-bbbb-eff9a2837eb4", "sighting_of_ref": "indicator--702283dc-98bb-42a8-91fa-7193b27d855d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6689c5b4-99e5-4cca-b95b-3b9935f249d5", "sighting_of_ref": "indicator--7f08513d-7662-4988-a089-ca42f90811e0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32116234-d7ab-423c-940d-7c5e58b9b47f", "sighting_of_ref": "indicator--96416f68-f55d-4ffb-9b53-191ea107f23d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7431c942-a93f-46b8-adb2-f74d23e827e6", "sighting_of_ref": "indicator--d686f394-6f90-4f71-afd5-f07db7d7dd18", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44020b86-3e38-4d6e-b45e-3768a5009927", "sighting_of_ref": "indicator--7a8d7050-8acc-4ab6-8729-8a46d99aa385", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58e63755-4d7f-401f-a433-082998aba3ba", "sighting_of_ref": "indicator--7a8d7050-8acc-4ab6-8729-8a46d99aa385", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--259d2346-ff9a-44f3-b575-bae84b090436", "sighting_of_ref": "indicator--536f0df5-1cea-4986-9d5d-4db0f60d9c8f", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c24c3b6-5df5-4924-8fc6-d68c96df8f3b", "sighting_of_ref": "indicator--536f0df5-1cea-4986-9d5d-4db0f60d9c8f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad931362-f96c-4e9b-a53e-20101ebd2a76", "sighting_of_ref": "indicator--b06cea25-d3a8-4d00-9f63-943eab4ab46d", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4228f3d-a42c-4dad-aa44-ee2f3c25d529", "sighting_of_ref": "indicator--b06cea25-d3a8-4d00-9f63-943eab4ab46d", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b060790a-abac-43c5-848e-ff8f0b3b0d2c", "sighting_of_ref": "indicator--b06cea25-d3a8-4d00-9f63-943eab4ab46d", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac016783-b137-45bc-be98-e0cbaf22b26e", "sighting_of_ref": "indicator--5bb2b9e0-1814-4c30-8a2e-06f5c4455193", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9ae65c6-9602-4c37-9238-e9036f12d953", "sighting_of_ref": "indicator--5bb2b9e0-1814-4c30-8a2e-06f5c4455193", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4b11fb3-1b93-4b64-8399-db79786f806c", "sighting_of_ref": "indicator--5bb2b9e0-1814-4c30-8a2e-06f5c4455193", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0f14da2-f5db-4272-89bf-d0768544f735", "sighting_of_ref": "indicator--e404976f-e669-4650-b4c9-e5630b828006", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2a35fa8-7222-476f-b868-164d9d75be76", "sighting_of_ref": "indicator--e404976f-e669-4650-b4c9-e5630b828006", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9e8b6c2-6924-4bbc-aaad-d39fc1d5bb7c", "sighting_of_ref": "indicator--e404976f-e669-4650-b4c9-e5630b828006", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b07707ad-d543-4277-b8c4-ac33b08c01b1", "sighting_of_ref": "indicator--fbc3782c-9ec0-462c-83e2-35ed6e303733", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0776ce7b-9416-4d89-a6e1-cb960053fd40", "sighting_of_ref": "indicator--fbc3782c-9ec0-462c-83e2-35ed6e303733", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00e38737-76fb-4271-ac5f-0fa4feb9a8a5", "sighting_of_ref": "indicator--fbc3782c-9ec0-462c-83e2-35ed6e303733", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cdd1ba4-2c25-49bd-b607-080f2ef7fac9", "sighting_of_ref": "indicator--7211882e-651a-45cc-b066-f566df29c9f3", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1e18ac8-c695-4c9b-be9b-97623397f2af", "sighting_of_ref": "indicator--5813dcde-87f7-455a-9516-520a6ce66917", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58435fe9-a4f5-441b-b7ae-558f43f4f901", "sighting_of_ref": "indicator--95c82085-dc53-464a-b983-93f5af924902", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e997111c-6c39-4a38-bd07-a88a61167ecd", "sighting_of_ref": "indicator--1a8615ed-3a30-44c8-b412-4bdc413ec586", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2aeb0e80-c026-434f-9575-5663d3c026b0", "sighting_of_ref": "indicator--86d4801d-e1d4-4b1d-aaf2-2c4a307dcdda", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ef8cc0b-be8e-43d4-8ad0-4b4b5c4efac6", "sighting_of_ref": "indicator--854758f9-641b-4ce8-aa4f-10a1dbb7b9e2", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04a06d3f-1a80-4818-b926-efadef26ec4d", "sighting_of_ref": "indicator--40815123-a6b2-4de3-b53a-f37aa8b43a2c", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2df87e0a-56aa-4a98-8d1b-9ac903e5fb8d", "sighting_of_ref": "indicator--ff48b2cd-593f-4887-84a3-b8cfb60b626f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--915186e2-6bdf-4e80-9798-2a8dc2cae07f", "sighting_of_ref": "indicator--e6ed21f5-0a9a-4b8c-8cc4-2a7437379a20", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e597e98-cc46-48fb-94a9-7c056fb1f6cc", "sighting_of_ref": "indicator--d85f2fcf-85be-43a7-ae36-ccc9d49237a0", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc871d7a-1eb7-4abb-bac4-52554a7cb685", "sighting_of_ref": "indicator--4634a8de-c8b3-4614-8ca2-52ade4906e81", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c1f6bc7-3317-4d5c-9be4-6237bb77164c", "sighting_of_ref": "indicator--f22cb5eb-444a-4f96-92a6-0057ddba0f89", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4be56b1-f82f-42fa-ac58-be43af86d64b", "sighting_of_ref": "indicator--75a5d02c-555f-4e19-a34f-164e9da47515", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a25f58f8-fc40-45f8-9154-444a929d3dc0", "sighting_of_ref": "indicator--4e60d9f1-23aa-471d-a1db-9ead7b886a98", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bb4c13a-77aa-4f1c-9100-1059da73692e", "sighting_of_ref": "indicator--42ba5990-4272-49b0-a60c-f2013716cdfc", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e97b9e33-6245-4d70-93ae-4f55df6cc6e7", "sighting_of_ref": "indicator--b9667c81-2640-4737-897b-790e089f9490", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afc6209b-eb20-4d30-b777-5ef0f4a3a53d", "sighting_of_ref": "indicator--50f16f6e-1103-43ff-b9e6-edbc119c5065", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5941303-ba30-43c2-9f89-3c71b1380834", "sighting_of_ref": "indicator--c5be8005-3e5c-4947-944a-ba08d880d3cb", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69d5ac11-97b5-47df-a64c-4f011fd10fb2", "sighting_of_ref": "indicator--a83caf4a-d0fa-4bce-b960-b72a7c84ac11", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a7c05a8-e570-4dd4-8e5c-8b58adfd0324", "sighting_of_ref": "indicator--682df294-5382-4b9e-a091-a09b04a9972f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f40eb44e-4b21-4bf2-a8ca-8a91e11258f0", "sighting_of_ref": "indicator--161e5f87-227c-48e6-ae81-0cc535e74fef", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--074706e6-9152-4269-a757-4846906152ae", "sighting_of_ref": "indicator--cf18b02a-34e5-4033-83b3-0cb10544c5ed", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d197e2f-21ff-4a11-856d-30c5730b01f0", "sighting_of_ref": "indicator--4c2f28cd-3b0c-4bd9-8d53-fd6627d38bd5", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4c22cd1-8f73-4ab8-ab41-cdc46f3c5a77", "sighting_of_ref": "indicator--15841ffd-f7d1-4bc2-ba4f-84110e595db9", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65ca8cab-2af8-40d4-8dc2-b7ced87cb013", "sighting_of_ref": "indicator--043bef64-5187-483f-9d47-e8bb68347349", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d35fb56a-ee47-43a3-ae6f-6955249d0c68", "sighting_of_ref": "indicator--7c0bee70-b2da-4018-bd4f-8c362d500e04", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c214c984-0b80-4267-9e2f-acdae80ab7f9", "sighting_of_ref": "indicator--50088535-43b1-4d9b-81a6-8e25962d582d", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c8255d5-19db-4e3b-bd23-54bc23c96f1f", "sighting_of_ref": "indicator--ea4bc88c-ecea-4f47-ade3-e8fdcc035e48", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61851acb-37d5-47dc-af38-2cd5f1fcbdb1", "sighting_of_ref": "indicator--ec48c2bb-4add-4d6b-8221-09e1a27f4baa", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3279235-7069-44ba-92c6-d0cf7251e4ed", "sighting_of_ref": "indicator--ec48c2bb-4add-4d6b-8221-09e1a27f4baa", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e033d36-f171-4699-b3c3-deebdfbc022f", "sighting_of_ref": "indicator--7caaca9b-3bcb-45d4-885a-2376880e61be", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5e648c8-31a7-4233-8f53-fc542bfb223f", "sighting_of_ref": "indicator--760d8e0a-7249-4655-aaf4-0dda6c4748dd", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d98b6b8-1b6e-40c3-b4e4-2bd766e1f709", "sighting_of_ref": "indicator--fd882b28-dc57-4b3d-93eb-8cd19cf7afed", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4263494-30f1-4b04-b315-970d22cebfa6", "sighting_of_ref": "indicator--c8f537f7-a687-4f4a-81ed-af46b53c68fb", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--365c52cc-4473-4587-97b2-f264a68bd00b", "sighting_of_ref": "indicator--c8f537f7-a687-4f4a-81ed-af46b53c68fb", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--422634e5-8f8d-4ea0-8de7-6f975196404c", "sighting_of_ref": "indicator--2136d757-1b98-4c26-b40c-699279181092", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--363582eb-0d5e-46b5-b8c9-8cd77993c52c", "sighting_of_ref": "indicator--5ddc4d86-65a7-4545-8823-d52860da6fab", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--865d2844-9073-4434-ade9-90e4a808dc93", "sighting_of_ref": "indicator--5d581f34-dfa3-4d68-8b0b-653aa405dfdb", "where_sighted_refs": ["location--cc47317e-2c18-43a6-8938-dea748a56ad5"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f950306-a226-409c-a57b-4ac5a6b18844", "sighting_of_ref": "indicator--e185bad6-b587-4cd6-aa5a-000daa71d1bd", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5918a70-9a26-4e02-bf29-4607c5dfe22c", "sighting_of_ref": "indicator--e2292530-02c4-455f-9896-a65789fc5cd2", "where_sighted_refs": ["location--cc47317e-2c18-43a6-8938-dea748a56ad5"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b6f37f5-b696-400b-8f2b-10c1c8a698c6", "sighting_of_ref": "indicator--0c725d22-7248-41f2-9ac6-d4c70cd15d41", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d4cbc2d-d134-4d28-a8e4-9911cf56a9af", "sighting_of_ref": "indicator--0c725d22-7248-41f2-9ac6-d4c70cd15d41", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d863016-52b5-4c6d-badb-47b67a11d5e6", "sighting_of_ref": "indicator--a865db93-2125-4fee-9629-5871d857a8a5", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9459550d-a802-4da7-b534-cd5f5d856486", "sighting_of_ref": "indicator--3b574ba1-fb9e-4b9b-a09e-32689be58271", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--759a35b9-0c8d-42aa-acd5-ab08f5fa5c67", "sighting_of_ref": "indicator--dd021409-f158-414d-beec-65cc816d2620", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e64c32d-3b6c-4a85-8b76-c9029b02b988", "sighting_of_ref": "indicator--6b356d5f-2af4-4a16-b16a-e91ecc23ac21", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4e12f48-503e-47ae-aed1-684c288bdd51", "sighting_of_ref": "indicator--5e7a7a72-459c-42fd-9816-a9c36d0c471b", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e934b9e8-b144-406d-855c-e083de3458b5", "sighting_of_ref": "indicator--f9a87fca-0763-4e7b-b382-2b585b9aadf8", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4bda2ae-724d-446d-9d28-303bd2223bd1", "sighting_of_ref": "indicator--58275377-2e02-4e90-be49-968ac3de71fd", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e31b199-619a-4027-8653-a927790fd2a3", "sighting_of_ref": "indicator--6fa85acc-2a8b-4785-b415-33a9be903237", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--578ec1ec-2eb3-4475-b042-8c0bf01cf2cb", "sighting_of_ref": "indicator--c45955d6-bf78-4f6d-8f6a-04f2e49b1b93", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc82d6ae-3c4d-4e6f-87c2-2a1741ce7b7c", "sighting_of_ref": "indicator--c5962a10-3609-45ce-a370-45b5cb5f7a58", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--273eecf9-e552-4413-9111-d8e33876a6cb", "sighting_of_ref": "indicator--1aa32c8a-a9e3-4e13-ad94-3287be3fc661", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95120680-064b-49c1-aa2a-52181a57901d", "sighting_of_ref": "indicator--1aa32c8a-a9e3-4e13-ad94-3287be3fc661", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6627e50-e727-48cf-acde-6ac04da4b5da", "sighting_of_ref": "indicator--1aa32c8a-a9e3-4e13-ad94-3287be3fc661", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7aee00b6-81dd-4a2f-bb3b-5770e2190ae1", "sighting_of_ref": "indicator--2df88089-64ad-4b58-9b26-2dcf6d155a4a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4644ba89-b2ea-4222-aae1-fc59e2cf60a1", "sighting_of_ref": "indicator--2df88089-64ad-4b58-9b26-2dcf6d155a4a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--670d06a1-ad41-4f5c-a82a-ac3bfc07716e", "sighting_of_ref": "indicator--ac56bb99-f72e-44f9-aea1-c399b8cc7d24", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ad18d7d-af09-4884-a8a8-16e5805b847d", "sighting_of_ref": "indicator--ac56bb99-f72e-44f9-aea1-c399b8cc7d24", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--354ff941-59e5-480f-9cc7-62e0d620e0fa", "sighting_of_ref": "indicator--ac56bb99-f72e-44f9-aea1-c399b8cc7d24", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--881488f5-c572-4e1e-aee1-3220d353fbcd", "sighting_of_ref": "indicator--f90c47a3-f9da-4b61-a05d-b62bc31a1a1a", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c143e12-bf97-45ad-91c5-63b1c3875223", "sighting_of_ref": "indicator--f90c47a3-f9da-4b61-a05d-b62bc31a1a1a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc9467a8-ab9c-480b-8849-388fc4cca5d3", "sighting_of_ref": "indicator--f90c47a3-f9da-4b61-a05d-b62bc31a1a1a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df4c7064-9444-469a-8e15-8eb5ef849499", "sighting_of_ref": "indicator--57553a12-c295-473e-9fd7-9d3e9b73355f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd3d51dd-350c-4713-b4cd-6d0b303ea75d", "sighting_of_ref": "indicator--57553a12-c295-473e-9fd7-9d3e9b73355f", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af21c8c0-d543-42a5-ac9a-5d1f9bb5fa3c", "sighting_of_ref": "indicator--57553a12-c295-473e-9fd7-9d3e9b73355f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d6d80db-c14a-4cc6-b12e-7f13ce066c64", "sighting_of_ref": "indicator--5fe13371-955b-440a-b402-01108864375e", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b229650b-3241-4a65-8469-2d8ad0b5b7e4", "sighting_of_ref": "indicator--5fe13371-955b-440a-b402-01108864375e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c455536a-f934-46d2-bc5c-ce0a5de3796b", "sighting_of_ref": "indicator--5fe13371-955b-440a-b402-01108864375e", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e8196db-a5e8-435b-8959-0ea08b692922", "sighting_of_ref": "indicator--a2648373-6ab0-43c1-bb27-8e8e1a7f9e62", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41cf3d91-0de8-4eaf-9e19-f9145f3c8f70", "sighting_of_ref": "indicator--a2648373-6ab0-43c1-bb27-8e8e1a7f9e62", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cf1309d-3cc1-4d5d-b68c-8a3848992957", "sighting_of_ref": "indicator--a2648373-6ab0-43c1-bb27-8e8e1a7f9e62", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac0f6305-f3d8-4749-b38b-977a4c82edc7", "sighting_of_ref": "indicator--6eecfb69-ca24-4281-8cc0-6f77382c7b7a", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--087b7889-cefb-400b-8854-21a236ed6c0f", "sighting_of_ref": "indicator--6eecfb69-ca24-4281-8cc0-6f77382c7b7a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--320657f3-36f7-4b95-9f98-ebd3ca5132ba", "sighting_of_ref": "indicator--6eecfb69-ca24-4281-8cc0-6f77382c7b7a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--835f80e2-5458-4d28-82aa-ad42777d9c0c", "sighting_of_ref": "indicator--ce63c82c-392b-4bc0-9175-c56298be7954", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eddeaea0-6730-4a13-8b5e-cde3761e81e9", "sighting_of_ref": "indicator--ce63c82c-392b-4bc0-9175-c56298be7954", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5d1992b-07b4-4675-83fe-73c55b8e4278", "sighting_of_ref": "indicator--ce63c82c-392b-4bc0-9175-c56298be7954", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d4d36ac-db63-455b-82b4-f704f12db9c5", "sighting_of_ref": "indicator--59a7a587-9341-494f-95d9-e2c0ad3114ba", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3057196-773a-4b4f-82f9-a563c62ab41f", "sighting_of_ref": "indicator--59a7a587-9341-494f-95d9-e2c0ad3114ba", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd229e61-5b08-416f-8711-7c598660247d", "sighting_of_ref": "indicator--03dcc6c6-fec8-4f25-a93b-ed292df6856b", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65102793-d63f-4e4c-8d7e-6360307e882d", "sighting_of_ref": "indicator--03dcc6c6-fec8-4f25-a93b-ed292df6856b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9f8cd49-6310-4220-bab6-80e94a349c5a", "sighting_of_ref": "indicator--03dcc6c6-fec8-4f25-a93b-ed292df6856b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0affe891-d020-4fbc-b951-fdb8135d4bbd", "sighting_of_ref": "indicator--e9171bae-7ca6-4d51-a3ec-eee2d18c7d26", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26bba2f9-0540-4405-83b2-f8a0a2e5d519", "sighting_of_ref": "indicator--e9171bae-7ca6-4d51-a3ec-eee2d18c7d26", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e610fd08-a5e1-41b4-ae75-d27e532af22b", "sighting_of_ref": "indicator--e9171bae-7ca6-4d51-a3ec-eee2d18c7d26", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25b3ea50-0f53-4a0a-876f-42795baaa9bf", "sighting_of_ref": "indicator--f4c881f2-12c2-467c-96b5-d35a480018bf", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1a826ae-cc8e-477e-81b3-e5e2a4c79280", "sighting_of_ref": "indicator--f4c881f2-12c2-467c-96b5-d35a480018bf", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--075343f9-0900-43a8-b2b4-9ea6c14a1e4c", "sighting_of_ref": "indicator--f4c881f2-12c2-467c-96b5-d35a480018bf", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42e3bdcc-98a8-4b1b-9694-c0aee1e9bc48", "sighting_of_ref": "indicator--b7e03177-412b-4863-8efd-44f1bd710984", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d48ce82-72da-4ee6-9032-3a4e668b5767", "sighting_of_ref": "indicator--b7e03177-412b-4863-8efd-44f1bd710984", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87a27723-7f2b-4023-a124-263d174fe690", "sighting_of_ref": "indicator--b7e03177-412b-4863-8efd-44f1bd710984", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3477ce8a-cf9b-4952-b350-f226a9d12069", "sighting_of_ref": "indicator--3370f805-824c-456f-9699-1ab36a8b0994", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97932603-52b2-44ed-860d-5891a197a0ae", "sighting_of_ref": "indicator--3370f805-824c-456f-9699-1ab36a8b0994", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6274a949-61ab-4e7a-8ad0-b27bc4c694d8", "sighting_of_ref": "indicator--3370f805-824c-456f-9699-1ab36a8b0994", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d9204a0-ddb8-49cb-87d4-f94b68bf6141", "sighting_of_ref": "indicator--33359ded-6a47-4ca2-982a-ae7c9752e80f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e90af309-950f-4f31-b6b2-746ed3085888", "sighting_of_ref": "indicator--33359ded-6a47-4ca2-982a-ae7c9752e80f", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e63a6e4b-4d2c-4d09-a7a0-409068066cdb", "sighting_of_ref": "indicator--33359ded-6a47-4ca2-982a-ae7c9752e80f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ddc210d-928d-4b6c-bd1f-3fc0a7025561", "sighting_of_ref": "indicator--4217216e-02af-411b-8be0-caf4bf2f3ef2", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f434251b-552b-40f3-b88b-1c09146f71a2", "sighting_of_ref": "indicator--4217216e-02af-411b-8be0-caf4bf2f3ef2", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ebd0e4f-bdb6-400e-b9f4-21a55810f39f", "sighting_of_ref": "indicator--4217216e-02af-411b-8be0-caf4bf2f3ef2", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b1ccef1-61a5-425d-9b0c-9ae6b22b6a7b", "sighting_of_ref": "indicator--2e100124-ac1e-419e-af6c-f88f514494f7", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43a23b80-3fa4-4a7e-91a5-b8d12acab935", "sighting_of_ref": "indicator--2e100124-ac1e-419e-af6c-f88f514494f7", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f034bbe2-cfd3-4eef-998b-335c768a3182", "sighting_of_ref": "indicator--2e100124-ac1e-419e-af6c-f88f514494f7", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e801bf5e-edfb-49ba-bfe6-24def5fcccf0", "sighting_of_ref": "indicator--0a5ede58-3743-43f1-bd01-ec80ee92fa20", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edc3f06a-4b8d-4ab3-9e3e-c320fe6cea05", "sighting_of_ref": "indicator--0a5ede58-3743-43f1-bd01-ec80ee92fa20", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c64ceee8-210a-4b53-85ab-8529dd71a559", "sighting_of_ref": "indicator--0a5ede58-3743-43f1-bd01-ec80ee92fa20", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fd8f129-e865-4d55-b350-c23c1a5255df", "sighting_of_ref": "indicator--1b8249e7-70af-4f79-8213-c6108c05dcda", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--014467f7-123a-47e0-a3ef-ead7d32d9d42", "sighting_of_ref": "indicator--1b8249e7-70af-4f79-8213-c6108c05dcda", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6113f644-db36-4acb-9a0a-67726fa66485", "sighting_of_ref": "indicator--1b8249e7-70af-4f79-8213-c6108c05dcda", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--865d3dcc-36ed-46cf-9c19-2cb8b95ed9c7", "sighting_of_ref": "indicator--a8b09c76-9454-4c3a-aaa5-332e113061d8", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d1749bb-002d-4c4f-bd63-7d9ba938f256", "sighting_of_ref": "indicator--e1671b6b-80a9-40c8-a425-d0f4e6f9707d", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdbb7a66-5e94-4a72-a041-73c6504ff45c", "sighting_of_ref": "indicator--e1671b6b-80a9-40c8-a425-d0f4e6f9707d", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7da3e38-b297-4cac-af9b-0e4987746c85", "sighting_of_ref": "indicator--e1671b6b-80a9-40c8-a425-d0f4e6f9707d", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6778215d-2f51-48b5-9de6-b4369da3390f", "sighting_of_ref": "indicator--9ecbd196-1ad1-45d7-8c81-23f3bfb0ca37", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b240b23-323b-4c12-b259-b16095bc8bef", "sighting_of_ref": "indicator--9ecbd196-1ad1-45d7-8c81-23f3bfb0ca37", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d5e0ffa-28d2-4b3f-b981-2f257bb9aa23", "sighting_of_ref": "indicator--9ecbd196-1ad1-45d7-8c81-23f3bfb0ca37", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13c9b581-aeef-45f3-b959-0736f4b42d09", "sighting_of_ref": "indicator--52c34f36-5403-4b2b-9b19-87e375f35305", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4816a1ab-e9ba-448f-a530-2ce4ed3f8ea8", "sighting_of_ref": "indicator--52c34f36-5403-4b2b-9b19-87e375f35305", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f1a22e0-f332-4baf-9f51-107d1bc29a79", "sighting_of_ref": "indicator--52c34f36-5403-4b2b-9b19-87e375f35305", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00b548f4-9bb3-4cb3-96bf-070323d1ea98", "sighting_of_ref": "indicator--ebe5036d-33bc-4bb6-9244-612f5468497f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--918e51f0-fbd8-41f4-a911-28ea0921d266", "sighting_of_ref": "indicator--ebe5036d-33bc-4bb6-9244-612f5468497f", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9afb121e-dc21-4ea8-b8f9-8f27e0a14b0b", "sighting_of_ref": "indicator--ebe5036d-33bc-4bb6-9244-612f5468497f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f557d69c-f6a4-4377-b526-efb3cac0483d", "sighting_of_ref": "indicator--e45e1a85-5805-4fe0-8283-6f9167a60183", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0db459c-fccb-4dfc-bd39-ded7ac2f0bb5", "sighting_of_ref": "indicator--c782ea3d-1ccd-4e4e-b1e9-14c6a0dbea41", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe3b3cc6-e9d1-4ed3-a474-7065ca89df21", "sighting_of_ref": "indicator--c782ea3d-1ccd-4e4e-b1e9-14c6a0dbea41", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ca5d288-298e-4d75-ad63-1ec473604953", "sighting_of_ref": "indicator--c782ea3d-1ccd-4e4e-b1e9-14c6a0dbea41", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9e24977-4d86-4ca4-95fc-70a6c9c9016e", "sighting_of_ref": "indicator--c782ea3d-1ccd-4e4e-b1e9-14c6a0dbea41", "where_sighted_refs": ["location--cc47317e-2c18-43a6-8938-dea748a56ad5"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--377509da-1777-48a6-9cd8-f90cdc800387", "sighting_of_ref": "indicator--b3d08e2f-3957-407a-a55e-da5f58642ee2", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1563060-e930-4cd7-8b35-33667cb0fbec", "sighting_of_ref": "indicator--b3d08e2f-3957-407a-a55e-da5f58642ee2", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89634582-0b98-4db1-959c-ee751918c316", "sighting_of_ref": "indicator--b3d08e2f-3957-407a-a55e-da5f58642ee2", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8098454-d17f-46fc-b45f-8ae2cef4b366", "sighting_of_ref": "indicator--b3d08e2f-3957-407a-a55e-da5f58642ee2", "where_sighted_refs": ["location--cc47317e-2c18-43a6-8938-dea748a56ad5"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23e7249c-429f-4317-92b7-20d585632fff", "sighting_of_ref": "indicator--464fde81-c759-4267-bad1-2e90536c309f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7a5258c-56bc-4167-89e8-af0658c1d45b", "sighting_of_ref": "indicator--464fde81-c759-4267-bad1-2e90536c309f", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a635d23b-8374-435b-a23f-db5648ad5b25", "sighting_of_ref": "indicator--464fde81-c759-4267-bad1-2e90536c309f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22d9df7d-5a08-4d1b-b4e6-1867805e79fc", "sighting_of_ref": "indicator--464fde81-c759-4267-bad1-2e90536c309f", "where_sighted_refs": ["location--cc47317e-2c18-43a6-8938-dea748a56ad5"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--255e2026-8d68-4688-8e41-3ce8778fa98e", "sighting_of_ref": "indicator--d5560d5f-8d8b-4b89-9f19-6c228fed9ad4", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4c8f611-7176-424a-a8a2-d3b8a04d1702", "sighting_of_ref": "indicator--d5560d5f-8d8b-4b89-9f19-6c228fed9ad4", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fb217ee-67f5-4d5c-b9e7-e0633e9d5a30", "sighting_of_ref": "indicator--d5560d5f-8d8b-4b89-9f19-6c228fed9ad4", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28bca4e7-834a-4dc3-9cde-42f6839c29ba", "sighting_of_ref": "indicator--d5560d5f-8d8b-4b89-9f19-6c228fed9ad4", "where_sighted_refs": ["location--cc47317e-2c18-43a6-8938-dea748a56ad5"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbf0f3e4-33b0-4054-8bc9-037f8b256fb3", "sighting_of_ref": "indicator--c57b3141-e488-4997-871a-e2807f490a19", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e08fa851-75b7-4942-9096-ed37fc4f7bec", "sighting_of_ref": "indicator--c57b3141-e488-4997-871a-e2807f490a19", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dce6a36-cb08-457d-a984-7ea9990c7880", "sighting_of_ref": "indicator--c57b3141-e488-4997-871a-e2807f490a19", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0345c9d-53af-491d-a016-da76f64733fb", "sighting_of_ref": "indicator--c57b3141-e488-4997-871a-e2807f490a19", "where_sighted_refs": ["location--cc47317e-2c18-43a6-8938-dea748a56ad5"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--683d4795-797b-4595-8ae9-b63153531498", "sighting_of_ref": "indicator--78750089-b41b-4d6f-91c7-209347d93e30", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30b228e1-3c6c-4f67-b858-d9e2aacefb59", "sighting_of_ref": "indicator--78750089-b41b-4d6f-91c7-209347d93e30", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7121c70b-336f-47ae-8068-40b4b23c9b8f", "sighting_of_ref": "indicator--78750089-b41b-4d6f-91c7-209347d93e30", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af096fb9-b8c0-4c26-a259-b02f3792d9a5", "sighting_of_ref": "indicator--78750089-b41b-4d6f-91c7-209347d93e30", "where_sighted_refs": ["location--cc47317e-2c18-43a6-8938-dea748a56ad5"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90c6b36f-1da9-44a6-a0ee-07ea2bc048c3", "sighting_of_ref": "indicator--03a88021-dd2e-4678-bf9b-9bccd61a4ce9", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e94566d8-2312-44cd-97db-df11e7d4221b", "sighting_of_ref": "indicator--969210cc-3931-4b96-9dc0-621916e9303d", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07586578-52c3-480f-b2d1-76523e5d409b", "sighting_of_ref": "indicator--969210cc-3931-4b96-9dc0-621916e9303d", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0446711b-7526-4d45-b68c-5a244bd329a6", "sighting_of_ref": "indicator--969210cc-3931-4b96-9dc0-621916e9303d", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6db3339d-ad5e-4f70-bb10-50dbfbd32f07", "sighting_of_ref": "indicator--e4742baa-e397-4682-b854-a87be12a3f4f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebb67903-bc8d-4758-8442-3f72bc314af2", "sighting_of_ref": "indicator--e4742baa-e397-4682-b854-a87be12a3f4f", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85ce5739-6dec-4f88-b7bb-a1b8d51d28ec", "sighting_of_ref": "indicator--e4742baa-e397-4682-b854-a87be12a3f4f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01ff3146-20f1-47b5-beed-2329c0827c0b", "sighting_of_ref": "indicator--b2aea619-ba07-4621-b887-069739de6f65", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be16648e-c2d0-4d09-98a0-ae312b775cba", "sighting_of_ref": "indicator--b2aea619-ba07-4621-b887-069739de6f65", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9a13e7e-a8d1-4d08-849d-cf8dc743b415", "sighting_of_ref": "indicator--b2aea619-ba07-4621-b887-069739de6f65", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f64411bf-3906-4f98-9388-2c3374b26ccc", "sighting_of_ref": "indicator--61368bba-11a0-4658-8b8c-c91d2e0b957e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63750608-6962-49c6-86bc-886039e6a0c6", "sighting_of_ref": "indicator--a20f4063-a862-4310-9146-cf97638f79a9", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--429ea354-7277-4da5-a07d-d3d0eb0fe5af", "sighting_of_ref": "indicator--c4633387-e398-4463-985c-5a1d1ead2b99", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1135e870-b481-4e32-a9c6-d469bc06ea3c", "sighting_of_ref": "indicator--c4633387-e398-4463-985c-5a1d1ead2b99", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f24e7c01-1737-4388-ae91-910bfc6ea7bf", "sighting_of_ref": "indicator--c4633387-e398-4463-985c-5a1d1ead2b99", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9081d1b-1c10-4ad2-989e-0a5decd9c008", "sighting_of_ref": "indicator--4054e152-5133-42a1-85a0-6097fd9b7ada", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90b9c80d-f289-4a80-bdb8-9f54c9b4585c", "sighting_of_ref": "indicator--4054e152-5133-42a1-85a0-6097fd9b7ada", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09a158e4-dd0e-4221-9176-d910ace0b6d9", "sighting_of_ref": "indicator--33edd033-67e8-4dbb-a13e-02b6cea1af7e", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40c614ba-e99f-475f-9ae1-16d30acf6840", "sighting_of_ref": "indicator--33edd033-67e8-4dbb-a13e-02b6cea1af7e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9d33227-c65c-4dde-9e3a-ef2ad38b733a", "sighting_of_ref": "indicator--33edd033-67e8-4dbb-a13e-02b6cea1af7e", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08d2f043-e5f7-4376-9eaf-085f3e701bd0", "sighting_of_ref": "indicator--1fa1403d-3960-4688-bc55-aaba3b6f7b3e", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94b438d5-3e4c-4a13-8b8f-601747719079", "sighting_of_ref": "indicator--1fa1403d-3960-4688-bc55-aaba3b6f7b3e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c36b6361-bb41-44d1-8400-3bbe785b0122", "sighting_of_ref": "indicator--1fa1403d-3960-4688-bc55-aaba3b6f7b3e", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7cbfe4b-11f2-4914-a213-1b96b7a98230", "sighting_of_ref": "indicator--aec0b39c-1868-4ae8-887b-8578c5d8f2a2", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3a7660f-1242-40a6-9158-41bdc5ae56ec", "sighting_of_ref": "indicator--aec0b39c-1868-4ae8-887b-8578c5d8f2a2", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc63e03b-fe58-4ba7-9acf-be37d5097e68", "sighting_of_ref": "indicator--aec0b39c-1868-4ae8-887b-8578c5d8f2a2", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7783114c-6509-4d17-a13e-cc1611227738", "sighting_of_ref": "indicator--a3f296ea-5b61-4308-916c-ed90c2580bf8", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4b32b61-2fdd-4b14-8997-6fc84f91edea", "sighting_of_ref": "indicator--823bf231-c2cf-49f2-9e3d-0fe32d6bef3b", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abdf5f5c-6713-4403-9fa5-009869639703", "sighting_of_ref": "indicator--823bf231-c2cf-49f2-9e3d-0fe32d6bef3b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06b7d7f3-4339-4973-b73f-4915282988de", "sighting_of_ref": "indicator--823bf231-c2cf-49f2-9e3d-0fe32d6bef3b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e55def1-a9a1-490f-8eab-1dad341cf966", "sighting_of_ref": "indicator--3f1a4562-fa68-442f-b1db-533bda609466", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef1bb276-4f37-4d4d-a701-f0adfd4eedea", "sighting_of_ref": "indicator--3f1a4562-fa68-442f-b1db-533bda609466", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28c993e4-da71-422f-9595-2637970c0058", "sighting_of_ref": "indicator--3f1a4562-fa68-442f-b1db-533bda609466", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--980b9fe4-d246-4ef5-a21a-f6af792b66dd", "sighting_of_ref": "indicator--fb4fbb03-4335-42b8-b456-a9d61cd93e91", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f964445-61f7-451d-890a-0181c12f42f9", "sighting_of_ref": "indicator--cee2fd91-41ce-4000-bd26-37751a19510a", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46ea69b9-1105-4499-aa67-0984b349c9b0", "sighting_of_ref": "indicator--99218657-efe5-4732-97f6-1c4a7287c2ce", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84defe8e-85d9-49c9-8d01-e8283b654187", "sighting_of_ref": "indicator--6de8ec05-71bb-40c0-a5c3-67609b05da8b", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b8fa16b-5fca-4fb5-bf82-241588563425", "sighting_of_ref": "indicator--7a5c4f2b-cb2c-4fc3-a8a8-3c082e58c989", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5d8a43a-a830-48f6-ad94-b6275d34148d", "sighting_of_ref": "indicator--777b1beb-a144-43d1-9d0e-85cb951464d3", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--707d8c4d-170a-4b49-adef-feefc523ff0a", "sighting_of_ref": "indicator--04a995f6-c079-465b-87ed-75aabcbe835e", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f9561ae-c58e-4961-8a5c-c436f8ca0828", "sighting_of_ref": "indicator--1914ee02-e340-40cb-bff0-c1c7b6081618", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c71f75d-da47-49ed-850d-cd878c2adc4b", "sighting_of_ref": "indicator--63e6f844-6e03-4b3d-aac8-ac593499d47a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9dba146-7d2c-4137-b9b5-76ecbdc90692", "sighting_of_ref": "indicator--70c27af6-42dc-4363-b905-7e03c115f470", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31fecd3f-fa08-4f07-a3ff-bbbbe2331772", "sighting_of_ref": "indicator--e6132bfd-08af-4df0-b1d4-58a8bd37f070", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b0cb780-0691-4822-b144-8ff2765d4901", "sighting_of_ref": "indicator--e6132bfd-08af-4df0-b1d4-58a8bd37f070", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9608670-77ef-40fb-a9bd-42ed25004389", "sighting_of_ref": "indicator--ff089d55-56b4-4eef-85a4-ff9d2f8473ac", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80094b6d-61d1-4fda-8857-6876f9b11e00", "sighting_of_ref": "indicator--8c0869da-7283-4857-9f08-607cefa1899d", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6810b8f9-20d9-46d1-89a8-93128bf5004a", "sighting_of_ref": "indicator--ee1e0b79-c140-4434-b2b7-b0f74b5a7b30", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--166b5ff5-1886-4f36-888b-c18f139c57cc", "sighting_of_ref": "indicator--4dbe9391-b85b-4bc7-b0d5-7e78e80bf13e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b957462e-0ebc-42d4-90e2-664cd3f9ed2c", "sighting_of_ref": "indicator--22bd506f-be6d-4d15-989e-e9d7a9e5e56b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a37f0d58-7338-465a-9119-44d009da9267", "sighting_of_ref": "indicator--9934a5c8-17a4-484d-9c84-3708eceaa83f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21c4c0e8-ee2b-4008-a127-dfc6243e9066", "sighting_of_ref": "indicator--84cb59d0-f2ad-426f-a84a-3c1efdc6a1b9", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddb68a87-d333-4556-b362-03413a553840", "sighting_of_ref": "indicator--de6bdbd5-3568-4f1c-b6e1-c6981bcdb96d", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--835bbaaf-2ff9-4655-8afd-65feb269e7d9", "sighting_of_ref": "indicator--458f38ab-6df2-4ce9-a940-81e19b1f7667", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e48c5a3-5592-46ec-ac62-9a7a9b9821fb", "sighting_of_ref": "indicator--f04d7d0d-e4c8-4200-8475-5a0f4a35dd81", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dde0225a-db53-404a-af47-7c66c871af12", "sighting_of_ref": "indicator--f04d7d0d-e4c8-4200-8475-5a0f4a35dd81", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47d7f4cd-e308-4344-a369-147be8c6e1d0", "sighting_of_ref": "indicator--eb96d072-13df-4ad6-9e6d-73a3a82cbccd", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed048514-1495-40fe-8fed-652e28eb983d", "sighting_of_ref": "indicator--eb96d072-13df-4ad6-9e6d-73a3a82cbccd", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1368e651-9ccb-494a-9fe2-d7b1dec43107", "sighting_of_ref": "indicator--91562078-1519-4848-978f-947757a17ab0", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63865ac6-752d-4207-98b7-38b3bbc10fda", "sighting_of_ref": "indicator--c25b1603-ac35-443f-bdd9-9bf7fdbb201c", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98440e51-0610-4ee5-8e41-2b8ec9d37b8b", "sighting_of_ref": "indicator--08dd0855-0d97-4917-8fc0-12d03d80756d", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d73acb7d-6f63-4cec-84c6-edffd941b432", "sighting_of_ref": "indicator--54e58968-ef2c-452d-97f3-69bf0f346fc4", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27cb7b83-4ba7-44a4-a675-0706e864d1ad", "sighting_of_ref": "indicator--a0a5fb6f-ae00-464e-b508-976909d6d283", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7cede2c-ec43-415d-97b0-8eaaee79ddcd", "sighting_of_ref": "indicator--bf180c86-8fef-45bd-94a9-79c1c49d1225", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0412489-db89-4889-b352-5a59101d6ebf", "sighting_of_ref": "indicator--ab22e8ac-983c-441a-8b2e-c1ce87f42f04", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--626018bb-17c4-4e27-9956-9ef264aaf3dd", "sighting_of_ref": "indicator--dfea7847-09f2-4ebb-8f75-cb4370d65a4e", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c73a62c4-80b8-4ba5-87bf-5cd8df8c4d20", "sighting_of_ref": "indicator--214ae30b-1bbb-460e-809e-88fb747ab3b4", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33f8540b-1b4d-44da-847c-219944c227f8", "sighting_of_ref": "indicator--dc270dc3-d937-4e57-84f5-aa3c415c0cc5", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c08595a-b713-4675-ae3c-9129e3a77b3a", "sighting_of_ref": "indicator--c5024445-f14a-4bce-a11c-69c2da39169a", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--199a2ff8-8fce-4d8c-abfb-b0ab86f9de83", "sighting_of_ref": "indicator--02fe4bd0-50a6-4504-aa43-b1917f187825", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17da15bf-3b53-4f30-adfc-2e72e240c86e", "sighting_of_ref": "indicator--23ff1e8f-1c7d-4a62-bd31-f605bb759f9c", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f3fb054-a1dd-4171-a89e-d747ae52a63a", "sighting_of_ref": "indicator--740db7c4-3ac1-4ac6-8be1-65a1bff0cf5b", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90084db3-2dc2-462c-8f28-3558d854cc31", "sighting_of_ref": "indicator--740db7c4-3ac1-4ac6-8be1-65a1bff0cf5b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0400cd48-b48a-4d4a-992a-dadf7c8ed596", "sighting_of_ref": "indicator--fbeeefa0-18d9-4540-ab0b-c94154b412f7", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7af19589-638b-4ac5-9ccf-7c954d1c68c5", "sighting_of_ref": "indicator--31fd3699-6c34-4e11-a2c0-365b77a56be1", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c862a83b-51bd-45a2-b802-b8b4343f63df", "sighting_of_ref": "indicator--31fd3699-6c34-4e11-a2c0-365b77a56be1", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d42d4740-aad9-44d2-9ff3-7b22424970e0", "sighting_of_ref": "indicator--6d8a4969-0646-4be8-8394-82df2eae2ec6", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1887e7a9-653e-4701-abb6-a7a215062965", "sighting_of_ref": "indicator--5871a5d0-45a6-4597-81de-c4daec7f7b86", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c615adca-fce6-475d-a453-d631e1cd28d3", "sighting_of_ref": "indicator--ae2bfd64-2236-4ae4-aa8f-a6bb7d319504", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bab38a3-69d4-425b-b3b3-afda3acc9a45", "sighting_of_ref": "indicator--aea776d3-02e7-401a-b591-18737d0a8be2", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d52637f-1bb4-4795-86be-225d63c42fba", "sighting_of_ref": "indicator--a2e1bc2f-e30c-417b-8d63-22c0d7b39b40", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9e2d17f-2639-4905-a81f-12d80ba94fee", "sighting_of_ref": "indicator--0ee53907-fd1c-488b-aeef-6416ab6d0668", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3a56d07-ae2e-448c-88d4-e4987eb1f8e3", "sighting_of_ref": "indicator--d9e9a19e-ddd3-4073-b83e-45c222782dbd", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78559452-1c42-4c52-bdda-19e9e7de897b", "sighting_of_ref": "indicator--daaf7589-92e7-4b31-803a-9c8a333cef6f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b049e22-46f3-4196-b535-863599a81a4b", "sighting_of_ref": "indicator--4bf129a0-5b7c-4148-b7ba-43afb4db006b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a5f3d8a-7174-4fc0-976d-e07cfb4d9569", "sighting_of_ref": "indicator--2c3f42f2-8a50-47b8-818c-61d4c79e790c", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9671c8f3-3418-4c76-88b1-842c9b448972", "sighting_of_ref": "indicator--2c3f42f2-8a50-47b8-818c-61d4c79e790c", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0506e3a1-82ad-4f59-a2a2-0f6daa973ce4", "sighting_of_ref": "indicator--2c3f42f2-8a50-47b8-818c-61d4c79e790c", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c939d9a-7bf3-41dc-b1fd-e3e7d7bf6790", "sighting_of_ref": "indicator--a80e5397-9d0f-4e66-a022-5c952764eada", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cf8e586-1b73-40b9-98d0-f75c8c8933cc", "sighting_of_ref": "indicator--4986e800-4174-4fa8-9667-cdc768636554", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a96a5d2-0a2a-4ece-a480-13596c95c535", "sighting_of_ref": "indicator--0ce716f0-6bc9-47f6-8123-72917d5a0f1d", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcbf21cc-3b81-499f-9f5c-b2e9266e27aa", "sighting_of_ref": "indicator--12ac5ebf-391f-4038-9995-16868279087d", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba4b18cf-5536-4330-b5e6-fa17bcdcb4db", "sighting_of_ref": "indicator--11e9c957-e200-43b2-922f-2d04d46a9a82", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b356e010-1353-4162-98a9-c4252271eb4f", "sighting_of_ref": "indicator--6e6bb482-de90-4088-88eb-b0a1c62c9ef0", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8e72752-0b11-42e3-ac7e-6518fd7562b0", "sighting_of_ref": "indicator--74a5e9fb-552c-4e98-838a-120aec982941", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9f42439-ef6e-4301-b258-35851b309dd1", "sighting_of_ref": "indicator--419a1466-dccd-47d3-86b3-0c2f34c27a04", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc524134-fd8e-4623-bd44-e3ded54dabf6", "sighting_of_ref": "indicator--6d9c990a-d6cf-47b9-87e3-4488c66b1140", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4622d0a2-68d4-4a33-a2d0-0582b08cf2fe", "sighting_of_ref": "indicator--4714f288-7536-483c-b265-6b35128f8888", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aabba350-86f3-48b3-b166-989ff56a8352", "sighting_of_ref": "indicator--e44c9312-b0ee-492d-bd38-099bba9b0c46", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a40b940-aebc-46e2-98cf-e796dd29af62", "sighting_of_ref": "indicator--e44c9312-b0ee-492d-bd38-099bba9b0c46", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acffb5e6-b0e4-4c36-b1a4-d65c6db15913", "sighting_of_ref": "indicator--929e2050-65b2-4ae3-b5ff-6438ed4f8c3c", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17332b8c-e802-4abb-964c-3d5e0a2d9fa2", "sighting_of_ref": "indicator--929e2050-65b2-4ae3-b5ff-6438ed4f8c3c", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f27da67-f07a-454b-8895-b4fb41ca5070", "sighting_of_ref": "indicator--68936171-62aa-4c86-8ca5-146771b0fee1", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--251e7bf1-c9fd-41c7-8af0-59ef62e1f8f8", "sighting_of_ref": "indicator--7d468d77-cdb5-4a41-9660-d5accf922a1e", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a225b7c1-c080-4d18-8136-2d10ca48487e", "sighting_of_ref": "indicator--2494e97b-6a47-4eef-86ca-3d3d9884946d", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a703eeb-f347-4912-8c1f-a812d9fad0c4", "sighting_of_ref": "indicator--2494e97b-6a47-4eef-86ca-3d3d9884946d", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--863e42d9-d1a0-42d3-918a-81641f92c6dc", "sighting_of_ref": "indicator--f9d79163-6c3b-43e1-900e-120da55b0ad7", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cd8fb8c-521e-40ef-b4fb-1ebf19ea653f", "sighting_of_ref": "indicator--f9d79163-6c3b-43e1-900e-120da55b0ad7", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a19b8cb3-ad2f-424a-a5e9-53ccbf03df8f", "sighting_of_ref": "indicator--f9d79163-6c3b-43e1-900e-120da55b0ad7", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--570ccd4a-0ad6-432e-bc6d-09d2a0e63bdf", "sighting_of_ref": "indicator--02110022-00bc-4a89-b9b9-08452e86b607", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f4b4697-1d2c-4464-9c25-4b75f1ca4733", "sighting_of_ref": "indicator--02110022-00bc-4a89-b9b9-08452e86b607", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31bb8383-c4d3-403d-9ec7-f92b21feaaae", "sighting_of_ref": "indicator--02110022-00bc-4a89-b9b9-08452e86b607", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0f3adea-febe-4b52-b8b3-78c61e516727", "sighting_of_ref": "indicator--d8e2b551-89dd-4932-95a1-627deeabc144", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac4f8de1-7344-4076-99d5-91c9e1a0cc73", "sighting_of_ref": "indicator--5d5e9a01-f6f6-45bb-ac98-d8b680138d3e", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86f39a96-97f9-4398-a5d1-8f54036f34c6", "sighting_of_ref": "indicator--c383728e-d126-41af-908d-65adda432773", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9fc907a-31e8-4d4e-b1ad-64d48fb57cd5", "sighting_of_ref": "indicator--0896db27-eda9-4cf8-8ca3-ef88a960d20d", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c12b2df-b194-49b6-99d9-ea7bf77506aa", "sighting_of_ref": "indicator--0896db27-eda9-4cf8-8ca3-ef88a960d20d", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f43e323-6813-4498-a0ab-5f2c54d7688b", "sighting_of_ref": "indicator--9f1280ad-333a-428f-904e-e226cbf6c0f8", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70ceaba9-214e-4c52-9919-89f5b4042e61", "sighting_of_ref": "indicator--d171f393-721f-48cc-87ff-a33a0feb27d6", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb8c0c6b-b587-4a16-9322-23b5565cab78", "sighting_of_ref": "indicator--d171f393-721f-48cc-87ff-a33a0feb27d6", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf49c811-4153-4400-b853-03a0fa00ced3", "sighting_of_ref": "indicator--356a25a6-4c9b-4756-b1cf-eff6b30a673a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84e449c2-f04c-4265-a4aa-c01cf83e406a", "sighting_of_ref": "indicator--356a25a6-4c9b-4756-b1cf-eff6b30a673a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4527af2-3c88-44e4-822d-327377decc5b", "sighting_of_ref": "indicator--14bdbe8f-7b39-4a0c-acc3-6f8e7001aff3", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca636840-2e89-4bbb-9f91-c3c0f741d3de", "sighting_of_ref": "indicator--14bdbe8f-7b39-4a0c-acc3-6f8e7001aff3", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f04885d3-c3f4-4c3a-ad78-2a34ce3cd223", "sighting_of_ref": "indicator--3462b25d-b9ea-46e5-a90e-cf209ed24a67", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b206f908-33d0-4e9f-9402-6b1cf24555e6", "sighting_of_ref": "indicator--3462b25d-b9ea-46e5-a90e-cf209ed24a67", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5728e1d6-3d95-4261-b785-d8624468b56a", "sighting_of_ref": "indicator--3462b25d-b9ea-46e5-a90e-cf209ed24a67", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b1510f7-5a6b-458a-957c-3c0923ebf487", "sighting_of_ref": "indicator--95a216fa-8188-4198-8a29-10449f561acd", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a6af360-d6f4-4e5a-9ff5-e4bda8d48690", "sighting_of_ref": "indicator--9600ed88-e09d-4a7a-84f1-b3ce88ad6f6d", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a514c321-9211-4b3c-9af1-738b49ecebd7", "sighting_of_ref": "indicator--9600ed88-e09d-4a7a-84f1-b3ce88ad6f6d", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b3abc07-dcce-48d0-8d37-0d24e46b8d86", "sighting_of_ref": "indicator--9600ed88-e09d-4a7a-84f1-b3ce88ad6f6d", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e660322-2c38-4d84-ab48-dc7a79c4d20a", "sighting_of_ref": "indicator--e759a630-c74d-42d6-8101-0614ecfbe8b5", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--950c13c8-7db4-4f66-b66a-5fabdc312d0c", "sighting_of_ref": "indicator--e759a630-c74d-42d6-8101-0614ecfbe8b5", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88c4042e-14fa-4c7f-b36b-b4d6deb3973e", "sighting_of_ref": "indicator--e759a630-c74d-42d6-8101-0614ecfbe8b5", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2c8bebf-e04b-4fe0-88b3-987b3e0f8f91", "sighting_of_ref": "indicator--d35498f1-99a7-46cf-9991-48c7ddedcf72", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acf31235-a03a-4adb-a420-6512286261ea", "sighting_of_ref": "indicator--d35498f1-99a7-46cf-9991-48c7ddedcf72", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ade0e61-22e6-44cd-a2a4-1883579a8e03", "sighting_of_ref": "indicator--d35498f1-99a7-46cf-9991-48c7ddedcf72", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51a533ca-733a-4d90-b8f4-0e91c47bfa0a", "sighting_of_ref": "indicator--573d604f-1817-44c6-9cce-27e87add6b09", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fd727b4-c10a-4ca8-9644-4992aa0d235d", "sighting_of_ref": "indicator--2b0756c6-aa01-483f-8219-1651e490e3de", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ce1a1b5-38ef-4d0f-9c18-66ad5e9f13ab", "sighting_of_ref": "indicator--2b0756c6-aa01-483f-8219-1651e490e3de", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b73ef533-d6c7-48dc-9d85-5f753b88165b", "sighting_of_ref": "indicator--2b0756c6-aa01-483f-8219-1651e490e3de", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bac5d32b-0f44-4c45-9f90-61a79dabde30", "sighting_of_ref": "indicator--fe8204eb-5400-4f50-8dd6-99eb88d0970e", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a61e019c-1404-488f-88c4-c1d27239d1e5", "sighting_of_ref": "indicator--fe8204eb-5400-4f50-8dd6-99eb88d0970e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--befaba36-ec63-44fc-88ed-dd662957691f", "sighting_of_ref": "indicator--fe8204eb-5400-4f50-8dd6-99eb88d0970e", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35367dad-4e63-4a8d-ba84-16e445944ae3", "sighting_of_ref": "indicator--0a9853ca-5c00-41e8-ac24-a4b68858e946", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4a4a67f-9722-4b6b-8c66-2fc7591985bc", "sighting_of_ref": "indicator--0a9853ca-5c00-41e8-ac24-a4b68858e946", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4fee0f9-a219-49e1-a8a4-03e9c7b1ef4b", "sighting_of_ref": "indicator--0a9853ca-5c00-41e8-ac24-a4b68858e946", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--738979cc-1f34-45c2-94ea-3b71b235c4e2", "sighting_of_ref": "indicator--60d83619-a0a6-4888-9387-6eeb24c90521", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40848bab-b788-4758-91d8-9dc14c98707b", "sighting_of_ref": "indicator--60d83619-a0a6-4888-9387-6eeb24c90521", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d758d690-8a25-40cb-8798-e2d634d4eb1f", "sighting_of_ref": "indicator--60d83619-a0a6-4888-9387-6eeb24c90521", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce64982a-39fb-4e87-9ff8-c881d3535353", "sighting_of_ref": "indicator--d4504a1a-a602-42d6-bf17-72d185746b79", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c37fdcb2-1b4c-4469-b451-11db872af689", "sighting_of_ref": "indicator--d4504a1a-a602-42d6-bf17-72d185746b79", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--204cb043-9f32-483a-a858-21dcf573ba67", "sighting_of_ref": "indicator--d4504a1a-a602-42d6-bf17-72d185746b79", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bce510bd-f8ad-4fac-8221-885529d58152", "sighting_of_ref": "indicator--172c52fd-5361-4e74-8e85-8ea95412509e", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50ceae85-57dd-49d0-8067-5b4e960d65b7", "sighting_of_ref": "indicator--172c52fd-5361-4e74-8e85-8ea95412509e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a93516d-696e-454e-ac51-d11283d2f491", "sighting_of_ref": "indicator--172c52fd-5361-4e74-8e85-8ea95412509e", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ee125e8-2144-4129-9269-4d3aed87e518", "sighting_of_ref": "indicator--baa2f1d5-32af-4750-9b5d-0a0a6520ae4a", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ecb6fd3-520f-46d1-b78f-035e5bf51bdb", "sighting_of_ref": "indicator--baa2f1d5-32af-4750-9b5d-0a0a6520ae4a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9dd5abd-44b4-4c80-83fe-128d56cbe2e1", "sighting_of_ref": "indicator--baa2f1d5-32af-4750-9b5d-0a0a6520ae4a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e44dff5e-cfa5-4400-b521-50ea8b9ba841", "sighting_of_ref": "indicator--7b8344b1-36b8-42d4-91dd-bf31ce7b413a", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1f291ae-1576-4c25-8b46-e2de1a3e3e13", "sighting_of_ref": "indicator--7b8344b1-36b8-42d4-91dd-bf31ce7b413a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc60182d-a03f-4016-84a0-b2360700f127", "sighting_of_ref": "indicator--7b8344b1-36b8-42d4-91dd-bf31ce7b413a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92ec25ad-c95d-49a6-a7f7-269c4188c603", "sighting_of_ref": "indicator--938f3751-18bc-46f4-b33e-604bdb4cb8d6", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbec4c0e-c2ac-4caf-9519-4e5ecf71ec19", "sighting_of_ref": "indicator--938f3751-18bc-46f4-b33e-604bdb4cb8d6", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--babd084f-88c1-4725-8e30-2654657ee51b", "sighting_of_ref": "indicator--938f3751-18bc-46f4-b33e-604bdb4cb8d6", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce257c2c-58c9-446f-8400-ecaae2d3b5d1", "sighting_of_ref": "indicator--02d84221-bdb6-44f6-bf3e-a1b557cac76e", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e421673-0da2-4530-9db5-65f14a849148", "sighting_of_ref": "indicator--e1f812a3-6f8d-4408-9f37-e99f67f7929f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a48f5eda-7668-438a-b153-5aa5035cf89f", "sighting_of_ref": "indicator--d4356aeb-16a6-48dc-aa42-dae4a6e298e8", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd87bc97-85c2-4532-8ace-14b0d310ebe0", "sighting_of_ref": "indicator--702befb0-b66a-40ea-a1e6-9d2ce53ce9b4", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67b2545b-1b33-4a23-9568-70a9bb90d33d", "sighting_of_ref": "indicator--7b09fc9d-93aa-43b6-a108-1006349c67be", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--221f8eb9-a983-4874-8a7c-333cc4059572", "sighting_of_ref": "indicator--7b09fc9d-93aa-43b6-a108-1006349c67be", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bdea50f-3073-42e6-b711-1ef154efa64a", "sighting_of_ref": "indicator--7b09fc9d-93aa-43b6-a108-1006349c67be", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d206084-36ee-4ba5-9213-64a0f077db8b", "sighting_of_ref": "indicator--7b09fc9d-93aa-43b6-a108-1006349c67be", "where_sighted_refs": ["location--cc47317e-2c18-43a6-8938-dea748a56ad5"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87a32774-f19d-433d-9221-1fa49ad4d9c9", "sighting_of_ref": "indicator--17c3cee3-133f-49ee-8b2e-b6ce3fa0ed82", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa1e0f0d-3c26-4c48-b64a-86fb583537e2", "sighting_of_ref": "indicator--a636be24-1fba-44ba-b71e-3ab60fbdb791", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--337647f3-69fc-45a5-80fa-d666f745f050", "sighting_of_ref": "indicator--a636be24-1fba-44ba-b71e-3ab60fbdb791", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5159fb5-59d3-4c60-a889-c89118e5a400", "sighting_of_ref": "indicator--a636be24-1fba-44ba-b71e-3ab60fbdb791", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--944ea30a-0ac2-4a9e-932d-2133a0da8ad7", "sighting_of_ref": "indicator--2536f212-d6f2-4937-af90-e0d9301e84dc", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--030058d0-a087-4ad6-9251-d89fff1a5a9b", "sighting_of_ref": "indicator--349cf5b8-23bf-4812-b556-fc3a507c66fd", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de800457-d476-4d06-9e5c-8adeda9f2a32", "sighting_of_ref": "indicator--349cf5b8-23bf-4812-b556-fc3a507c66fd", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4839802b-d3d2-448a-8dc3-bbfc553d32d4", "sighting_of_ref": "indicator--349cf5b8-23bf-4812-b556-fc3a507c66fd", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6b26f93-bc94-42b5-964d-b38436a7f1a1", "sighting_of_ref": "indicator--14ce4b1e-2620-4b86-bb40-e9093f18dc43", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b704153-1002-416d-9fa4-efa0b8e0cea3", "sighting_of_ref": "indicator--14ce4b1e-2620-4b86-bb40-e9093f18dc43", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5300b20-df80-45e2-a5eb-52ba12d28d24", "sighting_of_ref": "indicator--c09f9e15-6528-47db-adb9-ec829633373f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a695aa1f-28ba-4b9c-acdf-a32d9625e335", "sighting_of_ref": "indicator--c09f9e15-6528-47db-adb9-ec829633373f", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43dc1eec-9162-4b19-ae8b-b70e27ddd403", "sighting_of_ref": "indicator--c09f9e15-6528-47db-adb9-ec829633373f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5daa41a0-2893-4e34-bb5b-6cc92b3b9c64", "sighting_of_ref": "indicator--3835f27a-4ea2-4c5c-ad5a-11acd09073b1", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80cd6099-afe5-40cc-832e-eab7441c311b", "sighting_of_ref": "indicator--3835f27a-4ea2-4c5c-ad5a-11acd09073b1", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0373553-b487-4a5e-a700-02705c370ae7", "sighting_of_ref": "indicator--3835f27a-4ea2-4c5c-ad5a-11acd09073b1", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--326c0ee4-7dfe-4a5a-ac7b-d7f6c56f1230", "sighting_of_ref": "indicator--782a95ef-c193-4ae9-b9b4-0d6299b8bd08", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72a11b9e-449a-4030-af12-39102dc4135a", "sighting_of_ref": "indicator--bea8ada3-d355-4efe-8afb-55ab7543985d", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f89eabf-f1e5-4ba0-846b-5deeb5ec0229", "sighting_of_ref": "indicator--517c7ee3-4d66-4b57-9542-128a98ef059f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3639c7a5-4076-4869-aa2e-d8a99ee5f0ad", "sighting_of_ref": "indicator--13491dc4-6163-42b8-86b1-644fb51c5e17", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79aaadaa-295c-4590-983c-31f259cf5077", "sighting_of_ref": "indicator--13491dc4-6163-42b8-86b1-644fb51c5e17", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fbacce8-73c4-4924-be3b-39e4c5875f1a", "sighting_of_ref": "indicator--13491dc4-6163-42b8-86b1-644fb51c5e17", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c783909b-8ece-4b60-9eca-720c7593297e", "sighting_of_ref": "indicator--61edc5a0-ecd1-48e9-9ad2-769079e87eb9", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db95c6ab-888a-4d41-a5ca-36cf534d6548", "sighting_of_ref": "indicator--282eca95-11cc-432f-aa7d-1ff5a75509e6", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfe95849-318a-4513-8882-6ad07fe72b43", "sighting_of_ref": "indicator--282eca95-11cc-432f-aa7d-1ff5a75509e6", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69178272-6d36-41d6-8a3e-8f7da46bf8f4", "sighting_of_ref": "indicator--282eca95-11cc-432f-aa7d-1ff5a75509e6", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64b0b688-8428-4730-80b9-0a35201601d7", "sighting_of_ref": "indicator--9600f499-005e-4e91-8dcf-ba8c08892342", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d41d13d-675f-41bc-9db8-56fe452005ce", "sighting_of_ref": "indicator--9600f499-005e-4e91-8dcf-ba8c08892342", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ad56665-5c08-448e-bc62-db1b1e701c7c", "sighting_of_ref": "indicator--234d4bc2-149f-4cd5-be31-10b258e15569", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ca0eb41-e9d2-47a9-88d8-d97b5ae7f36c", "sighting_of_ref": "indicator--1b4c4a28-da79-4783-93c1-14a87e8326b8", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a9b56e6-9e3f-44af-9c10-8165df7a1aac", "sighting_of_ref": "indicator--1b4c4a28-da79-4783-93c1-14a87e8326b8", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3581739e-dd7b-43bb-8d3b-1c34ff2b6cc7", "sighting_of_ref": "indicator--1b4c4a28-da79-4783-93c1-14a87e8326b8", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b530e57-8ed6-47e4-b663-b26091bcc65e", "sighting_of_ref": "indicator--8e3c077b-1299-4c64-8908-f14ba1768d1f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c724269-6b02-48ad-8849-c9c1c4235659", "sighting_of_ref": "indicator--8e3c077b-1299-4c64-8908-f14ba1768d1f", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0d55ee7-1e62-4486-b5fb-36447b6b24c1", "sighting_of_ref": "indicator--8e3c077b-1299-4c64-8908-f14ba1768d1f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8c1431b-c592-4b66-a7f8-8270647c59ea", "sighting_of_ref": "indicator--188b4b97-e57f-4fa6-928c-0fa3c4c3ea12", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed7de188-eedb-45d6-b33c-12d3c1e6fbee", "sighting_of_ref": "indicator--188b4b97-e57f-4fa6-928c-0fa3c4c3ea12", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc05ab19-b9de-429a-8cba-336a63b5af55", "sighting_of_ref": "indicator--188b4b97-e57f-4fa6-928c-0fa3c4c3ea12", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd469fd1-d312-46f1-8c5f-60676c35bf1d", "sighting_of_ref": "indicator--ea8bed24-3e3c-4908-8ae7-831f3422dbfa", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c5c8745-608d-4df5-b5f3-c70e792b7514", "sighting_of_ref": "indicator--ea8bed24-3e3c-4908-8ae7-831f3422dbfa", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4728e670-f6d4-4448-92fb-d691233435fc", "sighting_of_ref": "indicator--ea8bed24-3e3c-4908-8ae7-831f3422dbfa", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fe4efe0-bf1d-44b2-8557-7219af163f1c", "sighting_of_ref": "indicator--4a7e0dbc-106c-4e28-9344-162a8af4cf11", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06bf40af-907d-4405-9f86-0ba835cd8a24", "sighting_of_ref": "indicator--4a7e0dbc-106c-4e28-9344-162a8af4cf11", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c512439f-48a9-4625-b155-5c5412ff7b86", "sighting_of_ref": "indicator--4a7e0dbc-106c-4e28-9344-162a8af4cf11", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a25b643f-a898-408e-a4df-5be986733c15", "sighting_of_ref": "indicator--8c0ddc00-8694-4605-85de-58c6a9e39ae7", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d80ac31-b536-4743-ba05-12566d247e57", "sighting_of_ref": "indicator--8c0ddc00-8694-4605-85de-58c6a9e39ae7", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--282f210a-05d2-4790-874c-457e9f757fae", "sighting_of_ref": "indicator--452bed57-5480-4029-8458-916633d58a29", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1b115a2-fc07-4c5d-8f3d-70c20084fd0f", "sighting_of_ref": "indicator--8ae07479-69c5-4e2b-af8f-9da4c9f4bf49", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd7d4b12-c52a-431b-9be0-6f2718fcc50b", "sighting_of_ref": "indicator--6eb52490-a932-4c09-9a01-0c8c2c6e8c0a", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2132fb6d-6553-4377-9c06-b8c194fda8a5", "sighting_of_ref": "indicator--1984a3a1-3758-4754-ac40-afab2e48adf4", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a20605d4-06de-4377-b126-ca3062bd36d1", "sighting_of_ref": "indicator--798555fd-b0f9-4f59-96c7-87d56a0a0def", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b81c81a0-4658-46bb-aa0d-53641a145c6b", "sighting_of_ref": "indicator--8a1b8d12-3e0b-4950-adb8-41ea7e5b5a19", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23e3b4a9-46f9-4466-a21d-4437db690737", "sighting_of_ref": "indicator--fce3060e-a7fa-492a-b638-76d2071cc6c7", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7e02ab0-84bc-479b-a73c-a3523188e6d6", "sighting_of_ref": "indicator--fce3060e-a7fa-492a-b638-76d2071cc6c7", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d6dcb3e-a242-4778-aab9-5b8cac1e2aab", "sighting_of_ref": "indicator--fce3060e-a7fa-492a-b638-76d2071cc6c7", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98c79134-ad81-4f14-b0cd-f38b7e6528b9", "sighting_of_ref": "indicator--7701b326-86d0-4ce2-ab87-23f1f30c5971", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08dc8822-50c1-46dc-b199-43f3c7dd4e4a", "sighting_of_ref": "indicator--d2ab690d-9c7b-43ce-959c-b48a0430bfaf", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc2a8e84-ba05-4a98-91c4-090f804193be", "sighting_of_ref": "indicator--d2ab690d-9c7b-43ce-959c-b48a0430bfaf", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--532cba5c-27b5-495b-967c-4383ea1c5562", "sighting_of_ref": "indicator--7d8f16f1-0da1-424a-875b-5e70f6a4dc13", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ece206e-e0a8-4bc7-984d-59603dacf976", "sighting_of_ref": "indicator--7d8f16f1-0da1-424a-875b-5e70f6a4dc13", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7c7d9c8-be3d-4cb3-acbb-95be60eaedfc", "sighting_of_ref": "indicator--ab5e414d-c509-4279-b819-42a2f4116db4", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--585bf072-661d-4907-bdc3-5625e326b0bc", "sighting_of_ref": "indicator--ab5e414d-c509-4279-b819-42a2f4116db4", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fa18756-17dd-4243-bb46-2f5344b72430", "sighting_of_ref": "indicator--ab5e414d-c509-4279-b819-42a2f4116db4", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4253193-dc8f-411c-a2bc-3417eea1e429", "sighting_of_ref": "indicator--ebf0029e-e1e3-4a38-91cd-7840e2f54999", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d788f65f-1fba-457e-89ad-9ae61fc5c706", "sighting_of_ref": "indicator--ebf0029e-e1e3-4a38-91cd-7840e2f54999", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc70af8d-e84e-4a90-be08-fde668e480cb", "sighting_of_ref": "indicator--5ce2445d-4ac2-4d94-874d-89e70b2ec1e7", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a27df842-388d-4933-9067-9350102cd7ed", "sighting_of_ref": "indicator--2773471d-dfa2-42ea-97a5-5b033b641614", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a23d776-d0d7-48eb-804e-39b2c9003873", "sighting_of_ref": "indicator--38912897-d516-4754-a86e-63a87f6a6558", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7bddc43-97ae-4809-b067-3adfe9099d7e", "sighting_of_ref": "indicator--38912897-d516-4754-a86e-63a87f6a6558", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ac866dd-a062-4cca-8e19-902901d98a99", "sighting_of_ref": "indicator--04f7ba53-bd49-4bf9-83fc-540094f79625", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff9fa45b-7bf3-4fee-9ebf-979d2d7e14b2", "sighting_of_ref": "indicator--bca1b7bb-ce20-4e2c-9288-f7fce878a92e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--429810a4-f2e2-4ce5-9bb6-44d5163f9ffc", "sighting_of_ref": "indicator--46336025-fa39-41e0-b91e-3cbdebb48556", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05952aab-042f-4fea-8780-5eee70e1990a", "sighting_of_ref": "indicator--46336025-fa39-41e0-b91e-3cbdebb48556", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a5c250a-9f5e-4d82-b021-9c7ef37e654c", "sighting_of_ref": "indicator--851f9c18-bcb7-48f1-ad56-a1a1dafc3e49", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab6d0c9e-8f9a-4b02-99f7-08dcc4413a5e", "sighting_of_ref": "indicator--2af13bb1-af86-4adf-aa29-39c1a511c421", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3091bf3c-5887-4a7b-9e54-90b8fef6e685", "sighting_of_ref": "indicator--2af13bb1-af86-4adf-aa29-39c1a511c421", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ccbb7f5-69d2-4730-9b0b-0c7f7dd6b223", "sighting_of_ref": "indicator--2af13bb1-af86-4adf-aa29-39c1a511c421", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b81ff443-4533-4e7c-9d8e-982488515167", "sighting_of_ref": "indicator--8f94b917-3c43-47e8-948d-ac4faa273125", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--386eb3e5-4af1-4171-85a2-f73fefe270fa", "sighting_of_ref": "indicator--8f94b917-3c43-47e8-948d-ac4faa273125", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0a5fbb8-4281-4429-9c5c-eeafa880c77b", "sighting_of_ref": "indicator--57a2001a-39e4-4888-bec9-4360ff41c74b", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c29515a-65fd-43a4-826f-1257651a83aa", "sighting_of_ref": "indicator--b1174cc3-66cd-479e-953a-8e33c5550f11", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec504bca-3df4-4c20-a2f4-846407cc4fc0", "sighting_of_ref": "indicator--b1174cc3-66cd-479e-953a-8e33c5550f11", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c247bf2-1979-4938-b8b6-4064ef75765a", "sighting_of_ref": "indicator--332e2ab6-32d7-4f22-8b77-ab09987a9add", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdcd0c37-dc39-4b04-b3e6-77fe4df260e0", "sighting_of_ref": "indicator--332e2ab6-32d7-4f22-8b77-ab09987a9add", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--faa0b0c1-0423-41a8-bd73-a2c7e5f78d4f", "sighting_of_ref": "indicator--332e2ab6-32d7-4f22-8b77-ab09987a9add", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaa33b24-1c94-4354-a7f4-a4c5975a3737", "sighting_of_ref": "indicator--161c2756-ff62-436d-b288-d631bdd9c0fc", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e54c1f0-4021-4e9c-b87c-d7a4871b47e0", "sighting_of_ref": "indicator--161c2756-ff62-436d-b288-d631bdd9c0fc", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f89a63c-76c5-4e1a-95b3-abeb266161ba", "sighting_of_ref": "indicator--c3c4397f-6892-4f3b-a528-4a66d1474827", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a43ee576-be86-4cf4-802c-cb40309b2cae", "sighting_of_ref": "indicator--c3c4397f-6892-4f3b-a528-4a66d1474827", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca0fe27a-2841-4abb-a9dc-dca5c994be33", "sighting_of_ref": "indicator--c3c4397f-6892-4f3b-a528-4a66d1474827", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a516a41-ea62-4ce0-adf4-5124f60bc979", "sighting_of_ref": "indicator--4f3f8f73-2715-44b8-8b4b-92d5ca18616f", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5876f68-f290-48f0-bfbb-64ce424affc6", "sighting_of_ref": "indicator--4f3f8f73-2715-44b8-8b4b-92d5ca18616f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a60e50ef-8284-4442-b027-707682b502ed", "sighting_of_ref": "indicator--737467b5-5913-49d4-ad2f-d16fa0c197fa", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b044a41b-21a9-4ec1-8709-e495fffa134b", "sighting_of_ref": "indicator--98a793d3-b577-4917-af3b-fc055a8a8919", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49456f9a-6ea2-45b3-bfdc-2cec08d227c8", "sighting_of_ref": "indicator--98a793d3-b577-4917-af3b-fc055a8a8919", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04efd8e2-ebef-4157-ba27-384914ae384a", "sighting_of_ref": "indicator--98a793d3-b577-4917-af3b-fc055a8a8919", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--427b10a7-e560-4fcc-bc46-ab7911b51420", "sighting_of_ref": "indicator--2890adbd-53d3-470d-bbf9-b05f5ecad59f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac782866-c540-4201-9130-6713a2d4819c", "sighting_of_ref": "indicator--2890adbd-53d3-470d-bbf9-b05f5ecad59f", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--096f273a-8b24-4cef-a699-3cd95a0bf1e8", "sighting_of_ref": "indicator--2890adbd-53d3-470d-bbf9-b05f5ecad59f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f191cbe-2d03-4928-b3de-a1b342e2a1e2", "sighting_of_ref": "indicator--944c1b80-bd33-4f07-85b0-288b87122683", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9016f78b-7a24-4ac6-a570-a81910067684", "sighting_of_ref": "indicator--944c1b80-bd33-4f07-85b0-288b87122683", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f428cf3-14a8-4890-9170-447021703102", "sighting_of_ref": "indicator--944c1b80-bd33-4f07-85b0-288b87122683", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1af22dd7-a8ef-4576-b171-1f481db1bb33", "sighting_of_ref": "indicator--25824553-f57d-41fb-8f91-439d537e1b0c", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a074537-b8be-4a11-82ed-ffccbba3027e", "sighting_of_ref": "indicator--25824553-f57d-41fb-8f91-439d537e1b0c", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bc67987-5614-47ac-8e22-b5c0e3fd0220", "sighting_of_ref": "indicator--f3f6dca0-6076-4fcb-9c15-a54032ecb7a5", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee9a0f1b-d87b-45ad-9788-2cac6402a619", "sighting_of_ref": "indicator--ff900aea-c6b7-4ba9-8e20-6e1ab0c3d5ba", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3eed28b-e245-4566-b00c-c77fbaa57ee5", "sighting_of_ref": "indicator--97751d45-a3cd-4ec1-b8a9-bf7082eb7bec", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c119f89-e3a1-4c74-aafb-a5e9f07d0844", "sighting_of_ref": "indicator--8c0f5a3d-0942-4098-938b-68aacd40b4f0", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86899b47-c3ca-4f52-a336-be23a24fb277", "sighting_of_ref": "indicator--3ec66c88-0206-4b88-acac-b2e64bbd461a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91c4afbe-8845-42b1-a4fe-206245f47012", "sighting_of_ref": "indicator--3ec66c88-0206-4b88-acac-b2e64bbd461a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8e2203c-e934-4009-bec1-08e4965ccb2f", "sighting_of_ref": "indicator--2ccca880-cdc2-4b19-bd81-b6456e26df46", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17760517-15fb-4153-b99e-d9f26e0293f0", "sighting_of_ref": "indicator--1766bc3c-8426-4fb5-82df-0d2f4fe244d9", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31038cc2-7802-4566-bf33-cf2392eb3d90", "sighting_of_ref": "indicator--204ae90d-3f7d-431a-9a3e-77cd003ba56d", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95782adb-7e0d-4239-9f48-cb6a2b7face0", "sighting_of_ref": "indicator--204ae90d-3f7d-431a-9a3e-77cd003ba56d", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f5b4ef2-6c8f-47be-a438-3a5a9598f2cc", "sighting_of_ref": "indicator--9d7cbd16-fd90-4e0a-820d-1b2b65c12ed6", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9218281b-5771-45f8-9448-bdb1c44475cb", "sighting_of_ref": "indicator--9b7eab11-bff2-4be5-a18f-bdb06f144922", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd1c512c-fa0a-4c69-9228-846502aa2c6e", "sighting_of_ref": "indicator--9b7eab11-bff2-4be5-a18f-bdb06f144922", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba487874-207d-4b3f-92fb-289072b077f3", "sighting_of_ref": "indicator--16296f26-d3ac-4605-9658-f92467a14fc0", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7c89bd0-6626-4936-82c4-e6902562a524", "sighting_of_ref": "indicator--16296f26-d3ac-4605-9658-f92467a14fc0", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2eec53a8-d8e2-43dd-a730-fb19c25f96b9", "sighting_of_ref": "indicator--a1bea3f1-e2b3-4a64-ba34-71a8eabec289", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c693471f-9e10-4e48-a019-10e1bba44f40", "sighting_of_ref": "indicator--c2f91d7d-0360-49ef-bb79-1241e4f06a1e", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98232f79-556c-42af-a3f4-7369683bfc8a", "sighting_of_ref": "indicator--0b7dfb3f-cf67-4a07-b9ef-81686d6a80f9", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df906e28-610b-46d8-90da-1f2d11d3e3bf", "sighting_of_ref": "indicator--942fdc24-7aac-412c-872c-7ec5c646f6b0", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24744dd6-870e-4c6f-b8a8-2aea88f43077", "sighting_of_ref": "indicator--942fdc24-7aac-412c-872c-7ec5c646f6b0", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26e0932c-382c-488d-8d89-7bc503fd8204", "sighting_of_ref": "indicator--942fdc24-7aac-412c-872c-7ec5c646f6b0", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18591bbe-d21e-489f-9773-7ece78e95656", "sighting_of_ref": "indicator--7264e838-8529-4933-a465-5488ddffbce4", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bd7c57a-0d63-49d3-8e0f-1b9acd1512f6", "sighting_of_ref": "indicator--7264e838-8529-4933-a465-5488ddffbce4", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30064e1d-5f43-44cb-9066-e16595956155", "sighting_of_ref": "indicator--3daa752a-3e84-4f1d-8ae8-5b3898d83a3d", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9c838ab-37b8-4a11-88f5-c3b6c90067f6", "sighting_of_ref": "indicator--3daa752a-3e84-4f1d-8ae8-5b3898d83a3d", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9162a77c-cc3b-4f56-85ea-c6f0267b64f5", "sighting_of_ref": "indicator--3daa752a-3e84-4f1d-8ae8-5b3898d83a3d", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--598d3e39-4b6d-43c6-a4a9-a15604d80ba4", "sighting_of_ref": "indicator--8ae0814e-3842-4eec-85dc-f8ac319d8e3d", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d73d7c7d-d62b-403a-a382-7fa091771b52", "sighting_of_ref": "indicator--8ae0814e-3842-4eec-85dc-f8ac319d8e3d", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dfa5f72-e482-402b-8daf-8c2b6562d158", "sighting_of_ref": "indicator--8ae0814e-3842-4eec-85dc-f8ac319d8e3d", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea804d32-9629-4a5a-8639-fadfd35bc8ac", "sighting_of_ref": "indicator--4da3391a-66b8-486f-a9f6-26e668c317c1", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--477a5924-8407-49ec-ba6f-ee4f0037a5cd", "sighting_of_ref": "indicator--8009d261-0da2-4f20-a49f-2746f0bf8afd", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1dca352-1a7b-4c28-a16b-6c4d29ba777a", "sighting_of_ref": "indicator--fe450789-5456-48ff-bdfe-ba947b7bdbd1", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e385c7a1-478c-4a82-94ce-15a92fe9b3b3", "sighting_of_ref": "indicator--d0a8f194-064c-4eca-930a-d9f5ca6a02bf", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcb00474-e8d1-4f5c-9e26-b06a63d95148", "sighting_of_ref": "indicator--ba0609ee-e4d0-46f4-b69f-14e47fde6a51", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0547a936-2349-434d-99c6-edae12e7de2c", "sighting_of_ref": "indicator--70c78e73-2d8e-4367-945a-c2d90860d00c", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d914d821-05d8-4c46-b5bc-c0a36b02f473", "sighting_of_ref": "indicator--b579d3fe-d3bf-462d-ba78-165067c1ce73", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b994106-6e51-49a2-9312-5c90d66a79a6", "sighting_of_ref": "indicator--f548afe2-928c-45a5-bc46-074eb485bd31", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddc731bd-b1ff-4fc6-b5be-1e9fa2a88dd9", "sighting_of_ref": "indicator--64aad384-606a-4ec7-979c-ef3553d32399", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98f427fd-22d7-4e6d-a50d-0e92219ac1f0", "sighting_of_ref": "indicator--58989815-0bf3-410e-b571-cacbc5f5503b", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--931e9c2d-7355-4d17-9697-5129ea818e46", "sighting_of_ref": "indicator--cb72f06d-7718-4d92-8b89-851017d97059", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63bdc1a8-40bc-4cac-a98c-6dd169053c85", "sighting_of_ref": "indicator--cb72f06d-7718-4d92-8b89-851017d97059", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--940e6064-19d6-4b3f-9541-ef95886dbe3a", "sighting_of_ref": "indicator--f253dccb-a723-4d6e-bf70-96853fd99262", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3905079-9c24-40c3-83e3-25940a75da8b", "sighting_of_ref": "indicator--09bc60a2-6213-456a-80ef-a1eb1d15d6f0", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee356b84-02fe-4fba-b84a-630478e9606f", "sighting_of_ref": "indicator--aaf8f77b-060f-4e15-b1ed-f08bcc7f3a16", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67438180-249f-44bc-819f-9b96cabadf3a", "sighting_of_ref": "indicator--8d719a70-8455-4cad-a558-b539c85a309d", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7624210-d25e-405e-9d87-0c7bdd8e101a", "sighting_of_ref": "indicator--c07a7e18-6885-472e-99d9-2830e97e6fa9", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b99bd4d-29e4-48c6-8ac8-de73a8231885", "sighting_of_ref": "indicator--d5c83d93-85b4-4dd7-a5a4-7f352d81e6c8", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de86cb55-6425-48ce-bca6-20262a370c66", "sighting_of_ref": "indicator--615ac49f-abdb-40bb-9859-35269be587bd", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21bb1fbf-0a45-4050-98fa-23ac2993fcef", "sighting_of_ref": "indicator--388bf83f-0e34-42b8-b78d-5e18f92e7c46", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcf0aab5-f90a-42ef-9959-da0e8a28e203", "sighting_of_ref": "indicator--388bf83f-0e34-42b8-b78d-5e18f92e7c46", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--426a9f74-83d4-4984-8906-709535ff8e17", "sighting_of_ref": "indicator--388bf83f-0e34-42b8-b78d-5e18f92e7c46", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00999a01-17e7-404c-aa8e-7279e59758a0", "sighting_of_ref": "indicator--383382a2-82d1-4675-a493-cb0b4b3c857c", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc87c0e0-442f-4248-981e-10592ea3186c", "sighting_of_ref": "indicator--47ef8837-1cbf-47e9-8b94-12e6c87fb63e", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d334463-a767-4dc5-9e77-734aae31256f", "sighting_of_ref": "indicator--47ef8837-1cbf-47e9-8b94-12e6c87fb63e", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e083c03-7a36-4d53-b1be-eca72e9fbabc", "sighting_of_ref": "indicator--80aaf4d8-59fd-40d0-ac1d-9e5ea3529e0f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3699528e-3834-44c3-bebd-ea18b641a7b4", "sighting_of_ref": "indicator--cb31f176-1f94-4e56-9346-99877df29830", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1b46cfe-3130-4baf-bdff-06ac804cb539", "sighting_of_ref": "indicator--cb31f176-1f94-4e56-9346-99877df29830", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fadc9099-8d58-48e1-8374-d49f5c9ca51c", "sighting_of_ref": "indicator--cb31f176-1f94-4e56-9346-99877df29830", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--594b5acf-c33c-49b2-aa20-4c4e01e4736a", "sighting_of_ref": "indicator--e89948f9-a102-4bb0-a85e-ae62d7239d7d", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ae91db3-2417-407d-9bd1-c00ff497654f", "sighting_of_ref": "indicator--e89948f9-a102-4bb0-a85e-ae62d7239d7d", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72bc4582-fcdb-43e3-930f-f1bbee88f246", "sighting_of_ref": "indicator--e89948f9-a102-4bb0-a85e-ae62d7239d7d", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42f0f409-9d12-4160-abf0-fa9a5dbd0231", "sighting_of_ref": "indicator--f0f1929b-67ec-4b22-8259-20ab80dae0e1", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--debec149-d05f-4846-a2f4-adbdb2544544", "sighting_of_ref": "indicator--f0f1929b-67ec-4b22-8259-20ab80dae0e1", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--428133da-b458-4c9a-b514-994117486c78", "sighting_of_ref": "indicator--f0f1929b-67ec-4b22-8259-20ab80dae0e1", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8e26632-77b1-4214-be8e-68b0890485bc", "sighting_of_ref": "indicator--674e0efd-1c06-4962-a225-e8afe8d9c3d1", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--365cdbb2-d8e9-42c0-981e-81759dcaf63d", "sighting_of_ref": "indicator--674e0efd-1c06-4962-a225-e8afe8d9c3d1", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--597ab198-1ba0-4b78-9aa8-3975d712e2a4", "sighting_of_ref": "indicator--674e0efd-1c06-4962-a225-e8afe8d9c3d1", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--493132f3-51ae-4a1c-b909-4afa9abacf94", "sighting_of_ref": "indicator--7610b8e2-71cb-4a70-b5c8-3c25e37516e2", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7abe443-264a-4003-835d-b011dd8b69fb", "sighting_of_ref": "indicator--7610b8e2-71cb-4a70-b5c8-3c25e37516e2", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38d26584-1f8f-434c-955a-bdd16d670428", "sighting_of_ref": "indicator--7610b8e2-71cb-4a70-b5c8-3c25e37516e2", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88080801-1fdf-4a98-8563-8ba5d1f894c7", "sighting_of_ref": "indicator--d98e1f87-83f7-4277-b614-e3e3eb7e3122", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31598f7d-27c5-4e45-b9ed-a5d63d62f59a", "sighting_of_ref": "indicator--d98e1f87-83f7-4277-b614-e3e3eb7e3122", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3d6e220-dd4a-495f-ae48-b4c45b4ad442", "sighting_of_ref": "indicator--ba9a1a21-1803-49ba-8bb7-3b92f266fc69", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93d19956-a100-4f03-af53-3b0843aa8227", "sighting_of_ref": "indicator--6fc69a7a-a977-4a3b-a07d-23869a409dc0", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dbe035c-b1bf-4dce-8848-ba6655c47295", "sighting_of_ref": "indicator--dbf559f5-ebf1-4d9c-a257-1f06bb7e1506", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a09cf613-897b-4409-9534-649f4b4254e4", "sighting_of_ref": "indicator--79cfc994-647f-42cd-91ff-77ac062535bd", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--829491f8-0889-4636-abcf-a9a907aa0002", "sighting_of_ref": "indicator--2c936b20-ec28-43b9-bf83-8929b1255811", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87b14b6a-25da-4286-a0a8-f5d33eff42e7", "sighting_of_ref": "indicator--2c936b20-ec28-43b9-bf83-8929b1255811", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ad3f5af-956b-40f4-9863-c31319d1a9fd", "sighting_of_ref": "indicator--2c936b20-ec28-43b9-bf83-8929b1255811", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23db732b-4986-46e3-9aa0-b9c98a54d29f", "sighting_of_ref": "indicator--54e18e00-e675-4462-80dc-d059994183c6", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bf337ec-458b-4db9-b992-e1a3be1fd03e", "sighting_of_ref": "indicator--54e18e00-e675-4462-80dc-d059994183c6", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ec88fc8-04b3-41fb-9cd6-a52585a9bca9", "sighting_of_ref": "indicator--54e18e00-e675-4462-80dc-d059994183c6", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e57215f-7e86-4f97-87e3-35eb3b6ba99d", "sighting_of_ref": "indicator--00d64604-8757-49a4-b29a-e36efdf88f74", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f703413a-aedc-4364-ab6e-716f86a2f9dd", "sighting_of_ref": "indicator--00d64604-8757-49a4-b29a-e36efdf88f74", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02a05d86-2cca-4f26-9f2a-fb81449ed6cc", "sighting_of_ref": "indicator--00d64604-8757-49a4-b29a-e36efdf88f74", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffa78ec0-cce4-4d57-8701-4b484561e8da", "sighting_of_ref": "indicator--2cf83e35-f621-4c00-819a-963efdc3b6ec", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c20bac6-db50-47c0-bd81-80bd6fe983c7", "sighting_of_ref": "indicator--2cf83e35-f621-4c00-819a-963efdc3b6ec", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b28d5a4-16a7-4dc1-8109-c5f7a251c20b", "sighting_of_ref": "indicator--2cf83e35-f621-4c00-819a-963efdc3b6ec", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--556b1ab8-ab5d-4385-be74-daf82d3b0824", "sighting_of_ref": "indicator--ef85829d-d430-4ca8-a8c8-e28b2d3ce139", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d736dec-9111-4832-baf3-67f00bb7a46b", "sighting_of_ref": "indicator--ef85829d-d430-4ca8-a8c8-e28b2d3ce139", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a80c1dd-2cf6-4767-a2f1-bcf73932ddeb", "sighting_of_ref": "indicator--ef85829d-d430-4ca8-a8c8-e28b2d3ce139", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4acf012a-fa39-442f-9229-be22f32ca410", "sighting_of_ref": "indicator--42e9951f-941f-4179-9c0c-97bf60c5fa71", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5adbf4ec-02b0-4bbf-bb83-88e5ee0b3245", "sighting_of_ref": "indicator--42e9951f-941f-4179-9c0c-97bf60c5fa71", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8de3fd1a-5870-4d37-857a-135f8fcf6cd6", "sighting_of_ref": "indicator--bb70177a-ff22-4cd3-9f42-8080c9cfde00", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d965fbfa-b101-4169-8a8f-1c9fc17b5895", "sighting_of_ref": "indicator--bb70177a-ff22-4cd3-9f42-8080c9cfde00", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c657fd87-2c64-49f4-8c23-54d73a4ce3cd", "sighting_of_ref": "indicator--bb70177a-ff22-4cd3-9f42-8080c9cfde00", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52dc53ae-3fa1-4471-b6f5-73f181f4616b", "sighting_of_ref": "indicator--c1155f6b-8d16-4be1-9384-dcae65e90ccf", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d0b69dd-8e28-4933-a9eb-5713c945a81d", "sighting_of_ref": "indicator--0a9da836-e729-4cdf-9f85-8ea79aa980a9", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45fc03ed-f7e6-46f6-818d-36ec3c5456f3", "sighting_of_ref": "indicator--dadcc0b4-5dcf-4aaf-a40c-b61e1b78f5f4", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be87876a-e29a-47f6-bbd7-0c1b2d6a962b", "sighting_of_ref": "indicator--5dcff580-62c4-4938-8959-db2c3e67d289", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed0a618e-498d-41c4-adea-0edbc1ecf058", "sighting_of_ref": "indicator--128790a0-494e-4977-b2df-c989ca00c1f5", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--413e71e9-a487-410c-94ad-ece4b1edbf4a", "sighting_of_ref": "indicator--934e1fb1-e68f-4d8d-ac9a-72ff853d68df", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19d0f0f9-4c72-4e23-bbad-c537955b90b3", "sighting_of_ref": "indicator--9073d809-ff94-41e3-84a8-8436a91332a7", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1355d38-4bbf-4bd8-802f-0b1af6891731", "sighting_of_ref": "indicator--669cd4e3-1459-4e4d-9f7d-ccca07754ad7", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f608974-0144-4628-8792-baf3a71e2fc1", "sighting_of_ref": "indicator--1f661f92-6b1e-4db7-b572-f8ffb00ac596", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb3020cd-55a2-49dc-ab20-f989244ae446", "sighting_of_ref": "indicator--e510c0ad-7344-42d1-933d-67dc75469b20", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f4a3b5c-c76d-42e2-bae6-bb661d6dbea0", "sighting_of_ref": "indicator--de783b7e-932a-41bf-a9db-25a8ea0dd15b", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--faf1e72d-35e9-4ccd-aa53-10eb58651069", "sighting_of_ref": "indicator--d08ac7aa-67b6-4a60-b245-fda9feecb685", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e28cb70a-2de8-4715-b218-b0527346d38d", "sighting_of_ref": "indicator--8e2260bc-2df6-443d-a972-f3495cfc9550", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20c79789-f3d6-46af-b47c-82203b991b5f", "sighting_of_ref": "indicator--8e2260bc-2df6-443d-a972-f3495cfc9550", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2eacd33e-de83-417d-ac7d-58061dc5b009", "sighting_of_ref": "indicator--8e2260bc-2df6-443d-a972-f3495cfc9550", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--087cc9b9-04fc-4583-8c20-485abad1eed0", "sighting_of_ref": "indicator--ff474465-76c7-4674-8f8c-3734f41bcad8", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--675379c6-a545-418a-81cc-517a1cab2e66", "sighting_of_ref": "indicator--3c72c3f0-b854-4824-bf43-1a0f438635de", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6d25fbf-4597-4b4c-a0df-83258b963821", "sighting_of_ref": "indicator--e64ee75d-e5b5-429b-b5ba-4b8e5e1e45ad", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a86f0386-66c1-4ee9-b34d-50ca827170b8", "sighting_of_ref": "indicator--1880896c-d200-4108-90a8-99d74332f6d3", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--566d984d-9058-4d9c-8840-e00fecd6e2ae", "sighting_of_ref": "indicator--b2203b6c-b96e-456b-a14b-f99ff5338723", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1673ae9-ee36-40b7-8510-95d44610482e", "sighting_of_ref": "indicator--f8aa5c95-390d-4dc3-98f4-214d264df88b", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8f74cdf-f7e1-4524-ae27-1e27c07ecd86", "sighting_of_ref": "indicator--3230336c-d0fc-41cb-ba8e-be2bed980f12", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84031764-d56e-4547-aba5-be0e9022ffb9", "sighting_of_ref": "indicator--f86b2562-d9b1-4819-8633-9792446b0680", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb9539cd-d712-440c-8be6-bf83f0d5587c", "sighting_of_ref": "indicator--a78e106e-9688-4198-a627-061f91cb2704", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00623457-743a-4db0-9776-6777eae1f719", "sighting_of_ref": "indicator--98d53ad4-ae53-4cba-9446-9a895bf2ec80", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6bcafad-6c01-401b-93a4-a574c94d8906", "sighting_of_ref": "indicator--9737fa0b-f254-43ef-b840-13eafdf833d5", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dd1d21d-27b3-4bf1-bba1-2c7587571165", "sighting_of_ref": "indicator--db1b2ae0-e07b-4bf5-a326-3097af17d014", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25d2d0d3-d210-44b2-93df-0180cd68efbd", "sighting_of_ref": "indicator--80b4b7f7-83a3-43c6-892c-d8f4e8877622", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3c7125d-2587-47e8-a3e3-bbe67dcf986b", "sighting_of_ref": "indicator--80b4b7f7-83a3-43c6-892c-d8f4e8877622", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f38932d9-236a-4a93-9fc0-6abb07b5c46b", "sighting_of_ref": "indicator--34718ecf-5f4c-4b6e-ba53-305549924803", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--770143f7-a97c-44df-ae11-7f3ce579e1b6", "sighting_of_ref": "indicator--475c2851-461f-4481-9d4a-d5542762dc1b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51c9dad7-3444-42c2-83d6-ac9d8d0981df", "sighting_of_ref": "indicator--110a2f44-6724-406b-b8dc-75143e1ef725", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5f934bc-b737-4497-aacf-27ce00d37d2b", "sighting_of_ref": "indicator--110a2f44-6724-406b-b8dc-75143e1ef725", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40b67450-40d1-4a47-8abc-f100bc76623c", "sighting_of_ref": "indicator--f76da35d-ec2b-46d8-a0c5-15344429d512", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a79f11e6-ec77-48a5-be62-d2474b56a35f", "sighting_of_ref": "indicator--478eb47a-b817-4dbc-81cd-aa60a5f4711c", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb61050d-415d-49e6-a7bd-1c744b405e40", "sighting_of_ref": "indicator--478eb47a-b817-4dbc-81cd-aa60a5f4711c", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f71da226-a570-4e1a-ab40-acd8b10fd11e", "sighting_of_ref": "indicator--478eb47a-b817-4dbc-81cd-aa60a5f4711c", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b83f968c-ccbe-432b-bbe4-bb046c832eff", "sighting_of_ref": "indicator--d99624d4-15df-4a9e-9f1e-6c3ea4fc1c53", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ce4b846-81ca-4a09-9919-5b2692988e97", "sighting_of_ref": "indicator--d99624d4-15df-4a9e-9f1e-6c3ea4fc1c53", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47af3465-3901-4d81-8441-a17f7843d27c", "sighting_of_ref": "indicator--d99624d4-15df-4a9e-9f1e-6c3ea4fc1c53", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cea4fae1-4097-4e2c-a48b-f2ccc29df21a", "sighting_of_ref": "indicator--f27365a4-edbb-4867-8eb7-0b0d140f83b4", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cb37853-f657-4eb5-8fbc-7aa7c3905330", "sighting_of_ref": "indicator--efa3a4c4-766b-4784-8203-6b7bd78ae844", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56924bd1-85a6-4bc3-9cb7-b132378e0c9a", "sighting_of_ref": "indicator--6d6d97c1-e4d5-49a4-8082-0aa4c2c4c2f2", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f4e6451-3b32-4844-a9ba-3834650d1887", "sighting_of_ref": "indicator--804918c5-5d0c-4ec5-9a46-55a25d93e65c", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75d8f47f-5351-40dc-b50c-68a159572e45", "sighting_of_ref": "indicator--6034f1c6-e93e-4403-bc74-68843cc2b8f0", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19e6930e-e825-4b55-af1e-e4ac2f475e28", "sighting_of_ref": "indicator--025b65ed-2cbf-4d46-a5ae-3d67998f8295", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48a449dd-2cda-4633-aee8-a602fd9e6e24", "sighting_of_ref": "indicator--d582df0b-0881-40e4-bbad-85a409372bcc", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c87d1285-85a9-4a35-8594-e0ae0368ced9", "sighting_of_ref": "indicator--bb31a5f8-fedb-400a-b2c7-81127eeabb18", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c26d69df-48fb-41f7-908c-f1e763d37f1d", "sighting_of_ref": "indicator--3c1301ab-988f-46bb-b971-c92c60cf477d", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dddff032-946f-41c6-8c50-93991f80c024", "sighting_of_ref": "indicator--e81801f7-c6cf-4846-ae74-9600472ea533", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebf213bb-4558-4070-87fd-165808efdeb8", "sighting_of_ref": "indicator--8c72bc9a-ff09-4ad8-9dfa-66e4945d00bf", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--552ad567-83f9-4d63-be64-95f2a1a5f776", "sighting_of_ref": "indicator--3276bf34-f0b4-41b9-9802-6e02dc623b6e", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe774014-11ad-46e8-b52d-a52434268a92", "sighting_of_ref": "indicator--3276bf34-f0b4-41b9-9802-6e02dc623b6e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68b30613-3c6c-4b9f-af74-0c0f7efa68d9", "sighting_of_ref": "indicator--5c86b807-7666-49a6-b816-636bbb2da5a8", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41c72573-9a70-409b-892a-fe45410890ba", "sighting_of_ref": "indicator--c9c732fb-d4f1-4cf3-8ca3-24bacd749971", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63cf6a26-afb3-43d9-b642-059518b13a06", "sighting_of_ref": "indicator--8f28c54f-ffc9-4741-b462-0eb094d27fcc", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b01349df-bb7c-4560-84f0-de2314ac489e", "sighting_of_ref": "indicator--8f28c54f-ffc9-4741-b462-0eb094d27fcc", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a140ff9-ff9c-40cf-8057-a8e2eceda9e1", "sighting_of_ref": "indicator--48a6142c-c200-4545-ab14-29fd60074c97", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f090750a-67fb-49f1-83c6-28cabd4fd76f", "sighting_of_ref": "indicator--332f7e11-651c-4c8c-b0e2-3b2baa535aea", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--030a58b7-0bdb-404b-9259-b1d8eb937e5a", "sighting_of_ref": "indicator--332f7e11-651c-4c8c-b0e2-3b2baa535aea", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f52af16d-0f66-4264-9311-ccb72e7dff1c", "sighting_of_ref": "indicator--7252075b-ab3e-40a8-8531-baa43de911fb", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89a58f89-7f3e-4d8f-a022-68bf045ff140", "sighting_of_ref": "indicator--7252075b-ab3e-40a8-8531-baa43de911fb", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aea268cd-2b62-4f48-bfd6-0aba03b542c7", "sighting_of_ref": "indicator--06348b3a-861c-4f48-bff4-7a94194628a8", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--047abb9b-7efb-4e70-b41c-452e4eb1006b", "sighting_of_ref": "indicator--f1f566fb-6253-449e-9728-8bd76df9aae1", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e22550f-4737-4ba9-8e6a-24e5f798086a", "sighting_of_ref": "indicator--8ce79908-cb97-4ad1-aa04-2fab228409f1", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--311555ef-2cbb-4bd9-8615-09600b32a3c9", "sighting_of_ref": "indicator--8ce79908-cb97-4ad1-aa04-2fab228409f1", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca2c0102-e505-40be-859b-f97638ae68a0", "sighting_of_ref": "indicator--b36b74c9-9966-4147-bce0-da6ddeb24fae", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c0cce54-46ca-4cf6-b092-e3ef9480442c", "sighting_of_ref": "indicator--b36b74c9-9966-4147-bce0-da6ddeb24fae", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75bc9f7d-1131-4c88-a420-534628b9832b", "sighting_of_ref": "indicator--06a1574a-ede4-4f06-b45d-970d1aac9ba4", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e65ac1e-2fa5-4146-8536-4a39ae58b72f", "sighting_of_ref": "indicator--232a3e76-0995-4674-b57c-d4fa896ffd69", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4eda7954-9658-4343-b2c3-7b5cd13c9848", "sighting_of_ref": "indicator--5fe401c5-75ef-4918-adb2-9d67f718da3d", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--705b420f-29d2-4a0a-b4c0-8716da7aeace", "sighting_of_ref": "indicator--0aa0b7f9-18e9-4a11-9903-9fed582499aa", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--703c288e-563f-4060-bef1-e138a5263a71", "sighting_of_ref": "indicator--7294c7bb-79a4-4e49-98c4-bf6e1abc3894", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b922f3fb-c4df-4f32-b6ff-b4a3e0d0a8ab", "sighting_of_ref": "indicator--7294c7bb-79a4-4e49-98c4-bf6e1abc3894", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67c78959-65f3-4f89-8ca1-3b125182aba3", "sighting_of_ref": "indicator--7294c7bb-79a4-4e49-98c4-bf6e1abc3894", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--371c7835-1051-4f29-9565-4ed7eec8f621", "sighting_of_ref": "indicator--db1c133d-1a40-4a95-a3fb-2f82ab52699e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59ac2b40-e6cc-4560-8687-0727dd12d3e2", "sighting_of_ref": "indicator--89bdf1a2-3a94-4530-8962-ff87d54df3e6", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b874de18-4750-4bcf-a30a-0581923dc867", "sighting_of_ref": "indicator--f65ef0f3-e808-485c-ab24-901517477b22", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb3b51c1-72a4-44d4-ba27-56a791011924", "sighting_of_ref": "indicator--89530366-bce9-4115-a627-7a0b472b6017", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c746d8a9-79b2-4215-b230-59781240995b", "sighting_of_ref": "indicator--d261c847-e906-485a-aab5-a1bff5442535", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64c3c09d-f691-474e-9096-0d2d12f6cf07", "sighting_of_ref": "indicator--b31e9577-fa87-423e-8ccf-a99092bcd731", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a75dad8a-819b-47b9-8d34-6df831cd4c2c", "sighting_of_ref": "indicator--6c638ad8-2d11-496a-8a65-e8fddf2eb673", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c4806f5-9ed9-459a-93d0-6e3630307ab6", "sighting_of_ref": "indicator--e3ffc45a-36f3-44f9-a89a-8fd90c1fa1cd", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e8473fe-c595-43b1-a1bd-97454b43b3ea", "sighting_of_ref": "indicator--a086b67f-2b21-4d99-b5fe-7e226492ce04", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ee7614a-cad1-4982-b3f2-2ae2a40b85bf", "sighting_of_ref": "indicator--d53d39c4-58c9-40d1-b1ca-944c360b054f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--667f1087-c129-47a6-9d5a-b2748fae0954", "sighting_of_ref": "indicator--1304fa42-6194-4121-9259-9307eebbd65f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5ad68f1-37e2-402b-b9b9-ba4e9dae63e7", "sighting_of_ref": "indicator--1304fa42-6194-4121-9259-9307eebbd65f", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6a6757f-cdad-47f7-8518-f2d63c319800", "sighting_of_ref": "indicator--1304fa42-6194-4121-9259-9307eebbd65f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05456184-1fed-4083-b802-855ddaccb86a", "sighting_of_ref": "indicator--1101f45c-b904-4a55-95d6-aa7987ef53ad", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd0336c3-1b14-4157-b969-f6c7213cf742", "sighting_of_ref": "indicator--fb2ba997-5560-407c-90ee-c5f65b7b50d9", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54e017b5-07e3-4e0f-aea3-00e3fda51828", "sighting_of_ref": "indicator--71809225-c8ff-4b31-8aac-c7a0ce8f1688", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9baf0e1b-4f64-46ad-a7b1-65ebc9190f7b", "sighting_of_ref": "indicator--5d6f3c99-e39b-46c6-82ca-adf467f54a3c", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a5018f8-6586-4c58-b23b-cdc0c2d25007", "sighting_of_ref": "indicator--5d6f3c99-e39b-46c6-82ca-adf467f54a3c", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a11aef27-0aa2-492b-8cd6-16b2f45ba22a", "sighting_of_ref": "indicator--5d6f3c99-e39b-46c6-82ca-adf467f54a3c", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--768263cb-02b1-48b8-8417-3059380cb27c", "sighting_of_ref": "indicator--119a2b1a-aac0-4e93-91ea-ecdd7b078544", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f09a9429-ce1a-4f08-9a61-ed9ed9755c0c", "sighting_of_ref": "indicator--119a2b1a-aac0-4e93-91ea-ecdd7b078544", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f808a8f7-f155-4024-b024-8fe41e21ca18", "sighting_of_ref": "indicator--119a2b1a-aac0-4e93-91ea-ecdd7b078544", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b96b8120-e031-4a30-a86b-91cb45479e50", "sighting_of_ref": "indicator--02837850-b16a-499a-b53f-ae910e1d9c45", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1eee7bb9-b81c-4948-bf6e-eca60a8dca64", "sighting_of_ref": "indicator--2386e69a-57c4-4d72-86a6-766becdf5ff9", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e2a774c-a410-4af2-bead-2f952ce031b0", "sighting_of_ref": "indicator--2386e69a-57c4-4d72-86a6-766becdf5ff9", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d06e950b-c2a3-4ba3-a801-0cf377830c63", "sighting_of_ref": "indicator--677d3b3f-5a73-44cc-9ae1-6197bd45bc9b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c886d322-024d-4653-895b-63e44db49e23", "sighting_of_ref": "indicator--971c3e4c-6375-48cd-ac8b-8ae808794c25", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba53869e-a2ce-4e1b-aad6-93ddbb506dee", "sighting_of_ref": "indicator--97ce2045-6120-47a7-bfb0-cc3e8bde2727", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abd584ea-2687-4033-bda2-23b6d97b8f7b", "sighting_of_ref": "indicator--51244378-6d4a-4290-a9ed-198e63f28d91", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d15e0d1d-b48a-4882-8fc0-0849861981cc", "sighting_of_ref": "indicator--9e32987a-88b5-408c-b996-9865e3dbd0ef", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be2e5039-99e5-45a5-bc02-6fad24e3b496", "sighting_of_ref": "indicator--21841118-0981-4db8-bbc4-5ebff1dcdeb9", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4412195-1bf8-4aed-aa83-5b577d35d027", "sighting_of_ref": "indicator--21841118-0981-4db8-bbc4-5ebff1dcdeb9", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--076fedda-fd90-4652-8d7b-7101676cc12e", "sighting_of_ref": "indicator--13ef26d0-5d71-451d-b76a-86e2609e57d9", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86b87cf6-d302-40e9-b7ac-a6465a4ccb08", "sighting_of_ref": "indicator--13ef26d0-5d71-451d-b76a-86e2609e57d9", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdf3de8e-9217-46a1-a1d3-46a6b7da7a34", "sighting_of_ref": "indicator--13ef26d0-5d71-451d-b76a-86e2609e57d9", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5faeb31-1d62-4948-961e-fcbd54c2e9c1", "sighting_of_ref": "indicator--f6e505b3-71e7-4006-abb8-cb747d5045a0", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0455d0d-cf89-4aa3-a68b-9e7f96dfcdaa", "sighting_of_ref": "indicator--f6e505b3-71e7-4006-abb8-cb747d5045a0", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--292eddc1-6e18-4a7e-ba24-49c4105b12b5", "sighting_of_ref": "indicator--89ba1f2d-9a60-4cfe-9b76-c579f2bb059d", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2af04d18-5a3b-49e5-8bca-6ab7fb1e9cde", "sighting_of_ref": "indicator--89ba1f2d-9a60-4cfe-9b76-c579f2bb059d", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d05da0e-fcdb-4b11-882d-7dbb83780286", "sighting_of_ref": "indicator--89ba1f2d-9a60-4cfe-9b76-c579f2bb059d", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b35f54e4-7567-4e54-a2ab-c0377fa1f58d", "sighting_of_ref": "indicator--31176f40-a970-45f7-bf89-898d678d6c61", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--348c889e-d0df-4869-8ad0-94055997f65d", "sighting_of_ref": "indicator--8523f2ca-8a1d-44d4-8129-045086e47d6a", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2b0ebcc-9c88-4119-b245-7b45f0e12489", "sighting_of_ref": "indicator--8e53cc95-eefe-4bd6-8311-9501790685d3", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50872a6f-0785-4c9a-9cd6-a73aadfd68cf", "sighting_of_ref": "indicator--8e53cc95-eefe-4bd6-8311-9501790685d3", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2096e378-8bbd-479d-a353-947e2737ffea", "sighting_of_ref": "indicator--8e53cc95-eefe-4bd6-8311-9501790685d3", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23037098-a41b-4c29-8b2a-2fe0fdaf7341", "sighting_of_ref": "indicator--e62218be-f237-4487-9969-c72862d24f77", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1221dc1-118a-4dfc-943e-a66a8c797027", "sighting_of_ref": "indicator--e62218be-f237-4487-9969-c72862d24f77", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d1478f0-13d4-4878-8f14-a4c7f2a1bb87", "sighting_of_ref": "indicator--e62218be-f237-4487-9969-c72862d24f77", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57b5e6c8-34bb-49de-80e9-96a4b9d31779", "sighting_of_ref": "indicator--bbdfde62-9fec-4b46-9a27-e852aa91dbcc", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcd283b2-a7e9-4293-81bf-d284e2dd4c74", "sighting_of_ref": "indicator--bbdfde62-9fec-4b46-9a27-e852aa91dbcc", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6b409e2-8a25-4dc7-bd5c-bdce2f919563", "sighting_of_ref": "indicator--bbdfde62-9fec-4b46-9a27-e852aa91dbcc", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbcf28b5-2b69-472d-b4db-0cba3191e849", "sighting_of_ref": "indicator--a66a4f07-874c-4914-a31b-0884a0769ff3", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4551898-1e11-4e69-a7ee-52f848754798", "sighting_of_ref": "indicator--23e0aa20-a774-42e9-b9aa-6886c99b3512", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59ec122f-1f0a-4837-8745-6f5e81aa98ad", "sighting_of_ref": "indicator--23e0aa20-a774-42e9-b9aa-6886c99b3512", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bfc5ff9-fc9f-4b81-adad-a48f25a7eabb", "sighting_of_ref": "indicator--6973f6bb-84c6-4193-8d44-a18da92e37ca", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a65cfcbc-5481-437f-93e7-68bdf9ae4d9d", "sighting_of_ref": "indicator--6973f6bb-84c6-4193-8d44-a18da92e37ca", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e1c7592-f5f4-48c1-962f-6f04c7c13cbe", "sighting_of_ref": "indicator--6973f6bb-84c6-4193-8d44-a18da92e37ca", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6fc832f-fc63-4cdd-a8c8-6487c90ec3b1", "sighting_of_ref": "indicator--93e29562-e784-4316-ad56-79a5632556c0", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5521a3cb-745e-4213-8267-a170ba8941cb", "sighting_of_ref": "indicator--af649d9f-9277-4ea8-8122-0bd03606b5f0", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--263c9d47-e486-4734-9222-95e2a803845b", "sighting_of_ref": "indicator--78bb9d58-74b6-4866-adef-d405d372e54e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1105dd76-7ef3-4c0c-86f4-e42e010b760c", "sighting_of_ref": "indicator--26dd2fe9-5be9-476d-86ad-c0632f9eebc6", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33eca4cb-3a42-422a-8a40-b933e1538366", "sighting_of_ref": "indicator--26dd2fe9-5be9-476d-86ad-c0632f9eebc6", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--beb9c844-14a8-4f82-83bf-e0b783acf90d", "sighting_of_ref": "indicator--b16d7985-ccba-4d90-a2d4-42b3ad6a1dc0", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--780c41ed-8b41-43fa-802d-23f7de9d2b06", "sighting_of_ref": "indicator--b16d7985-ccba-4d90-a2d4-42b3ad6a1dc0", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61c84a49-5c41-436e-a74b-43afbbe9768c", "sighting_of_ref": "indicator--b16d7985-ccba-4d90-a2d4-42b3ad6a1dc0", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65d61aef-1ead-452b-b5c9-d6a57be4147a", "sighting_of_ref": "indicator--f870b948-3bcb-490b-b4d8-c64fe86c4a5d", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c28951cf-cad6-400e-864d-8058fcdd7a5d", "sighting_of_ref": "indicator--f870b948-3bcb-490b-b4d8-c64fe86c4a5d", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0038d1f-a737-4216-8028-d031fb100161", "sighting_of_ref": "indicator--f870b948-3bcb-490b-b4d8-c64fe86c4a5d", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f41dc21b-9b4d-461d-837c-05373862a0b4", "sighting_of_ref": "indicator--0d5d71b7-ad80-485c-9f74-f5570ccf4e68", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3995745c-7d47-4dfc-af55-2f800c9174f3", "sighting_of_ref": "indicator--aecdf5a3-387b-462a-8999-f05a0be6ad74", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89ed27a8-2e82-4234-8169-614eec0d9cbf", "sighting_of_ref": "indicator--aecdf5a3-387b-462a-8999-f05a0be6ad74", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--078ea0bd-94c2-4393-a066-6a4d05272b19", "sighting_of_ref": "indicator--118190e1-4b55-40cf-af9c-3b766d19b201", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5a65549-12d0-4ce6-a298-7b4425b60158", "sighting_of_ref": "indicator--118190e1-4b55-40cf-af9c-3b766d19b201", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--213be53d-e46f-40e5-b1bb-a61b3248e65b", "sighting_of_ref": "indicator--118190e1-4b55-40cf-af9c-3b766d19b201", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6334cf42-0e58-4c18-b847-cf670556c3d6", "sighting_of_ref": "indicator--c936f64a-c941-40cc-a0b1-3ff9ff422a42", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d843e884-3494-4f21-8a10-ad97f125273f", "sighting_of_ref": "indicator--64c8214d-7b4b-41da-8ac9-5150d351914d", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c4a09d3-220f-43e2-a531-7cc58e78372b", "sighting_of_ref": "indicator--64c8214d-7b4b-41da-8ac9-5150d351914d", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f80826fc-d08c-479f-8650-a888b7e333bc", "sighting_of_ref": "indicator--d225d05a-be28-4a1f-9e4d-8deab2b53212", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3f7bfe4-5f4d-41c5-bcab-e8d39746a2bb", "sighting_of_ref": "indicator--d225d05a-be28-4a1f-9e4d-8deab2b53212", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f6af49a-1a9e-4b9b-9f18-3dcd9c052784", "sighting_of_ref": "indicator--05619a32-a39c-4066-a95f-6e979f26fbc0", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30f54ecb-4a0b-4cb0-8a73-3e591a10215b", "sighting_of_ref": "indicator--ad07ce53-b0ab-4bb5-8926-d9140fe85d0e", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c9e4c5f-bf57-41c2-8e82-e0100b06bc94", "sighting_of_ref": "indicator--ad07ce53-b0ab-4bb5-8926-d9140fe85d0e", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40159be2-4bb8-472a-bc9c-5b5241007171", "sighting_of_ref": "indicator--2308b8a7-b73d-4814-ae76-02b0ae65886a", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63e3726e-08bf-4f99-92c9-038d599c1a7b", "sighting_of_ref": "indicator--4e51af15-dedd-4e94-be72-728d813e7f6e", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff00e355-5cbd-408b-b6f3-69fd6f66007b", "sighting_of_ref": "indicator--423fe730-1cf4-458f-808a-6a83f1dab435", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be5a6e58-1c4d-489b-a57e-2226b133fe49", "sighting_of_ref": "indicator--423fe730-1cf4-458f-808a-6a83f1dab435", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1a4190e-e395-4be6-85b2-bd3cad6bdb35", "sighting_of_ref": "indicator--2303ad2c-5d3c-4c99-9b40-8468bd604326", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dbeaa23-21ef-4143-8aca-b2a05bcee3c3", "sighting_of_ref": "indicator--2303ad2c-5d3c-4c99-9b40-8468bd604326", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a1a6a3f-913e-4fca-8599-b45e0b1d57bb", "sighting_of_ref": "indicator--514c85f7-5032-4743-83d1-d4d493b29be4", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7878bd72-c29d-41c3-9dea-6508ee402326", "sighting_of_ref": "indicator--b6d156bd-1990-4f2e-a061-18af38d439a0", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afad3ccc-d8bd-481a-ba88-b74b69ce50e1", "sighting_of_ref": "indicator--9a63661b-7ab0-4aad-8cb4-560488c97008", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a278a766-b5e0-4085-917b-519e62997073", "sighting_of_ref": "indicator--f1f010af-2c93-4bdb-9543-d528e988ac15", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24cb30cd-486f-4394-bc2e-579bc37cc3cc", "sighting_of_ref": "indicator--38d30d8a-50f7-4ba7-b72a-f1d4dedb0064", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4112405b-a3c2-4464-8223-e8fba26d70aa", "sighting_of_ref": "indicator--38d30d8a-50f7-4ba7-b72a-f1d4dedb0064", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d542343-b28c-487f-9ae3-f56ad6c5cf1d", "sighting_of_ref": "indicator--b4bfd593-71c3-4d85-ae84-bf3b17542e35", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--715f0261-25c6-415a-983d-0acbc0d4994b", "sighting_of_ref": "indicator--b4bfd593-71c3-4d85-ae84-bf3b17542e35", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8dbe85a-058c-46ba-924b-c2b4f6dbd20b", "sighting_of_ref": "indicator--bf27bd63-b328-494f-abb1-f0223253a351", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--904d740c-5d25-4588-af13-7d5a473273ae", "sighting_of_ref": "indicator--bf27bd63-b328-494f-abb1-f0223253a351", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--816970cb-f12c-480d-9bab-823868b6c61e", "sighting_of_ref": "indicator--18c454dc-82de-46e5-b45a-417b7a83207b", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39d44a50-19d5-41a7-b9e8-714ae6af5e49", "sighting_of_ref": "indicator--18c454dc-82de-46e5-b45a-417b7a83207b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--690e3230-75e1-4b3e-bba5-c1691083a940", "sighting_of_ref": "indicator--7d5694a9-5e18-4822-b8d4-9a1485625be1", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c4447da-d656-4095-837c-e5f67e7fb78e", "sighting_of_ref": "indicator--c092eac7-96b5-4efe-84e2-19e94f7b40ca", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5d0322b-857e-41bb-8472-41f2191eaca4", "sighting_of_ref": "indicator--758fa2b7-dd1c-4417-88c4-c7dd97473722", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3b04da6-54d3-411e-ac77-ffcf7cafcef3", "sighting_of_ref": "indicator--9f500034-e14f-4805-b73c-0affa5d7019a", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6a9bd64-8053-4183-acd8-03bcd3d4031e", "sighting_of_ref": "indicator--9f500034-e14f-4805-b73c-0affa5d7019a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdbb0374-8c35-4aec-8029-2de6d749184b", "sighting_of_ref": "indicator--9f500034-e14f-4805-b73c-0affa5d7019a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b41edf81-36f2-48e2-8de1-f559d9106e55", "sighting_of_ref": "indicator--68e765bb-5aeb-43f8-bd74-5237534f0730", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae922676-cd96-45ad-b737-45e78c0b353c", "sighting_of_ref": "indicator--68e765bb-5aeb-43f8-bd74-5237534f0730", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86175c26-5565-42f9-998f-2fc4b41509f9", "sighting_of_ref": "indicator--68e765bb-5aeb-43f8-bd74-5237534f0730", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--009a77e5-c0f7-4f4b-91a8-9b9ba3b46e41", "sighting_of_ref": "indicator--9ce63e57-333d-4bda-81ba-0d5afea9b5bf", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c91d2bac-1f5f-4c9c-a4ea-107ff07e0b1b", "sighting_of_ref": "indicator--9ce63e57-333d-4bda-81ba-0d5afea9b5bf", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4385ed95-ea64-4001-ad73-34575796e588", "sighting_of_ref": "indicator--6df50e9a-4c31-40ef-a5b5-51054d1b06d8", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ce1ccf9-9b76-4e5e-90d8-0de3f6d60f3e", "sighting_of_ref": "indicator--6df50e9a-4c31-40ef-a5b5-51054d1b06d8", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0693fd23-b908-4dd7-a3e8-1ada1f6adfdb", "sighting_of_ref": "indicator--4d74f870-508e-454b-90c2-f0e64b1403b0", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--282d4bfc-52b1-4733-87d2-fa811631606b", "sighting_of_ref": "indicator--4d74f870-508e-454b-90c2-f0e64b1403b0", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--253cbe5e-cbb2-4a13-b714-bd6937bc3df5", "sighting_of_ref": "indicator--9ac62dba-2764-48c4-a3af-1421e7ffd17a", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3897c851-7df5-4ee2-bd0a-a912e4b66c18", "sighting_of_ref": "indicator--9ac62dba-2764-48c4-a3af-1421e7ffd17a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13790da6-ec06-45ed-a89c-913713c35db7", "sighting_of_ref": "indicator--9ac62dba-2764-48c4-a3af-1421e7ffd17a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34ea1256-ca78-4f29-a3bf-9621dd9e21b6", "sighting_of_ref": "indicator--ce7ee4bd-039c-4150-9e86-bf74ecfb6ce9", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e47e46ab-b76b-4767-993c-2db6f1d9aaea", "sighting_of_ref": "indicator--ce7ee4bd-039c-4150-9e86-bf74ecfb6ce9", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be1d5bf6-2640-437e-b919-c4c0ffa8a609", "sighting_of_ref": "indicator--ce7ee4bd-039c-4150-9e86-bf74ecfb6ce9", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0012e98-6c94-40f0-b880-34ef9dad87a8", "sighting_of_ref": "indicator--e9faa793-dbc1-48b5-b205-a23c82ba677b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2507da6-59e3-4889-a985-1c47963fa320", "sighting_of_ref": "indicator--3d2d93dc-92fc-4e01-81c9-7d8a1bb337d3", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b2771dc-ee97-4743-a26a-eb9a4fa92506", "sighting_of_ref": "indicator--3d2d93dc-92fc-4e01-81c9-7d8a1bb337d3", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1325c580-a15b-4f8e-847a-a9c156624a20", "sighting_of_ref": "indicator--4e04dae9-0755-4056-80fb-3f8c9af210a8", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bec4cba-d680-40e7-a87c-4d31ea551206", "sighting_of_ref": "indicator--1b45a39d-e6b8-46e5-8d9a-2d8d4a9cbf77", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbdaf016-023f-47d7-8939-f6b5ab834e90", "sighting_of_ref": "indicator--0657aed1-df25-4eda-8275-fbf0c081339e", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14bd21cb-6fad-4f2a-9c8a-59ded0069b53", "sighting_of_ref": "indicator--0657aed1-df25-4eda-8275-fbf0c081339e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5db2092-093a-4b5e-b813-6d12689048a6", "sighting_of_ref": "indicator--0657aed1-df25-4eda-8275-fbf0c081339e", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33a3ba1b-efaf-4f4d-aadd-b9f19eefc1d3", "sighting_of_ref": "indicator--3fff383e-0261-4003-89dd-40acb2b0d7aa", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14782f21-99db-4a04-92b0-7df07b19c6fa", "sighting_of_ref": "indicator--e75b39b2-c0b0-45ec-ac59-ec38cf3c529f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2abea269-7243-49fb-8ec6-37248cc0aeaf", "sighting_of_ref": "indicator--e75b39b2-c0b0-45ec-ac59-ec38cf3c529f", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48c001fa-5f90-4a49-be30-c1fe01308814", "sighting_of_ref": "indicator--ea0bd32a-ddbf-40f0-a3d4-fded0e66d1c6", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee28f3dc-a023-4211-9b1a-e0edf3bf7b04", "sighting_of_ref": "indicator--e1fce0ed-190f-4ef5-9e63-76cf1add3b23", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb8cda0a-72b0-4dee-b7c7-f0b875abdf68", "sighting_of_ref": "indicator--f1d59822-0fe3-4b9c-bea6-481243d5897b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c32fa07e-8018-4545-8cc3-53bc5eb049ce", "sighting_of_ref": "indicator--6d06345c-b02a-4d8b-b589-10e32b008ed1", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92119caa-85d5-40ed-ba68-d1896ab36a87", "sighting_of_ref": "indicator--a7899c4e-a15e-4460-9bc5-a42672390476", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c18346dc-6714-44e3-b678-a0cb566da682", "sighting_of_ref": "indicator--318644ef-3040-4266-bca2-e5e6ee0e5dd6", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c03c9680-10ed-4f25-88d9-2ed008f42945", "sighting_of_ref": "indicator--318644ef-3040-4266-bca2-e5e6ee0e5dd6", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6b243de-9bf9-4c57-b722-fc974dbb25b3", "sighting_of_ref": "indicator--a120c7e2-597f-4073-b7e7-d32c17296eaa", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a78f4f8-471c-4a07-ad64-69f65bfb9828", "sighting_of_ref": "indicator--a120c7e2-597f-4073-b7e7-d32c17296eaa", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f3fc410-bcf2-4e6e-b8b6-b1169590df01", "sighting_of_ref": "indicator--29bf642a-9364-4f4b-a169-bb1c51274079", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3df399bf-266d-49db-b52b-af28011b35e9", "sighting_of_ref": "indicator--9381c7d6-ae88-462f-9ea7-8e5cf6cfe6f3", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c8e57a4-720c-4347-b627-e2e6e5b7f2d4", "sighting_of_ref": "indicator--9381c7d6-ae88-462f-9ea7-8e5cf6cfe6f3", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12a470f5-55d7-447d-b5c8-3a73687635a3", "sighting_of_ref": "indicator--2d8959af-6764-4149-85e4-b023d245b361", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a03d5c0-f1ce-48cf-9ef3-805dcaf9abd6", "sighting_of_ref": "indicator--429776b1-5602-4bab-bc53-d162f7d9eacc", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fb29e93-4837-4081-94de-1ddd49970061", "sighting_of_ref": "indicator--1e3b54c7-1a3d-4cd2-a67d-c6f103c2de6c", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9953d70c-53b0-4f46-93ae-1e8cccad5b6c", "sighting_of_ref": "indicator--1e3b54c7-1a3d-4cd2-a67d-c6f103c2de6c", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9cc5b88-cbf7-4ea2-86c7-a8219ec2a588", "sighting_of_ref": "indicator--1e3b54c7-1a3d-4cd2-a67d-c6f103c2de6c", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12304f13-7ea9-45fe-bd68-c987f317a338", "sighting_of_ref": "indicator--f52b7418-5ecb-4ca6-a05e-93e3c0ab85b3", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e06c723-d10b-4eee-9652-f64d68545a64", "sighting_of_ref": "indicator--f52b7418-5ecb-4ca6-a05e-93e3c0ab85b3", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cf9a74d-fe8c-41e3-b6c6-208a9f0242b7", "sighting_of_ref": "indicator--f52b7418-5ecb-4ca6-a05e-93e3c0ab85b3", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c61ccb6f-a01b-4ceb-b31e-6b95b901ab1a", "sighting_of_ref": "indicator--643036f5-6769-44c5-b548-31628370f0b8", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c0e4290-326f-49f6-a57f-8937cd2b64c2", "sighting_of_ref": "indicator--909e0e47-0256-447d-90be-56d84f401bcf", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e630a43-ae1d-4e59-8b3b-291dd3af06cd", "sighting_of_ref": "indicator--f6339874-1758-423d-9b5e-ddf0e5eb9f1b", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a209a20-fdf9-45bb-8ea4-1f80b6183013", "sighting_of_ref": "indicator--f6339874-1758-423d-9b5e-ddf0e5eb9f1b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e326c375-3ce3-47b5-ba76-1d7aefeccdba", "sighting_of_ref": "indicator--9c4ffb1f-48dd-4678-9d4f-d2534978a0b0", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54e83bc0-7e47-44ff-a9a6-d4e414d85e75", "sighting_of_ref": "indicator--9c4ffb1f-48dd-4678-9d4f-d2534978a0b0", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da6597a6-d0bd-4bd7-84aa-b2219586e926", "sighting_of_ref": "indicator--9c4ffb1f-48dd-4678-9d4f-d2534978a0b0", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--510d3b8d-6c1e-448a-9fed-9e17ae18d70e", "sighting_of_ref": "indicator--b893ab3d-46bc-47f7-85ab-90db310cb868", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dbdb166-2157-4c1a-a3ac-7819f58a488a", "sighting_of_ref": "indicator--7b8c5ed9-da86-450a-a81a-f883b0801e37", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75308bf9-5572-4c14-ac7f-30209342aab6", "sighting_of_ref": "indicator--08833887-7d4e-4f2f-97d0-cd42d92b61ea", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adb98e95-d42b-49d3-9531-373d19fdc70f", "sighting_of_ref": "indicator--4df64024-9752-4249-9a18-16e0b69c3115", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f99be42-152d-4ea8-aa64-2deb37d6f6c2", "sighting_of_ref": "indicator--6103b0c0-b0e4-4bef-a8f5-382e5486acae", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59c5ccb8-dfb1-4fa0-86fd-5a8401611d86", "sighting_of_ref": "indicator--bd0ff2e7-1bc1-4a81-9c34-35ab7024704a", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c24c2375-5d79-426a-a62f-6a4ced032f1c", "sighting_of_ref": "indicator--bd0ff2e7-1bc1-4a81-9c34-35ab7024704a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--542c60e7-8d02-420e-8675-ab68db75f825", "sighting_of_ref": "indicator--39490fb7-2aa1-45e2-9843-d3b5f8a4a56d", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc7733f9-a8ed-45d8-af51-48cdfa90f12f", "sighting_of_ref": "indicator--ad612f12-9dd0-49e1-ac90-fe9204aadf2e", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d01e7086-1b65-4328-b3de-0d4fef4bf47d", "sighting_of_ref": "indicator--9debe698-3567-4e93-bc49-e9ebbc299b56", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67f9835c-f5e2-42c9-a049-fab56e6d6858", "sighting_of_ref": "indicator--9c43cedd-ab53-4a93-a6d3-d80a06f40c40", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62be3cda-1a9f-4f76-a71f-8999b39da115", "sighting_of_ref": "indicator--9c43cedd-ab53-4a93-a6d3-d80a06f40c40", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fe1fea1-afff-4c3b-8bad-dc6215dcbfdd", "sighting_of_ref": "indicator--6a9295a9-489f-4cb1-849f-925c34e86de2", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac9a9bdc-6488-4544-b695-3dc6a0e03b0c", "sighting_of_ref": "indicator--3edb6ab2-dab0-4e8b-a0cc-58365ed55e46", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8c4c5bc-ce2a-40a0-8640-dfbb7f52f97d", "sighting_of_ref": "indicator--3edb6ab2-dab0-4e8b-a0cc-58365ed55e46", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bddd32dc-4398-40c3-b1a3-92fec87a2d64", "sighting_of_ref": "indicator--0160426b-bf4b-48de-9312-25f42604bb0d", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65214d30-0eee-4db4-867b-f3e0b8216967", "sighting_of_ref": "indicator--554a7c7a-0949-4c2e-86ad-b77e579e8095", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbe4efc3-9a0b-4ec1-bacb-a167b030b044", "sighting_of_ref": "indicator--8a434392-c394-476f-9262-68afdf0d84fa", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab2f0238-d752-49ff-8d4e-a8a54313663e", "sighting_of_ref": "indicator--0d65089a-3627-4daa-9a50-80c4390c9717", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07de24d2-6d23-42a5-a79a-74e49f826408", "sighting_of_ref": "indicator--5480506b-e97f-4b0e-8e91-c8734c14a49a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3da424cf-e8ec-4f53-9a7a-681b96ec70b4", "sighting_of_ref": "indicator--1c3b704a-132c-40a1-baad-1f0907bfe5ff", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74cc02c0-9225-4b5d-b79b-8d650cfdd322", "sighting_of_ref": "indicator--6981aa18-4018-41c9-9d0d-942c927f07d1", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf3a0341-a361-4007-ab9e-4e818a8fb2d8", "sighting_of_ref": "indicator--596cc696-b338-486c-a0f7-95850fe0a7d0", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25aa8a6d-f232-41a6-8683-19aec5207eab", "sighting_of_ref": "indicator--d3c5dce9-c196-4966-a09d-aa388f4a805e", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b676017-6f4f-4cc7-b704-7ce06c640ef5", "sighting_of_ref": "indicator--c1624578-cd77-43fe-a8b5-afc0e2b335ca", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6048d555-cc0b-4bd2-bb0b-3417bc1027e0", "sighting_of_ref": "indicator--dfc10e59-7085-4187-90c2-39a2db7f8cb1", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ca95eb0-521c-4fea-9c63-86a528b08762", "sighting_of_ref": "indicator--76521523-073d-4ee8-9233-601b329e3e98", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d454fab-dd92-4ef0-a46f-29645058508a", "sighting_of_ref": "indicator--9fa84c8b-46c5-4c94-af17-0d48321230a9", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b6320b7-c6f9-4894-8493-d956e1a6f6f4", "sighting_of_ref": "indicator--8ee8d999-7775-4231-aad8-dc591d3c2357", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00b8d643-61de-4a49-b42a-8c50d631a252", "sighting_of_ref": "indicator--4a46731a-cbe5-415f-9ec2-c2300126f73a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b96c6166-6b21-4ac1-907d-b5f8d1f7a906", "sighting_of_ref": "indicator--c10463f1-b2e8-4990-987b-f8377d80f1ea", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77c0e789-820f-47e8-8d64-8ec68f83064f", "sighting_of_ref": "indicator--c10463f1-b2e8-4990-987b-f8377d80f1ea", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b658f6b6-5a59-40c6-afda-4436c47ea1e8", "sighting_of_ref": "indicator--2fca5a4a-a0d0-4847-9825-347afe49d4fc", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--919ff9a7-babc-4163-a7f8-310ed04658bb", "sighting_of_ref": "indicator--c6d2c0ca-d507-4767-9aa9-3b7329a76ed3", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93a5fbe3-668c-40ba-945b-08964c2f3691", "sighting_of_ref": "indicator--55ae9d34-965a-4752-a8fa-a86eb78d4c53", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35c18c17-c0e0-416e-854c-66eef8e76e83", "sighting_of_ref": "indicator--566c8ea7-1d55-4a71-bbed-346a762a1250", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b48c2f9-ab2e-4245-be52-dc1eb3e512d3", "sighting_of_ref": "indicator--4ef19de4-828a-45fe-bfa3-1f893b478203", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6ac636b-7562-40d2-8e89-d51244716016", "sighting_of_ref": "indicator--b6b5746a-f376-4576-bab7-517a34cc5692", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab76a82c-d6d4-4b62-90ea-e0bf5bfb0d7b", "sighting_of_ref": "indicator--6da0eb46-23b9-4a54-8b3b-e9c2117218b9", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75a660b7-bbf6-454d-b6c1-7d3705f3912b", "sighting_of_ref": "indicator--6046c4e1-f2ba-43cb-b301-8d19c7a71d8f", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df68d3e6-d239-4e97-b158-0c69647bfd9e", "sighting_of_ref": "indicator--b77bf20e-6954-428c-9a27-757706104a9c", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2713f20e-0d21-4d65-82e3-8712f8d4e152", "sighting_of_ref": "indicator--ac5923bb-d3a8-4097-be54-376c6f639142", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc376350-ff32-464f-964d-91e010c3547d", "sighting_of_ref": "indicator--92d9e023-c6ca-4935-8613-2f685871fb70", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--467ff1c9-efab-4926-889b-0e38b20aedc7", "sighting_of_ref": "indicator--e4684d39-bbd4-4c5e-9038-c5c15f572f25", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1eaa64b5-454c-4afb-8aeb-9c9d912a1d76", "sighting_of_ref": "indicator--10911ec3-c143-4a91-ad27-5698d0ddfba5", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4c3278e-d252-403b-9532-d4eda22c76a0", "sighting_of_ref": "indicator--27fc7662-7a9d-4d3c-9f6e-296376a59e8f", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e07f1a9c-45a0-45ae-ad29-1c870a1cb2a6", "sighting_of_ref": "indicator--27fc7662-7a9d-4d3c-9f6e-296376a59e8f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c56fae29-3d84-418f-84e0-24d0f0e92b4b", "sighting_of_ref": "indicator--b3adc969-baa4-440b-a2e9-ee928153b62f", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd4d5878-7a73-41dc-adf9-11ba48c34d7c", "sighting_of_ref": "indicator--b3adc969-baa4-440b-a2e9-ee928153b62f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3781e1b5-c192-47c3-93ea-e7ad97c137d8", "sighting_of_ref": "indicator--1f979a23-1ac3-4648-9ee3-e6ea4e225aaf", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c205e531-dddb-4f93-8e01-5b0da48f1a5e", "sighting_of_ref": "indicator--102e1e96-d943-4318-9c56-e2610310ef26", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a486160-5562-488d-82e2-3b63cf7eba8a", "sighting_of_ref": "indicator--102e1e96-d943-4318-9c56-e2610310ef26", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d0f8996-3f52-418a-ac17-f5f0d67f44d2", "sighting_of_ref": "indicator--116be252-7841-45c5-82e8-36c0d7affe6c", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a9040b4-15a7-45e3-b408-09771e1acf3d", "sighting_of_ref": "indicator--dfdbe9b4-e932-44cf-ad57-846c2c53e084", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c7a5f52-01f4-4ef7-bc9e-243430a17e27", "sighting_of_ref": "indicator--7d3a4f8f-7825-4ec4-82db-17faf7691b65", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--707d6be7-3c1f-4dea-b6aa-cd185e870064", "sighting_of_ref": "indicator--d96334a9-a0ee-470b-b16b-78bdace7a905", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e513f189-4f84-4e17-b572-f4b100115975", "sighting_of_ref": "indicator--7319eb30-c1d7-4d9b-abbc-b48ca789fc66", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6eedc4f4-3459-4913-9527-8b4d89b3eb9c", "sighting_of_ref": "indicator--ce94327c-3cf4-4347-b6c9-d0e543eecd9f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59620d32-830d-4745-9d77-7c2ea2ad8c09", "sighting_of_ref": "indicator--88ede0f7-f528-4754-8793-ffe83da17574", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b52a5528-01d1-4d7d-9f66-4e1b05c9be5e", "sighting_of_ref": "indicator--66753064-7d42-4c0b-a702-d77ac4c4c4ed", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fc42c34-0d4d-48b3-8c0e-98c6dd80d6e1", "sighting_of_ref": "indicator--63f61ee2-2a57-470e-ae37-3bfec98b32cb", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdb0209c-b23d-4a6e-846c-a414bb364803", "sighting_of_ref": "indicator--1e78ff06-01c0-4798-b208-0d14aff9e217", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8453f15b-2738-415e-8ceb-55a9f4f6cc77", "sighting_of_ref": "indicator--e9214ab2-8a12-4fae-bc15-a72bf00190be", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00b272fe-761b-40ea-9479-54d10aaac495", "sighting_of_ref": "indicator--f3ba9652-3257-43fa-9bf0-0afb54b29ab7", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--991928b1-93f3-45e3-970e-7fc6d2bd8f71", "sighting_of_ref": "indicator--2d573a43-5061-461c-8d85-0872425cc228", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f70f35a4-fd45-4755-b31a-8c5454ca2254", "sighting_of_ref": "indicator--fd8335fe-9b3c-47ec-a629-cfb32635dff6", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fdb71e7-6fa7-48f9-b044-eff232a3e95b", "sighting_of_ref": "indicator--4206b254-8168-41d1-a853-9c0fdc4d6ead", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f05504be-2d6d-4a80-a464-f5ce3a7660be", "sighting_of_ref": "indicator--039b0814-9511-4781-8e9c-b337066eea2e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d22c0e07-8e68-4b78-8a59-f5258bde3b9b", "sighting_of_ref": "indicator--2874a9c2-2926-4403-8d26-a95ccc660ddb", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64c6ae7c-262b-4866-b1d7-3778219d73e8", "sighting_of_ref": "indicator--09db1216-e1b8-4661-ae56-7f31a624722d", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76e40e32-d421-432e-b330-e6f131a19b2c", "sighting_of_ref": "indicator--210ba528-66b6-4bb4-9708-5aa3a601001b", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad001718-4926-4a20-829d-84c449ad9226", "sighting_of_ref": "indicator--43d51844-e6f6-4ca2-a99c-e1b38523f1eb", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80385e06-9065-4e90-862e-9ef538855c36", "sighting_of_ref": "indicator--4ed5cba1-8c30-4c7d-bca8-0b1313709053", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a84f26e9-3817-4408-89d4-8f0a4acf2204", "sighting_of_ref": "indicator--7179dd9e-3d82-4cfc-bcf1-202a6eb936da", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15882983-1955-404c-93a5-3e89a186885a", "sighting_of_ref": "indicator--ec1b38be-41e5-49ef-a32e-2ffc8e83b116", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6d9a970-f1f6-4f23-b317-db7f163ea437", "sighting_of_ref": "indicator--0346770d-2c9b-469d-8ae3-1d8113b96ef7", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2efee6f3-1caf-4adc-a563-4765081b11a2", "sighting_of_ref": "indicator--ec905f45-8f1d-4cb1-9be6-f4ba42254e24", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba0defab-d40d-49f1-a590-23281c3bcfcf", "sighting_of_ref": "indicator--91998ef0-82ec-4dd8-ba9c-18cf3c1a25c9", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--371bcb82-2a84-4d34-9d24-47d468daac80", "sighting_of_ref": "indicator--492d7380-11aa-4608-a516-aef0e85ff220", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5eeb4323-a32c-4955-ac47-098940820f36", "sighting_of_ref": "indicator--492d7380-11aa-4608-a516-aef0e85ff220", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--066eff9d-662a-426f-aee3-5c9aa7e45d5a", "sighting_of_ref": "indicator--813f9dad-27c9-4e53-8b03-fd505ba9b7e1", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a856cfc-8e92-4441-b456-1e4b024b31c4", "sighting_of_ref": "indicator--0cdec12d-601c-44d4-86bb-70172c36ad03", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99257628-5cd5-42dd-9941-7a9a6c26cf7c", "sighting_of_ref": "indicator--a8db4e87-efe6-4ad1-9bae-84eacfcfb389", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f961078b-c973-442e-8bd9-4c2d3a010da6", "sighting_of_ref": "indicator--2141ec67-152b-4eda-8c78-3c63515b0e79", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38b5e7d1-6fb8-48c2-a16b-11ca573bb30f", "sighting_of_ref": "indicator--f1603b7d-e35f-41fe-808c-5e569ef23aa8", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e25535e3-be9b-4e10-9ed6-498e61ccb232", "sighting_of_ref": "indicator--20dab0a5-89b9-4e00-9a02-e67d2cc0ea3a", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3057b4db-02ed-4a37-8157-f8b8a176e95d", "sighting_of_ref": "indicator--c5528b8a-1c61-4212-a935-5955de4300b3", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb6b88b6-d492-4822-94a1-0846d0bc77c5", "sighting_of_ref": "indicator--040fe8bd-e101-457d-a966-028a5637505a", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--380e80a8-6cd7-4c43-9358-174eb2d0cc06", "sighting_of_ref": "indicator--d5e1be1c-2787-430a-af10-4ae7a571b3ec", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--324985d6-229f-4f5d-8c8d-987f588f9e46", "sighting_of_ref": "indicator--cf36270e-787b-4fab-92fc-c93f3d6bc958", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ab74b26-9a70-4ff7-af0c-c37a87833a32", "sighting_of_ref": "indicator--52f50743-a831-479e-9f15-57e3f7e69970", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58d1f663-ce3d-4ba9-bf7a-357b447c4dbc", "sighting_of_ref": "indicator--7538df34-212c-4cb2-9f85-e708834a118c", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbacc78e-e9e6-481c-b2fc-1c9576d00e32", "sighting_of_ref": "indicator--568f4692-c498-400a-b088-faf8a9c62f10", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a2d6bf6-f243-4ff0-9c81-cc069487467f", "sighting_of_ref": "indicator--64ef4335-95ec-4efd-8f97-4736740fedd7", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b9c0380-33d9-46da-87f3-c52118ef5419", "sighting_of_ref": "indicator--ec7f2617-dd9c-41df-9f20-e10981b9592a", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--313c5793-21a8-4b8d-8b68-99d45e98b138", "sighting_of_ref": "indicator--dda25cfd-b9c5-4a59-b256-ab01d69e25bb", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3a323c2-1217-491b-8252-fc89399aa601", "sighting_of_ref": "indicator--2fe457c5-d54c-490e-af83-2f5e01d9147f", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75fdf446-ea9b-4236-a973-ca1bfa5e8ea0", "sighting_of_ref": "indicator--6b0c8a12-a5a5-4b3c-bc73-a195e5b9d460", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f423308-5e50-4f33-9e18-ededa7dccb4e", "sighting_of_ref": "indicator--b7891567-0bdb-471b-a380-f6e713103856", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfe5440b-0061-4604-bbc5-b47587dba953", "sighting_of_ref": "indicator--51d50a88-560e-4419-8baf-d91493c4645a", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47a2e6fc-8687-442d-895f-7ae4c38cfefa", "sighting_of_ref": "indicator--51d50a88-560e-4419-8baf-d91493c4645a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08911fe9-36a8-4fb6-aa42-fb0df7be3acf", "sighting_of_ref": "indicator--e009655f-859c-481e-92d0-421febc503c1", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f65c67e-7c7f-4a70-a824-321be08da91c", "sighting_of_ref": "indicator--2cf6d606-db2c-450b-b73d-ca44de8eb382", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfac5840-7900-4d14-b504-cbf041be553a", "sighting_of_ref": "indicator--2cf6d606-db2c-450b-b73d-ca44de8eb382", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9aab0819-61d5-4b97-88ae-8a1d59484432", "sighting_of_ref": "indicator--75246c09-e01d-4e0f-84d6-c09d90fd7074", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c899d26-5b79-49d9-858b-5bb7bdaff1cc", "sighting_of_ref": "indicator--f6f23921-e8fc-463c-8206-ce2c8ab336e2", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69024086-8ba4-413e-8ede-70a7d879cb93", "sighting_of_ref": "indicator--9b36c056-472d-4b63-89df-0b5fd3767398", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67a380dc-57cc-4568-9f99-5863a86d961e", "sighting_of_ref": "indicator--bf9786d3-67da-4d17-9cf2-334f6d57a210", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd771416-66b1-4f8d-9f58-f4c07bad7944", "sighting_of_ref": "indicator--42578bd6-12e8-4216-a571-62aed591bd19", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9481ab14-dc8f-4ae4-9a71-4d37c0afc316", "sighting_of_ref": "indicator--98493750-025b-49ea-a0e3-326ef2a23e81", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9b0f9d9-c527-4124-8c0d-21b3f5a409a7", "sighting_of_ref": "indicator--a771543f-e58f-4534-a2fd-7acde6abd7e6", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4500852-3eba-43bb-89a9-cac58694d05c", "sighting_of_ref": "indicator--110b6c00-3359-456b-b429-5211a798726b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5488fea-b1e2-488c-aa6a-888ae0cc5c2f", "sighting_of_ref": "indicator--3eee4567-62bc-409a-b41d-674e177563de", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df0c094a-0595-475e-bbbd-d9293c36f7ba", "sighting_of_ref": "indicator--dbb1e3fd-b2dd-45a8-a6bd-ff1cb0472628", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--561b1c35-a6f7-4aab-98dc-c1ffdbcd7373", "sighting_of_ref": "indicator--5163d86a-c27a-4c1b-bb3e-69c793cb1dee", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9223817-927c-43d5-b9fa-2d211ad8c8ad", "sighting_of_ref": "indicator--eaa17506-a302-45b6-bbe9-4188cfc9d5e0", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee91314c-c45b-4fd6-abbf-b6d7a9cc237e", "sighting_of_ref": "indicator--a64ea2d7-2e45-4ac2-9fe6-c843034d718a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54563360-6dfd-425e-bf41-4efdf03f0049", "sighting_of_ref": "indicator--5491b375-281c-4390-a322-201426754d27", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e62f922d-befc-4b28-b954-1a8380e07fbd", "sighting_of_ref": "indicator--5111e2f6-5c7b-4ada-a13e-7050bd93889e", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4e1f2e5-98ef-465b-b507-547b3493d0ac", "sighting_of_ref": "indicator--630439dd-f95a-4d68-9acd-6f21c501aca0", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91ca941d-3465-4b85-94a7-a63f47728f90", "sighting_of_ref": "indicator--ca65302a-4ad4-4161-a4d0-f08c0e3d3cf6", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8646923-835f-43a1-8cc2-1491035c9abf", "sighting_of_ref": "indicator--0d10dc0a-4a0d-4a71-8179-14f37ea3ffd2", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b2f14a0-b12a-464c-bd04-cb3294c0d72e", "sighting_of_ref": "indicator--74b0a95d-57a6-4d0c-a571-777e3f9a17ca", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e5637e5-3046-4794-9784-a5d2d8b1e35d", "sighting_of_ref": "indicator--f04ff646-6d5b-4769-95b3-4827ef8d3a62", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9079924a-a419-41a7-9239-1443b18b864e", "sighting_of_ref": "indicator--a8e714d9-52e4-4bb7-b5a2-4081cbdc76a3", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c284d537-96a9-4d46-8497-d3ff92f14301", "sighting_of_ref": "indicator--abeb3a20-2f9c-48ad-bfdd-73401876ee74", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54c9060d-0861-479f-9f7e-ff6779852ada", "sighting_of_ref": "indicator--ba21ad3d-b028-4a1c-8edf-91637aec6aa4", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e27b055b-8c7c-40f3-9c6e-11f23099cfd4", "sighting_of_ref": "indicator--e7a5d2de-b337-47a9-aa64-33128717f008", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29b8bda6-4826-4c17-81e9-340dc702892c", "sighting_of_ref": "indicator--d5e9c9c4-d6cd-417a-aa40-c2891009e9eb", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdf05dba-d7a8-4e0d-860c-479f94d3f240", "sighting_of_ref": "indicator--824aaacc-6b3e-4a88-b29e-ed5500394394", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--041fd435-0a88-4565-9ee7-5cd418b4016e", "sighting_of_ref": "indicator--a05968f2-aae0-4030-8ee1-772574dfe97a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70456149-5f37-42f3-9a0f-c106e6fe4dce", "sighting_of_ref": "indicator--dd173d67-db42-458f-964b-e783a496fcc6", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a943dd9e-15d8-44e1-939d-f0cc4b9cbb03", "sighting_of_ref": "indicator--c47bc26e-860b-416f-a14d-4977d753102f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f009a00-c41a-4d90-92d8-8cfb878a3b2c", "sighting_of_ref": "indicator--2c2e58a8-2c91-4ac7-ac49-48e7dc81a5e2", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d11c6356-81a7-4093-9e2e-d9ee57d8981d", "sighting_of_ref": "indicator--c23b39e0-7bcc-4667-a043-bad6775a8d19", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce4b39df-729e-4047-998a-9b6ea934ad91", "sighting_of_ref": "indicator--fe54de93-0f73-499b-bbf0-23e49ac87e5b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b242bd7-1243-4036-adee-18381613d43f", "sighting_of_ref": "indicator--d72d83e4-5096-4227-8c99-ab5478b5cbec", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a256153c-57ff-4f1f-b111-88a5be19dad7", "sighting_of_ref": "indicator--a9415074-8dd5-440c-8a48-be203f3af813", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b169de73-768c-4ad2-abf8-add8acbb52ef", "sighting_of_ref": "indicator--b24563e3-dc14-4613-a966-b9fbcae01bf4", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--546a4b55-55ec-4614-8c8e-b6d6c2f5b809", "sighting_of_ref": "indicator--7ba722e5-ec6b-40da-a7b0-b1e8aeed4f86", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e75a6ac-520b-4960-bc29-0a2f0d88bdea", "sighting_of_ref": "indicator--7ba722e5-ec6b-40da-a7b0-b1e8aeed4f86", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8e9b416-21a0-448b-86fb-2cf475c3ce48", "sighting_of_ref": "indicator--cec51c35-7f20-4abd-8754-9f808f35edd5", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50116ba7-319b-433a-888e-d13a84d21f40", "sighting_of_ref": "indicator--0877cf56-5d2f-4764-9c55-479c5559e81c", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcb0f4ba-54f5-49ff-af4f-4880d136cf5c", "sighting_of_ref": "indicator--4b8b27d4-63bb-443e-a3bd-8578c0c0374f", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11daf5cb-40df-4d05-8acd-3381092ba1df", "sighting_of_ref": "indicator--589f845c-bd90-45a8-bc50-55260f780bd5", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff58721c-73b9-4804-8fa7-92a2d5a48e77", "sighting_of_ref": "indicator--542d99fd-e87f-4603-8b71-7f03aba341f1", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a440927-7b63-411e-a44d-06f5d8d0c4c1", "sighting_of_ref": "indicator--019f6e76-0eb7-4ea0-9eca-a4e7b4902afd", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55fc01b2-c7d6-43d7-a41f-07e3066ce2f4", "sighting_of_ref": "indicator--9a032567-87c8-4766-81a7-610f6ef6c3ab", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef9347fb-5823-4e59-80ae-e120fce672e1", "sighting_of_ref": "indicator--2d3e7a71-72ce-4e07-bbe3-bf578c7203cb", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7242e215-9935-44b4-bd0e-02dec2a24311", "sighting_of_ref": "indicator--fb294307-2cd9-4617-9d0f-ae2fb22c0852", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0df8edf6-2d7f-45dc-8250-da2de3d7898b", "sighting_of_ref": "indicator--0ba6ad2c-101e-4c94-9d13-c95e2c75811b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13098962-7d11-441f-bdd4-011ff67a486c", "sighting_of_ref": "indicator--aaefa80e-cd1b-4ac3-b756-712d279b5488", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a094fbf-c927-4245-9c4e-5721987dbf4e", "sighting_of_ref": "indicator--86bd6742-ddf0-4d8d-bde4-c1896be8e005", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47f880c5-dd4e-4e4e-9cd4-589c5babef95", "sighting_of_ref": "indicator--86bd6742-ddf0-4d8d-bde4-c1896be8e005", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37baf67e-5d2a-426a-956a-630e5056d5e4", "sighting_of_ref": "indicator--eaa511e0-89bb-4135-963f-6291efb5f360", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17037461-cc60-4ae1-9200-3ea4cfea67ac", "sighting_of_ref": "indicator--a08eee63-1506-413b-b0a8-199d1a236b2d", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f093a3c4-fd3b-400c-8d5f-f120c58812d7", "sighting_of_ref": "indicator--797b35ec-bdd3-454f-a57b-4192119d9c9a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26216e05-c12a-418a-b476-d6ded6108f6a", "sighting_of_ref": "indicator--040d62f0-ff47-435b-b82f-8ad59cdb545e", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de6a236c-30d7-490a-84c0-63a8a26d9843", "sighting_of_ref": "indicator--6059a67a-3965-4545-9279-f4d0b939a976", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a283c639-6c66-482d-901c-be1a642c7a29", "sighting_of_ref": "indicator--9b76f747-b047-4654-b2c1-c3c8b9d36fbf", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--307e8dc7-b02c-4b4d-ac5e-2f7fdd01ebec", "sighting_of_ref": "indicator--e72441b3-6062-4fec-a4a9-84252f44ccdd", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c34d99f-7562-49ff-bdaa-ff65de3e9c2c", "sighting_of_ref": "indicator--3f7cdda8-3516-4dc2-93ac-e6879bdb67dd", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e0db539-0a98-464c-91df-6f0ddc267297", "sighting_of_ref": "indicator--1c003677-1cb3-4041-975f-56822fff1f03", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d792945-4ac1-4b1f-8fe9-341d2b910397", "sighting_of_ref": "indicator--017274c8-10ae-493b-8229-8373d0900201", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--405e983f-17eb-45ed-ab13-34082f718c58", "sighting_of_ref": "indicator--73c18c77-612c-45f0-9a9a-1822e688b94a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6983ae32-be71-47c2-993d-4effb07602a5", "sighting_of_ref": "indicator--cf8e6b73-055b-4a90-9ffe-c529d01e1224", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f09d56a-b52b-486a-9d06-061638c37772", "sighting_of_ref": "indicator--0262b0bb-fdf5-446d-81b6-ce045410994b", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41e0eae0-2dfe-49ed-8684-d6f18772bfe9", "sighting_of_ref": "indicator--f358505b-330a-4b3a-89fa-68e1bb8b1c8c", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbbec026-41ee-4196-adc1-e2c338170af9", "sighting_of_ref": "indicator--4fcf52c0-480d-40eb-8b23-c29b2d1a6175", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b627a26e-fdcf-4cd6-b0ea-020cc1ea37bc", "sighting_of_ref": "indicator--9c4f0a5a-8a9e-453d-9daf-69b47362dbb0", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1b8e122-eb0e-45d1-8941-bf7023a8d664", "sighting_of_ref": "indicator--9a333c7c-5e08-4f0e-b42f-dd7454775ef5", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1879645-4b20-43c1-9ac8-3184c5caf5a7", "sighting_of_ref": "indicator--34c7783e-8ee6-40a5-b948-8c30de71afd8", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28c147fc-2739-42af-8344-03fab42dbffc", "sighting_of_ref": "indicator--921c063f-4e34-4c3d-8410-8c1b7d98ad89", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b412c22-9c90-48bc-8fbe-1ec26d965296", "sighting_of_ref": "indicator--7ed5c203-68e9-43c5-9558-c75b4ac1b59c", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--013207bb-18bb-47ae-a9d5-0fd0bf0ec04b", "sighting_of_ref": "indicator--7652f367-ea09-4b78-90e2-f4ad9d489036", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--034902e9-4e4a-42ad-aaa4-cb0dfd6ec7d6", "sighting_of_ref": "indicator--980f8823-aeba-4554-967c-bca389e55135", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d007757f-e3f8-441e-9a16-121e64932c7d", "sighting_of_ref": "indicator--a409b792-1174-4833-a560-4fdbc777ffd1", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71c6e332-0b73-4c81-bf55-712736053dac", "sighting_of_ref": "indicator--da7ae25a-8ce9-43a5-b9ef-36c11a1c5614", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8102633e-8e87-45f9-93c2-49355e36d557", "sighting_of_ref": "indicator--af69696b-e09e-4946-bfe5-22d790c41925", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be57cefb-8ce6-4dbd-bb1c-1c21aad32110", "sighting_of_ref": "indicator--5480fe50-700f-45b3-87d4-c60efac20c83", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72f9ce25-43b2-4fcd-88e0-6eda12bfd4ec", "sighting_of_ref": "indicator--685c5d4f-c4a0-48eb-bec7-b6647dbdca6f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--807f0592-8c66-4f2e-88d1-8da0d4576271", "sighting_of_ref": "indicator--83294ff3-f8d2-4c8c-8deb-7892b07108f1", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3531f638-77de-478a-9e5e-12941c19c551", "sighting_of_ref": "indicator--c8e07b81-4d5a-4ef1-b96b-f217137efc4b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--591f91af-7160-4211-bd7d-645c706b6487", "sighting_of_ref": "indicator--ed25cb31-fd06-48dc-9d7c-5d59accf0957", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0baf7ee6-ba2b-41fb-b31a-7bd6ddf546ea", "sighting_of_ref": "indicator--42c91c40-61d5-4df1-babe-f57ad686f487", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae801877-a109-4ef8-a75c-ca3de90f268d", "sighting_of_ref": "indicator--6d237186-64ef-4ee5-b642-4472baf7e5b2", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcd96df1-cc97-4c48-a78f-6660d0d1171e", "sighting_of_ref": "indicator--03fde639-58d6-4d63-b973-2eacb992ac25", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82997530-cbfa-4d82-a332-d12864d145d0", "sighting_of_ref": "indicator--02fd18cc-0d4b-4d52-b235-6db0acd22711", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f475c94-344e-4239-b7a1-89a0147cb4f7", "sighting_of_ref": "indicator--7f99b4cb-9585-4bda-8fc1-da39db2e9a60", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28749d25-1c96-4b91-8bdf-90916bec21b1", "sighting_of_ref": "indicator--f10db8c1-afb8-474f-9f61-6fe55ab6be1a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6ae4927-556c-4136-b712-afb46f3316b0", "sighting_of_ref": "indicator--07502794-ffc0-4fc3-8590-6c2b35457bb2", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de70c14f-0fff-4551-b2e4-a0b57c4b1a78", "sighting_of_ref": "indicator--07502794-ffc0-4fc3-8590-6c2b35457bb2", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21ce044f-d43a-4846-a65f-f13e2bf0938a", "sighting_of_ref": "indicator--57cda0ec-3b39-42fa-9e44-fbe0e7d45591", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37fcd73e-55fd-46cb-9365-9ed5dbde39c7", "sighting_of_ref": "indicator--9fa385da-3e4a-4720-8bd1-69d4eadbdd84", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70826646-d451-47b5-a597-64bffc680c91", "sighting_of_ref": "indicator--9fa385da-3e4a-4720-8bd1-69d4eadbdd84", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0cfd05c-e7f8-4115-bd0e-33416edaa5dd", "sighting_of_ref": "indicator--073dbb19-9929-48b6-8d72-d0db5a9cae78", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47a55ded-2d59-4a5e-a4b6-58612fcc2ac9", "sighting_of_ref": "indicator--2942dd22-ed6f-4e54-9770-a6720e9d9339", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66db2e5e-238e-4e30-b089-056ea644d93a", "sighting_of_ref": "indicator--8a390d6b-d101-4b49-b89d-0f4305ac57ff", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21e9bdd1-1527-4b8f-9675-2cbdba70f68f", "sighting_of_ref": "indicator--84938446-4c50-432e-8898-fe0ea1be640d", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0654a4d-a169-4e42-83f7-c179f09e7e21", "sighting_of_ref": "indicator--a60e0971-459c-4c59-bbbd-774f6f3e9712", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76dd80dc-1093-4a65-ad0e-ed9a1730690e", "sighting_of_ref": "indicator--a60e0971-459c-4c59-bbbd-774f6f3e9712", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99f450af-0f21-4e32-8370-47463e0d6315", "sighting_of_ref": "indicator--2d88d55e-895b-49a8-9ed3-d2f5038b1c2f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e21780b4-e027-4544-8b0c-153659b9b408", "sighting_of_ref": "indicator--21e77f77-f21a-45a0-8ba9-52bfd9c7e400", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d24f0c2-3485-40d9-9dde-190a9f42a2c9", "sighting_of_ref": "indicator--b3af7023-440d-4cc7-b14a-b1f8e64c3523", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c7e3a37-27d5-437c-9e18-2816e04f5407", "sighting_of_ref": "indicator--c9e88b5d-05ed-4dc5-8874-4c028e408d10", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcea1fb0-e3f0-42c5-8b37-84dfc4a08309", "sighting_of_ref": "indicator--03c45ebd-5b06-43fd-8691-98ab0bbaaee7", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2cbf1a6-511c-4eb9-9640-de73b69fcb44", "sighting_of_ref": "indicator--7b3200c4-efcf-4be2-9bb4-5a777b56a0c3", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f9d540a-793e-4b26-953e-d298ef6c7092", "sighting_of_ref": "indicator--e053db22-4103-45f8-977e-52c43c5c30ab", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ca28b2f-fe28-4547-abc1-92a75608a44c", "sighting_of_ref": "indicator--a4f8919a-3d46-479c-8f0b-ad3109daac75", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--113303e6-2683-40cb-bcde-1932b2e32960", "sighting_of_ref": "indicator--70a19a78-8eab-4ad8-a7d1-a79e2197cb4a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed5d73e8-0d08-4e22-9d6e-67c44664c891", "sighting_of_ref": "indicator--ffcf1e65-bd15-488b-bfbf-9dc232cc9697", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45533899-d76c-4d0b-810a-e5592a100fc7", "sighting_of_ref": "indicator--c41a9ca2-2d0b-4cbb-9922-0673818a7d23", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87af25fc-3832-4df4-8496-f840d3fc61b8", "sighting_of_ref": "indicator--b1312dab-fe86-49ca-93f2-481836de3307", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--993e9108-8269-4920-88f7-7a986db46096", "sighting_of_ref": "indicator--99b6e73e-8ff2-430a-8051-771474d4d8b9", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e97d2818-e3ff-4b42-972c-ba48c350d783", "sighting_of_ref": "indicator--99b6e73e-8ff2-430a-8051-771474d4d8b9", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfc9216e-e26b-4c20-964e-550db99274a0", "sighting_of_ref": "indicator--99b6e73e-8ff2-430a-8051-771474d4d8b9", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97e5a762-f642-49a4-8c58-61bb3a242829", "sighting_of_ref": "indicator--e71d865b-f952-4692-a5cb-16b047888bfa", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37db172b-3908-41ef-85d6-5a2d1cbb6036", "sighting_of_ref": "indicator--ca1adcf6-bce9-4ebe-8437-d47fd8a23448", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d115b41-e415-4af7-8fd4-d6bc33a40959", "sighting_of_ref": "indicator--81ee740c-e89c-443f-8e7f-e9ca7f151000", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9707618-8215-4ddc-a84a-4a72f7c4533a", "sighting_of_ref": "indicator--7962c98e-253d-4995-9809-a1be15e976fa", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c011662-d81b-401a-a86d-bd5f34df3cb5", "sighting_of_ref": "indicator--f318e364-16b3-4458-8712-1a6d2021ae93", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9306917-6a8c-4097-b000-f9a768eeb5e6", "sighting_of_ref": "indicator--3e8bf4c9-a41f-4f92-91ce-cbbde3d3d042", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c47b9aeb-7beb-4213-9d13-104e6e25a20b", "sighting_of_ref": "indicator--cacc92f0-4c2e-4bad-8b1e-61e384c9a529", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bee7129-992f-4847-acad-9620869a5a1c", "sighting_of_ref": "indicator--25fbbf5a-1134-462a-9826-0043facae9c8", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77d55fa7-9946-497f-be47-868f473207f5", "sighting_of_ref": "indicator--78114a32-424e-4881-8001-c9028abfefeb", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8deee71-815a-4dd7-ad0d-97ec5db2ae8d", "sighting_of_ref": "indicator--fef50891-b416-440d-94c5-007398aa3df7", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc701fcd-2f36-4aa1-b4ef-a46802efd12f", "sighting_of_ref": "indicator--db82540d-0572-455b-9b42-e6e99359c14d", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c9cfb92-a189-41aa-982a-6f6bd899d4c2", "sighting_of_ref": "indicator--b04f33d5-eaf6-4d74-a396-1f602a6079ac", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b18008df-f56c-481c-87d1-48a83eba118f", "sighting_of_ref": "indicator--172242ac-93a2-41b8-929c-06bdb8ab57f9", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0218c0e-c2de-454a-b99c-a204cae4d1f6", "sighting_of_ref": "indicator--e6216d00-464c-488f-addb-a8f6df1af7f2", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1e441b8-d0c9-49f3-89a6-c4fc7669886e", "sighting_of_ref": "indicator--2679088f-e8bc-4455-878d-917fe05f5c6e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c320395e-1f25-4a4f-8e54-67236ec2e4c7", "sighting_of_ref": "indicator--3c0a9352-a02e-48a3-bc36-b686bbf316a0", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbd67e41-fad3-4548-80d7-ece37dea9f4e", "sighting_of_ref": "indicator--3ecf7894-21f1-42af-a79b-65b3bf9ae7b0", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82a07f2a-c6f5-40a2-84d2-dbfe0b27b773", "sighting_of_ref": "indicator--eee66b52-22ab-4421-b772-e12070d6b62c", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de02c02f-155d-4f51-ab49-25c7a1976865", "sighting_of_ref": "indicator--337cdde2-940a-4782-9fd0-5af3d4068833", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f767019-5b8b-4519-9fd3-3da004fae1c2", "sighting_of_ref": "indicator--337cdde2-940a-4782-9fd0-5af3d4068833", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75ac334e-8482-4f75-8b47-810e673983b8", "sighting_of_ref": "indicator--92633c4b-f840-4ba3-8b38-a15512cee14c", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1c0cd19-20de-4f51-86ba-3c500938c6d4", "sighting_of_ref": "indicator--49a3abfd-b6f7-4f83-941d-674000e9e816", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea7ac06d-32e2-47fc-ae63-b3eb9bc19ed8", "sighting_of_ref": "indicator--49a3abfd-b6f7-4f83-941d-674000e9e816", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f43387f-a2db-4cb1-8ec6-e6db4fd56f78", "sighting_of_ref": "indicator--f8f341c3-54c5-45e4-851d-e5241e944cb3", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d115af4-751f-406a-8a49-375c489cb08e", "sighting_of_ref": "indicator--2d7e7fc8-ccaa-4299-8c80-19f16368ecfd", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b40ccc6-f3e0-4fb8-8a17-1b6f60bc5b94", "sighting_of_ref": "indicator--2d7e7fc8-ccaa-4299-8c80-19f16368ecfd", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35ac0d12-82d1-48e7-b793-3bfa78c18868", "sighting_of_ref": "indicator--ead9a7aa-f469-40b9-965b-582df7d6b0ff", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8a8e468-46a6-4a2e-b2a8-5272f1a8af9a", "sighting_of_ref": "indicator--9ccb6115-610a-4fc5-b646-1c4accd8804f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a2fd75c-cbc7-438b-a6c5-478fab6d531f", "sighting_of_ref": "indicator--8bc96d4a-dca1-4e04-b60f-f391eb9ef372", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82aeec07-fffd-4a7b-bdc7-4bb94e943cb6", "sighting_of_ref": "indicator--2ea7f100-0a46-4caf-86fb-68c79f4e1f4d", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5375ab8e-77d7-4f1b-a98a-15945055fd10", "sighting_of_ref": "indicator--95da8b1d-b2bf-403d-85aa-83e5ec1c8b5b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d943ebe-7439-4218-acbd-fd2a4c11c390", "sighting_of_ref": "indicator--2c881331-2c4b-4e49-95f8-4e8aca4f42b6", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0a26616-0202-4512-a9d8-67bddb15fbb8", "sighting_of_ref": "indicator--4ba6eef8-839b-4f9f-89f6-08aa550239a9", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbbb0828-04f5-46cb-afea-7cf9c5cd4c67", "sighting_of_ref": "indicator--027b97e6-d024-4d80-8ec4-e22cfc063466", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b25231aa-3bca-4dea-b62e-80d3b8bca520", "sighting_of_ref": "indicator--093f6c55-e2d9-40c6-b62f-bbb15bf69443", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a75ffe0b-3459-4940-b0c1-b63c658ae0c0", "sighting_of_ref": "indicator--6940fb1a-67a0-4bd6-80d9-a4767ffad51e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0541ed67-64a5-4f4f-b224-4336c984a867", "sighting_of_ref": "indicator--83340360-1154-4361-bebb-38686402fc88", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03b8b639-7df2-4a67-a204-e509067ebcc1", "sighting_of_ref": "indicator--26425d50-09f4-4c2b-a334-c533092a54bf", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78200819-3d19-4ab4-922d-6e5f1d9eeba4", "sighting_of_ref": "indicator--c811c44d-4d19-4b99-90d5-dc4b827d5767", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b28ad742-fe1f-402e-abbf-5e40c282aa82", "sighting_of_ref": "indicator--a4fbf585-47c9-4766-9cd4-f9f94b3f2fe4", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--132b7669-8e57-4f38-9e4e-5bce4435fe91", "sighting_of_ref": "indicator--5aa975bd-5e8e-40dd-9928-0ba8b34730e0", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3944c26-8ac8-4064-8a6a-1107c66ded62", "sighting_of_ref": "indicator--7b6d5ea8-eaa5-4c2c-a71e-c580ebaa0a52", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d72a668-ae41-4e19-a2a8-085d8b08415a", "sighting_of_ref": "indicator--ff01ef06-5ad6-47fa-8488-9dd702da0881", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0e8c819-7521-469e-a9d8-9d4dafd013cc", "sighting_of_ref": "indicator--1f6f02ba-7b1b-47d3-86d8-2080b988a06b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f62722a2-6a75-4dc5-b56d-b436b7a85075", "sighting_of_ref": "indicator--39cff8de-ae8d-4131-a3be-b6f0094a9c09", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb6ce189-9e32-4754-9446-55fea70ed782", "sighting_of_ref": "indicator--74dfd7ee-35ee-4a2b-af37-9fbf48ae5648", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dcc84f0-3842-4d70-af3b-45194cc59a36", "sighting_of_ref": "indicator--74dfd7ee-35ee-4a2b-af37-9fbf48ae5648", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e66db6c-8789-422c-bea6-1d2571e0dcec", "sighting_of_ref": "indicator--c5a8c326-4073-4dfe-bf61-0abd802b95c0", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f80c8b61-c3fa-4f9c-941e-ad52086fb20e", "sighting_of_ref": "indicator--2eba9bc2-3b57-4e68-b341-1fb624e79330", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7f9c7ec-88c8-4191-9dd3-7431a1dbc4c7", "sighting_of_ref": "indicator--f16a6474-ddd9-4ed6-af18-622e784de4cc", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c197910f-e070-4ce4-b953-6cc598acb7ba", "sighting_of_ref": "indicator--1dc9aaa7-9bc2-4db4-941b-1b81126a6fe9", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e651daa6-da3d-4d6d-a880-e6b736cf72df", "sighting_of_ref": "indicator--090917ef-4c47-42f0-b0e5-1d739f87fa03", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c697319-3986-4382-b288-80039b8e63a8", "sighting_of_ref": "indicator--592a6ef0-5f2a-46ec-b151-d1c174ae5002", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7be46dec-c994-4c6c-80cf-38603db73453", "sighting_of_ref": "indicator--60a15b17-fd4a-48a8-8dd1-b0b8e97b83a2", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bcef3d0-7b5e-47e9-846f-c9d2fc708701", "sighting_of_ref": "indicator--73fb2bdf-e691-4a8b-8744-1454820fc7cf", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c217acfc-a506-465a-9951-3945f4320e58", "sighting_of_ref": "indicator--52b824f3-758c-4944-991d-b5fc8355200b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afcf796c-5d52-4dbc-82a6-5781e4337f0c", "sighting_of_ref": "indicator--b587fa22-2c23-4f60-81fc-b16c24561486", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d697e8b4-1afb-42dc-94fe-546dd804c054", "sighting_of_ref": "indicator--ea1b6431-7f98-4d9f-983d-e2f286e8395c", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf77fc2b-0b46-4cd2-8333-22b840cb1188", "sighting_of_ref": "indicator--fa513f32-8e79-4c1e-b30f-a1f39b3b8050", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dea61877-9cd7-447a-9f7e-139ec497466f", "sighting_of_ref": "indicator--0c701f84-d58e-45f2-ae09-6ab6aa8d7e49", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2b28ada-1d48-4a53-a1c3-5010c302e594", "sighting_of_ref": "indicator--f3a8233c-cd6f-4b28-a0f8-6e7c264dfb65", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a38f6d8-7f17-4b74-841e-264950240e9b", "sighting_of_ref": "indicator--6a392f3f-57e6-4549-94d5-af36370c27f2", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd080a00-357b-4ebd-bb38-36a4e58695b1", "sighting_of_ref": "indicator--1c161b3c-6108-4de5-b2fa-395d5556d5cf", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f38fb44-a50c-4542-880d-e26de9e83c5c", "sighting_of_ref": "indicator--47c3eddc-83f7-4186-b4f8-cbdba184bf14", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fdc7a3c-a912-4cdc-ae9c-384fc09b706a", "sighting_of_ref": "indicator--01ffa833-b932-42d3-9fca-fd31fa5e9d31", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cac3e34-9b36-45c5-bfc7-2be76878fb3c", "sighting_of_ref": "indicator--10741040-9c85-4d8e-b45d-8dcedb8374e6", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2809443a-b07c-4565-be08-0b518345ffe1", "sighting_of_ref": "indicator--1f5d7b7b-6dc8-48e6-91f1-4a3d3cc3e39d", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d07a8e51-113a-49ee-b61a-d6f95d259cc5", "sighting_of_ref": "indicator--55a56332-11f6-4ad1-9c48-193e544fa5e4", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d05f8fae-41e6-476e-80ef-59a676d3975b", "sighting_of_ref": "indicator--19f8dcc4-5e33-4acb-9078-1a8beeaabe21", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81cf1006-880e-4361-8cd5-6604418a8838", "sighting_of_ref": "indicator--101c8188-1d4d-44af-92d3-186c914699b0", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01cb3fc8-ee12-42cf-89d8-0b3afb2a2d02", "sighting_of_ref": "indicator--660d2567-2208-4363-a85a-053bede9785d", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abc1ebc3-4dfc-4105-abe6-78d2393867b5", "sighting_of_ref": "indicator--508422eb-b2ac-4900-98a3-eb10700e9ac5", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a256bda-9367-4b12-9a9e-cc824175a94f", "sighting_of_ref": "indicator--c5c236de-9464-4df2-8c89-8cf5cb9639cf", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3548f556-8731-4f88-a407-ccb8ae8ff243", "sighting_of_ref": "indicator--c5c236de-9464-4df2-8c89-8cf5cb9639cf", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec6ed284-ae82-4adb-87a8-301d2f3a7d17", "sighting_of_ref": "indicator--b39012fb-d1e7-46c1-9fb2-45e7e206850c", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c504a013-c482-41c9-8188-b6803c287ddf", "sighting_of_ref": "indicator--f046cef0-7383-4fb7-92f4-fe907440ce82", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd9ae2ea-c7b6-4ca9-b419-590d130389ca", "sighting_of_ref": "indicator--3a013f6f-e8c3-4f75-a4a9-3316a2a9f749", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5961e475-d8cb-4895-94b2-d54f0970d8b0", "sighting_of_ref": "indicator--25577a30-a538-4fa2-a98d-93941b0aea65", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f5c9194-2116-4f11-a8e6-9c3a9ee35e0f", "sighting_of_ref": "indicator--25577a30-a538-4fa2-a98d-93941b0aea65", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38adf1fd-563b-4e82-9cf0-4735aaadda11", "sighting_of_ref": "indicator--798c0423-afb4-48bb-80e0-5c4fc3f3361a", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65259379-eaa0-4de9-bf91-be5b4d0b6578", "sighting_of_ref": "indicator--5de25a03-0b62-42e9-89a7-00eefa14f3e5", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--833b7ba0-f249-4d75-9ffd-0e692535b180", "sighting_of_ref": "indicator--3ea92a13-8cda-4903-9619-9f75f291d8db", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e207ad60-c39d-49c3-970b-12f9ce0cf89f", "sighting_of_ref": "indicator--5585144b-8181-4fa8-b066-780f6f478aaa", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb46eebe-5e34-458c-8c42-e12821ed81a4", "sighting_of_ref": "indicator--8315092c-3f8d-45d2-b711-75140e595794", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b2c8a21-95df-4797-b05d-1528e4ef5aa5", "sighting_of_ref": "indicator--051f786d-7016-493a-a97e-d36c5b2d9181", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2264c6a8-9f5a-4423-a422-10ae66ee31d9", "sighting_of_ref": "indicator--0d7f18c5-ac57-4a14-9611-7c1290a54e6f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--721596bf-d29f-4bf2-8376-f6199e0e02b0", "sighting_of_ref": "indicator--9f2fcae0-ab9c-4299-b22c-462f7d784b52", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0647de47-3702-43ce-a022-f1958a36d2b5", "sighting_of_ref": "indicator--d0ab476b-a40a-4ca6-961c-b5c07cc348f6", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--350e844a-078b-41d5-822a-71f5f472c4f0", "sighting_of_ref": "indicator--04594ecb-fd82-4747-a469-ef1ebbc16a77", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06933abb-5981-4f56-a6e0-6c1aed169f5a", "sighting_of_ref": "indicator--268e732a-c411-4cbe-b3cf-c6970154c344", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e335d02f-9b91-4eba-8243-cc980a59e6cb", "sighting_of_ref": "indicator--09e872df-57cc-4f02-af70-79b2f3ca1eb7", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e626dd22-e8bf-4e41-b9f5-76f449f7e1a7", "sighting_of_ref": "indicator--f6f407f3-2c45-40fe-9691-fcb906bc4855", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be28e910-054b-4531-96ba-f8e14d1226c2", "sighting_of_ref": "indicator--c5bca17a-85b5-4efa-8102-b0d5eae275fe", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54d66177-00db-4ee8-8c80-950d07f32b6c", "sighting_of_ref": "indicator--0894803b-25ef-4969-ace2-cc561dbb22bc", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93d5c087-a4f2-41f2-a7da-bc1b2cba8c7a", "sighting_of_ref": "indicator--45c04037-d1a7-466b-9b93-1ee269ff651c", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce67e89b-0930-48e1-9bef-090d19e31c2c", "sighting_of_ref": "indicator--78139776-a952-4894-a3ad-65d39d11fe74", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4dab6e0-c15c-4151-9c86-d03ef78229fe", "sighting_of_ref": "indicator--36a8afea-0010-4ba0-8d61-800e5bf85a90", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c766c652-f19f-4ba4-b320-7cc618a950cd", "sighting_of_ref": "indicator--061ad9a4-4788-4787-99cd-68c7dd119b84", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67443ed8-900d-44ea-8592-c725eb03d8c1", "sighting_of_ref": "indicator--13f075e8-4065-4d7c-8c59-e5fb23626521", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f620bf8-0a42-4f9e-8458-922a8f5f64cb", "sighting_of_ref": "indicator--048e63c0-4e80-4c0f-b520-1ac58d6ac32e", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfc216cb-8b85-469d-a1ac-c3f5d3d97a4d", "sighting_of_ref": "indicator--b8e3b50d-e26d-4ca5-9343-d5ffd7123eab", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--457ea13d-d5cd-401a-a501-f6872e2e52e2", "sighting_of_ref": "indicator--13375bc1-df43-4fa0-af85-2203b6b8e4eb", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d29e1cb2-bc41-4ae2-ae60-d7ef8292d66f", "sighting_of_ref": "indicator--4300eda9-80eb-4a88-865f-49ed56269b5d", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fae5361-9b82-4eea-932b-e3f4b9506366", "sighting_of_ref": "indicator--2491690a-d2b4-4f80-b91b-0b1dde8349b8", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5227d5fb-3c98-4fc2-885b-45c06f76a52e", "sighting_of_ref": "indicator--1736abb8-ffeb-46ca-bd45-cd563ae7ec95", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b13491da-2162-4ab2-bb53-f722e698dc73", "sighting_of_ref": "indicator--c663bcb7-d322-4ec5-bc62-e03d78e1dc43", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8299622-6810-4689-86da-b26a6bc7ff94", "sighting_of_ref": "indicator--f71f08a0-9aa8-4e96-9518-71a1e7fdbf67", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--826b1dc3-20ae-45a9-9409-f87ae60b91e0", "sighting_of_ref": "indicator--3b8d6d23-bae5-4172-b220-935a4859fcc1", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5efcb527-611b-4afe-ab83-c26a42f7d9c8", "sighting_of_ref": "indicator--7e28c6c8-3771-4f0c-b9c1-3fe89abd81e3", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b01cce2-8c10-4f53-a3ef-8c5f5e4974df", "sighting_of_ref": "indicator--7e28c6c8-3771-4f0c-b9c1-3fe89abd81e3", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bea47a3-0925-4297-bcbc-2750354eba16", "sighting_of_ref": "indicator--783cada7-6f8c-40f8-b3db-b09d00ee44ac", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8df4ec7-394b-481f-afe2-47957807e3a0", "sighting_of_ref": "indicator--fae7597d-0d0e-4d7e-b347-f95b70213550", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fd42c49-ba39-4271-b4a1-b6300533a862", "sighting_of_ref": "indicator--f60d418e-497e-4c9c-ad2d-dd1f8416066a", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5aef54c-7c57-4d4f-afeb-1e80cb457df2", "sighting_of_ref": "indicator--260ffe0d-abab-4303-93da-072d80b1fdd1", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a08bb14-e36f-4599-91d1-36e116d703d9", "sighting_of_ref": "indicator--7da545c8-b8b3-43ae-a151-1a33bad6c723", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5bd7095-d8e5-4d0d-95f3-9dbdbe1ffaad", "sighting_of_ref": "indicator--395a0a05-0433-4b56-9d1c-9c09e08d88f5", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c5ef37d-442b-4a94-ab9c-944794ae513b", "sighting_of_ref": "indicator--6a9678f2-5905-43a9-b2a7-4f67c88c1e2b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3b761e3-d961-44e9-912d-c0e1e77806a3", "sighting_of_ref": "indicator--afbda1ae-c8ba-4f25-9da0-0e7e7ce07dd4", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--766814d0-ac9b-451c-91a5-527b411f4d9b", "sighting_of_ref": "indicator--0bdebc33-ca76-471d-af83-6d4bddc40505", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--546f7353-e1cc-4e5f-8f71-ac0767004010", "sighting_of_ref": "indicator--e4fa501a-21ad-4592-91b0-403f131626d1", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0c375ff-f50b-4574-8407-0e433f2959fb", "sighting_of_ref": "indicator--9b0bc4f0-3258-402c-8313-e800f263795e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--895ce335-ed16-4ca7-a233-d5c828a80cfb", "sighting_of_ref": "indicator--e7d53010-33fc-4728-8b78-8cd4e3b35725", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac627899-e8ea-4d23-99b9-0b7092dee25b", "sighting_of_ref": "indicator--9f92ee2a-6ec0-46a7-a976-1050eba894fa", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c01e7be0-5f26-43b4-b4eb-f0802f6120f7", "sighting_of_ref": "indicator--9f92ee2a-6ec0-46a7-a976-1050eba894fa", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4701e120-27c3-4d29-9881-6b7ca8a1d9a0", "sighting_of_ref": "indicator--356e6d79-95f3-457e-9a88-55431e148e51", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db6366fd-7ced-43aa-afdf-0c8ab8530e28", "sighting_of_ref": "indicator--dee3c1be-88b2-4453-afcd-c483a8a8f60d", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff2ec4f2-0be8-4873-b306-d3357e53ac04", "sighting_of_ref": "indicator--c672e857-9b2e-4b64-84ec-c3f658472cc3", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8818bd64-2117-44fa-b012-1c19da25fa1a", "sighting_of_ref": "indicator--c672e857-9b2e-4b64-84ec-c3f658472cc3", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a286800-2a84-4bbc-9900-16244146776b", "sighting_of_ref": "indicator--db1aaf1b-0aff-4f96-9ed8-b288fb716cb5", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb766106-c23b-467b-9f16-4d42924b81a9", "sighting_of_ref": "indicator--5b2efcee-e3d8-4e96-8de4-6e692be01408", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dfaff1f-da65-47de-8142-b3d917de12e7", "sighting_of_ref": "indicator--d5ca59e6-03ce-496d-b8a0-86648566a9a4", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6497e4f-15c9-4b5d-9473-de4aedfd054d", "sighting_of_ref": "indicator--353864e5-d36f-4d31-9c80-370fb37d522a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--928a32f2-b09e-4b1e-aa52-9c8d2ecb6e32", "sighting_of_ref": "indicator--0cf5e767-0838-468a-be1a-bd59350e4e59", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38f25f7d-f645-4506-a160-e9c28d914760", "sighting_of_ref": "indicator--d6276415-0337-46be-940e-04016decfede", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29ab176e-2c83-4503-b109-f4a239f76df4", "sighting_of_ref": "indicator--a3e333f4-c1eb-450c-a850-6380e4fcb4ae", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--350a58ef-96ec-4c48-b68d-90a1689e3143", "sighting_of_ref": "indicator--db4247fd-1424-4bc3-abd8-9a85764aa71f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc6c33a4-78f2-4b46-b307-d3c1b38f4e48", "sighting_of_ref": "indicator--b314dc50-3991-41f8-9da9-3d442523b88e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97286d77-7a97-4d4e-9e83-5b9d92a5e2cb", "sighting_of_ref": "indicator--57b4b411-81c0-4c7b-a34d-fb9bb355667a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8b1c951-fffa-4e76-a346-9b8876b8b56f", "sighting_of_ref": "indicator--eaad4787-594a-41fb-9f0d-b3baec27ec63", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de14ed39-f89b-4436-a8d8-78d844333f7b", "sighting_of_ref": "indicator--4609a59f-a84e-4d02-9a34-128ea974bee2", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--542cd057-ab13-41e3-98bd-1797dcdc0dc0", "sighting_of_ref": "indicator--5a170013-814d-43ce-be2e-292fa320e72b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17cbd414-bf72-48b5-a575-10f743889365", "sighting_of_ref": "indicator--33ec65ae-b40a-499d-9fbd-50efde21856b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c2cd641-8b0d-49f1-a282-15d9406b28a3", "sighting_of_ref": "indicator--a8737bff-98de-4aa9-8abe-751c22b88e62", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5ddc7bb-eecf-48c4-b9c8-56b91c9c33a9", "sighting_of_ref": "indicator--dc00581b-adb7-419a-b231-b527759aaa56", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f623d2d3-0853-4049-8dfa-e469c57cb482", "sighting_of_ref": "indicator--f446af60-ace2-438f-a3f6-67c7459769c7", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fa3c21c-d195-4fb4-b670-8e076a9c5024", "sighting_of_ref": "indicator--d28251db-4d21-41af-85f8-fd1aad1fc846", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e149542-443c-4244-87c0-b35804f511f8", "sighting_of_ref": "indicator--b1c4b7f3-83cb-40e7-8af9-e03cc67d10e6", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8db75be7-53e3-448e-948a-9b3d2afb0bb9", "sighting_of_ref": "indicator--0f454cb6-fd73-4cd1-93b1-5d302639c3d0", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7b3a771-92b0-49cd-81da-00da2555fbe6", "sighting_of_ref": "indicator--5314d2f0-8fea-49c1-8a8d-338408166648", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aabe0c54-22db-443b-9063-0caaf66b34ad", "sighting_of_ref": "indicator--1cd10f8e-c94d-4816-a59b-467205555b6a", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9706a050-73dc-4dbb-bd3d-e1f0b7633d67", "sighting_of_ref": "indicator--1971a28f-571c-4108-b2a4-51fd297c2d34", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8990c30e-f8ef-4a70-ad0c-2df04caeb9e0", "sighting_of_ref": "indicator--f3da047f-dcc0-4de1-bb47-d1df4ec6dcc4", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f74094c-5eb8-4990-ba9d-c36c3d478fb0", "sighting_of_ref": "indicator--e7afa724-5b15-41de-9175-4221cab49d6c", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8382d0cf-35d1-42c3-8d35-4d8ef135d662", "sighting_of_ref": "indicator--22efcc59-93c1-468d-9af0-3670941a7b47", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87b4fc0e-8b3f-41af-ae8d-ca5b85f1e10e", "sighting_of_ref": "indicator--d637bb1c-95a3-4469-a58b-115bcc4484f9", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19f94de6-165f-4860-8d44-506014b51a13", "sighting_of_ref": "indicator--7fd1d8be-7112-4509-a2bb-990f645ac315", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac060b6e-14e1-4801-8af0-eea8e9b6609d", "sighting_of_ref": "indicator--d531dcca-d59f-4979-8b3c-1a87754969de", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c866b6c1-8acb-49d2-a633-23c9d0c5cd62", "sighting_of_ref": "indicator--3c9aec02-b631-4e3a-9eb1-2853abf40de2", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--017083a0-c474-404e-b63b-0256fbb8937c", "sighting_of_ref": "indicator--5b0786b0-e1b2-4a9c-a7d4-7bb6eda7d729", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d942e30-41de-4cd8-9eec-09df36abff2a", "sighting_of_ref": "indicator--e7a980f2-519a-4dd4-9c3e-fe68f1c9d568", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b76fb3d9-a8b1-4708-b781-ad4b84d34d9b", "sighting_of_ref": "indicator--08d688a4-a8fe-420c-8083-d1a5d74fb29d", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba86cf9e-f40f-48e6-a4cb-ed4c6239feca", "sighting_of_ref": "indicator--8854dfa5-fcd7-47c7-aba7-0eeec1dc542a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2f5efc9-e603-4ccf-b960-6ea2f667371f", "sighting_of_ref": "indicator--42f9fcf1-133d-4bff-ae8a-61ce707e26b3", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c42ffbb2-7ca4-4341-b05d-d27c5ab94bdf", "sighting_of_ref": "indicator--a143a49c-9af1-4b21-89ca-5809820ef52d", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03eeea82-a5cc-48cb-8428-5f9550c8a775", "sighting_of_ref": "indicator--abe80497-8902-4bf5-84a8-20d2cb412068", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59fc9569-6b94-4133-9033-b933ce20dc16", "sighting_of_ref": "indicator--c0613aff-fc6d-4aa2-982b-c8979b14c11a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9be5dc0b-63d9-45ca-8aa0-e7754dd90c24", "sighting_of_ref": "indicator--09b13e00-74b2-45e0-91d1-665e62b5c22d", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e101e42-cd16-4024-bd5b-a9f7a79b041a", "sighting_of_ref": "indicator--3381b2c2-40cf-43ef-af3b-6297e98db3d3", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--201ed33f-5715-4695-8c56-35b4dad8f818", "sighting_of_ref": "indicator--707cf11d-ca8b-4a36-81e9-c3e6a7f09d7c", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0af8573-a895-49bb-881e-eed03b320a46", "sighting_of_ref": "indicator--05d2ca23-176d-4ff5-897e-b41de591fc7b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab2bbf87-4324-40b8-9008-749c70dabfc8", "sighting_of_ref": "indicator--b786ef27-496c-44d3-82b1-ac183cb0f484", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e1430a9-2bed-4cc2-8daf-9b550913845c", "sighting_of_ref": "indicator--e068f73e-2ef1-4ae5-aad8-2c06ff4fbb66", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ea6fd4a-8b9d-4c53-979a-7fbcb729e3be", "sighting_of_ref": "indicator--a7718ba9-651b-4382-bb8a-8a545f0f6e2f", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf20d63c-b560-46de-ba87-8e231974969b", "sighting_of_ref": "indicator--4fb38dce-727b-440b-90d3-90de306c2e28", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b49d850d-1acb-4fa7-9508-0344b68a8933", "sighting_of_ref": "indicator--e13f0397-7fab-4251-b4f5-2bd9bf53136c", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16462474-2e94-4373-b7ae-58cf76c7476d", "sighting_of_ref": "indicator--85498df9-e4f2-4eea-b71c-7337ae3d6b5b", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc2f33e6-0774-4fc5-9dac-863841173e1e", "sighting_of_ref": "indicator--b208f48d-9e9a-457b-8d69-43ff827f9b41", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfbb8604-cd14-4ade-8f5d-a7c285ec3ccd", "sighting_of_ref": "indicator--5eb15d29-88a5-49fd-ba7d-c758529da613", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10774bb2-23a1-4532-b25b-05d4f882b91c", "sighting_of_ref": "indicator--f947624c-7785-48b6-861d-1d529dc24d62", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f693060-6bb9-4e86-bd73-166aa8be3c22", "sighting_of_ref": "indicator--cc2e204e-cf2e-4579-bad9-efbaf69bdd57", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1199b5d8-10d3-43f1-a3f1-484e71d6f915", "sighting_of_ref": "indicator--8a58bf43-cb1c-4873-a25a-378c03de2d7b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49cff788-b921-42a0-867b-2c5feec29ecd", "sighting_of_ref": "indicator--1d9b40cc-bfab-4f34-bd62-a1760844fe7e", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05592379-bd8f-421f-a47a-1c65ba1a00d4", "sighting_of_ref": "indicator--dfa85905-b253-4335-86d8-2fed48d94114", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b6cb973-8cc6-447b-a87b-492269875023", "sighting_of_ref": "indicator--151829bf-1eaf-49ac-b43a-fa75088a187d", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e34ca572-de36-4b17-bf6c-7b893afd19b3", "sighting_of_ref": "indicator--151829bf-1eaf-49ac-b43a-fa75088a187d", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e71113dc-588c-4305-95e4-04a74d058b15", "sighting_of_ref": "indicator--1d456335-ee6a-43be-a1a0-7d5378e8c49c", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5949faea-0c7e-4b8b-9c34-b953cd8629f6", "sighting_of_ref": "indicator--b12b06ff-a62b-41ca-98e2-81dec78706ea", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe2634ff-d7c3-4211-8327-816b584124ad", "sighting_of_ref": "indicator--7a69bf30-cd79-4aff-9206-164e976041be", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edcfd7d2-2bbd-4080-9641-b3d4b47d1d2e", "sighting_of_ref": "indicator--b631dfc8-ffe3-445e-a787-4333214a6c65", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdcdd036-59fe-4b80-abc3-074695ddbeb8", "sighting_of_ref": "indicator--b631dfc8-ffe3-445e-a787-4333214a6c65", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd807db7-74b1-4d27-8cc0-b31f30f6f05d", "sighting_of_ref": "indicator--37e866e5-43e8-405c-b096-08033aa47710", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13c59994-2867-4fb9-b213-28fd54da0dfc", "sighting_of_ref": "indicator--37e866e5-43e8-405c-b096-08033aa47710", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c386e60a-6fd9-40fa-9785-1034439dade3", "sighting_of_ref": "indicator--2af27a83-0342-410f-a0d1-e271c3228efb", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cf80010-f1d5-4bf2-8123-d2e1ed651cff", "sighting_of_ref": "indicator--d3d471b7-f8da-46c5-9b84-4d8eac7908ed", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ac0a49a-f301-4bbe-b4f9-4c5fef99780a", "sighting_of_ref": "indicator--21a0d19c-6e21-436c-907f-10a82dfd1dc1", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00e91da2-498e-4b24-80ba-a9e7315fc464", "sighting_of_ref": "indicator--532f028d-f1f9-40d0-874b-0ea9ccc1b59d", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0607e8f6-d23c-47b9-b216-f86c35608faa", "sighting_of_ref": "indicator--b7f56ac8-856b-4080-84e2-ba28013563ec", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92a86964-132d-42bf-9310-b01ade08d33e", "sighting_of_ref": "indicator--58d50b5b-c0eb-409c-ad07-7826f1404519", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23a59cdb-8cda-4529-805f-1fca54161994", "sighting_of_ref": "indicator--58d50b5b-c0eb-409c-ad07-7826f1404519", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--064379d5-8391-47fc-99f2-5cb86d91ecc6", "sighting_of_ref": "indicator--419cdee7-0704-4466-8f9b-f9f53017f084", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--739acd6d-abcd-4be5-8d9f-fc34950b5a6f", "sighting_of_ref": "indicator--419cdee7-0704-4466-8f9b-f9f53017f084", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbd4a0cc-b0a4-4c6e-aa4f-3230b6ce5ba5", "sighting_of_ref": "indicator--a9375e56-22df-45be-a8fc-38b96457dbef", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a3b1929-c19e-43ef-b47e-d9a8ddd4689c", "sighting_of_ref": "indicator--84edadee-ce73-487c-a761-395f7b9630bd", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--522d0f57-3c06-4540-832d-1acb7f350b94", "sighting_of_ref": "indicator--3de9f837-e32f-4f00-b1df-5351389eb3bd", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--837e35c3-12ed-47bb-abc9-57ea20bfc560", "sighting_of_ref": "indicator--d910d039-eb9f-4fd7-b08e-972a375a91fb", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a673b3c9-1057-476c-a3d1-768e867ee3e8", "sighting_of_ref": "indicator--c8e0cce4-2b53-464a-8617-ba8b3db92a21", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--841d99d6-91cf-4ede-82f1-bdd7a68e7373", "sighting_of_ref": "indicator--c84c8327-9e48-4144-9489-957532a3fd9f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74fd6ab1-b6c4-4265-bbd7-d9f78a35eaec", "sighting_of_ref": "indicator--43fd15d7-21ba-4838-b77e-3b11bac43cdb", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51199f39-d3b8-4eba-bb11-5205caf4d141", "sighting_of_ref": "indicator--71c97876-e398-499b-98d8-a32c6ab96788", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b725427-206d-495c-bbee-2971dd5ccb6b", "sighting_of_ref": "indicator--4e394f69-e2b4-446f-b3bc-dba21a8aa7d3", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0037473b-b66c-4e16-9487-16f0e9fe67c1", "sighting_of_ref": "indicator--987dcd5b-00e3-4ee2-a35f-3ded382b61c2", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42e4ea08-9a4c-4df5-8caa-fccb5bd074d3", "sighting_of_ref": "indicator--f85af25e-3707-4f5c-b204-2837af8f3e7e", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b80a12d-7dba-4fb8-93f3-67b38c7da4f0", "sighting_of_ref": "indicator--02d951a5-b5b7-42b0-bbdb-816e8dba9156", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38c41027-346b-4e11-b391-506e3ac72780", "sighting_of_ref": "indicator--02d951a5-b5b7-42b0-bbdb-816e8dba9156", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--917da4a6-d0d4-40a4-a9ac-5d4233993c1e", "sighting_of_ref": "indicator--4202960a-a4cc-493d-8516-e6a4eac86515", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ed3dbfc-358d-4d6f-882f-f318b07dce8d", "sighting_of_ref": "indicator--13f9856c-cab0-49bc-a955-95ddd6f8a10a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f5336ee-e412-4275-a6b8-1fdd8325c27c", "sighting_of_ref": "indicator--85adfbe5-cf13-42d7-aa9b-28cdb4482c2c", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb841f8f-8e48-4f06-ad8a-95799188c62c", "sighting_of_ref": "indicator--606a6115-d211-4818-afe8-337da26fe18c", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--431d94d4-7f0e-4a8d-94fe-83cb3ba8cd42", "sighting_of_ref": "indicator--5e2934c4-ac57-48c3-8f7d-02fb307e2e4d", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6c22d4a-189a-4807-a5b2-713109b01e7e", "sighting_of_ref": "indicator--c3169ae7-2092-46c5-86d1-3533b60a1fbc", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71d701ba-d488-4b2a-8936-85442514c560", "sighting_of_ref": "indicator--c3169ae7-2092-46c5-86d1-3533b60a1fbc", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9a23c63-91bd-47eb-95fa-96e444c962f1", "sighting_of_ref": "indicator--33a43436-563a-4019-821f-6aa586c30e08", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27585820-a258-4178-9a3d-e3ab7e00dbbe", "sighting_of_ref": "indicator--c1b9eca3-9992-4c73-9076-aae6471ee9d2", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--caa9a488-99fe-4dc7-bf82-07890569f844", "sighting_of_ref": "indicator--4cddbf96-819c-4329-a0f6-dc57337e255e", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c407e2ce-b1ec-4500-a060-0b83fe2a1d06", "sighting_of_ref": "indicator--26638148-1029-4b48-8db5-6593fd03dae9", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc768168-ab84-4d08-b569-775b3651c99f", "sighting_of_ref": "indicator--2ed7ad5f-34a6-423b-b916-21f676f8dd3c", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f779f881-7667-4bbf-ab70-202e3a5ec84b", "sighting_of_ref": "indicator--f2bda746-81b8-4d49-bae6-cdc9d6694164", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87fc0904-e5e9-4c3c-9a71-41e77ec4eb74", "sighting_of_ref": "indicator--78dc6851-ed5d-44ad-afd2-88a009a5d574", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d7fea32-6a43-4f04-b4af-91aab84b2ab1", "sighting_of_ref": "indicator--6673bc6f-8a3e-4a0a-b25f-e305be40583e", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--317e2f26-68ce-4735-b7c8-c9e8c100d91a", "sighting_of_ref": "indicator--9c90cb0d-c5a5-4f14-90b3-a3928dbcea95", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7050894d-1d85-4b4b-8407-90001c3de949", "sighting_of_ref": "indicator--3876132b-d769-4090-a073-ea88d7446f8b", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aeb8258a-c20c-4ecc-8497-95d340d50e02", "sighting_of_ref": "indicator--3876132b-d769-4090-a073-ea88d7446f8b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1ec23e3-f8c5-4b38-8fa9-9ad69ef71079", "sighting_of_ref": "indicator--7432e73e-8d7e-4a33-b214-f757a66620f8", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--549843cb-f213-4b8a-a518-51b78dde5fb1", "sighting_of_ref": "indicator--ca1e9342-a121-4815-b0bd-aba18e7313a2", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76561d0f-c503-4ea1-935d-63d3f7ea504e", "sighting_of_ref": "indicator--82b111a7-f3bc-48e1-a9f8-b9cd9b8f2127", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b55d989-920c-419b-bb59-06f96102263c", "sighting_of_ref": "indicator--2ef0d216-51a9-462b-aa38-335fc46969da", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3389166b-f57a-4069-9eb6-73603e0c03a0", "sighting_of_ref": "indicator--5664a253-6de7-4a33-9de0-6cd854a94095", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a76d5049-c40d-4b05-849a-fa19dedf3d7f", "sighting_of_ref": "indicator--f054601e-eb9a-495f-b649-741f650f32aa", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8461116b-1ae3-4e34-be3b-4b7e01f3cb83", "sighting_of_ref": "indicator--889951a7-3406-4215-8789-0c45e1b311f0", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba95b70d-22d8-44a6-97bc-43b5e128a9a1", "sighting_of_ref": "indicator--71c6c02c-cc29-4f38-ad44-0a0726cb8cdb", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30789145-6709-4257-b67c-f3f7e3ad0726", "sighting_of_ref": "indicator--b7f97fec-5118-4c2d-9689-c19b34b7c73a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d551f582-8dc2-4f44-8358-ff64c0d0c947", "sighting_of_ref": "indicator--b09e55bd-9bc3-402c-a462-49db60bde05d", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6b48abf-d5d8-4ccf-88a6-ff9de0616236", "sighting_of_ref": "indicator--48c56a75-1745-4dac-b406-d837aff34e48", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af55e7bc-7c42-49cf-aac7-a2c04c519873", "sighting_of_ref": "indicator--48c56a75-1745-4dac-b406-d837aff34e48", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--001155dd-c97a-4fb3-88b8-86917a8c50a2", "sighting_of_ref": "indicator--0abe9b4e-495e-4419-9ea7-94b3ad37c170", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e61b67f-8436-415b-98d7-c3a191748769", "sighting_of_ref": "indicator--f4f54088-7858-463d-8a4b-73e97c066906", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb5bb11b-9e72-4317-8289-039a39f7c80a", "sighting_of_ref": "indicator--329e901e-10a4-4771-9f31-d469d1e07631", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09d675d2-ec8d-46c2-ac06-de5fa9bb5fcd", "sighting_of_ref": "indicator--46dc0b14-2224-434f-8a38-9eba443194dd", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab72144a-f1d0-4245-91ac-09da6d6a6209", "sighting_of_ref": "indicator--6d58a9db-3753-4bd3-9ae0-52e4f262e3bb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d0bf7ff-4d11-4cdf-a681-dfd4226c548f", "sighting_of_ref": "indicator--2140e65f-7435-4d78-8122-fa717433d548", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f72b6e10-c846-4795-a90a-29545c4db552", "sighting_of_ref": "indicator--ea09214c-c73a-40b4-b894-d8557d4d5d76", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a33f1efd-165b-4a82-afff-d37f477102ed", "sighting_of_ref": "indicator--aaac1845-2336-4cab-acbd-a77cf521915c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dc2ebf8-7636-43ca-b6c4-a62aed933a22", "sighting_of_ref": "indicator--b742f322-cfbe-4a14-903a-6567b209c7c0", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9da09f39-23bf-4483-af9f-a20b3ab02de2", "sighting_of_ref": "indicator--4b7341b9-6836-45f9-9a3f-e9890990eb1b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--621a3424-72d7-4403-83f6-e849f845af3c", "sighting_of_ref": "indicator--68c59a24-5e42-4388-ac10-e56a9d4fc0c5", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf515159-7c79-4c4d-8473-4b262fab650b", "sighting_of_ref": "indicator--431d9b9a-7ffb-43aa-b22d-6c21b1bdc3e8", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8506a03-cb26-4673-9a89-6d2f74a519b1", "sighting_of_ref": "indicator--d33141a4-7866-4f35-98b1-83a1ee4bb2f4", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a36cf5ab-1ccc-4388-8f56-4d1c1bf8c58e", "sighting_of_ref": "indicator--d33141a4-7866-4f35-98b1-83a1ee4bb2f4", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1cf0ad4-1a42-499c-a587-cb4cd3478f01", "sighting_of_ref": "indicator--16602313-2688-4b17-a7a6-eae02ae6583c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8e7d9cd-ba14-4424-80c5-c2fc87bc2c35", "sighting_of_ref": "indicator--34d20611-362e-434f-b44c-34d685b7204e", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2aa7e08-af9d-4c6c-b431-2bd12e033ad4", "sighting_of_ref": "indicator--34d20611-362e-434f-b44c-34d685b7204e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25d138c2-1bde-402d-a780-0f987f335fd5", "sighting_of_ref": "indicator--34d20611-362e-434f-b44c-34d685b7204e", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9f8d71e-01f0-49f5-8b56-d8a210790c49", "sighting_of_ref": "indicator--55b563ba-0662-43e3-b1fe-5aa34df641f4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72f22ce9-632b-4075-8dfc-31851d34e2f2", "sighting_of_ref": "indicator--96bd7f75-5a1e-4a86-9075-5aefff9dd6c6", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19ed85fe-9a37-4da5-b43d-05a8bb398718", "sighting_of_ref": "indicator--96bd7f75-5a1e-4a86-9075-5aefff9dd6c6", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c8ec2f1-b9f1-47e1-b761-65c4b6ded9e0", "sighting_of_ref": "indicator--51417f84-071c-44df-9fb8-644676e82970", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--646acfc0-230f-4c0b-8c3c-ff88c887ce10", "sighting_of_ref": "indicator--3793f09c-e84b-4c90-9990-f42e25547375", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--495c540e-daa8-4954-ac4e-14d6c706f348", "sighting_of_ref": "indicator--5cdb592e-d908-4493-bd10-de105f158ba3", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b29ac89b-d388-4e65-a5ae-ab0374ebe7c6", "sighting_of_ref": "indicator--0eba7e25-3d6e-427c-a03f-2a630baf4cce", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45e84488-e35c-4e63-a804-fb6f24b234f0", "sighting_of_ref": "indicator--09b98b0f-6083-42e9-82f7-4c4d1049dd3c", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0023bd9e-6b9b-4504-b800-f5f48e1869a7", "sighting_of_ref": "indicator--09b98b0f-6083-42e9-82f7-4c4d1049dd3c", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29161b08-d0d8-446e-aafa-b34d1b7594ce", "sighting_of_ref": "indicator--09b98b0f-6083-42e9-82f7-4c4d1049dd3c", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ce71eaa-db1e-4b0e-a214-cd8c473c4fe8", "sighting_of_ref": "indicator--bd1aff8d-e9bd-4c65-a477-f4871bf39475", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--078ee79e-6f0f-4e14-9c93-01c29ff904c5", "sighting_of_ref": "indicator--bd1aff8d-e9bd-4c65-a477-f4871bf39475", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad14515c-2a6e-4d91-a64c-d54f0638420c", "sighting_of_ref": "indicator--bd1aff8d-e9bd-4c65-a477-f4871bf39475", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8540458a-6e89-48b7-8d59-bc5432642178", "sighting_of_ref": "indicator--73f38985-9d54-43ad-b121-95f4df091ff8", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fd958c0-e0cf-4bac-a3dc-3e66905ba514", "sighting_of_ref": "indicator--73f38985-9d54-43ad-b121-95f4df091ff8", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2815e5e1-f598-4a4c-bd7f-8a6b8bbc3e0b", "sighting_of_ref": "indicator--73f38985-9d54-43ad-b121-95f4df091ff8", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5901f9f-aa27-4a01-b104-eb9b4b4d3592", "sighting_of_ref": "indicator--e81186e2-6a0b-47a0-9207-358525e51d35", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--099471e9-9356-40f3-8bcc-e5b70c513084", "sighting_of_ref": "indicator--e81186e2-6a0b-47a0-9207-358525e51d35", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8a3ca24-2716-4859-aa7d-9e5653951a0e", "sighting_of_ref": "indicator--a3dee470-9b82-41aa-9957-afb1b2591526", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c9ec4eb-ab93-4944-aacb-ac15ffe15086", "sighting_of_ref": "indicator--0ab3ca78-70b6-4760-9c4a-81c849cc0d27", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bcfeeae-2eb5-4cc0-b1c8-b725bb983fb0", "sighting_of_ref": "indicator--0ab3ca78-70b6-4760-9c4a-81c849cc0d27", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35431a61-422a-40a4-8c2f-46d601089644", "sighting_of_ref": "indicator--0ab3ca78-70b6-4760-9c4a-81c849cc0d27", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f06c9a9-2aef-4a19-9831-9e585dfaefd7", "sighting_of_ref": "indicator--7276c292-8e5f-4718-a706-ac96552a7edb", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ad75e2e-6835-484a-9c9b-f83a461826c9", "sighting_of_ref": "indicator--56d8873d-c1f4-436f-8ff6-ad81a2af5f6e", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f742b995-83a4-4ca7-b6d2-650d0dba5a9a", "sighting_of_ref": "indicator--bfe12169-5c88-47f0-8ca9-3b635876967d", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb634d06-5ee6-47eb-a6bf-629eb1f59275", "sighting_of_ref": "indicator--a28028dc-fe2e-46b5-9183-63755138a244", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d000469-d8fa-4f0b-a956-9df98e57f8c0", "sighting_of_ref": "indicator--cd66f7c0-1190-44ba-816e-6e5713973892", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c35e808d-502f-4740-a12a-189b90c5315e", "sighting_of_ref": "indicator--3c530f53-3dd4-46b2-9b2b-0c807df41b31", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9608b732-cda1-4788-80b2-7f4524b06878", "sighting_of_ref": "indicator--5f5d2168-8d36-434e-ba2e-cc59b2339bfa", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7814438c-ceab-4a5e-81db-ed2d08ce9bbf", "sighting_of_ref": "indicator--3b0372d9-5037-4a5f-bc43-5eaf5ec55f0b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eaf62daa-ba55-4379-8d24-1fd6953a3a03", "sighting_of_ref": "indicator--66e6daa8-cbe0-45e8-aa3e-1162bb531105", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acf42891-b058-4f8f-8a25-94dd62f891a8", "sighting_of_ref": "indicator--66e6daa8-cbe0-45e8-aa3e-1162bb531105", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6699b16a-b303-4aea-8dd7-fc0847cd7f34", "sighting_of_ref": "indicator--ed2c7b13-9ebc-461f-8850-ff9859607d73", "where_sighted_refs": ["location--cc47317e-2c18-43a6-8938-dea748a56ad5"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2902996-ceec-4c34-926f-681216323ccf", "sighting_of_ref": "indicator--6ed87ef1-fc14-4880-8d21-6cad78f34f2d", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b619fe5f-a7a5-4e99-bb2e-d8ca6c0c2ae8", "sighting_of_ref": "indicator--d08049e2-a321-4a65-96bf-80e44281f783", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78fe6b6e-713d-4103-a467-69fc03a90ba3", "sighting_of_ref": "indicator--c3c2e829-ea7c-40a4-825c-52d112218a99", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--750043e3-fd80-48a0-9dc5-05f0d7eff387", "sighting_of_ref": "indicator--c3c2e829-ea7c-40a4-825c-52d112218a99", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14a74e97-edaa-4d5d-8b6b-c49a6dc2c620", "sighting_of_ref": "indicator--c3c2e829-ea7c-40a4-825c-52d112218a99", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4097b9a7-d045-4153-9c65-c71d29e76b87", "sighting_of_ref": "indicator--c6b243b4-0cff-439b-8fdd-a4229a4e6b39", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c33325fc-9901-4129-ad58-4795da0beecc", "sighting_of_ref": "indicator--c6b243b4-0cff-439b-8fdd-a4229a4e6b39", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ecc179f-d8e0-4456-9138-e2001b1002e0", "sighting_of_ref": "indicator--c6b243b4-0cff-439b-8fdd-a4229a4e6b39", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa7dc312-7dfd-44d6-96ca-29654db94d9c", "sighting_of_ref": "indicator--0a6bb70c-cc6e-4f66-b632-079421bb6919", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e60eb06-d725-4903-8a35-ac5ce8982a77", "sighting_of_ref": "indicator--0a6bb70c-cc6e-4f66-b632-079421bb6919", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb1fac2c-a2b8-4805-9e93-8cdd1e321ae6", "sighting_of_ref": "indicator--0a6bb70c-cc6e-4f66-b632-079421bb6919", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c930da5-6289-4bf7-b0cd-02ac91d0955e", "sighting_of_ref": "indicator--7bce6440-0190-4379-9863-82143732a62e", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21530c0f-511a-42b1-bdc1-a9ba59b28ac4", "sighting_of_ref": "indicator--7bce6440-0190-4379-9863-82143732a62e", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37e44061-70c6-4324-8c74-6fe721c39fce", "sighting_of_ref": "indicator--58a5650a-baf4-4c31-9613-8f3317c02100", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b9c1ae4-c631-4e0d-94c9-9a676c021a2b", "sighting_of_ref": "indicator--1d225732-0c09-4123-8573-a7e25c0ce800", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18e24b50-3b00-4212-86cf-68ae6ca82f10", "sighting_of_ref": "indicator--91648bdb-2e25-49fe-91aa-9f3d4f5abf20", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e3227e9-9c73-4022-9708-127af0b8c775", "sighting_of_ref": "indicator--a715c4b0-0be9-4814-940d-dce9f7c6f64d", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db2e694d-03e6-46b1-b20e-ce3213172be7", "sighting_of_ref": "indicator--2917fd51-0398-4d36-ab77-a509c7697f57", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--167d9fb4-fa0f-4ee8-8349-518daf099983", "sighting_of_ref": "indicator--05e19a73-e899-4281-bcf3-b2e597563274", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2df7722-a3f1-49d0-b9d3-66188372524a", "sighting_of_ref": "indicator--5027cec6-c04f-4b2f-844e-50e93bd4f5bb", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afd6dd47-60b9-4430-81fd-7a2f2b5549e1", "sighting_of_ref": "indicator--2ec1cdb0-e2ee-4afb-9933-88cdfb99f28a", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36257a95-19e7-4897-a6c9-f517e9bf1e51", "sighting_of_ref": "indicator--5252886b-651b-4a9c-abee-3cf3c04be6d7", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2ca4dbb-6a6c-4593-ac47-d2e8ec450bb7", "sighting_of_ref": "indicator--8d095273-20af-4d47-9d4b-3752cd12e4af", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb23db2d-1e3a-4cb0-884d-8ffc58238464", "sighting_of_ref": "indicator--a2038666-b015-4aa0-a4d8-eda3e8db9ce6", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0160cd40-41b2-4841-a3c5-6ea52312f90a", "sighting_of_ref": "indicator--b3202621-346e-4e27-a364-d160dc173767", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18374b62-46c5-4302-b6ab-abf6b15baf30", "sighting_of_ref": "indicator--6f74d058-534b-4d6d-a617-3cb54a75c96a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54498ded-4236-4e31-8316-7a85da8b3f59", "sighting_of_ref": "indicator--6f74d058-534b-4d6d-a617-3cb54a75c96a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--818eff18-3a57-4a6d-b58d-e93c5dd1cc06", "sighting_of_ref": "indicator--63992de2-c156-495c-864c-6a30ca8e0120", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dcfdca3-0ebe-4959-998e-3911f2a322e6", "sighting_of_ref": "indicator--f9dfb19f-fde2-4c18-8b83-f449d0782600", "where_sighted_refs": ["location--cc47317e-2c18-43a6-8938-dea748a56ad5"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10874e53-e4f0-4b2b-a090-448b149af54b", "sighting_of_ref": "indicator--066c29ec-2443-4ee8-8001-5cd3d0b08dd2", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6235b336-5b9c-4b0a-902c-c21c1e4c8878", "sighting_of_ref": "indicator--41ff55c1-efa3-4c8b-9832-43134d8843fd", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b412edc2-133a-44f5-8985-7d9700c33c3f", "sighting_of_ref": "indicator--e6d4635a-e0bb-45c1-b3c6-f4ba48db5bc7", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccd8cc92-573d-4519-9de8-128c597d10fb", "sighting_of_ref": "indicator--e6d4635a-e0bb-45c1-b3c6-f4ba48db5bc7", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd0c5ebb-0621-4e12-8304-a87c0b3af2ca", "sighting_of_ref": "indicator--e6d4635a-e0bb-45c1-b3c6-f4ba48db5bc7", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7a8d4cb-edc7-4916-9993-877cd45da3e7", "sighting_of_ref": "indicator--e7291456-4b01-464d-91f8-5d4586ac0f6e", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef653767-4ddc-469e-bf74-1322d3ff4aa2", "sighting_of_ref": "indicator--e7291456-4b01-464d-91f8-5d4586ac0f6e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0222cbf-1757-4415-810c-d17a6f2c052f", "sighting_of_ref": "indicator--e7291456-4b01-464d-91f8-5d4586ac0f6e", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fb2bb7c-8687-4e37-b58f-85026c1ab8b8", "sighting_of_ref": "indicator--377d500a-f8e6-4173-833b-ccccc3d2bc0b", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cb76fc4-04b5-47ce-90ae-d862b8da16ac", "sighting_of_ref": "indicator--8d4976ad-3aed-45aa-a2d8-39de4287fddd", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba8cf7be-2849-44db-96d3-b5f0acbeb1bb", "sighting_of_ref": "indicator--2b5e874d-c483-4a56-8a2f-228c115753c4", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67ca66e8-dcdc-4df9-b04b-900edfd77d5a", "sighting_of_ref": "indicator--2b5e874d-c483-4a56-8a2f-228c115753c4", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ee791f9-810a-4f44-8952-13196de74ed1", "sighting_of_ref": "indicator--31560e80-9002-4aba-a296-1db558da3cdb", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f085e22-6ad4-43f9-8a24-7514a4e66082", "sighting_of_ref": "indicator--47c94aba-2c4b-4b62-a37b-e962e54afc1a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dddf714-f298-4b55-8585-ae16791ec73b", "sighting_of_ref": "indicator--d054ec7b-2421-4c90-9721-c309b2cf372e", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2091e91-6ca9-4001-bab1-c22a3418aeb6", "sighting_of_ref": "indicator--e724c0cf-7d7e-4a6a-8875-ceda5f154175", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--427adb22-0581-43f0-b247-cf505effb1ef", "sighting_of_ref": "indicator--e724c0cf-7d7e-4a6a-8875-ceda5f154175", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19d068a8-e3bb-4afc-ba60-3a39730b4090", "sighting_of_ref": "indicator--e724c0cf-7d7e-4a6a-8875-ceda5f154175", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3360affc-267d-4b46-9036-ad6e74d02efb", "sighting_of_ref": "indicator--2d656a5f-25f2-4b72-9ecc-71e7924eba2e", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37bb929e-37d3-401d-8018-5e200ffcaef6", "sighting_of_ref": "indicator--2d656a5f-25f2-4b72-9ecc-71e7924eba2e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c7f9dc7-f0a1-484c-b735-6bb91c7bbb61", "sighting_of_ref": "indicator--7e94fab0-db9a-46ef-84ec-c6aa736667c9", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1e52f63-f187-4110-a23b-d5cd5d843784", "sighting_of_ref": "indicator--7e94fab0-db9a-46ef-84ec-c6aa736667c9", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3de3885a-1be3-42c1-b233-780f2077d82e", "sighting_of_ref": "indicator--7e94fab0-db9a-46ef-84ec-c6aa736667c9", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77526dad-fe86-4c38-971f-ad988815878f", "sighting_of_ref": "indicator--7fa83cc9-5f2a-4479-84b8-4a5cc83302f5", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58a94f1e-ca4f-4560-8b5a-f893ea7c27ab", "sighting_of_ref": "indicator--952466c9-6f0b-4e9a-82e2-308af120bbbe", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96811e62-a325-421a-bca2-ec1d94a49e0b", "sighting_of_ref": "indicator--2cbfbc5d-4dec-4f06-b4be-a6031a4cbfb4", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ae99356-b0f5-498a-970d-c9529876cfcf", "sighting_of_ref": "indicator--2cbfbc5d-4dec-4f06-b4be-a6031a4cbfb4", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ff4391f-1ec6-4f7c-8eb8-726a575da435", "sighting_of_ref": "indicator--2cbfbc5d-4dec-4f06-b4be-a6031a4cbfb4", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cde4112d-a271-42f3-af6d-91f68d889962", "sighting_of_ref": "indicator--5895cf5a-8770-41ad-a3f3-514e4fe7a8a0", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d0beacc-17c4-4ec8-9b93-40675c6dcde3", "sighting_of_ref": "indicator--9582b5e3-dcaf-42cc-bb56-26e1bd285ffb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a095456-20d9-47b1-8fae-281a553c5cae", "sighting_of_ref": "indicator--4bd0db14-8b2f-48ee-b89f-40383f51ac5f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81483f9a-6362-47cd-b10a-b8177469e41d", "sighting_of_ref": "indicator--b514038f-d5f5-41a4-acf1-025148a787fb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82392405-99ce-4cfc-a274-3b49f2f393f8", "sighting_of_ref": "indicator--e1e70f09-a9bf-49ee-a534-6133c8abbf98", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f216ccdf-d048-448b-a22a-f51bf3165385", "sighting_of_ref": "indicator--78d36f62-53fb-4dae-b62b-3417c794e5e5", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cba78983-0863-466e-8f39-2060a692887d", "sighting_of_ref": "indicator--78d36f62-53fb-4dae-b62b-3417c794e5e5", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c84860f7-a48d-4942-98c3-74b89e79e95e", "sighting_of_ref": "indicator--c4da3b62-b639-46a3-9535-5f09f418d461", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3f469aa-ece5-44f2-a6f2-073b911dbbeb", "sighting_of_ref": "indicator--11730396-3c6d-4833-8c9d-9c17a0f14bbc", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02b515cb-3c30-4313-95ed-c737c4955b4b", "sighting_of_ref": "indicator--11730396-3c6d-4833-8c9d-9c17a0f14bbc", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e207edda-f882-40c3-967f-84f8c5968a1b", "sighting_of_ref": "indicator--8f31573a-ee3e-4989-8d9e-3863379cfa52", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10e1f7d9-88a3-4770-85f2-d18a77e5d0ee", "sighting_of_ref": "indicator--8f31573a-ee3e-4989-8d9e-3863379cfa52", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--677e7fdd-6fd3-40d7-b4d5-fb908506d07a", "sighting_of_ref": "indicator--c4bccfd5-9211-4d87-b901-939cec648f44", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51cac60c-9533-4820-91a7-3b23d5a25e8d", "sighting_of_ref": "indicator--6bf8da60-f5a1-471b-b9e9-d5d5f472af73", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2daceab3-a96c-40ea-9425-e20320fb509a", "sighting_of_ref": "indicator--751e53b7-b9a6-41aa-bf8b-af89be788493", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ab661c0-4738-470c-b2a3-dfe2e4117c03", "sighting_of_ref": "indicator--b09ef94e-1bdc-4cc5-9813-65f257878b1f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24bc03e1-9b5b-4854-91c8-ea1bac60e2f6", "sighting_of_ref": "indicator--02f324c8-6663-426e-86d3-03c8227c01d7", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68e89a63-823e-45e0-aeab-1ab3b5096b0b", "sighting_of_ref": "indicator--ee1dfdc9-28c1-4995-9f5f-a4239be8696b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--455ab50b-3bf1-469d-9efb-ec70a4a045c2", "sighting_of_ref": "indicator--a6aafc93-ce11-44c6-b362-39c6679e0fc0", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e09fc2b5-a2ae-4872-87c9-9df209a6ed17", "sighting_of_ref": "indicator--a6aafc93-ce11-44c6-b362-39c6679e0fc0", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b8cef44-d8ba-4356-8597-6e9862bfe7c4", "sighting_of_ref": "indicator--44ff9d25-7797-49ff-8056-8beaa5186a8c", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70a12281-e93e-4e42-af45-dcb0db3c1f87", "sighting_of_ref": "indicator--afed35f0-d704-442d-b87d-f1cdcce5482e", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15fc9ee8-d813-414a-887c-1ea0dff315c3", "sighting_of_ref": "indicator--178a0ec8-ecba-4396-b0a4-cf662a235fd3", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ad079ac-6f99-4cb8-9e84-0edeb0fb02f2", "sighting_of_ref": "indicator--925d6043-97bc-4731-a028-f98bf0dce432", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3008262a-945f-49c9-95cf-88999c1c70e7", "sighting_of_ref": "indicator--548373bf-388c-4a9e-a521-b68197a29815", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--461667e4-7b6c-4331-a240-9e3b6de70d8b", "sighting_of_ref": "indicator--24acf866-4a31-4dd9-ab23-d713ad3bbc3b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acaf6530-4417-4ce0-a7ae-0ec2043a3aee", "sighting_of_ref": "indicator--14dfcd47-2ea4-43f1-b542-a4a4ed02141f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a084baf-9831-4758-aeec-939c437800ec", "sighting_of_ref": "indicator--38bdd1db-f077-40d9-8c4c-5ac3f1d0f0b8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9f64a7b-c178-4b1e-8c02-5a61c4986126", "sighting_of_ref": "indicator--036f20a1-feee-41b6-9663-dc4b6f19bc45", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6539aad4-1976-482d-9357-f9985ab43ccf", "sighting_of_ref": "indicator--cecd7a36-49f3-48f9-b207-1771296910a8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eda17443-d257-41cd-9714-6aa35763584f", "sighting_of_ref": "indicator--75b0d162-b426-4d3c-8426-ad81539ab790", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea8d015c-f33a-4e0f-a5bf-9123707fd357", "sighting_of_ref": "indicator--bd1b84a1-3ec0-49fb-92c6-19602eb86345", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c02da67-dae6-42ae-986d-39c488562289", "sighting_of_ref": "indicator--07f0c72f-2fed-4377-b71b-06a2593207a8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9be3e8db-e825-445e-ae63-d5432ab5851a", "sighting_of_ref": "indicator--85695c57-073b-454f-9afd-4f26f4667ed1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6755744-b4ee-4f58-96fa-a774e61a0949", "sighting_of_ref": "indicator--8735a2ae-4b1c-4e71-b06a-eecad01eae8a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df6506ab-7523-4fe2-9541-81df1a9f2515", "sighting_of_ref": "indicator--846d493a-3985-455e-af79-180d518beeef", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb36aabe-5fa2-4abf-8736-cd7a2797f0de", "sighting_of_ref": "indicator--7c95f054-1b91-4cf3-ac84-f60b28b701b2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18af06c6-58ca-44c5-9563-9c41c22ba3bb", "sighting_of_ref": "indicator--b97f790b-9876-4194-b2da-53f8d9bb975b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e44c00bb-4773-4fcc-ac34-68c3302af4b0", "sighting_of_ref": "indicator--91023d01-bc9d-4143-9fe9-e52f99d1ea04", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e72f6ff-ed1b-44ff-8b2b-34859421769c", "sighting_of_ref": "indicator--dbbc3c7f-f555-4de9-8ec9-5ca077271217", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb5fcdfe-ffc1-49dc-bb2d-d9932b1ec010", "sighting_of_ref": "indicator--075be8c2-4dcd-470c-a1a9-30567275b8cd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a0fc7ce-b077-4069-b8aa-957f8f170ff6", "sighting_of_ref": "indicator--7a4e4dba-ad16-49cf-9b9f-6c28291f2768", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b19c0fb-5012-44a8-84a0-f2a838f619c6", "sighting_of_ref": "indicator--8e1cb3f8-5a93-4181-a4e2-1e6fa16ffebf", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0af9dca-b1f1-4377-b241-131ef6eeb9dd", "sighting_of_ref": "indicator--ddc7d98e-ace6-4188-b744-4dc6d34294ce", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e30fa58c-2d53-4cb2-b2a7-33072b5f316a", "sighting_of_ref": "indicator--d02f30fe-5446-4cc9-b8e8-e163211d6605", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db9dee7c-38fa-47a6-8512-131b928962a3", "sighting_of_ref": "indicator--610408d2-6f2b-4652-8fa2-704db5cec865", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d90fb2ea-6208-47e2-a5f5-cfb807f451b7", "sighting_of_ref": "indicator--0cbcc789-0cce-4a1e-bc8c-61d506be3af5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bd021d7-2699-40d1-a63a-fbee1105a651", "sighting_of_ref": "indicator--2b841be5-5e89-433b-b65e-0ed8e68f7303", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52f12c75-1289-4987-84d8-cbd259719364", "sighting_of_ref": "indicator--5e30f60c-393a-4b46-b81a-41b6da3b3fba", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc4683fa-afeb-4315-86d0-ec2f9f458969", "sighting_of_ref": "indicator--3f70e8a7-fdf6-4478-ba49-177c224e4e0c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--caca6895-cf1e-4897-8576-36f3ff8ab6c1", "sighting_of_ref": "indicator--8a2287f0-c9fd-44e4-b86f-e6f65d2b563d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c4a223d-aef7-4acc-921c-8ba5d977ce13", "sighting_of_ref": "indicator--79cf88d2-f6fe-4c0f-a9b4-2855cf4c218d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79fa2035-0825-4420-b96f-d31015ef1066", "sighting_of_ref": "indicator--5a6ca2ac-23d3-4164-aefe-f824892038d3", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e55ba89e-c0c0-4b12-bc9c-ab4ce23054fc", "sighting_of_ref": "indicator--93261c18-638b-4520-97c2-7d9b157b9154", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--047a2cd4-585a-48cd-8d44-0ee4dcd94d21", "sighting_of_ref": "indicator--cd92cdb8-d636-4840-b064-d9ac2a74e69d", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89baa5ec-4de2-4083-a7df-5950e3d73222", "sighting_of_ref": "indicator--861da363-8f27-46ec-8c81-09a18848f581", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--271b9eb3-0843-496d-9ff4-9054bf7df8ae", "sighting_of_ref": "indicator--5237e550-4632-4afc-9715-6bf9bd8b53d0", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f203be7-915a-443c-8769-740c732f6732", "sighting_of_ref": "indicator--39be7eb0-e0c0-4a98-ab71-4e73f15387ec", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edc850e4-3fd9-47c1-885c-78276f86ed72", "sighting_of_ref": "indicator--013e768c-f831-4a9c-8f63-ab156c1b65ad", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e844b36-04de-4834-9a97-b3354d3ac2cb", "sighting_of_ref": "indicator--8d924442-b5fa-4bb7-874d-09a300d2533e", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9875b564-082b-4c9d-8abf-8a4f92064674", "sighting_of_ref": "indicator--893b49af-917d-455f-ba86-aa9ca15b273e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--828c656d-3aa0-408d-be0d-192a22d86250", "sighting_of_ref": "indicator--617047e9-909e-4b42-b8e5-fec287ce7363", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a65d62e-4b17-4d0d-a3f6-96df302826aa", "sighting_of_ref": "indicator--dafe6da5-7d65-43fb-b02d-b564cae6a23d", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb1008ca-98ef-444f-ad5c-d7b2032290dd", "sighting_of_ref": "indicator--4c7ccbd8-7c32-4735-a10f-833e5ad3dee6", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b78ebd3c-8dfa-4ac7-ba00-59d3966650f9", "sighting_of_ref": "indicator--148f9533-0ac6-4359-89f4-0d8de4a1394d", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39305f72-d5c4-4ea2-a550-49783c4fdaac", "sighting_of_ref": "indicator--32373c46-146f-46c5-8566-d78625de9805", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83e99518-fb64-47fa-bf50-2b1bfc26c272", "sighting_of_ref": "indicator--68052dde-40f3-4c79-b5a2-414c0eaec791", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af7f6759-4500-4e0d-bd43-c77686b40865", "sighting_of_ref": "indicator--68052dde-40f3-4c79-b5a2-414c0eaec791", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dbec89c-e65e-4b25-a47e-dcdbdfbf271a", "sighting_of_ref": "indicator--68052dde-40f3-4c79-b5a2-414c0eaec791", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41913729-3006-4278-b4a8-2e29ce79682d", "sighting_of_ref": "indicator--7c75eb88-e005-417f-9037-0fdd4e7c68de", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--426647b1-8c9e-4dfd-bb3d-98252a5da0ab", "sighting_of_ref": "indicator--7c75eb88-e005-417f-9037-0fdd4e7c68de", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d10bfcf-2ef9-4453-9e49-b98e6fd65aa4", "sighting_of_ref": "indicator--7c75eb88-e005-417f-9037-0fdd4e7c68de", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--099af948-e450-470c-a0b4-767cbc7751db", "sighting_of_ref": "indicator--7dbc3ce3-28d4-4b7a-858b-833c2df15e07", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--765a4f9f-1a66-4f77-98da-cfc270897b98", "sighting_of_ref": "indicator--7dbc3ce3-28d4-4b7a-858b-833c2df15e07", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78befc47-c7d8-4887-a564-103e759dce18", "sighting_of_ref": "indicator--7dbc3ce3-28d4-4b7a-858b-833c2df15e07", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9531dd76-2d3b-4801-8ec2-25f84490df36", "sighting_of_ref": "indicator--6634335c-b9f1-4e73-a684-7262afe4c2f8", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d6a525e-0262-4e94-82e3-779a5d481cb9", "sighting_of_ref": "indicator--93ac2cfe-90d6-41de-a120-45a556901301", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa221673-edff-447a-883c-7f45488a5ef2", "sighting_of_ref": "indicator--c3ed8d74-5cd3-4325-bbea-ce8dda72638c", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb16aa01-4b59-4d67-bf75-4751b37631ed", "sighting_of_ref": "indicator--0b9eba56-e75b-41e3-ac6a-b196ddb23f89", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8cfdbf8-2c07-4edb-98e8-ebc5fde56672", "sighting_of_ref": "indicator--047c1902-520b-4d28-a3f2-778d7274fe51", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e81b92c7-0770-4b14-8e6d-fefcaf54ada3", "sighting_of_ref": "indicator--afc91013-01b6-457d-87da-0970d05c4041", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04fb5dec-af74-463a-a292-980d3c7a5e8a", "sighting_of_ref": "indicator--e12ce450-00dc-42a2-b040-b79ab6f25a16", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd7b34bf-e352-4469-adbc-76feeabb33db", "sighting_of_ref": "indicator--6afb8729-8335-49cf-9018-53b26fc1e6f5", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca8e11e2-4c0c-420e-bd6d-46e386469f7d", "sighting_of_ref": "indicator--62352422-9a90-4ea8-a280-a12911c66539", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7260cc9d-e10f-4e4c-ad51-4b02615d47f5", "sighting_of_ref": "indicator--de06f444-bd5a-453a-8ff4-15304b3d2c01", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e507db8-fdb3-45e2-8ce0-70589ca42dca", "sighting_of_ref": "indicator--aa78ae81-b242-4fd3-bcd0-09d9e5666bad", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82b39784-edc6-4a82-969e-b63e99cb0ff0", "sighting_of_ref": "indicator--94a517c9-41e6-47ab-8104-961dfc5759ca", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9c418d4-4ccd-43a0-8883-b7220f4249c2", "sighting_of_ref": "indicator--140de175-4fd0-43f7-94ce-05371804abcc", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73be8745-3140-4010-bd93-a9688ec147cf", "sighting_of_ref": "indicator--0cc87557-d0a0-40f7-8a28-ce7fba7ff5d8", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18eb6c51-3114-406c-b1af-aa7b4cb5dd6e", "sighting_of_ref": "indicator--bd19ccfa-0975-4230-a026-74f31effe61e", "where_sighted_refs": ["location--cc47317e-2c18-43a6-8938-dea748a56ad5"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4820372b-4a66-4c4e-9927-eb184e48fe75", "sighting_of_ref": "indicator--7184fda2-3ef6-415f-9ddc-0f70db23b936", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ae1c62d-0497-455f-bb7e-a9dff261ba65", "sighting_of_ref": "indicator--99ef5f31-7024-457a-a1e7-4067fe8e4731", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99f70274-3770-45bc-807e-ed9d73c1aa7a", "sighting_of_ref": "indicator--4363fd94-6301-4b52-a3c5-1d8f0db8d4eb", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e942e009-3537-4f7f-a229-3f23384b59cd", "sighting_of_ref": "indicator--0958c833-594a-43fd-8e38-ec0f2065763b", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93eca0c7-d42b-4e8e-af19-0b8220a53338", "sighting_of_ref": "indicator--d50cdd2b-cd04-4230-9cec-9f19ca66bcde", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b60bb6b1-5f00-4524-b435-64ec3907b451", "sighting_of_ref": "indicator--4b7871ec-b24a-46c1-a5ca-58a9d5a0f596", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f7de0e7-420f-4ad8-b0f4-7e2c3114ec57", "sighting_of_ref": "indicator--fdf86834-1961-439e-8685-134aa8af9433", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b483b63-79c0-4af3-a456-ff36548ce7e9", "sighting_of_ref": "indicator--16fed9b4-5b94-4f50-bbce-d7f605e48d39", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9655502e-7a70-4a37-a323-8bab2e394741", "sighting_of_ref": "indicator--502dbddd-b910-418c-9d0c-ea2fb61d4ddf", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c192677-da60-47b8-ac85-970cfe4ef6e2", "sighting_of_ref": "indicator--102c4a64-663e-4b7d-b418-78e6ad0dda34", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3506ebc-acbd-4921-8c38-fa5a6bfec4b5", "sighting_of_ref": "indicator--bdcf69b0-5ec0-43e2-853f-3ce2786195bd", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f9d70d3-42eb-419f-8095-269952304b27", "sighting_of_ref": "indicator--6fa0cabb-9784-40fd-b99f-e55f66024d94", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb0e3369-af70-4faa-8d74-9e19923e29d2", "sighting_of_ref": "indicator--d08b0139-acf0-49c4-a7d6-c72fe7317161", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43640d9d-db2f-4ba9-9a53-4d5c441d9f31", "sighting_of_ref": "indicator--1dfc2049-c3b8-4a69-9f61-d317f5d1c4a0", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d874a61-4119-4001-b29d-e57a1dd41e2e", "sighting_of_ref": "indicator--1dfc2049-c3b8-4a69-9f61-d317f5d1c4a0", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71c22174-7d0c-42e4-95d9-88824a7dc0ec", "sighting_of_ref": "indicator--5b4bd563-c114-485a-a80d-94c36de13981", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50e1481f-25db-4e32-97fd-e5b8474c6351", "sighting_of_ref": "indicator--690d9c95-de4f-446d-b659-2f4049c5b14d", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a4c0f4a-f1c5-4948-ab2b-3258d3ba6bca", "sighting_of_ref": "indicator--c7ea7502-6dd3-49d2-9565-edb917d11f94", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c671533-28b4-4302-8e41-54865e102016", "sighting_of_ref": "indicator--d4b09aa0-a894-4dcb-a3da-4c57b990fb69", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3c3df68-47ee-49d9-a990-801f5497b7d7", "sighting_of_ref": "indicator--cd5784b1-63d0-4671-8198-938a71987242", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42a36166-1fbd-400a-9e50-46d7c3afe947", "sighting_of_ref": "indicator--007722dd-996c-46d0-8054-8eff3c701a39", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3206bfe7-ce81-494d-bdbd-d74312a43f33", "sighting_of_ref": "indicator--223c29f5-5918-41ef-8aa4-7e320278a3f9", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5af3d46-914d-4fc5-80ce-372f900024ad", "sighting_of_ref": "indicator--d9d8e543-b702-4efe-852a-68c0ffe0501b", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee4e2025-5aaf-40e7-8031-a1b037d92750", "sighting_of_ref": "indicator--d9d8e543-b702-4efe-852a-68c0ffe0501b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f0f511d-da98-47d3-8d1e-2dc1c49a41d0", "sighting_of_ref": "indicator--d9d8e543-b702-4efe-852a-68c0ffe0501b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6eca99b5-0892-4263-b39a-381d901f2de1", "sighting_of_ref": "indicator--e27ba505-a2f4-428a-8c6f-2ad67e133b94", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccdc5003-3f6e-4c22-9213-8e0e75126200", "sighting_of_ref": "indicator--d32aef1e-08db-43bf-bb73-1b73a131721a", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec36bd5a-e2bc-4c8c-8252-05a9c5564c0b", "sighting_of_ref": "indicator--1edd5b49-fa78-4dce-b233-5a39899a2dcf", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c630d55f-c384-4cd4-a49a-a153d5abde37", "sighting_of_ref": "indicator--ad98b665-716c-412d-b4ed-9f44993cba84", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcd6c3b1-1bfc-47af-ba53-3c41930c8968", "sighting_of_ref": "indicator--df92f4d2-c28f-410c-bdf6-41cdabb510aa", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa263801-c40c-43aa-b9c1-e0b73b64ac0f", "sighting_of_ref": "indicator--58018d1f-3302-479f-9378-79758de37c00", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c39e104-6439-4846-8596-6fb5b08775d2", "sighting_of_ref": "indicator--8a445657-cf9d-47cf-9801-56a41f1ec1fe", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afe4385e-f5c9-4a9d-bb57-d3eaeced892d", "sighting_of_ref": "indicator--247f905d-86af-4a39-a829-ddba387d8b85", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab086a0c-0dfd-40ea-87c0-f1d6eb67b9d0", "sighting_of_ref": "indicator--07869780-a36d-4a16-b6a5-40c539125d51", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04e854e5-969c-4037-ac08-85de5d1b7f81", "sighting_of_ref": "indicator--da80b024-f4a4-478b-8eca-661696cc2653", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb0ef5a4-7957-4f54-9c22-44ce79576b25", "sighting_of_ref": "indicator--da80b024-f4a4-478b-8eca-661696cc2653", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--828f52d5-1b25-4f0b-820a-0d0ad99ce6ab", "sighting_of_ref": "indicator--6a35071f-b7dc-4ea3-a92f-58d2a1c31022", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb0b8df5-dda3-422c-86af-fb26649f0369", "sighting_of_ref": "indicator--6a35071f-b7dc-4ea3-a92f-58d2a1c31022", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--750ab399-2c54-4f7a-a1cb-027be8cdc5b3", "sighting_of_ref": "indicator--6a35071f-b7dc-4ea3-a92f-58d2a1c31022", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad6a19be-b639-41dc-a01f-ace097b1dcde", "sighting_of_ref": "indicator--15b65fe4-e61e-4fed-8e0a-a151f4a0e334", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2beded6d-7a74-4e51-986a-4954765be1f3", "sighting_of_ref": "indicator--f0c0717f-de0f-4e02-849d-49e2a74772f5", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4f7d0d9-8380-4a25-bca5-af4a72719e74", "sighting_of_ref": "indicator--b858e5d1-ef95-4029-8dc9-33595421cfe9", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d1da078-1a06-42e8-b18a-9d6b3e817b7f", "sighting_of_ref": "indicator--7304cd7e-af64-4b19-987f-4f4e14b5573f", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca092d1f-b327-4998-8002-fcd5c40ae933", "sighting_of_ref": "indicator--7304cd7e-af64-4b19-987f-4f4e14b5573f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f860422-78ec-47f4-bea0-2e33e89bff3e", "sighting_of_ref": "indicator--aff62c24-6339-47ef-8b9e-e9725d2688aa", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04aa5be5-632d-47ba-93d6-cf9e590adb49", "sighting_of_ref": "indicator--18ce0bd4-067e-441e-8d87-ecaf915b8f80", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--978b81fb-3928-484a-bfb3-ee8abacde79e", "sighting_of_ref": "indicator--18ce0bd4-067e-441e-8d87-ecaf915b8f80", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be431f0e-2b58-45a4-9300-3ce986dd962b", "sighting_of_ref": "indicator--67d2d668-b64e-4714-a907-e68da9273140", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0105145a-4f7a-43d0-b1ca-c7cbd6da7ce0", "sighting_of_ref": "indicator--8e958eb8-71f3-4c06-91c0-e0d55a39cd30", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9351373-1dc7-4ea9-8af9-8e1c91425e8d", "sighting_of_ref": "indicator--8e958eb8-71f3-4c06-91c0-e0d55a39cd30", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d29ae7a-554b-4b56-904c-df20a325b05f", "sighting_of_ref": "indicator--8e958eb8-71f3-4c06-91c0-e0d55a39cd30", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd6f5f56-236c-4673-a967-849c3ed8d3b1", "sighting_of_ref": "indicator--742c51a7-cd6b-4749-b57b-a058fcb71377", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e06021b2-0f90-4c9c-b950-00ad257b9e77", "sighting_of_ref": "indicator--4528528a-b3fa-4547-962b-c8934d0ee633", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e8d0ef4-d803-4887-b10e-fcd3d163a8f4", "sighting_of_ref": "indicator--4528528a-b3fa-4547-962b-c8934d0ee633", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e90292a-76b0-4a50-b1c1-4d78e9f7e986", "sighting_of_ref": "indicator--870a91d3-290f-4dd7-b18d-74adb8987b38", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a09de6b4-9d58-45bc-ae82-08783e4513de", "sighting_of_ref": "indicator--38778d5d-1b37-494d-bb0c-cc0a90688230", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bb83c99-2ec5-41fd-bcd7-31f3187dc18e", "sighting_of_ref": "indicator--38778d5d-1b37-494d-bb0c-cc0a90688230", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--180405cf-7858-4716-a2f4-6c1173675f34", "sighting_of_ref": "indicator--e51ceb69-ab55-4005-8759-330580b823a6", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf7add3e-71b1-48df-a633-cec4d540485d", "sighting_of_ref": "indicator--02262d24-9502-47ba-8eb0-68cfc236bb12", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4960ff7-464b-4605-8637-5008a441bd37", "sighting_of_ref": "indicator--02262d24-9502-47ba-8eb0-68cfc236bb12", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a165ef15-9704-4e9f-a8a4-bfbfd76d2f5d", "sighting_of_ref": "indicator--02262d24-9502-47ba-8eb0-68cfc236bb12", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bf37ca8-30a5-4ee2-9217-ef63e35f5cb7", "sighting_of_ref": "indicator--f97d7696-a8d0-43c8-8091-056a83b68f96", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f39bbb14-5eec-4d96-85f5-71ed84b64853", "sighting_of_ref": "indicator--4ee67614-3a30-46b1-b019-a66035a7f818", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d3dfb28-166c-4e14-b689-daf3c5fca51e", "sighting_of_ref": "indicator--b52817a4-48b5-47bd-a80f-ee6102094936", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a468da1c-a205-451e-94b2-4f8c9763053a", "sighting_of_ref": "indicator--1e94973f-6db9-45f5-b982-ec5b35e750a0", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70107435-20fa-4d3d-891e-247a7c8896bd", "sighting_of_ref": "indicator--5e4ab036-8077-4e83-9ef8-4e9d25baa73e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a713da4c-29f4-4862-ab02-2c770ba2f9fd", "sighting_of_ref": "indicator--69065673-2f26-4624-9001-d188ad080afe", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55f83154-0e79-4f91-bd5e-5c79bd7e3854", "sighting_of_ref": "indicator--69065673-2f26-4624-9001-d188ad080afe", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a6ec68b-f725-4723-9e4c-f16ca6ee6b0f", "sighting_of_ref": "indicator--f84d1aad-8a01-475c-bdf5-f64a0e7a10e9", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e246645-1f4f-4506-a7b0-19cbf2b4be06", "sighting_of_ref": "indicator--f2136b8c-48e8-49a6-97e4-273403967dc3", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bb05967-a66b-46c1-a7be-546b560ebe62", "sighting_of_ref": "indicator--f2136b8c-48e8-49a6-97e4-273403967dc3", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe3a9f3a-9cce-4c5c-b11d-528054a53a26", "sighting_of_ref": "indicator--ad43ead3-b122-4533-95f0-7b2262eab2bf", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d11ab85b-ca2d-426a-b836-67962028f56e", "sighting_of_ref": "indicator--ad43ead3-b122-4533-95f0-7b2262eab2bf", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76fafa83-026f-4572-92d2-f2025a160232", "sighting_of_ref": "indicator--ef278c02-9197-48d7-a38e-f1ecf9cac86f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63087fda-182b-4073-a827-ee178f1f1ae5", "sighting_of_ref": "indicator--c0d527c9-87ef-489f-9e55-58df6d5c9867", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adf30c9c-a733-4b21-8095-a2070b01b843", "sighting_of_ref": "indicator--7103cf22-633b-43ae-9bf1-7b90d7871fab", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9704bee-8264-48f6-bdc2-9510b434d15e", "sighting_of_ref": "indicator--d9a8d575-e12b-4e45-9256-44690a3ff8dd", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab3f47dc-26f8-49e8-b235-9820be1876b2", "sighting_of_ref": "indicator--eb48dd51-fafc-4be4-82b9-773d2d02944d", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f87c0e1-b777-4dea-be6d-5dd43d77113e", "sighting_of_ref": "indicator--7a587458-63d6-4f6c-ae4c-de0272852ee1", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f7ea0aa-5500-4b71-b76b-c878520b430f", "sighting_of_ref": "indicator--f1150ca7-6bd7-42ec-a433-1ef9120708f4", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca8db8f9-773f-4e48-89c9-74938749029e", "sighting_of_ref": "indicator--f1150ca7-6bd7-42ec-a433-1ef9120708f4", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d20923b3-8681-4f1a-898a-f1429ee0a340", "sighting_of_ref": "indicator--79ffc2db-b2d4-4c1c-82b7-aca0b27938a2", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dddf3a0e-a4d1-4892-8a4f-7a3501be00f8", "sighting_of_ref": "indicator--7d3f0866-7875-41d6-9c51-6ae388353cfb", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c226cc7-2712-4ef5-9d9c-1a5b0bb70979", "sighting_of_ref": "indicator--8c7a38ae-6968-4e22-8bae-ab06c356f219", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a53ebf30-ada0-4685-84ac-9a2731436a84", "sighting_of_ref": "indicator--9cc725dd-706c-4afa-bd09-48aa725dd642", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07b3cc8c-9d21-434f-91af-1bfbf50d6c36", "sighting_of_ref": "indicator--9cc725dd-706c-4afa-bd09-48aa725dd642", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ae70bee-1609-41f1-adfe-459e9e8b49a8", "sighting_of_ref": "indicator--cb651fdf-a863-4616-b4fe-c6e9facb7153", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e84039b-857f-47af-8f20-1418e7081d1f", "sighting_of_ref": "indicator--bbd7cc9d-f233-4aef-8eb6-6ae8b43041f2", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e7db3f3-1d40-4077-9f66-0406aa360981", "sighting_of_ref": "indicator--817b5875-eb19-4598-9d39-b0b1a7d96472", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d68765db-1acf-47ed-a0c1-52fa37258e0d", "sighting_of_ref": "indicator--f6900efc-eaf5-439c-9d4f-3ebca60e10f8", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a884be3d-a283-4d61-a493-5550b9c51fc7", "sighting_of_ref": "indicator--f6900efc-eaf5-439c-9d4f-3ebca60e10f8", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69c2429d-b153-4ea8-99f8-35d3ac3e7e4d", "sighting_of_ref": "indicator--3740c4cc-6339-40b4-9d36-2f4a3d11d62d", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46549206-82dc-41ca-8287-cfe84250cc8a", "sighting_of_ref": "indicator--3740c4cc-6339-40b4-9d36-2f4a3d11d62d", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b6cc376-8d9c-464d-86f7-7bfb3281d2ec", "sighting_of_ref": "indicator--485d677c-4298-41fb-96a7-9c8bf9a834b5", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0aa3dcb9-7538-49aa-922c-9deea16dda3f", "sighting_of_ref": "indicator--eb5b8112-eeff-466b-bf8b-d2418f6bf85d", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--170eaddc-38f1-4650-9cfc-e0a8c4806a9d", "sighting_of_ref": "indicator--eb5b8112-eeff-466b-bf8b-d2418f6bf85d", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c65ac98-4402-4d1f-93e5-d569f2216d34", "sighting_of_ref": "indicator--9a2ea879-418c-4fd0-b505-47cda06cc6a1", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--344c5b2f-5fff-48c8-bec0-9de3999fe58c", "sighting_of_ref": "indicator--e60d93ac-bd0f-48e7-ab72-092c0f51dcb9", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30095208-afb1-4842-b253-e00d4d81293b", "sighting_of_ref": "indicator--ad933310-627f-4b1d-83b8-0f29a6d1f20f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c7f7cae-d7bf-4238-be94-82f37db892fe", "sighting_of_ref": "indicator--ad933310-627f-4b1d-83b8-0f29a6d1f20f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0622581d-4a8a-41c9-a393-4f5954f6141a", "sighting_of_ref": "indicator--a655c9a1-1d02-45b2-a22a-f2b8e3d51e7f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e24c03a-e557-4584-82aa-3cbd13df350d", "sighting_of_ref": "indicator--a655c9a1-1d02-45b2-a22a-f2b8e3d51e7f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1717972a-6f9f-4c1f-aa07-707c34caec52", "sighting_of_ref": "indicator--7dbb48f6-c403-4f48-b584-1fe4a8042dcb", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccf87037-399b-405d-a2e0-4c4d624bf99e", "sighting_of_ref": "indicator--7dbb48f6-c403-4f48-b584-1fe4a8042dcb", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97d4c739-48d6-4937-ab33-aaafb4fd4d0d", "sighting_of_ref": "indicator--dc312523-3f6f-4440-8811-9e5edb9bfb43", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87b7d23d-b605-457e-a37b-d5547f970bc9", "sighting_of_ref": "indicator--5aa34bca-7f2b-4937-81fd-f68ef8e94f1e", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c94715d-cead-4af8-b94f-a3faefeb84c6", "sighting_of_ref": "indicator--7533a4e9-325b-4352-857f-e2485374c67c", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c18a6447-e504-40d9-8b4e-831dea1a663a", "sighting_of_ref": "indicator--84e84118-894a-4c76-ba29-c0b794a07a86", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47c2975e-3db1-408a-b7ec-a2cc8877dda1", "sighting_of_ref": "indicator--84e84118-894a-4c76-ba29-c0b794a07a86", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d60a1d89-0799-46e7-b858-765ce8d0a60a", "sighting_of_ref": "indicator--29436fe0-43dc-4e69-b68f-c71690219c54", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fe37da4-125f-4807-844c-df38e34f16df", "sighting_of_ref": "indicator--29436fe0-43dc-4e69-b68f-c71690219c54", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ac949e9-4a34-4df7-9933-ca1ce4e0a8c6", "sighting_of_ref": "indicator--b5a02d1d-6f36-4834-b340-a224d2a990e4", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--533fe1d9-1d5a-4670-b8ad-02a430b98018", "sighting_of_ref": "indicator--b5a02d1d-6f36-4834-b340-a224d2a990e4", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91a9f69f-2ed0-4212-8107-78f2e2e8ebe1", "sighting_of_ref": "indicator--b5a02d1d-6f36-4834-b340-a224d2a990e4", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34d188a5-0a97-49d7-94a6-fb925e92749b", "sighting_of_ref": "indicator--32f35cbd-7a8a-4d94-b355-4822bcd15559", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ca9459c-d4a6-4b7d-bbfe-ef1bb2516635", "sighting_of_ref": "indicator--742a5bf8-dba4-4618-8145-0f4fee0f8245", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8de9cef4-515a-4483-87db-a712701769cb", "sighting_of_ref": "indicator--742a5bf8-dba4-4618-8145-0f4fee0f8245", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f3d8ac4-63bd-4718-a8e5-da0d2f4057c4", "sighting_of_ref": "indicator--5cbebec3-a8f7-4245-a5a1-0fd3782d03ed", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad31f9a8-c36c-44c2-9441-4db4d69002f6", "sighting_of_ref": "indicator--5cbebec3-a8f7-4245-a5a1-0fd3782d03ed", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c65a34b-5f05-4905-a781-f60eaca675fd", "sighting_of_ref": "indicator--09327aa1-3bd4-47b0-b194-a77b47375578", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--093efc45-873d-46b1-b056-fe2eae939a63", "sighting_of_ref": "indicator--09327aa1-3bd4-47b0-b194-a77b47375578", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d822d26-e0bc-4451-b835-3a24ae07e65a", "sighting_of_ref": "indicator--17e1b676-c3fc-4cd9-ba4a-3428978e0e30", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bbcb6d4-6f69-4ce3-98d6-a9506abbec7a", "sighting_of_ref": "indicator--16618c56-4265-484d-8646-2094d86ccaad", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7602f87e-8feb-4d9d-a886-67b2b02ddd43", "sighting_of_ref": "indicator--11ac384e-dacd-4909-bf88-2a2d9887c2ff", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d22a466a-368f-4dea-a03e-6640a12f796b", "sighting_of_ref": "indicator--11ac384e-dacd-4909-bf88-2a2d9887c2ff", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1921562-a6e2-472a-966d-20b4ebb56d48", "sighting_of_ref": "indicator--11ac384e-dacd-4909-bf88-2a2d9887c2ff", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3aceb0ef-6701-4860-91c3-dea05ce1a7a4", "sighting_of_ref": "indicator--1650c38f-afcd-4d22-844b-daacbac8d57c", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3e4e9fe-b522-4440-b884-f99465786a8c", "sighting_of_ref": "indicator--1650c38f-afcd-4d22-844b-daacbac8d57c", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--043572d8-f70a-41db-98f4-920d7e6c41c1", "sighting_of_ref": "indicator--4177bfd2-e941-4687-b0f0-1126077d2a10", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b4c08e8-932c-4f69-8f78-e967fb989959", "sighting_of_ref": "indicator--8bf29c1e-3d74-4503-89e0-b66db37dc8a7", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6091205-885b-436a-9652-2aff80c57d04", "sighting_of_ref": "indicator--8bf29c1e-3d74-4503-89e0-b66db37dc8a7", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--198eb45b-9ad3-40d0-baff-74e47dcf2527", "sighting_of_ref": "indicator--0015be08-b950-463a-a44a-1230223ac867", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd3e5941-7712-4e0b-90d8-00bf837a8d21", "sighting_of_ref": "indicator--0015be08-b950-463a-a44a-1230223ac867", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0538b480-e01e-40aa-98d0-cfd1889eed06", "sighting_of_ref": "indicator--806bcb5d-5da7-4341-bec4-e3744d2a7612", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86202bd7-8def-4193-9ab6-f229b4b4ebc8", "sighting_of_ref": "indicator--806bcb5d-5da7-4341-bec4-e3744d2a7612", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2598fdd2-c051-4e5f-9da7-bfa7a183952b", "sighting_of_ref": "indicator--806bcb5d-5da7-4341-bec4-e3744d2a7612", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cff5756-1078-4329-a472-6d1fc7b52bc4", "sighting_of_ref": "indicator--02752a22-b3f2-4b83-961e-643ae8473377", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa629900-68d6-4956-b00b-4c521225455c", "sighting_of_ref": "indicator--4991e7f5-6299-45dc-9855-adac6657a371", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b619ca9-a62f-4c0e-aa50-fd70c1e76094", "sighting_of_ref": "indicator--4991e7f5-6299-45dc-9855-adac6657a371", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--795a4bac-38b3-40d5-b562-38de9830fc67", "sighting_of_ref": "indicator--8f1938cd-5f3a-4881-a8f9-464aa8c5df0a", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b9f095a-977d-4783-9cf7-6628d2d4aeac", "sighting_of_ref": "indicator--8f1938cd-5f3a-4881-a8f9-464aa8c5df0a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ecc0b74-b2a4-46c0-8180-ee87a9cef43d", "sighting_of_ref": "indicator--f95d892f-65bd-4208-8bec-da099a612fb1", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15f17990-3481-47d0-9887-9833db1c7fd4", "sighting_of_ref": "indicator--f95d892f-65bd-4208-8bec-da099a612fb1", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7125fd3e-6af5-4bcf-a396-85c60e96d08a", "sighting_of_ref": "indicator--a97f787a-05ae-4d17-bc83-3a3e3159a0e2", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32d5f327-59f7-455d-bd15-75a1d59b4c27", "sighting_of_ref": "indicator--f0696dbf-f842-4921-9ff2-2b0113d01de8", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ab721c3-215b-41cd-81ec-4f6db73cb14c", "sighting_of_ref": "indicator--bd8b0413-cdfe-4de8-b56d-63124b0f96f1", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c995e01-bbb1-48e5-95cd-5832b6a16a72", "sighting_of_ref": "indicator--9229727c-a6a2-4b91-b8c5-82d28479a54a", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43967738-5efd-43c8-89cd-bd603436c84b", "sighting_of_ref": "indicator--9229727c-a6a2-4b91-b8c5-82d28479a54a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a366c02-1d3e-42aa-b2f7-8f361d173753", "sighting_of_ref": "indicator--ca49edfa-6914-4c4f-b6cd-8869ce99d28b", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2a36436-3bdb-4160-b12f-2067650ac4c7", "sighting_of_ref": "indicator--a8761585-f0c9-448d-94b2-61335c28675c", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0125639-c2ec-4b80-96f1-842cd4dd6064", "sighting_of_ref": "indicator--a8761585-f0c9-448d-94b2-61335c28675c", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bd9c6cc-6a8b-45e1-9bb0-3a7f5e956a76", "sighting_of_ref": "indicator--da1dd815-d8f0-4bf3-9cb5-afb1b9fdec38", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b30591e-8682-4761-b994-ca6ec4b79feb", "sighting_of_ref": "indicator--5965e1ce-8410-46ef-8d86-3620ec7fce8d", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59914c6e-9fcd-4205-9a3b-88eded5162b6", "sighting_of_ref": "indicator--5965e1ce-8410-46ef-8d86-3620ec7fce8d", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e2c244e-8bb2-4508-a77a-a12e7df1033c", "sighting_of_ref": "indicator--69db3e44-832e-4414-8db4-bfbeac90d5b9", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e22c838-574c-4259-ac09-d8c84a7f92a0", "sighting_of_ref": "indicator--69db3e44-832e-4414-8db4-bfbeac90d5b9", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18494645-7811-401b-8184-a2bb0e67dfad", "sighting_of_ref": "indicator--69db3e44-832e-4414-8db4-bfbeac90d5b9", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c84d2316-8575-4482-8444-76022c53c920", "sighting_of_ref": "indicator--909578bf-c057-4bc6-b185-35af5191ce2e", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1831eeaf-75c6-41f9-9918-817ff0964ab0", "sighting_of_ref": "indicator--3d0e409d-738b-4c61-8de8-1853eb6b84b1", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b3198d6-5f7b-4bb6-bee6-8290d4069b84", "sighting_of_ref": "indicator--69333a9b-316c-43cf-8901-e5f760f0b7a9", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c2eca6f-8c70-40f9-a60c-ac8db3057a9d", "sighting_of_ref": "indicator--de9f8a7c-63e3-42b7-bd73-3d1564991599", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10817c36-e225-4899-94ae-17bcff9427e3", "sighting_of_ref": "indicator--de9f8a7c-63e3-42b7-bd73-3d1564991599", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad712ad3-5770-4cd8-9272-54672a3bd444", "sighting_of_ref": "indicator--1efa3f02-4d2d-4fe3-9cc7-112906a328f9", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a76661ef-aa3a-446c-84c6-8d99748ff3d5", "sighting_of_ref": "indicator--1efa3f02-4d2d-4fe3-9cc7-112906a328f9", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e5e7677-bba5-4241-9a3e-21f3a766c39a", "sighting_of_ref": "indicator--1efa3f02-4d2d-4fe3-9cc7-112906a328f9", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1c82a3a-555c-40be-8ad3-07a425c9f083", "sighting_of_ref": "indicator--7ccecada-bff1-46e6-b5e4-3b2afeded98d", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b676597a-470c-4726-b98f-46a6b6494613", "sighting_of_ref": "indicator--7ccecada-bff1-46e6-b5e4-3b2afeded98d", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--539d474d-ac44-42c8-b508-2ab409c8485e", "sighting_of_ref": "indicator--995e48b1-f59e-4002-a17d-9cbede589362", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18d7323f-0a00-4abc-a651-644fe7301307", "sighting_of_ref": "indicator--995e48b1-f59e-4002-a17d-9cbede589362", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13ee7d0a-37ca-4ec2-ae64-016898d2c0ae", "sighting_of_ref": "indicator--51a119f8-2c23-476d-962a-40a74171ee57", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b436ba21-cc3f-4cc4-a024-dc91b57f3c1c", "sighting_of_ref": "indicator--51a119f8-2c23-476d-962a-40a74171ee57", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a04c23a-a2fd-43e9-a799-d18b6b0be669", "sighting_of_ref": "indicator--c1499011-e3fd-441f-b5aa-c4e501652e86", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e781f0a1-6d11-4c31-ad58-554273042dab", "sighting_of_ref": "indicator--94bb4497-d62d-4aaa-a3bf-8b16db1c6a0a", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b81ffba4-824e-47e3-a734-17777262a53c", "sighting_of_ref": "indicator--94bb4497-d62d-4aaa-a3bf-8b16db1c6a0a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9849e7f2-a65c-4afa-a913-577d83a150a2", "sighting_of_ref": "indicator--f4cc4b45-66b9-48a1-b89b-e5e63d07efd0", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03081131-5201-4be3-9c3b-9ccdbeb21a3b", "sighting_of_ref": "indicator--f4cc4b45-66b9-48a1-b89b-e5e63d07efd0", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--266156c0-e44a-44a4-8c36-74190dd8eb9d", "sighting_of_ref": "indicator--893784c8-6a3f-4d9b-b5bc-6c17cb70c949", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60577f99-83fe-4e07-90f3-67eb65dee6d3", "sighting_of_ref": "indicator--26110323-4925-4f48-a665-5595d1d425a2", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--601e7c75-0aa3-4789-8f62-df4144af623b", "sighting_of_ref": "indicator--801b65c1-1855-4c12-89f2-8726440303da", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbffeba1-6483-423e-868a-5c3b21b054f5", "sighting_of_ref": "indicator--801b65c1-1855-4c12-89f2-8726440303da", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44cb9b6a-b91e-4210-a0dc-ba943997eb43", "sighting_of_ref": "indicator--3f657a45-0d2b-47b9-84a6-c0aa7490004e", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7febabc-85b8-4656-8c48-3b8fb00ba36b", "sighting_of_ref": "indicator--f062c6cd-8a3d-4279-9a1e-d07ba70eee91", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3574957d-3091-4999-a304-14cda54b47bf", "sighting_of_ref": "indicator--f062c6cd-8a3d-4279-9a1e-d07ba70eee91", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1be75301-f864-4317-9a66-f15147078bb8", "sighting_of_ref": "indicator--955ebe17-e6d9-4461-b209-8735e17fdadf", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e20bb2b2-9bbe-4008-b623-61c2ab7b6460", "sighting_of_ref": "indicator--955ebe17-e6d9-4461-b209-8735e17fdadf", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a661c41e-aa6e-4126-ad2d-1c485492aec1", "sighting_of_ref": "indicator--e5aab1b2-2ebe-4db0-b1fc-5873ef8d240d", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eba25872-73c2-4467-a6ea-ee2c503bf59c", "sighting_of_ref": "indicator--c4c4c466-dd3d-4b30-8c17-b149a49cf73d", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c5ab734-ded2-45f7-a3e1-e3a320b649a4", "sighting_of_ref": "indicator--30ac8333-b98e-4508-9c2b-9757848ec58b", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d489cbc8-7513-4011-8d41-7877472502b5", "sighting_of_ref": "indicator--30ac8333-b98e-4508-9c2b-9757848ec58b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09949844-cb70-4411-91aa-03667530c904", "sighting_of_ref": "indicator--30ac8333-b98e-4508-9c2b-9757848ec58b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--044af48b-8e48-4676-9ef8-f5e5d8471318", "sighting_of_ref": "indicator--c512ffef-1c3d-4b3d-afdb-1e7cc6b549a2", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b22e93c-d34a-413c-ad69-75293b0a2578", "sighting_of_ref": "indicator--136d68a8-1945-417a-abbe-4f8ca1397a0c", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21bc1c5b-fdfc-48ff-9959-e7c88dfc9954", "sighting_of_ref": "indicator--0e570710-f861-415e-903a-98221c9bc2f3", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e25c71b-417a-4ab0-b85b-ae836408fd0d", "sighting_of_ref": "indicator--0e570710-f861-415e-903a-98221c9bc2f3", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bba2bfd1-00ab-44c6-bf07-217872726913", "sighting_of_ref": "indicator--72e6bb1e-a9a3-4700-af53-cc7fc42cd389", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbf80d07-9666-42ab-b222-3619a83709b4", "sighting_of_ref": "indicator--72e6bb1e-a9a3-4700-af53-cc7fc42cd389", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9703a5b4-9b2d-465b-988c-51626ff86d01", "sighting_of_ref": "indicator--74f5af3d-9c58-42d4-8b70-97c89e6ed4c4", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03d71e3d-552a-41f2-bf80-3fcc5f1b9ca1", "sighting_of_ref": "indicator--528de03b-d5c4-431a-99cc-979350285f32", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--464f7752-6ec0-4e38-b065-dc35778ae174", "sighting_of_ref": "indicator--08ebfec6-105d-4560-9281-cc0a80f51e5c", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee090055-5c32-4492-a0a1-a26b6a9e93c8", "sighting_of_ref": "indicator--482be4ed-4f6a-4f1e-8cb0-238ec245a2e5", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4b296a1-5eb0-4039-882c-173c67f88864", "sighting_of_ref": "indicator--03b5028b-7b78-4303-837b-62b3437d62b9", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42c2f40e-ae75-4a9b-90be-b8cc1abcb6aa", "sighting_of_ref": "indicator--20ecb98e-f0ab-4a89-a6b7-cfd93b12a199", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91a17079-eb9c-4648-9440-921bac82efc5", "sighting_of_ref": "indicator--4d81b72a-ca7b-47d7-89c6-7ec493d09e10", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dca23b6-248c-4362-aeec-38910625d7ce", "sighting_of_ref": "indicator--81742f85-d131-47a6-befd-710a09c31ff3", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f558de88-eec6-4de4-a695-6967b28d1c94", "sighting_of_ref": "indicator--bbfbf15f-80c7-4b37-9665-294e24da4c38", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ebae81a-5a07-468d-8f70-58bf78fd5779", "sighting_of_ref": "indicator--bbfbf15f-80c7-4b37-9665-294e24da4c38", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a67b4a0-d3f7-45c3-ace8-aa7dffafc642", "sighting_of_ref": "indicator--dc409e28-217c-460b-95c8-6a1d8ffd6751", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79f19dbc-7942-4a1c-be2f-081625c57e98", "sighting_of_ref": "indicator--b29354c6-2ddf-4d54-8b3f-deda50fa231a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c94b7997-a61b-464f-a8b4-b41c9dc2784f", "sighting_of_ref": "indicator--9d69c7fe-89fa-425e-b170-248d80dd4990", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bdc7192-65f1-45a0-a3ff-f7eb86de4d80", "sighting_of_ref": "indicator--9d69c7fe-89fa-425e-b170-248d80dd4990", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b24049f-25f8-4416-81eb-3aed95bda127", "sighting_of_ref": "indicator--e263807c-f18d-48cd-9b69-1a6e2eb8ab91", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88f7218d-187e-4e8f-872c-d9a1014c9724", "sighting_of_ref": "indicator--e263807c-f18d-48cd-9b69-1a6e2eb8ab91", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cb65fd9-b117-4d46-a973-d650826cffcf", "sighting_of_ref": "indicator--f6f81ec6-85fa-4f1e-b6db-6143518ced8e", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19887407-de5c-40c7-b41e-fc1dfa411545", "sighting_of_ref": "indicator--f6f81ec6-85fa-4f1e-b6db-6143518ced8e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27416efc-f6b9-4c01-af7d-5d34c12c7c92", "sighting_of_ref": "indicator--f6f81ec6-85fa-4f1e-b6db-6143518ced8e", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42c77e28-b9dc-448d-ab87-d0537e171a31", "sighting_of_ref": "indicator--91ef5674-df89-4d4c-a528-034fd0529c08", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afb52d24-2318-4c6e-a6b4-7c7c966a24b7", "sighting_of_ref": "indicator--6459b14e-253f-409f-a433-3b8e3c47f20b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a8acea8-6ca0-4c5e-8c6b-c1415a76ea32", "sighting_of_ref": "indicator--d0308df9-930c-482b-bd49-d7a015f6f2bb", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb85cfc7-456c-4d6e-9b2c-f71fb8dd6c4b", "sighting_of_ref": "indicator--d0308df9-930c-482b-bd49-d7a015f6f2bb", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3df8427d-a632-4db5-8ab3-53ae8debda51", "sighting_of_ref": "indicator--6cbe17f7-cb99-492e-82e6-4fcccc95d8dc", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82a98b64-129a-406c-aac6-1cd076c5573a", "sighting_of_ref": "indicator--6cbe17f7-cb99-492e-82e6-4fcccc95d8dc", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8e0eeea-479c-41a7-afea-e54f28d37bfc", "sighting_of_ref": "indicator--5273cee9-133e-4777-b889-345cf949b429", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12782d45-1f96-48df-9865-878c9c1be80a", "sighting_of_ref": "indicator--5273cee9-133e-4777-b889-345cf949b429", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b80b868b-aba7-4817-a82d-e8269bc2ea34", "sighting_of_ref": "indicator--5273cee9-133e-4777-b889-345cf949b429", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2182c5dd-37db-42b2-80e7-b5b1b3acf7ec", "sighting_of_ref": "indicator--25e5eeb1-3bf2-41b4-9a16-5b51855812de", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc6cc5d7-4564-443d-9ef7-5e2b4c17e0ce", "sighting_of_ref": "indicator--15e46e0c-f38c-4e04-898c-1aae841ae74d", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70078cce-0b6d-45a3-931b-2b7645b28f9a", "sighting_of_ref": "indicator--24d15c28-410a-496a-b371-adc4239554fe", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--889b3bec-5194-45a5-b344-8609d08cedb3", "sighting_of_ref": "indicator--67bf83fa-7722-4c2f-9825-f89e0f3476ed", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23638b2b-a716-4b5d-986a-2719c0c4fedf", "sighting_of_ref": "indicator--cd1579d0-54f9-4998-a820-614d6efd3642", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffceba64-f470-4347-8544-68c313e11c28", "sighting_of_ref": "indicator--56e9337d-e308-455e-9703-d7246dbcc1b6", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3e54ba1-2fb4-4b64-bf47-53c0aa319d5c", "sighting_of_ref": "indicator--7477f065-d52a-4f93-8f95-817b1ce4b0b4", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c27f744-9ebd-4402-9ac0-7b55ef147124", "sighting_of_ref": "indicator--08ff9d95-010b-489f-afc3-f0e6b5574d78", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd47596a-6960-4d99-a155-71b6e6461c2d", "sighting_of_ref": "indicator--e340f88c-5b97-4406-b482-0b77819cb9d3", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bcf018d-5158-49b6-a238-4829adc34c18", "sighting_of_ref": "indicator--bb55f7bb-d4aa-45a5-b2e9-aadc1bb05c60", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b8bbdba-89d6-49fa-b5ae-c7f475e00df7", "sighting_of_ref": "indicator--78e6a36d-2004-4b36-948d-6c11ca165f83", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e4c6690-a7d4-4933-9ddb-85310959e5f5", "sighting_of_ref": "indicator--69cc9601-0f9e-4ab3-a952-a0c082bbad76", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5cf6afd-0afd-4b48-8658-ba6a73648745", "sighting_of_ref": "indicator--9c515cb7-7b44-4240-9091-603395c3aa65", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0b4dd22-c5c4-4428-b68e-1e05179b7dbb", "sighting_of_ref": "indicator--631e5ec6-2fd7-477d-aa6b-8f6e8ceed229", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14b890b2-a9a3-43ad-83f4-5fb71f97bfcd", "sighting_of_ref": "indicator--96d10bca-432e-4540-8a1b-024174d4d503", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24a75a3b-b429-4f8e-9a16-42d829b9d1c5", "sighting_of_ref": "indicator--f46a022c-cc36-40ae-b8b7-23cafe74b16f", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e03a6ab6-fada-45e4-a76a-34c89d93eec4", "sighting_of_ref": "indicator--92afe7b6-99a9-4ab6-aacb-3021dde61726", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c60f5d62-c139-4e84-8534-f0defed5af65", "sighting_of_ref": "indicator--deadf5c6-e1ee-4725-ab60-7cc21ee68273", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac62ecb0-4af5-464a-9fd7-298dd8ac472e", "sighting_of_ref": "indicator--aee166ae-9c1d-452f-9851-3bf05aff940b", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e101d3ae-f024-4f04-b9de-2aae54e318b2", "sighting_of_ref": "indicator--aee166ae-9c1d-452f-9851-3bf05aff940b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f550a9ab-7d5a-43f9-a7d7-f1d8a954f5bc", "sighting_of_ref": "indicator--0cd5e5c9-7ce2-466a-af22-b2d716faf4d0", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--628cdb8c-3607-4f48-9514-16072327c62e", "sighting_of_ref": "indicator--0cd5e5c9-7ce2-466a-af22-b2d716faf4d0", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f26a12a9-29f6-4447-abdf-697606bcc4cb", "sighting_of_ref": "indicator--0cd5e5c9-7ce2-466a-af22-b2d716faf4d0", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b036e6de-8e9c-44c7-84af-d38d94eddc7b", "sighting_of_ref": "indicator--e8e2f5c9-94e9-4143-a09e-255ad444233f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b87726f2-d2ac-4055-a56d-e4f76d8a1f76", "sighting_of_ref": "indicator--a53c2c72-6c9e-46a3-9658-2f1e08d0a56a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8c65b08-3aa2-47cc-9866-704da79cf917", "sighting_of_ref": "indicator--f11ffa06-f01c-40f3-86e8-0184577acdd1", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--309d8cfd-ad7a-488e-84d8-381f7cfcdfb1", "sighting_of_ref": "indicator--175a4acc-cf60-451f-83be-7fba1cd1061c", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5be12731-e7ab-45a0-bd99-8d093f0678db", "sighting_of_ref": "indicator--175a4acc-cf60-451f-83be-7fba1cd1061c", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bbc0903-637e-47e0-8f8e-ecabd70cb993", "sighting_of_ref": "indicator--2d1e0256-9e12-4d53-8da6-376e8447285c", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--469ea22e-a11f-4e22-bd55-786bdf0e2237", "sighting_of_ref": "indicator--2d1e0256-9e12-4d53-8da6-376e8447285c", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9c0894b-2866-4f8d-8318-fdd7bf6506f0", "sighting_of_ref": "indicator--9d772412-534f-4885-b0ed-c04c0d4d6e6d", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb1425ef-830d-404e-9fea-c983c2da4dfa", "sighting_of_ref": "indicator--21287ba9-d6c6-4412-b312-883b5e87919e", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b7abec0-1eb7-46e2-9f93-ab224aa7d6ad", "sighting_of_ref": "indicator--41ca0c11-2d76-4e95-b688-98893d682027", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8dc0b6f-3706-4af0-a627-780cd357a7d0", "sighting_of_ref": "indicator--ceda674d-4110-4a69-a80c-12d71082c5e7", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f05bb19-7a26-4a96-8dcf-447fe8dca4e0", "sighting_of_ref": "indicator--ceda674d-4110-4a69-a80c-12d71082c5e7", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd33a810-85dc-4a48-82d9-ddb7108e3715", "sighting_of_ref": "indicator--104d9f98-0b69-4e07-95d2-72e050bf5250", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0af711e2-d5b8-416c-933c-e1d2cfe77a2d", "sighting_of_ref": "indicator--7d814f79-a6ea-4d5c-9c0a-09b7155e83de", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21c35428-e0f1-47ef-be5a-c3fde147b187", "sighting_of_ref": "indicator--838bf10b-4ae0-4694-b62e-a9c064de0557", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1da2789-e0ef-4299-8014-833993d014e2", "sighting_of_ref": "indicator--d4ab4e7a-814c-49a1-b89d-852d997fa445", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2674cddd-2eda-4949-a82f-e6fa06c98a70", "sighting_of_ref": "indicator--d41f0303-6f31-4f0c-b834-765340fd226b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e3c29b8-900e-4293-8137-92d91ad7c181", "sighting_of_ref": "indicator--0a1f9130-3efb-4961-a3e4-eb6c38bac3e1", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8250023-335b-4cc2-89d9-4a28f094c774", "sighting_of_ref": "indicator--dda833af-3468-4ae1-a7b9-23c4685ca25b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--627ed9ef-01bd-42d3-a82a-b65563b98c5a", "sighting_of_ref": "indicator--a99fadf6-2c06-46d5-b148-d60fd4f20793", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1a8b779-7be6-44cc-a614-0c52c528e4f9", "sighting_of_ref": "indicator--a99fadf6-2c06-46d5-b148-d60fd4f20793", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50cb8a9a-eb67-42ed-9708-ff2a060a17d6", "sighting_of_ref": "indicator--afe9685c-9450-468c-9276-a66b54637ebb", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d4646e2-0c05-496f-8746-7051f0c1b442", "sighting_of_ref": "indicator--7658c5bf-e08c-49d4-b89e-c07907a62a82", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec9d29a6-8d9b-4ff2-b548-368e95d2c8b6", "sighting_of_ref": "indicator--46b7159d-37b3-4239-ba93-69c0a158280d", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e60300e-9109-4ba3-b332-e60049484785", "sighting_of_ref": "indicator--ba03d82a-3d9f-4d50-8a52-347b0483ae65", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69ab1937-b663-4599-b282-48c1aa508f26", "sighting_of_ref": "indicator--ba03d82a-3d9f-4d50-8a52-347b0483ae65", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd472da3-fcdd-4f38-8412-e5876a945bc8", "sighting_of_ref": "indicator--e0780128-21f3-4296-8410-2cc359d4e861", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65ec3e47-a085-4660-9b80-b32a447aa65a", "sighting_of_ref": "indicator--d50919b7-9ca6-44e3-b31b-aac866aab723", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ded0c179-a70d-4f06-a153-da9ac1fd0b76", "sighting_of_ref": "indicator--c2e114ba-83d4-4dc4-9ce1-e9bdb1ec1ff4", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c64ceb2b-9ea6-44c3-9c0f-3b1cb5659aa8", "sighting_of_ref": "indicator--21184450-136b-4ad1-84c7-4a2cbf5a4790", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21ad569d-2dfa-476b-ad10-baad14e21939", "sighting_of_ref": "indicator--ade8a4d1-1d48-454d-92d1-2bc382acf587", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c7b12a1-5a82-4572-95d9-7b6deb3adf9d", "sighting_of_ref": "indicator--e457a32e-7988-4631-b175-45108baca012", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b990fe8d-eeef-4512-b2e3-17a9ebddd86a", "sighting_of_ref": "indicator--e457a32e-7988-4631-b175-45108baca012", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f2bab14-0dfd-4b60-9711-826f3901355c", "sighting_of_ref": "indicator--aa0927ab-f8c6-4fb7-97a8-2e87bf750ca1", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a89bf806-d4cd-4842-925c-a44e0a4e7f05", "sighting_of_ref": "indicator--97ced617-5c90-48b6-a963-349a0b0d94b8", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f23153e-5123-4901-a55f-91f2d108337d", "sighting_of_ref": "indicator--9998349d-090f-46a0-9a34-bf87088b6cb2", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a057f6dc-7363-4a4c-8ac8-bf4612ec1a98", "sighting_of_ref": "indicator--e4659d18-dc72-413a-9c03-c5f9fe490430", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d030e761-7101-43f0-9140-48d42d991813", "sighting_of_ref": "indicator--c7b8a884-0800-4724-b89c-d7231093108f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e826b45-8c8e-439a-9ac4-504653fb33d0", "sighting_of_ref": "indicator--7f5b0dcd-2208-49d1-9d96-3bab21f2063f", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12758fba-cb87-4b4e-bd7d-48c1f6b8a749", "sighting_of_ref": "indicator--7f5b0dcd-2208-49d1-9d96-3bab21f2063f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aacbf282-b230-45f9-919f-89784210659e", "sighting_of_ref": "indicator--7bab2952-ab2c-4a3a-94af-7fcc6b116fbd", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ca8f633-20fd-4d1b-b02c-8eac4f720d68", "sighting_of_ref": "indicator--e6853d69-447f-4643-a1f3-b8bdc2b35a38", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16729087-1116-463c-b699-960eed50851f", "sighting_of_ref": "indicator--7e66fb3b-134a-4589-8bcc-9270a9048549", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9010f7e-5fae-4429-adb5-44c8d4192503", "sighting_of_ref": "indicator--770ef089-92a2-46f5-acf4-11fa41be4dec", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81048d9e-d16b-47e4-9a02-e66ac249b369", "sighting_of_ref": "indicator--e200ee70-7ed4-4a1e-98f6-773585326c56", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88e060fc-e4a2-439d-9b46-f2e0898b83c9", "sighting_of_ref": "indicator--3c25ff61-3a83-46d4-9ef1-bf57cc7bc455", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a040f92-870b-4211-bec6-376db78caa89", "sighting_of_ref": "indicator--053e8d45-4062-4c9b-9b8c-a791d5f06642", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95cfb3f2-430b-468d-b2e5-c2a88efa0520", "sighting_of_ref": "indicator--053e8d45-4062-4c9b-9b8c-a791d5f06642", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9950586f-f664-4fc7-8072-ae75ffefeee7", "sighting_of_ref": "indicator--9fd547ca-612f-4ecf-9989-4b536feaaa73", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bc3add7-b2ed-4ff4-abcb-16ff86df17ce", "sighting_of_ref": "indicator--ff55dd49-92f2-4cc8-addc-c07715cc0baf", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f394825-9afe-491f-b0b4-92b81a52c4d9", "sighting_of_ref": "indicator--be2664e9-34e4-41b3-9a8d-4e695956e9d1", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--494f241b-df24-4790-b8b5-9e13a2a769b3", "sighting_of_ref": "indicator--c57427d4-c56d-4b70-9605-8966654f029f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8144a17a-a18b-45a4-809c-87a0f503605a", "sighting_of_ref": "indicator--e6e833ad-cad3-4ab0-be21-e2ec9461c408", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e94bc632-728e-4133-a2d9-1cc157213130", "sighting_of_ref": "indicator--89dbbf46-1e5f-4b4c-abad-2c373beb033e", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d4031c4-c6ef-4d8e-b57b-f24bdebcae7d", "sighting_of_ref": "indicator--1207bfec-c687-4a7f-b86b-91b27943f8e2", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--944e2bae-c658-4f0e-9df1-5fee1031e852", "sighting_of_ref": "indicator--95a111f2-ba83-4900-ac53-262a689e9ff9", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fb0f53d-190c-4629-8e7b-6f9d2aa21f4d", "sighting_of_ref": "indicator--a3eb73f2-9c18-4a10-9ed1-831bcfc9c4a4", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2cf0ff4-c884-44c8-96b1-30ee0f2baf86", "sighting_of_ref": "indicator--50b047f1-db85-451f-8959-8c3dfece8f7c", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c907a48-c272-4c11-8cf6-8dc148165729", "sighting_of_ref": "indicator--f8a21f3b-b037-4e3e-9989-551897dc82f6", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd7abd41-d363-46e6-9873-67b2e46b2c45", "sighting_of_ref": "indicator--f8a21f3b-b037-4e3e-9989-551897dc82f6", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f9013de-b4fa-47ae-91ed-5782fed40064", "sighting_of_ref": "indicator--2fa5ff2d-8fdb-44b5-a6eb-dc196f25e5bb", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b6562fd-712d-48b6-b0ef-695284cbb411", "sighting_of_ref": "indicator--ef8b24b5-2aa1-492a-b7a4-f1a87b89b932", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02c97fd3-0acc-451d-ba62-50a758e2e6e3", "sighting_of_ref": "indicator--6f81025f-ec28-4f3f-b85b-e378f6dc2f92", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--111a8fc8-4692-4b9d-a808-95a562ef3ccd", "sighting_of_ref": "indicator--968f9fb5-9019-4c75-bee6-e21d2d292736", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c6c1e6c-f1b6-4146-8083-a1791b2be7ef", "sighting_of_ref": "indicator--968f9fb5-9019-4c75-bee6-e21d2d292736", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14d757a9-c165-4975-89ce-75e37c4b64ef", "sighting_of_ref": "indicator--2aecce44-e341-4463-a22f-d0ca0417e315", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3074c157-ea77-4f0e-a5cf-e0baf96b65bd", "sighting_of_ref": "indicator--4feb89a6-6bed-40ac-b8ad-b1d427162ebb", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5342da52-319d-4046-b4be-77ca6ac6410a", "sighting_of_ref": "indicator--4feb89a6-6bed-40ac-b8ad-b1d427162ebb", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26dd3079-e14b-4096-a543-dcc82131f8db", "sighting_of_ref": "indicator--4feb89a6-6bed-40ac-b8ad-b1d427162ebb", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ef08c4f-df35-4d25-8cf7-072383cef6db", "sighting_of_ref": "indicator--a2080df7-cd05-4a54-a43d-dc448d35da81", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a780273-0874-4835-ad9f-d20f852aaa3e", "sighting_of_ref": "indicator--c316abcb-075a-4b62-a4e3-45a4abfc55ef", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a341068-77b1-4d52-a843-710066acf688", "sighting_of_ref": "indicator--c316abcb-075a-4b62-a4e3-45a4abfc55ef", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e621ac88-d3be-4ff9-8bb8-d672e4cd70b0", "sighting_of_ref": "indicator--357d0523-dad5-4387-9242-4a75fb54a408", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4db6239c-3a69-4126-b196-d53ded7f2289", "sighting_of_ref": "indicator--5ed56a16-3598-414d-a031-686d575cf887", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f52f82a9-a2d5-4054-9bb1-3a0eb537c0c8", "sighting_of_ref": "indicator--5dfa44f3-bc54-4464-8af6-e1b488e8bb5f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b44a9e61-30a9-46b5-acbf-9448c5a15a3e", "sighting_of_ref": "indicator--5dfa44f3-bc54-4464-8af6-e1b488e8bb5f", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3da96be3-9a0d-4cc5-8bbc-b5560d5306b4", "sighting_of_ref": "indicator--5dfa44f3-bc54-4464-8af6-e1b488e8bb5f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1db8528e-0cfc-4f1b-9873-1962b7051988", "sighting_of_ref": "indicator--78c4cae6-cd6e-439c-9a61-38c906fa6e42", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a347b529-947b-4f2d-966f-52143b58774e", "sighting_of_ref": "indicator--78c4cae6-cd6e-439c-9a61-38c906fa6e42", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34a1d51a-1f53-43ff-9c96-2dafca84c98f", "sighting_of_ref": "indicator--dd9153da-3d8b-44ba-b049-a272c398dd5c", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75fa25b7-e2d6-43a1-abda-8e1986fe5852", "sighting_of_ref": "indicator--d9950b70-6459-49ec-a6c3-234ba4f6985f", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d9f826f-257f-479a-aba5-79a4c77075ca", "sighting_of_ref": "indicator--51f70a06-d804-4ae7-bf36-96e91f2b2a1e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9eeb4e95-069f-4674-b880-455667225cce", "sighting_of_ref": "indicator--0aeb8241-52fb-4a0a-be87-45921f8b85cb", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--066b65ad-1219-4b08-9af0-48de580e7093", "sighting_of_ref": "indicator--0aeb8241-52fb-4a0a-be87-45921f8b85cb", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1525e7d9-0299-4ade-88ad-d5075c6f546b", "sighting_of_ref": "indicator--390417ac-2626-4a59-a082-5866814ea851", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--890bf602-febc-400f-8aba-6f3a921f62da", "sighting_of_ref": "indicator--5037151b-4338-4958-a500-28b6bbfb2333", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bdcec5b-d641-4f6f-b932-7e2d79bdb86f", "sighting_of_ref": "indicator--a039b7a0-ea09-4d64-bfed-ce15f836ca2b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fadbd8e-0523-41e5-a514-8b3890a9fb16", "sighting_of_ref": "indicator--0a2acb5d-dd82-405f-85ec-c811883fe31e", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43213617-d48a-49d3-921c-a819c660dead", "sighting_of_ref": "indicator--0a2acb5d-dd82-405f-85ec-c811883fe31e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23e0527c-b0d3-43c2-85ce-cd4a80d1f1b5", "sighting_of_ref": "indicator--0a2acb5d-dd82-405f-85ec-c811883fe31e", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--852ddee3-fab1-4313-9469-69c5e01b2ebc", "sighting_of_ref": "indicator--e451b8a1-0938-4fd7-b5ed-a2aad8a37084", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5016e65-cc21-4ba9-926a-9ea5faa69b41", "sighting_of_ref": "indicator--e451b8a1-0938-4fd7-b5ed-a2aad8a37084", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de87cf73-aa4a-4d71-b0fa-4b230bb643df", "sighting_of_ref": "indicator--af84010f-6cb7-480c-9ae2-d03f118bfc3c", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ed817c5-8381-46c6-a446-3579b07e8eda", "sighting_of_ref": "indicator--791e8559-a337-44f0-a126-c96f8b178531", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c056311-33ea-4c19-a8ff-9ab7756a98b7", "sighting_of_ref": "indicator--791e8559-a337-44f0-a126-c96f8b178531", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be0ba63d-b68b-4230-854e-84770b3f4f01", "sighting_of_ref": "indicator--ee130e85-1975-4854-911f-2df3ad32a0d2", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9248d00e-f7d7-4b79-aa2b-b792ef04b540", "sighting_of_ref": "indicator--8b646677-1f2f-408a-8ed5-f0507fc23f11", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fec11ff-b273-4e9c-95c3-b8b556b3bc74", "sighting_of_ref": "indicator--a2157a6a-ccac-4243-8c42-5f37e7aab1aa", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54b847dd-8dbe-4b40-bbeb-a3b195753350", "sighting_of_ref": "indicator--a2157a6a-ccac-4243-8c42-5f37e7aab1aa", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d2fbc14-1e76-4604-88c8-18ebde279d1f", "sighting_of_ref": "indicator--90edde88-6a47-47e8-859b-6d24ac4419e0", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0361199f-180f-453c-8f65-d664423f1d47", "sighting_of_ref": "indicator--a123add5-faab-4139-817c-d2c3459b1af5", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84d635f3-1f16-4b94-bf2a-93cb04181b44", "sighting_of_ref": "indicator--b613d24c-ba9f-4141-a3fe-008cffaca415", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6321653-2f97-4096-a56a-177fa20c7e46", "sighting_of_ref": "indicator--de2be333-8a7b-41b2-91f0-11bca9977054", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b6d9b75-ab05-4e06-b682-5ebed238f617", "sighting_of_ref": "indicator--de2be333-8a7b-41b2-91f0-11bca9977054", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2e7dd1b-06a7-4c65-926a-fbb2d4010982", "sighting_of_ref": "indicator--32119bcb-7b42-4d67-8084-1e82e3a21b7b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1027cbe7-cc60-4028-86a5-08baadf10a08", "sighting_of_ref": "indicator--32119bcb-7b42-4d67-8084-1e82e3a21b7b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06ac548e-6eae-4dfa-bc0b-e55038b2f194", "sighting_of_ref": "indicator--aa18decd-9a52-4d92-93de-60d3d8fa7771", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d07fc9e-7ee7-4838-8b9b-0fa3ecffc56c", "sighting_of_ref": "indicator--d4cbefbe-4cde-4024-8e11-d7dc90967538", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f792a5bf-cc7a-4597-85f0-87c9dba80626", "sighting_of_ref": "indicator--a082e848-fe47-4e3f-a1ef-803037ede3b9", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8111d8ec-fc16-45fe-b4ca-478ae64ea978", "sighting_of_ref": "indicator--a082e848-fe47-4e3f-a1ef-803037ede3b9", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--633463d3-616d-4bbb-9f14-f1a21bd73ede", "sighting_of_ref": "indicator--d23eed8a-9af4-433f-bf33-80331e5c5a67", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d30e5862-a2f1-41eb-b73f-c7e8df4aaca6", "sighting_of_ref": "indicator--2e932c34-8bfb-4b9e-b44f-3df46a65c302", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87470c2e-f98b-4761-8740-ccf09ffe03fe", "sighting_of_ref": "indicator--13f0768d-82a7-4c5f-8616-f5436c668553", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--842a7940-ba56-4502-a0ea-e7722dad2785", "sighting_of_ref": "indicator--e6dfe66f-b2c1-4669-b489-55236857f9d6", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7f66478-104c-4770-8bda-e3585a890bd9", "sighting_of_ref": "indicator--82cc464c-5e31-4fef-b13d-fa73e43c12f4", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbf5366f-bdfb-474e-ba7c-e258368d6227", "sighting_of_ref": "indicator--90026d54-2556-4cf8-b584-04c1a3d4e29e", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcb53a00-aeb7-4ca5-aa0d-45db14c07fdf", "sighting_of_ref": "indicator--ff14e562-7108-404f-bdd0-8c69d40e1c74", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2011665-1c14-4c40-af93-5f54cb406cd5", "sighting_of_ref": "indicator--0fc6646e-e727-4659-a1be-bcfa9cc5722f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb696cdb-db14-46bb-b270-c51f9ac164a1", "sighting_of_ref": "indicator--840bb265-27cb-49dd-abae-2c7de96cb697", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b12a682a-24f0-4f5a-8227-b5bab3888505", "sighting_of_ref": "indicator--b97f4525-0663-444b-84ca-f140a26786c4", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f3057ae-74ef-4638-9e41-191c849ca410", "sighting_of_ref": "indicator--47a670ea-a8d2-43fc-b3ea-1f40e1b6daa4", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--066c44eb-41d3-43a9-8c5a-b1bc1425052c", "sighting_of_ref": "indicator--e3eaf1a7-09e4-4829-a50d-5e65a85e7572", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--caa0ee3f-8849-4c56-b1c3-ffa402c6b3b0", "sighting_of_ref": "indicator--e3eaf1a7-09e4-4829-a50d-5e65a85e7572", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77d255cc-46d2-4750-ad3a-763d1656f2ad", "sighting_of_ref": "indicator--a5695c86-4d4d-4ca4-8a76-f49fd79130fe", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bc068ff-6dea-4fef-8cf0-2d1fc75dcff2", "sighting_of_ref": "indicator--1d80f809-30c0-471b-a7ef-1e08fee1b0ac", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1badf891-ca84-47a2-8e54-aafc2aa3deb5", "sighting_of_ref": "indicator--1d80f809-30c0-471b-a7ef-1e08fee1b0ac", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a5e01f8-a626-42b8-9285-0f52a49e2407", "sighting_of_ref": "indicator--1d80f809-30c0-471b-a7ef-1e08fee1b0ac", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c37168a-8b87-4d47-90ac-eed4df4222ae", "sighting_of_ref": "indicator--4bed0528-d1ef-4fe1-a4b7-b8db7d302ad5", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5311f05-2dbd-4643-abae-29d02b6b8e9f", "sighting_of_ref": "indicator--fdc32f45-0556-4f88-a0b6-84cfeef6ac95", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbc54f64-52b8-4e43-8995-1ab08a6e0fbf", "sighting_of_ref": "indicator--29ae78a1-c4f7-4080-94fe-b7b9d5f987ca", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cbe84cf-4ad9-47eb-8583-b8bd39844198", "sighting_of_ref": "indicator--29ae78a1-c4f7-4080-94fe-b7b9d5f987ca", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01bdc45f-6d51-4f73-a4a9-9edc8a8c3a08", "sighting_of_ref": "indicator--0bbae4ee-98e8-459d-ad65-4a739d2f9d3b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ab43319-057a-40bd-ba04-c51b986ff399", "sighting_of_ref": "indicator--e168afa0-42ae-4152-acfa-40410be4bb5d", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94e14439-2a28-4bc8-bae2-8427846264e6", "sighting_of_ref": "indicator--dc04091c-58e9-44eb-89d3-91105c6c944a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd07cb88-8e14-479b-b7cf-eccea7309021", "sighting_of_ref": "indicator--dc04091c-58e9-44eb-89d3-91105c6c944a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--330b3087-8e0f-42f6-a5ae-1ac7f7ad4349", "sighting_of_ref": "indicator--ca157702-4faa-46da-87de-6c9cac444a02", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee92b4e5-bc3d-41f0-a4ee-add3c118a033", "sighting_of_ref": "indicator--925492e3-8026-4731-a149-a40cc0c4e90c", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7f0d9cd-e191-4652-bbc3-d50a1a3bbe52", "sighting_of_ref": "indicator--8eeaf88e-ed5a-4e0b-9a73-0567df70d45c", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a14df60b-fddc-467c-bbf1-8133f73e8a5f", "sighting_of_ref": "indicator--14584e62-8c3d-4502-a148-cef2f770e1f6", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6779098-7814-4588-85d7-a2d339d0f91a", "sighting_of_ref": "indicator--6056bdc3-1c38-4104-827f-28f06fbd5c99", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1bcbb82-d692-4d64-a0f9-7ddea1516019", "sighting_of_ref": "indicator--8322928d-7c73-420f-84a7-828009630cc2", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0dbe486-72dd-48b5-8b88-1f3ab5393046", "sighting_of_ref": "indicator--f4770ff6-899e-4106-9c67-35b76941ec82", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--114957a3-0ab3-432a-a72c-eb2aa0cc5408", "sighting_of_ref": "indicator--724d05f8-3e89-468c-9114-b37545086436", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb86760c-7a5b-4cb9-9be6-0889596e9db6", "sighting_of_ref": "indicator--f5ce3a8d-b6fd-4d60-a90f-648ad15c3071", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa09276c-be51-4edd-b834-b77cec9866d9", "sighting_of_ref": "indicator--eb4cb679-810e-483f-93f2-da6f2fdf2226", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed5706a4-554f-47fc-a356-e663b302df61", "sighting_of_ref": "indicator--69ee8cee-c30e-484e-b07e-cfa82d2f9b89", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b635d938-2565-4b6a-814e-f63aa0671ecc", "sighting_of_ref": "indicator--1f9802d5-c22e-43eb-987b-668e6cc701ed", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed1bda88-91f4-43b6-8f6e-309a131ef44d", "sighting_of_ref": "indicator--d3197181-f133-415e-97d3-8c28e3cca0a4", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--770c597a-bede-433d-b9dd-090c1951cd8d", "sighting_of_ref": "indicator--b6cfa8fa-b20f-49eb-a2b6-9dcb3468233d", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0770b55-da40-4478-a45f-5c586e23ced9", "sighting_of_ref": "indicator--34095fa1-360d-4ec6-bd03-248aff61fc43", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae79ff6e-69a3-48d4-8235-836e3c218192", "sighting_of_ref": "indicator--c7a3a807-1c96-4b57-9cdc-10b7b40e2f63", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--febbd226-2c4e-4c95-9037-58e1d31e5b7c", "sighting_of_ref": "indicator--aef49de0-6f92-4f24-9b98-10546f070efc", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6f1877e-b6f3-44b0-953e-495096ec917e", "sighting_of_ref": "indicator--aef49de0-6f92-4f24-9b98-10546f070efc", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d0fcfac-2d20-433e-a827-38603f524bf6", "sighting_of_ref": "indicator--a1d1afb8-8e2a-4a95-94b4-dc8fe6fe1d90", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5043bef2-bab5-4301-b98a-a74b7de2f556", "sighting_of_ref": "indicator--c64e6d95-71d2-46f2-8446-e9983cbc4f8d", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91e4844a-e793-4740-ad88-6ab746b08f1d", "sighting_of_ref": "indicator--c64e6d95-71d2-46f2-8446-e9983cbc4f8d", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c963441e-bd10-4b2f-8437-ac12f33f91ae", "sighting_of_ref": "indicator--f28fffcc-1056-4e7e-9787-cc299ad0b245", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c87edbc-6a50-4fd0-b574-88af14eddf4c", "sighting_of_ref": "indicator--e0b3edad-f69d-4447-a348-0219b4e86765", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bef19b18-309b-445f-855e-86519506b46a", "sighting_of_ref": "indicator--d8d95247-bbb3-4a73-8bc3-b514a5f1afd0", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87a22721-8bc4-4b7b-9875-407dc56e2636", "sighting_of_ref": "indicator--b7a2cfde-8322-4704-88cc-6c7f1eb5e608", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40594260-db2a-4233-be33-bb794bcb115d", "sighting_of_ref": "indicator--b7a2cfde-8322-4704-88cc-6c7f1eb5e608", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1340f956-4812-49bb-973d-a1c3103b85e6", "sighting_of_ref": "indicator--69547aef-2862-455a-b60c-42256cb9fb03", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1dadadf-6caf-4de5-8582-aaa27a172919", "sighting_of_ref": "indicator--69547aef-2862-455a-b60c-42256cb9fb03", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed8f3aec-f7f5-47fd-a53a-ee70b4132859", "sighting_of_ref": "indicator--69547aef-2862-455a-b60c-42256cb9fb03", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fae29558-d8e9-4008-8dea-059d72bb74d0", "sighting_of_ref": "indicator--765d9aa9-fe84-400e-98c0-58fa15354277", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49b72c5c-f178-41f0-b804-9b7b6a2002a7", "sighting_of_ref": "indicator--765d9aa9-fe84-400e-98c0-58fa15354277", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a9b6362-5fdf-4a86-a171-cf56cc73f11b", "sighting_of_ref": "indicator--413798a4-172d-4bb8-a62a-0117b96f14a3", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e382f4d-9ae8-4999-b003-2938dfa863a0", "sighting_of_ref": "indicator--f19ab4e0-ff3b-4ac6-88a5-bbda127a62a1", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b53b01e-4c6d-4a98-9308-2c0cb4a6fb95", "sighting_of_ref": "indicator--60c3c57d-abc1-4299-be69-b31aa3fb56d2", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d52bbdc-3be5-461c-bea5-fc3e0bb49e66", "sighting_of_ref": "indicator--03c049ce-a3c4-40b6-b225-95a384b664b9", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2da978cb-0d2a-49de-b108-b3511efbe32f", "sighting_of_ref": "indicator--15e299f6-be3a-4478-84d4-07bd26e4c61a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a7cea4e-abce-4d51-9bce-91adf8361f48", "sighting_of_ref": "indicator--ba368a58-dfdd-415a-af9d-76b7295252bc", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8f2ac1d-9de6-4f96-a896-8e74ec7524bb", "sighting_of_ref": "indicator--eabbcb70-030c-48d6-8f61-bb82d34909fe", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d48d6deb-5961-4a16-b0c5-57942171c6f6", "sighting_of_ref": "indicator--69098195-62c1-4a2e-8e4d-a2fc683e25c1", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa3be2e3-96b2-4fae-a1ad-e358adf9f5e3", "sighting_of_ref": "indicator--25293274-84ef-4b81-a2d6-40997b190061", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d093bf61-0bff-4505-bc4c-e45c5c7fe2b2", "sighting_of_ref": "indicator--51db02b6-c820-4cd0-8542-064b5e8527c9", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ece1a03-bf6e-45eb-bd09-1cc2f160f3b8", "sighting_of_ref": "indicator--75e6233d-0b31-4297-91cd-0c1ba346c169", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f356b47-9c46-48e2-9587-bfc31d42efb5", "sighting_of_ref": "indicator--6828b6b7-2724-48f0-8ac8-6c155bf6ad77", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--832cec52-da22-42cc-9a94-e7e186b29475", "sighting_of_ref": "indicator--1f4cbc25-a87e-4996-8df3-76e0d0a9f710", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e64d2db0-d8c6-4fe5-899b-3ecd84579e86", "sighting_of_ref": "indicator--1f4cbc25-a87e-4996-8df3-76e0d0a9f710", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b49ebb49-85ce-40d1-a485-daf7e3790a46", "sighting_of_ref": "indicator--1f4cbc25-a87e-4996-8df3-76e0d0a9f710", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--857ed836-7530-4720-b8a0-c636a5eca778", "sighting_of_ref": "indicator--1a3f5ede-0276-4a38-8e7c-65799ed1d904", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74fc867a-8182-4f10-a942-c801618c09e7", "sighting_of_ref": "indicator--1a3f5ede-0276-4a38-8e7c-65799ed1d904", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c74fa41-10d7-4b65-ac24-9926e9bcb20c", "sighting_of_ref": "indicator--19e3a44b-c5ef-4c91-b424-4f9885905cc5", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96a94fab-40bf-4810-ac17-e35208cc33c6", "sighting_of_ref": "indicator--19e3a44b-c5ef-4c91-b424-4f9885905cc5", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76415c64-46ed-4e53-b765-49ed6c1b4d1c", "sighting_of_ref": "indicator--19e3a44b-c5ef-4c91-b424-4f9885905cc5", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86f55d00-d0d1-4983-98bb-c0d0de2c7934", "sighting_of_ref": "indicator--6c9696bc-dd5e-4eb8-bfdc-5f10c643686d", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcde3f7a-862d-4c5f-b325-ca200b3908d6", "sighting_of_ref": "indicator--6c9696bc-dd5e-4eb8-bfdc-5f10c643686d", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ab4d06a-ec47-4a1b-86b2-f653357dacb4", "sighting_of_ref": "indicator--e2646e43-4811-41a3-bc22-55aa1ac7cdcf", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3f07e97-1e05-43d4-bb10-d4dcf52e2ec6", "sighting_of_ref": "indicator--c08fcab7-1169-45ff-9da3-870280690c10", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfc6c146-a240-48e1-8da2-2e6b701e9d86", "sighting_of_ref": "indicator--e937f3f8-7afb-4376-a335-2402dddb99a9", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--472ed21f-ac9d-4d9d-afdf-47491fe38b6a", "sighting_of_ref": "indicator--e937f3f8-7afb-4376-a335-2402dddb99a9", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17082d51-2b6d-43b7-8d5e-524ea8600268", "sighting_of_ref": "indicator--e937f3f8-7afb-4376-a335-2402dddb99a9", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef3f7225-f616-4abb-808d-c68902b7568d", "sighting_of_ref": "indicator--b94cfda1-c075-4eb5-964c-b4c8672cabea", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db0fee2c-3934-4163-8abb-4605b081838b", "sighting_of_ref": "indicator--b94cfda1-c075-4eb5-964c-b4c8672cabea", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e093109-b991-4de1-8cd2-14edeacc337c", "sighting_of_ref": "indicator--b94cfda1-c075-4eb5-964c-b4c8672cabea", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c5f0d63-d625-4bf3-a4b6-4a9c816d1967", "sighting_of_ref": "indicator--4b29daa5-db00-45c9-a7b0-d5613ddb5b03", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2822b2e-76c6-404e-8c8f-934714e9898f", "sighting_of_ref": "indicator--6bd4f20c-ee2e-4cbb-9801-6283d149e669", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f3081b8-b437-4310-8212-d760e498fc93", "sighting_of_ref": "indicator--b5aa072d-eab9-4105-b920-305185f9115a", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4f47deb-9d63-4bdc-9c4f-11dca4b16179", "sighting_of_ref": "indicator--03490ffb-1332-4556-a6be-2e14f82888ef", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bd36848-50fa-4e0e-b5e3-911001d1b271", "sighting_of_ref": "indicator--f1208097-304e-4b47-8ae6-5e06d74bb140", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f61fce50-2517-465e-991d-1501e9df32a9", "sighting_of_ref": "indicator--b90274df-d128-411c-8603-8bad3b8f0b56", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06fc318c-8d95-45c7-85f2-3dca82be202e", "sighting_of_ref": "indicator--421f3a9f-ee5e-4715-af67-de2b73817294", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9a7de9c-9c1d-4617-9bca-4251f1478f19", "sighting_of_ref": "indicator--af7a7acf-17b8-414e-b88b-e1dcded94af8", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9df0780-1c4d-4a06-8a42-9b4888a3cf87", "sighting_of_ref": "indicator--b0c1207c-1089-4deb-bdb1-0c21072cc9c7", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a66a7632-a716-4f6f-9f34-b8e2d03fc4f9", "sighting_of_ref": "indicator--410fa3b3-d5b3-49a5-afd8-2c4c2818e76e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5be98abb-1dc4-4fdc-8d48-e11c92ef475c", "sighting_of_ref": "indicator--13053f89-bad7-43ad-9d06-5795535c58fa", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50d0e64e-5c71-43eb-ac1f-bf3758a3ef8d", "sighting_of_ref": "indicator--f6110049-63b2-4381-ab52-e90987a85e45", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5213a579-24c6-4eb4-90aa-b54912ecc0b1", "sighting_of_ref": "indicator--2aca364c-43e8-412f-8b33-f0ed3937e42f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ff63fc6-d2ee-4d4c-8f65-ce26758b5ded", "sighting_of_ref": "indicator--5a324585-ea9e-4b30-8101-76d16dee60be", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01f8573a-c0a0-4468-983e-2014b6647cc4", "sighting_of_ref": "indicator--84653be3-2b8d-42c9-91a7-833e6562b2fa", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3fb7878-a746-41bb-bb80-7abfdbf65033", "sighting_of_ref": "indicator--657d393d-dcfe-4237-9012-4fc20b849347", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d60048f-e69d-41e3-8c33-b458fcdae98a", "sighting_of_ref": "indicator--c662d7b8-b530-47aa-a924-d7776faac81f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17e58be7-1eed-431f-be95-7488997b9025", "sighting_of_ref": "indicator--c662d7b8-b530-47aa-a924-d7776faac81f", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--562465a0-f0c6-4d08-9754-5fa14e457b3a", "sighting_of_ref": "indicator--c662d7b8-b530-47aa-a924-d7776faac81f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a07c1067-bb41-4247-9095-9eedc799ae42", "sighting_of_ref": "indicator--d9924f03-853f-4976-868b-a02ce53c7d16", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d1aaf0d-8b62-45e8-98d5-ed8383d0a7f3", "sighting_of_ref": "indicator--b5424448-5bc4-47bf-9eb0-9677ebe471b0", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cbf3abf-cb4e-428a-a6db-2199b5f4df3e", "sighting_of_ref": "indicator--99a3a095-396d-4fbb-b92c-07b421b15cd5", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1aba2a5d-b948-451b-8589-02c8f2a1dfa4", "sighting_of_ref": "indicator--da9b601c-395a-4d99-bd69-0085b94ab644", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba622272-5d7f-4a82-a0a8-0a39bf0cf53b", "sighting_of_ref": "indicator--55ac9808-ddea-4fd7-81fe-9e8200abe9d4", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaa41af7-930b-4ad9-9cd8-6bab84879939", "sighting_of_ref": "indicator--55ac9808-ddea-4fd7-81fe-9e8200abe9d4", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cac9ca9f-d1e6-4dec-be2e-0a7322380769", "sighting_of_ref": "indicator--fd19e771-fd78-4786-9a65-7793c8de127a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ab71c10-f7e1-4d0f-8fab-a31ce5466701", "sighting_of_ref": "indicator--6fe221ca-597d-424e-98f5-5bc210ec8970", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54581544-3aa2-42c6-9e00-7cd008fe7bfe", "sighting_of_ref": "indicator--6fe221ca-597d-424e-98f5-5bc210ec8970", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d80f31e8-7172-4123-a1fa-3703da708293", "sighting_of_ref": "indicator--cff0e68f-1376-4f89-a540-bfc9c9dc1449", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aad0716d-2aad-496f-bbdc-275f929561dd", "sighting_of_ref": "indicator--cf0ce6b0-4c2d-4ac6-9f37-6bfaad82a049", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af0e4f5b-a52e-4a4a-a9b4-48190cd2687d", "sighting_of_ref": "indicator--09b4bef5-27f9-42cf-b20e-c06cf10083d1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d015299-4834-4fa0-b7a7-64440e174680", "sighting_of_ref": "indicator--e399a99b-0a4a-4856-a3df-5c0620529c55", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45507586-fd54-400c-842e-595e51d1e8ae", "sighting_of_ref": "indicator--c59cddbd-22b4-4f74-96ed-4c19b5e4829d", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ad57cbe-2712-4871-b082-c14245462b20", "sighting_of_ref": "indicator--c59cddbd-22b4-4f74-96ed-4c19b5e4829d", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a72a8be-6a45-4ca0-b79a-267d4a1cca14", "sighting_of_ref": "indicator--f71eeb5c-1e42-4c25-bc03-d56c6519ec1f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--228044e9-7490-4027-b3f0-4b48450f63ba", "sighting_of_ref": "indicator--241284cf-f17d-43cf-b199-491bc72d65ff", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eca927e4-1094-42aa-bb9f-0238169cf7bd", "sighting_of_ref": "indicator--edca6f79-de98-4a05-8b19-23793b0b39da", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e37d899b-b437-46de-98f7-ec5df8352b13", "sighting_of_ref": "indicator--edca6f79-de98-4a05-8b19-23793b0b39da", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--846454fa-487a-42e4-bfed-4184055df3d9", "sighting_of_ref": "indicator--6ca60ea0-d468-4b9d-b81a-fd8e99fbbdc2", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c87a659b-2e99-40fd-a938-21bd7ae7f223", "sighting_of_ref": "indicator--6ca60ea0-d468-4b9d-b81a-fd8e99fbbdc2", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1b63cea-ba79-4969-bc1d-7359a0e06932", "sighting_of_ref": "indicator--73bf6364-2f03-4af9-830b-8e9414062428", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c078c55-c347-4c68-b462-51d74d0f940c", "sighting_of_ref": "indicator--af0a6e5b-93b8-44cd-942f-723fdf57b54e", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5c9e3e3-724a-42df-be55-01d2cc2864e7", "sighting_of_ref": "indicator--3e18b5ca-ea29-4c4e-9049-79e933edaa60", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--091a1acd-cfaf-4503-8e48-4806cb8056ae", "sighting_of_ref": "indicator--3e18b5ca-ea29-4c4e-9049-79e933edaa60", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06e385b3-b731-4540-a345-0a298e8bdcc5", "sighting_of_ref": "indicator--f42726d0-fa9d-4e3c-bccb-82cb3c0e062a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ddfa43d-ad61-4175-a40d-bc3e2fb98e11", "sighting_of_ref": "indicator--e7a10d6b-e6c8-4e2b-92d4-e5b9c461fd0b", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19e3fb73-f8ee-4f90-bfa5-b7e93c692533", "sighting_of_ref": "indicator--e7a10d6b-e6c8-4e2b-92d4-e5b9c461fd0b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89c215cb-4329-4a53-b243-9b16e27015e7", "sighting_of_ref": "indicator--21b7e6d6-272c-40df-881b-e67f7590e7a4", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac25fd91-62e0-4f8f-81d5-1b18db6cfb4f", "sighting_of_ref": "indicator--21b7e6d6-272c-40df-881b-e67f7590e7a4", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ae72fa8-3ad0-4083-9c59-52fb66617f73", "sighting_of_ref": "indicator--21b7e6d6-272c-40df-881b-e67f7590e7a4", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70abe550-3188-4c68-9b95-d4c67a961d45", "sighting_of_ref": "indicator--de6e79f1-e82d-46a2-aedd-8b4e2bb0e28f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be54f992-5837-4fdb-9645-c286b4c03295", "sighting_of_ref": "indicator--28968c20-c46d-43ab-8e2d-20be0fb3735e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c622bbc1-91be-4871-a9ed-ba84a7329417", "sighting_of_ref": "indicator--c372a6a4-1dc2-4d81-9603-f6683d01f524", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a44fd852-cdf3-4ab6-8f01-027caf7c472b", "sighting_of_ref": "indicator--d0eee19a-ba23-4a45-821f-f0e08ffe8b3e", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3db31923-cb1c-4e99-a19b-a487bb4dae0f", "sighting_of_ref": "indicator--13a37de2-e2e6-4516-9b83-5fe7b730b733", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd89530c-55ce-4c58-beb6-4bf6858cd8ca", "sighting_of_ref": "indicator--13a37de2-e2e6-4516-9b83-5fe7b730b733", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77f9e3f7-5d6f-4ea8-912c-adbfec0ca63d", "sighting_of_ref": "indicator--a6218440-8f1f-4c37-a78b-4c6af4a9740b", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--becdaa1d-9dc8-4598-a2a2-a468ee905190", "sighting_of_ref": "indicator--a6218440-8f1f-4c37-a78b-4c6af4a9740b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43260339-b6bf-40dd-8d49-428411a4e476", "sighting_of_ref": "indicator--f55d48de-106b-44b9-900a-7e7fb272bf91", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb6f7a84-02e9-406b-b2ce-0a05badbde09", "sighting_of_ref": "indicator--e0015103-e947-4952-b947-fcc37eef0a9f", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d6c03a4-321d-473c-87b4-31bb3c975e03", "sighting_of_ref": "indicator--e0015103-e947-4952-b947-fcc37eef0a9f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bd664f9-e89b-4a76-9daf-34a82b36e20a", "sighting_of_ref": "indicator--7662ed4e-9cbd-4f23-a7ee-4a692c7d0110", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--380ddecf-b6e1-478b-83b6-f73dd154c604", "sighting_of_ref": "indicator--7662ed4e-9cbd-4f23-a7ee-4a692c7d0110", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--959dd1a6-d6dd-4c5f-842c-99b50d703d4a", "sighting_of_ref": "indicator--d068a175-3e30-484e-a772-7411e63cdef0", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b112280-4106-4633-815d-eddbde66aa76", "sighting_of_ref": "indicator--d068a175-3e30-484e-a772-7411e63cdef0", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e11bc109-057c-4946-932c-8a939a2a3abc", "sighting_of_ref": "indicator--35678406-98cd-4152-9c63-2b3ceae1966e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--968218b7-519e-4a96-932d-40b7429cc0e2", "sighting_of_ref": "indicator--35678406-98cd-4152-9c63-2b3ceae1966e", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82703f73-8300-422e-8198-a0afb89ccd12", "sighting_of_ref": "indicator--76d4c6c0-628c-4591-97a0-4fe1777f7119", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72c2bd22-bcdf-4f88-a072-2e3742c5a13e", "sighting_of_ref": "indicator--ff11d494-9935-4428-b205-020cf96529da", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c373308c-e08e-4da7-b971-c12f2757129c", "sighting_of_ref": "indicator--4d348698-85e5-4e99-b11a-636bdaea402f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ac80584-981e-410c-b68b-04fa7f6c7267", "sighting_of_ref": "indicator--4d348698-85e5-4e99-b11a-636bdaea402f", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73e2037e-8998-4f92-9e45-ea9f69e3035b", "sighting_of_ref": "indicator--4d348698-85e5-4e99-b11a-636bdaea402f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a63276b8-18e6-498f-8887-1d89146c08e8", "sighting_of_ref": "indicator--09057f1b-aa54-4d98-b523-1aa75e8792be", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--340658dc-5c90-44e0-9347-69d125affe2e", "sighting_of_ref": "indicator--09057f1b-aa54-4d98-b523-1aa75e8792be", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9dc23d1-88f1-4b9f-b318-26d8c95b8966", "sighting_of_ref": "indicator--bc953466-595a-4ed8-8d2e-fe7be855d745", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abf7ca23-e0d6-4549-bf49-fdaa0a25b0e9", "sighting_of_ref": "indicator--fa09cb85-d937-407a-8cc5-a61120e7f1f8", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c31c1e2b-a04e-48ab-b8cc-71b0833002d3", "sighting_of_ref": "indicator--fa09cb85-d937-407a-8cc5-a61120e7f1f8", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b85de6aa-dfa6-4aef-82e1-5fba7dddcbe5", "sighting_of_ref": "indicator--177a2d97-1466-41c1-a5c4-efb70b1ff77e", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9425f3c-72da-40d9-832d-f94e6e5f4f0a", "sighting_of_ref": "indicator--72bceb7c-4ddd-47b0-a81b-31021c9da5d3", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a54ab539-418e-4fad-9f9c-df1cea4f1832", "sighting_of_ref": "indicator--72bceb7c-4ddd-47b0-a81b-31021c9da5d3", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de2d81d4-4665-4031-9494-90a1cdbb7bfb", "sighting_of_ref": "indicator--eb5fc794-0c1e-42dd-9433-ba408a758dc2", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c971acfc-2d0b-43a8-8546-19ff411ed92f", "sighting_of_ref": "indicator--a4cc2427-5400-4d4b-a539-3bb1d1a9cb27", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea4caa9b-981d-42c5-9294-fee79caa21a9", "sighting_of_ref": "indicator--956aca13-ca85-41c7-b92d-6e3bb639ca59", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6cc5c81-450a-471d-a892-c6e5e33ec4d0", "sighting_of_ref": "indicator--956aca13-ca85-41c7-b92d-6e3bb639ca59", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab565f70-cd8e-4f65-8e7b-b8718153bd18", "sighting_of_ref": "indicator--956aca13-ca85-41c7-b92d-6e3bb639ca59", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff679827-1fc1-4ee5-9d6d-e47b08d025db", "sighting_of_ref": "indicator--f7c41994-fe7d-4acc-8f16-dc5db1a43313", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a0bdecc-4a83-4a07-808c-b193c951a2cf", "sighting_of_ref": "indicator--f7c41994-fe7d-4acc-8f16-dc5db1a43313", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eacc9831-55a5-4f57-a0cf-a90a69a97c13", "sighting_of_ref": "indicator--f7c41994-fe7d-4acc-8f16-dc5db1a43313", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7ebb2c0-e4cf-43d6-b76f-dc33d28b0da9", "sighting_of_ref": "indicator--387df524-c28d-4f6a-a479-11af7eb6bb26", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25978b0b-a1dd-4d8f-b3c0-256a04ff7eef", "sighting_of_ref": "indicator--387df524-c28d-4f6a-a479-11af7eb6bb26", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a13fcd1e-96a5-47ff-af14-0a514d6042f9", "sighting_of_ref": "indicator--134605b0-5f18-45ec-a3a4-1b0eb8a5abbb", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa57d2e0-a2d7-41ad-a2dd-2c67c6a236dc", "sighting_of_ref": "indicator--134605b0-5f18-45ec-a3a4-1b0eb8a5abbb", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdb92469-f89c-406c-8715-e313e02a20a8", "sighting_of_ref": "indicator--134605b0-5f18-45ec-a3a4-1b0eb8a5abbb", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61278d68-cb81-45f9-9ca5-9a06ef2856e1", "sighting_of_ref": "indicator--3a1baa26-2ee3-4660-ae38-4b82c265107d", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ed1a11d-852a-462d-a74e-3a4e5d8f47b1", "sighting_of_ref": "indicator--3a1baa26-2ee3-4660-ae38-4b82c265107d", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd7f6637-34a4-4ffe-9f1c-c37cf734f277", "sighting_of_ref": "indicator--cb9225d1-238a-4b71-aba0-8f234e1c460b", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06c0c6aa-e5c7-4759-90b6-24c03f9ec072", "sighting_of_ref": "indicator--cb9225d1-238a-4b71-aba0-8f234e1c460b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34de798b-04b6-4875-80a3-fa45b94aeceb", "sighting_of_ref": "indicator--d7085079-9d17-47a5-a98f-ede142867abd", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd414d68-d6ab-4d4b-99fa-99c2c590b2d2", "sighting_of_ref": "indicator--d7085079-9d17-47a5-a98f-ede142867abd", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2349718-74b7-435a-94f7-418566b82a69", "sighting_of_ref": "indicator--b2f169da-1d96-4866-aee3-b48ad8462154", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b15d421a-244f-4338-9673-975f313171a3", "sighting_of_ref": "indicator--eed534b2-a5fb-45d3-85c2-aee83c9ff16e", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a217548e-71da-4738-9d6e-6bc781f8d137", "sighting_of_ref": "indicator--765f2af7-379e-46e6-b2fb-1fd9c8279a5b", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dd8e6ff-5aff-4024-a1d7-f7b8e6ce3619", "sighting_of_ref": "indicator--765f2af7-379e-46e6-b2fb-1fd9c8279a5b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff08b3cd-7c0f-4cfe-bdda-550002064dbe", "sighting_of_ref": "indicator--c2f2e212-a5e2-4723-81fa-222b51801222", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c49d88a-8bb1-472f-8dbc-8b4e326d74b6", "sighting_of_ref": "indicator--3a1597a1-8993-42db-bac3-5dc4c1f15a14", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c28c087-4716-4685-9526-feabd1e7331b", "sighting_of_ref": "indicator--3a1597a1-8993-42db-bac3-5dc4c1f15a14", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae85fffa-0478-4eda-bdff-900bdcdc2a5b", "sighting_of_ref": "indicator--e8be63f9-d91f-4f90-894f-127da8795638", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f45be5d-fecf-47ba-a168-f1bb90f1b407", "sighting_of_ref": "indicator--e8be63f9-d91f-4f90-894f-127da8795638", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe103436-bb46-49f1-9db4-cae183ea79f7", "sighting_of_ref": "indicator--62c5aa84-b7e9-42fb-a9df-2e207e08c20d", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5820a1a-4938-4703-adfb-00dedb7f5cce", "sighting_of_ref": "indicator--62c5aa84-b7e9-42fb-a9df-2e207e08c20d", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20fd9b93-ba51-4e0a-9ee5-158bde727768", "sighting_of_ref": "indicator--db3f2f2c-99a7-4bb7-a800-e33b4664bac6", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a114b69-45ca-4b4a-b0d6-680d4d45bd47", "sighting_of_ref": "indicator--db3f2f2c-99a7-4bb7-a800-e33b4664bac6", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b3e2e18-fed3-4a91-80a9-7d953643b1e3", "sighting_of_ref": "indicator--7cee98bd-a701-4c5b-ba54-1b01c87a237b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18ff7590-9c7e-428d-80a8-045ef100fb49", "sighting_of_ref": "indicator--7cee98bd-a701-4c5b-ba54-1b01c87a237b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6da55dc9-28f9-4ad7-be16-55f202d4f848", "sighting_of_ref": "indicator--fb3186db-3662-40bf-b1aa-5902c35ff0fc", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e43399d0-92b5-47d6-a015-c4bb4786a9d9", "sighting_of_ref": "indicator--fb3186db-3662-40bf-b1aa-5902c35ff0fc", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd360a1d-1967-4b6a-9459-8642f8fe6f31", "sighting_of_ref": "indicator--72f667d1-a2b8-4a69-ba73-49ce3d9c7a58", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cce6384-1806-4a0e-bdf1-29fe634bb7e6", "sighting_of_ref": "indicator--22e162a0-16fb-4d7c-b8e6-0459b267b624", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--522dc2b8-d03a-4c3b-b66b-54eb97c9e392", "sighting_of_ref": "indicator--22e162a0-16fb-4d7c-b8e6-0459b267b624", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45e963ec-ed2c-4858-affc-5681dd11cc3a", "sighting_of_ref": "indicator--22e162a0-16fb-4d7c-b8e6-0459b267b624", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bfc3991-65d9-451e-bea7-c4f2a2e2b0df", "sighting_of_ref": "indicator--54e0dcdb-a0a1-42f1-8828-462b4759102c", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac802708-ee4f-454f-bc1d-cc6f7fa6f800", "sighting_of_ref": "indicator--54e0dcdb-a0a1-42f1-8828-462b4759102c", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85e66176-2944-41f9-91ec-979a89abd42b", "sighting_of_ref": "indicator--3b6ba675-7a2b-4aca-aec7-e5762479effe", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc459540-eafc-48ef-a5f7-46a51a788f6c", "sighting_of_ref": "indicator--3b6ba675-7a2b-4aca-aec7-e5762479effe", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2a3ccd5-a550-4127-a65b-164177ad1797", "sighting_of_ref": "indicator--2c3da610-53b6-49c9-8e24-73921df84866", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da3d2a7a-6a0d-4a7a-b0d1-4b1fbf58a332", "sighting_of_ref": "indicator--46048206-d1f9-4cf3-9d79-611108594a96", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96b50acb-24ac-470a-8eeb-3c33c50c131d", "sighting_of_ref": "indicator--1859a06e-071c-41ef-9173-956ac38c3443", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14a808f7-8789-498b-b321-78c9a3393a6e", "sighting_of_ref": "indicator--ea71ac04-e376-462c-b00c-a86e0023bfa9", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a721f050-9635-4166-a307-18bd2be86902", "sighting_of_ref": "indicator--ac148832-3c9f-4dc5-a5f3-2a468444d260", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddc2858c-91e7-4e1a-8efc-3a7e446cc83e", "sighting_of_ref": "indicator--ac148832-3c9f-4dc5-a5f3-2a468444d260", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b262730-989d-4d69-b2bc-8e85c0e41464", "sighting_of_ref": "indicator--d84b0388-33c2-4a67-a6eb-6328096eda39", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--431929b6-5a46-469c-a8bb-c4be505cf869", "sighting_of_ref": "indicator--d84b0388-33c2-4a67-a6eb-6328096eda39", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac86024c-694d-413d-aceb-7b4a474539c9", "sighting_of_ref": "indicator--36b2299a-7249-49b7-b6b0-227e463cc2ed", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ea68a86-e1d1-4c1b-8edc-ab9a6558f3ca", "sighting_of_ref": "indicator--36b2299a-7249-49b7-b6b0-227e463cc2ed", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29348fe7-e7b2-4224-b6af-e61c999d1240", "sighting_of_ref": "indicator--e85b59d9-a4c3-4fd9-8861-9613ec5eee2f", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--012d6522-175a-4fb3-85be-504ed683ccbe", "sighting_of_ref": "indicator--fb16e3c4-ffeb-42a0-92da-ec19243719fb", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0b2b229-0bfc-4b92-89f6-1d69ba0316d4", "sighting_of_ref": "indicator--16f6ed8a-f5c5-4b8a-8f0c-b49988fce4be", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--605cb925-ab56-4aae-a4dd-cdf1a18d5a1c", "sighting_of_ref": "indicator--823d7289-8f42-4970-ad30-0c0feef1b893", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f64f14b9-b025-422a-b81d-f4d16de64609", "sighting_of_ref": "indicator--72634f73-6300-445a-a80a-02ec20590d3b", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67126f79-349d-4c82-8b60-541721c01950", "sighting_of_ref": "indicator--72634f73-6300-445a-a80a-02ec20590d3b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c347d2c9-5ccc-4728-bb4b-fe0ab57717be", "sighting_of_ref": "indicator--0d645658-ccd7-4a94-9b78-fbc7c3ab8388", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96a6a6ca-e05c-4a8a-aa74-ae49ac817b73", "sighting_of_ref": "indicator--7b717fc7-2503-448c-a0a5-34d8f0110fb2", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb27d736-38f3-4709-b709-b668678a81ab", "sighting_of_ref": "indicator--e89774e7-c718-4ba5-8858-ea47b864697f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a451d985-2b91-485f-b984-80bbd16d1fa9", "sighting_of_ref": "indicator--eecc8233-dcbc-4888-81c8-785e28aa2691", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--661a78a5-38df-4e6e-b524-e330011610e8", "sighting_of_ref": "indicator--2059c5a0-5998-4b0e-a1c1-9999d4a594cf", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--710381df-a251-494b-8bcd-73358bb2f44b", "sighting_of_ref": "indicator--59cf225a-c98c-439c-a4bb-d5a8df8b0730", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfca5c97-4e99-4061-8642-da738d2cebab", "sighting_of_ref": "indicator--6cda9681-8a12-4aec-8e9d-9e6e5864c0f3", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63facd68-34cb-4afb-9522-e18d7e3d22bb", "sighting_of_ref": "indicator--aa0838d3-d9a5-4018-ab53-1f4ee225b091", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b056609b-7542-44d2-8c64-f14022069db1", "sighting_of_ref": "indicator--a67a210f-4bd4-4bb3-8534-6ad7a79fc541", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07784afc-a930-4b1e-b77c-178d0752b7f5", "sighting_of_ref": "indicator--a67a210f-4bd4-4bb3-8534-6ad7a79fc541", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84429887-e362-418c-aafa-6d0c4b471a1b", "sighting_of_ref": "indicator--7dc06f7d-f3ca-45c8-adcd-72b8f16d04d0", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2940ecc1-c9e9-40c3-856a-c0f226272832", "sighting_of_ref": "indicator--3abe7543-059b-4e2f-868e-2b9ba97305f8", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ead61392-2368-4afd-a84d-8c72026b59ff", "sighting_of_ref": "indicator--5b8cf226-bb67-4e3b-9ad6-8410f4b870b3", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b499e442-2abf-49a4-82e6-e7ad79ea7d95", "sighting_of_ref": "indicator--57c8d625-13eb-4ac1-9354-929732467c9e", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--116ffeb4-c17e-42fc-bd82-a55e3bcb3dc3", "sighting_of_ref": "indicator--93ce9c61-7924-4147-83aa-bde0c879700b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c8c1fbd-1b04-4942-8e9d-86fb0b3bb308", "sighting_of_ref": "indicator--93ce9c61-7924-4147-83aa-bde0c879700b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--437c1bf0-535c-4902-8b2c-566cd604e871", "sighting_of_ref": "indicator--daba0f14-79cb-4d82-b47c-31123342ddd9", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce84ea72-16de-4afb-8bfa-8c1ff9e0c112", "sighting_of_ref": "indicator--c38fd45f-c58e-4c0a-94e1-772e092de15a", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62da802b-ad7d-441d-9997-bb158bc1d30e", "sighting_of_ref": "indicator--c38fd45f-c58e-4c0a-94e1-772e092de15a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe18a616-644d-4b98-b369-5e9b1bfc9409", "sighting_of_ref": "indicator--19e79020-04e1-4d55-a224-da51f73ba180", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd382140-75ac-4c5d-a8ea-3d12abf01ad6", "sighting_of_ref": "indicator--19e79020-04e1-4d55-a224-da51f73ba180", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f83198e-1212-4122-bc41-0c36bf34e255", "sighting_of_ref": "indicator--4abe8e99-2f44-43a9-bcf3-bbc6eec2b2f2", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7abac7de-ec4e-4a25-99f0-0e056b090bcf", "sighting_of_ref": "indicator--6c972e0a-83f5-4db0-b6b7-ca085dd472e2", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e14b904-390c-49af-906f-3c05f418f112", "sighting_of_ref": "indicator--978191ad-75ff-4728-bd89-ffed5cd5d1b8", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f228d3a9-f877-4e99-8302-5bb4fd5ac6a6", "sighting_of_ref": "indicator--5d09ddb5-cb7f-4095-828e-b0456550aff6", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c164458-32ca-4148-b4a1-cea1de781f58", "sighting_of_ref": "indicator--5d09ddb5-cb7f-4095-828e-b0456550aff6", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b1c3084-cb16-4ad0-a251-b581d5ea3c80", "sighting_of_ref": "indicator--b7e70cdf-58eb-4d68-95ba-8ea6f5a612ae", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7f3ce65-4f74-4c6f-8b4f-9ebb17148d8d", "sighting_of_ref": "indicator--14762ea7-1f00-452a-8f9c-d881c74a0f03", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a14a0ac-ae2c-43cd-8726-61efa8723545", "sighting_of_ref": "indicator--14762ea7-1f00-452a-8f9c-d881c74a0f03", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f85fbce-4eb1-4a0d-bc32-743e78e907c1", "sighting_of_ref": "indicator--939516d1-1d73-4830-80db-5ec4ea10c5b1", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--873eebcb-5b90-4918-904e-72a8c56cb36f", "sighting_of_ref": "indicator--9703730e-8a47-481d-84ae-63b063487460", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2153510-bd8c-44a4-895d-a8cba6b8f77c", "sighting_of_ref": "indicator--9d362092-a358-4590-b18f-289b2e2d090b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c680ec0-9c9f-443b-b2b3-83a79df0bb15", "sighting_of_ref": "indicator--e653969c-e998-4079-9d11-ec4c790ea4ed", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13467b2a-fe84-454c-ad34-d4d648c9e762", "sighting_of_ref": "indicator--caa9f6a5-edac-4e97-bdab-03a299dc8b6a", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a00f8aea-1d7f-4dde-a1e7-df9ecc937643", "sighting_of_ref": "indicator--caa9f6a5-edac-4e97-bdab-03a299dc8b6a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8b2e7ab-78bc-4595-9cd4-631759928989", "sighting_of_ref": "indicator--62dbb1a6-dcfb-4511-80c6-27367a4641fa", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83bc3623-9fa4-48dd-8138-f5973c1a4694", "sighting_of_ref": "indicator--62dbb1a6-dcfb-4511-80c6-27367a4641fa", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c91b53c6-ed05-4794-89e9-58fb40f29b73", "sighting_of_ref": "indicator--5983e416-05bb-468c-90cf-c320693d76c4", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9ec32a6-24a6-415d-b300-2501f81b3bf5", "sighting_of_ref": "indicator--5983e416-05bb-468c-90cf-c320693d76c4", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fcdae10-f51d-4104-a205-899e4ac22ed2", "sighting_of_ref": "indicator--78005709-a3c2-4140-96e5-4919dad0bbca", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e169d3ee-0697-4ce5-95e1-5ae8daef17b8", "sighting_of_ref": "indicator--78005709-a3c2-4140-96e5-4919dad0bbca", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57ae578f-6e1a-40e8-90cd-cfde10186b14", "sighting_of_ref": "indicator--78005709-a3c2-4140-96e5-4919dad0bbca", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2a49f5e-3fab-4674-b717-5619a49b1f14", "sighting_of_ref": "indicator--c37051b0-3952-4d1f-a0c0-70f44cc981b6", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1328cd0d-6f2d-4f18-8361-9cae45b67c16", "sighting_of_ref": "indicator--52beeee7-2a17-40a5-88e1-6cc5665c60f7", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e9be9d6-7ee1-4e96-9bbe-79ca247bfa86", "sighting_of_ref": "indicator--52beeee7-2a17-40a5-88e1-6cc5665c60f7", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df71bf31-a4cb-4466-9c97-6ca4a229ede3", "sighting_of_ref": "indicator--29185d13-6f7b-4332-ac6a-e5eabe155598", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--459f9c71-2b0e-40ba-aef9-9500340ffabb", "sighting_of_ref": "indicator--91519796-4428-49c7-9a33-a5078e56b602", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3eca1a9-282c-4ff4-a6d4-dde3483478d1", "sighting_of_ref": "indicator--bd78e85e-6ccf-4bea-a3e5-9f360e44dbf9", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8126b1c-e1d8-480d-a61f-95bb1cad4be0", "sighting_of_ref": "indicator--e58edbde-2c1f-4189-a16e-5bbc53cd0f1a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eece64c8-57b3-4e05-9bac-51e6d7932abd", "sighting_of_ref": "indicator--73a5829b-8549-425f-9a8f-887f43e5acc4", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da283c39-e3cf-450c-87d2-d99cd7868b31", "sighting_of_ref": "indicator--e787ff23-e6b8-4cc4-a193-200b6c1f6b54", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--910eedf2-3206-497f-a9a8-3b160cdddbc0", "sighting_of_ref": "indicator--e787ff23-e6b8-4cc4-a193-200b6c1f6b54", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b984d2b6-9de7-4585-84cc-efbd940213f4", "sighting_of_ref": "indicator--e787ff23-e6b8-4cc4-a193-200b6c1f6b54", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb1a0cf2-a524-4889-85ff-f8e3d76ca55b", "sighting_of_ref": "indicator--75cd9868-ba44-49b2-8229-62f11c597f54", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bb4c2b5-8aeb-4ffd-928e-722bcfeea039", "sighting_of_ref": "indicator--c12c2d38-f4ba-49ef-b307-1f4d3b902d32", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fed9d541-36ed-451b-b682-3cb7e4fc8704", "sighting_of_ref": "indicator--c12c2d38-f4ba-49ef-b307-1f4d3b902d32", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13ed10f1-e714-460c-bb88-0c6415272510", "sighting_of_ref": "indicator--280de673-a6d8-4188-bba3-9b427fefc24a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea1104cf-ad2c-4b81-96ef-2bbd08b26136", "sighting_of_ref": "indicator--280de673-a6d8-4188-bba3-9b427fefc24a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1272ed9-ecf8-408b-8a05-87cb2755a00c", "sighting_of_ref": "indicator--ea00a5a4-6626-49dd-ab7a-759d8e174529", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d437cfe6-a7b0-486b-86a5-fbf64ee0c0f2", "sighting_of_ref": "indicator--ea00a5a4-6626-49dd-ab7a-759d8e174529", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94f5e0d9-f860-4ddc-ac5b-3b548c141259", "sighting_of_ref": "indicator--f9f58f77-808f-4d02-a71b-44e4c753a287", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32d5aff8-c654-433c-9e41-6925b50f1cfc", "sighting_of_ref": "indicator--a5b0cd76-770a-433b-8fa1-efc84908fd7d", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80a708ca-3492-4ca6-991c-b55432d92a6c", "sighting_of_ref": "indicator--a5b0cd76-770a-433b-8fa1-efc84908fd7d", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbfa85a5-24af-4ecf-a69b-2623027eb0cb", "sighting_of_ref": "indicator--98b96439-8e22-4b67-82f7-b70773424e60", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1ea76c6-6bbd-4f58-af12-f9c4e31478e6", "sighting_of_ref": "indicator--98b96439-8e22-4b67-82f7-b70773424e60", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--490a4e2b-aa4b-4d81-8d12-aa55e429780f", "sighting_of_ref": "indicator--727eb2ff-1480-4b31-9add-fc72e427434d", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8419ec36-9f91-4eb8-bd7d-fc9ca1292072", "sighting_of_ref": "indicator--20295c3d-2541-49d3-9c55-a1a937e89884", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cdf157e-56a9-4ee6-bdb7-61076cddff00", "sighting_of_ref": "indicator--1c18f938-a8f6-4500-8ef9-06d88754d09e", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4003a71d-d55f-42e3-a168-d213e92ee94e", "sighting_of_ref": "indicator--1c18f938-a8f6-4500-8ef9-06d88754d09e", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbea51d5-4dc1-4a55-8509-b5c9d53354db", "sighting_of_ref": "indicator--16825658-fa17-42b7-b064-11a3097d2b62", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24a4b8b7-2fb1-43d2-b5ec-c9935b56fea7", "sighting_of_ref": "indicator--cb51d261-7570-4383-92e1-c6d8490b175f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbd45bbf-4e34-4cf6-8104-be9a15212c0a", "sighting_of_ref": "indicator--71158681-7cc0-4768-b483-3c20d7f2aa5c", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1a4f792-9f21-4c6a-96ca-a20442ac9b64", "sighting_of_ref": "indicator--f3085a58-c2e1-45e1-8ee4-41baa9b05394", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9b23cce-3795-4722-8f95-779a2988a40a", "sighting_of_ref": "indicator--f3085a58-c2e1-45e1-8ee4-41baa9b05394", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9247bbe-b526-43db-8a7f-43a5334a0fbd", "sighting_of_ref": "indicator--787bc147-4688-477e-b96d-be20dcaaf164", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4da4e497-6d22-449e-ab3b-24e7c00f293d", "sighting_of_ref": "indicator--c5c0384d-49ef-40c5-904e-091657026d07", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95ae2013-aa01-4784-a76c-fb9390946f36", "sighting_of_ref": "indicator--c812af41-d1d3-4ec6-b0b3-c9312bfb0c27", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76351ec2-5da2-4848-9257-9a91c08d111c", "sighting_of_ref": "indicator--7a90706a-3e71-45dc-bf29-66e899166e84", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b76409c2-7bce-4e09-954b-362ec7fc57af", "sighting_of_ref": "indicator--85934f7b-80b9-46b1-b3e0-72cc9db2624e", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0608c422-8bea-4d50-a84d-667e1a3d98e8", "sighting_of_ref": "indicator--85934f7b-80b9-46b1-b3e0-72cc9db2624e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--167596a1-e516-4047-8f9a-0f9b175e2d85", "sighting_of_ref": "indicator--ec1fbc9c-c443-487c-85a2-c570ab7d5982", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0add3eaa-7831-42b6-8b63-5b9965a5bda7", "sighting_of_ref": "indicator--2bfdede1-30a8-4082-9241-a7384b014a52", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6ffa2ad-5edb-44e4-b426-62328e2ae21d", "sighting_of_ref": "indicator--2bfdede1-30a8-4082-9241-a7384b014a52", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--348ddda8-3b78-413f-8787-d8717b384814", "sighting_of_ref": "indicator--677e5a64-3b66-4cc5-9b2b-14cb4fad26e7", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--105c7796-b1ac-4e79-8c0b-d6340c370368", "sighting_of_ref": "indicator--134c1dea-13ac-4704-8eec-93153e93b63e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3aad0441-7014-4fa9-987d-0951e415c1dc", "sighting_of_ref": "indicator--700618bd-b770-4fd0-9778-563832a464b4", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2530b51d-0e98-4036-908c-d467fe2c7ab5", "sighting_of_ref": "indicator--700618bd-b770-4fd0-9778-563832a464b4", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03f41a0e-b182-440e-bf46-6eb786405c2b", "sighting_of_ref": "indicator--c43372b2-9387-47dd-aaa6-7d04e1e1d4cb", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de136133-3e20-4431-95fa-c1fa67d730f5", "sighting_of_ref": "indicator--e8a677c4-6bd7-4e14-a82f-f3c1dbd302aa", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f67b8fc0-0401-4db9-9cea-8f93ce7e14dd", "sighting_of_ref": "indicator--e8a677c4-6bd7-4e14-a82f-f3c1dbd302aa", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c8cfe06-02d1-4168-bd51-c80ef346c437", "sighting_of_ref": "indicator--f4cb438e-4de7-498b-863b-0dd8b965ebaf", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ece38682-d953-4e08-aac1-4c89484bc670", "sighting_of_ref": "indicator--f4cb438e-4de7-498b-863b-0dd8b965ebaf", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d80cd48-7e96-41d7-9864-356912d76ee8", "sighting_of_ref": "indicator--1923831f-98eb-4270-8feb-621f1f5f7e65", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ad7574e-28ef-430d-937b-ab167438f0a2", "sighting_of_ref": "indicator--1923831f-98eb-4270-8feb-621f1f5f7e65", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0038e9f6-3550-4219-baf0-d2d4e0022323", "sighting_of_ref": "indicator--e968219b-8790-444e-9d35-3b6ca6fa7265", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--652b7bc8-b1dc-4a46-a727-f40f8b05d97a", "sighting_of_ref": "indicator--e968219b-8790-444e-9d35-3b6ca6fa7265", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d20e07b-30cd-41a2-8443-7bcbc83235dd", "sighting_of_ref": "indicator--e968219b-8790-444e-9d35-3b6ca6fa7265", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--259ccd7b-284f-4c6f-a481-44aa5ad0b12b", "sighting_of_ref": "indicator--02a5ceb8-399f-4387-a06b-037ed5a9b678", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc5b6d4d-4354-4423-9bb3-1a8c8e78479f", "sighting_of_ref": "indicator--d2dbb339-9fb4-4412-9fe9-d93839087b1f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e30ae6cc-d190-48d8-b420-3ec0032825ec", "sighting_of_ref": "indicator--d2dbb339-9fb4-4412-9fe9-d93839087b1f", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--759a36e4-fabc-43e4-89d6-6626ac207601", "sighting_of_ref": "indicator--339415dc-5690-435e-8d8e-8ed1f640a7bb", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3a3b661-fd27-4b18-9906-f9a65e5cecd0", "sighting_of_ref": "indicator--339415dc-5690-435e-8d8e-8ed1f640a7bb", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04407dc4-a2d8-4501-8b71-ddb8691667ae", "sighting_of_ref": "indicator--339415dc-5690-435e-8d8e-8ed1f640a7bb", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9201942e-339d-412c-a2e8-305437f82c85", "sighting_of_ref": "indicator--919ccea8-7d32-41eb-a02b-2841876662d6", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fd04d9b-f8de-421b-8dda-1594b068dd1e", "sighting_of_ref": "indicator--19959cf7-e4b0-493c-9bbf-abeb819515b8", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9b901ef-038a-4fa3-9e94-b12f90e01cf9", "sighting_of_ref": "indicator--19959cf7-e4b0-493c-9bbf-abeb819515b8", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a97a5434-7fee-4751-95b8-8bf5627026ca", "sighting_of_ref": "indicator--4dc6d8a7-5de1-4182-80b1-af0721020d2f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b491bd0c-b5a1-4058-96ae-0b996ea49bdb", "sighting_of_ref": "indicator--de6d4dd6-865f-4b99-a6eb-a474ac11fe60", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36f3cea7-fc6f-4064-9c09-794dda27fba6", "sighting_of_ref": "indicator--ffb7c662-0397-43eb-8923-ba7400f23bfd", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f414364-a9c0-4073-ba4b-670f7fd2bf8a", "sighting_of_ref": "indicator--9ab0e1ba-54ae-49e4-95d6-47573f4365b0", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d14fa91c-a1d7-429a-946a-7b440fd9cfd9", "sighting_of_ref": "indicator--924a5fd9-b458-4683-9504-d627555ded77", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--134f5f22-31c1-4021-aac6-6d6f6f34db45", "sighting_of_ref": "indicator--c83a1422-922e-43b2-a401-a80bcfa09ad9", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e82bea5a-ad93-47f5-b394-2575b136f97a", "sighting_of_ref": "indicator--ca52f82b-091e-48d1-a5fe-ac1df61d0190", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75cca08c-2c6e-404a-b30d-bcdd6db43874", "sighting_of_ref": "indicator--cbb3c74c-9455-4a29-b159-85dc3392b128", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86c615a1-5efe-4dea-b6e5-6c3e59b6aa02", "sighting_of_ref": "indicator--cbb3c74c-9455-4a29-b159-85dc3392b128", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a82ed40-5ec2-454d-8426-62917e6e5643", "sighting_of_ref": "indicator--1dc6bb7c-f214-46c9-abb7-b2244442665d", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4b4f659-c390-4c22-9614-0824c78cc455", "sighting_of_ref": "indicator--fce7e39c-b1e6-45e1-8957-73b623ff3402", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5142ff61-8d2c-4d58-a497-b50ea54cf400", "sighting_of_ref": "indicator--318b223d-e611-4650-baf1-059baf7d8800", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4155402b-8946-4316-8aa2-9e427b0aa025", "sighting_of_ref": "indicator--04afb7cb-0057-4de0-9cd5-516de82ce5bb", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--190e3e81-7e46-4651-99c5-a5c5b087ed07", "sighting_of_ref": "indicator--54bdd3c6-a566-4c45-9286-19d9bee65bba", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e20430a1-14dc-44fe-9511-9b8b16316569", "sighting_of_ref": "indicator--4c65288c-256c-4d41-adcd-6093652328ae", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--343e26f4-b300-4b48-ae99-aba8dd1d146b", "sighting_of_ref": "indicator--fbb981af-9463-4908-9e1e-cf94aa8ac7f5", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8247e9a6-4e58-421d-801b-3d5fccbdce95", "sighting_of_ref": "indicator--7938ddb2-9920-459a-bb1b-934f318bdd9a", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75f92116-e9e9-4d16-b047-0782da1205e7", "sighting_of_ref": "indicator--528d3bb3-4f4a-41ce-9730-304346021bc7", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b6216ff-f047-4da9-97d3-99876d3dd7ea", "sighting_of_ref": "indicator--e4392eaf-a666-4af3-81a3-627adb00ad11", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab50be51-ffd1-4ff5-8b28-76230a6330c0", "sighting_of_ref": "indicator--716887e7-d86b-4406-9d5e-e85d4f784813", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--477cee22-ab82-437b-87c6-a2ad208aca72", "sighting_of_ref": "indicator--ca82bb21-6505-4b12-85cb-2e6029805819", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df767608-ef12-4d22-83a9-25ac923e2267", "sighting_of_ref": "indicator--8598b0dd-a21b-45f5-a92f-97b350c1d12a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aeb6d29a-8a9b-4ba4-a431-c8e0a91133d5", "sighting_of_ref": "indicator--a92b6a21-e575-4eb3-85a5-855790430335", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fff0a271-b9c8-4a1a-b69d-1b07ce257592", "sighting_of_ref": "indicator--fec3bee8-dd0b-4762-8a55-23332103c68d", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a23f3ba7-4f48-4743-bcba-0c3fb8963246", "sighting_of_ref": "indicator--fec3bee8-dd0b-4762-8a55-23332103c68d", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69f2ea11-de0d-435b-a61f-a69d37f5bcc0", "sighting_of_ref": "indicator--e2d500fb-ad2c-4e01-9a29-63898983c1ce", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97beb8ee-145e-408a-91a9-d0e9209e8cf0", "sighting_of_ref": "indicator--923c65af-1e07-4f12-b110-7e1af53b9763", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4501cb1-cd96-48cb-b263-f4cfc638e6a5", "sighting_of_ref": "indicator--923c65af-1e07-4f12-b110-7e1af53b9763", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05249635-8545-4fed-a3eb-96a3a73c271d", "sighting_of_ref": "indicator--f4d49c91-3a04-4222-98a8-24a58c3af49f", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f8f433f-c0d9-4bd5-891b-854b96179e01", "sighting_of_ref": "indicator--2c89ea94-b088-4e55-984f-5cdca33473b1", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e125d716-58a9-4667-91ae-c7f1bbd69145", "sighting_of_ref": "indicator--6eb8a459-0ea9-4b8a-9d2a-a00a2a1c89d7", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a820c8b5-ec0a-4304-b7fb-5185818f85af", "sighting_of_ref": "indicator--48731c1f-2262-49bf-a842-353c86d151a9", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84b06f11-8fa9-4f61-a938-eaef6ec71dde", "sighting_of_ref": "indicator--9e9d988a-836b-4a63-a948-2e91bd017419", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--793500af-d8c9-4066-92b5-4cf11b0360db", "sighting_of_ref": "indicator--840dea71-b9a3-48cb-8c09-72ffdf4ef418", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5467698-355c-49c8-a437-2833078e8405", "sighting_of_ref": "indicator--eb673bfe-66e9-46c7-93af-bd829ad693dd", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1eb08cc-a2c1-402d-a756-786adeda3319", "sighting_of_ref": "indicator--16afc989-34e6-46e2-bdad-9e86e48d0cfb", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2fb3d81-1653-4c15-b2b7-df814bff0f3e", "sighting_of_ref": "indicator--16afc989-34e6-46e2-bdad-9e86e48d0cfb", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1665371d-ee00-4d49-89a7-5787fbdc945c", "sighting_of_ref": "indicator--dd34e822-13d1-4b64-8fcb-6d8e066746b2", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79f1a4e4-72db-426e-9fb0-4fe335bb0960", "sighting_of_ref": "indicator--7d74ed97-568b-457f-bdd0-d8e4c9ef6cb2", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6209d1e4-2a23-41e6-a727-8087be349094", "sighting_of_ref": "indicator--210bc117-76c6-4140-8b89-d452445ec0be", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b357d03e-628d-4723-8143-ddb8d1d5c750", "sighting_of_ref": "indicator--8be3e1fb-c75a-4a7f-9b98-062daf23e523", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1307d4b4-c777-48d3-ba39-af45a6e35a9f", "sighting_of_ref": "indicator--eaa68249-b16b-4b5c-a099-86c7e69afbef", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f257f07-ee5e-4741-8368-c31d5a93d45c", "sighting_of_ref": "indicator--427a5626-6699-4f57-9e3f-a1885851957f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--018e5c8d-facb-44dc-8f71-4441f1898d42", "sighting_of_ref": "indicator--427a5626-6699-4f57-9e3f-a1885851957f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2878128c-432d-4480-baf0-e92198b658a6", "sighting_of_ref": "indicator--4e94d663-3582-4206-b587-237e178a2639", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de3335e4-7fc2-4919-b5c9-1a6b224553fe", "sighting_of_ref": "indicator--e5ca0686-c30e-43d4-b48e-3937c856641b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c73ae6c3-6b10-4d66-95e3-5c5733548f45", "sighting_of_ref": "indicator--99535817-68a7-4b6c-b638-fe945c306274", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f1df469-2297-4429-b8f3-47764342841d", "sighting_of_ref": "indicator--99535817-68a7-4b6c-b638-fe945c306274", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17589362-726a-493f-a603-3d432a741b69", "sighting_of_ref": "indicator--fcb0ab75-5195-4cf2-be6c-91604a3b216f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f20f3e3a-8c47-4baa-804e-17d45c351e41", "sighting_of_ref": "indicator--5a0bc346-99b5-42d3-b5ea-37610aa136bc", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7833599-23b7-416b-9f88-35cea6ec45b8", "sighting_of_ref": "indicator--065915e2-8a8d-4a64-9735-f500d9219850", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4369bade-acfe-4a2e-b80e-e6ee94bc5a9a", "sighting_of_ref": "indicator--8ddb4127-5dde-4e89-b5e3-686e9be45395", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59d81843-d66d-4898-b66e-1f5e6c7333ce", "sighting_of_ref": "indicator--967c72f3-992a-4520-b1b4-65afa7f7b0f3", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89e84021-8043-4e7b-b08e-8f69e26b6ff3", "sighting_of_ref": "indicator--967c72f3-992a-4520-b1b4-65afa7f7b0f3", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--459e9cdd-26e2-4786-bb22-ba34dfff0e67", "sighting_of_ref": "indicator--2f566cba-cc86-4aca-9afa-7f1668edfb79", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a107868d-5087-4fb7-82c5-684678ce20d9", "sighting_of_ref": "indicator--2f566cba-cc86-4aca-9afa-7f1668edfb79", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--489f959c-76af-46ea-b68a-9004540d4f65", "sighting_of_ref": "indicator--27b9a743-7425-4a9e-9137-f98ea5e1ee31", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad2a720f-c068-422c-870e-67d57387af68", "sighting_of_ref": "indicator--b2dbb30f-4316-4bdd-b48e-b7ff43c8aa27", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc652314-48c5-4eaa-ad11-b150a7c90cac", "sighting_of_ref": "indicator--7f11e7ee-8132-4494-b28d-f9dbe6dc3f3e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eed7ad6c-5bf0-4806-801e-c90d59cbe8a0", "sighting_of_ref": "indicator--7f11e7ee-8132-4494-b28d-f9dbe6dc3f3e", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4bc6f44-662e-40d7-86f7-f4fc79735573", "sighting_of_ref": "indicator--f87d214f-66a2-4fc4-a049-0f81413df893", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d955ced6-4348-43f0-be28-df39805ce46f", "sighting_of_ref": "indicator--d622f65a-d72d-4d6b-bd5f-da48ce28492e", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f418ab76-3180-483b-83c3-bb01e03e7d2f", "sighting_of_ref": "indicator--d3efa309-bf3c-4277-967f-64e928a2880a", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a74096c-57c1-428e-b80a-fc8ffb3d5135", "sighting_of_ref": "indicator--0b498c90-d0b5-4028-b4c8-cbf0df1b76dc", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8dbf7e3-2cba-47ff-8188-1b520f3b0f94", "sighting_of_ref": "indicator--0b498c90-d0b5-4028-b4c8-cbf0df1b76dc", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0987fea2-1ca0-4918-bac2-713695d5ede2", "sighting_of_ref": "indicator--0b498c90-d0b5-4028-b4c8-cbf0df1b76dc", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--191771f1-636c-4f6c-b166-c6853649a166", "sighting_of_ref": "indicator--6b3e0bd2-b475-464a-be1b-d4b5a14ec668", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29e9ee6a-8bab-4678-873a-6956974c7cb8", "sighting_of_ref": "indicator--6b3e0bd2-b475-464a-be1b-d4b5a14ec668", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a42b2f1f-2d59-469b-bb4e-b7b5ee491c5e", "sighting_of_ref": "indicator--45b380eb-7549-4d8b-a289-d6212de32d3f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b08ad16e-1c9a-4a95-af3c-e06f8d6c65d0", "sighting_of_ref": "indicator--4062ce82-9935-45b7-bc4a-7bd62a8258bf", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a94f9401-9bc1-402d-9b86-676144c0acd4", "sighting_of_ref": "indicator--8d1a93e9-3436-4845-9ec4-2f940fdceda0", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d967fe4a-2755-41e0-a36c-0f6e892bf23d", "sighting_of_ref": "indicator--e5c740be-e68b-4786-b44a-7674350d5816", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fff3bf3-8b90-479c-b72b-2d7fb584844a", "sighting_of_ref": "indicator--94303999-9f35-4e64-8e4c-e9e9366f3496", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89c6264c-7ea6-4077-84cd-3e95825738e9", "sighting_of_ref": "indicator--09381907-6503-40e9-9d81-2e1e8bcd9048", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5296e18c-5209-4c02-89fd-33d94f88a171", "sighting_of_ref": "indicator--09381907-6503-40e9-9d81-2e1e8bcd9048", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98e507d4-575c-4f0f-af30-6f7f33443c83", "sighting_of_ref": "indicator--09381907-6503-40e9-9d81-2e1e8bcd9048", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f01a6c19-d181-493f-a712-a363f9fd3ed3", "sighting_of_ref": "indicator--603bdfd3-2b46-4cc2-9650-16c5e11f9050", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--503d52f2-def0-4f9d-9662-6dacdb69006e", "sighting_of_ref": "indicator--603bdfd3-2b46-4cc2-9650-16c5e11f9050", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b94be5c-6a5c-4567-bd71-44b34c1aa768", "sighting_of_ref": "indicator--603bdfd3-2b46-4cc2-9650-16c5e11f9050", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8452002f-b198-4f4e-be52-fb8aca659a9d", "sighting_of_ref": "indicator--6cfd2009-8966-426f-a0e7-91dc4dc101d2", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12914555-3220-47cc-8859-eb692d5088e8", "sighting_of_ref": "indicator--6cfd2009-8966-426f-a0e7-91dc4dc101d2", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9bfa2f0-63f0-4552-bd3d-f9e27c16f783", "sighting_of_ref": "indicator--6cfd2009-8966-426f-a0e7-91dc4dc101d2", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0925dbca-f180-42fe-bf91-2c049d18bab1", "sighting_of_ref": "indicator--b790d824-f086-458a-89e2-ea34a480c741", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21b510da-462a-420a-9556-b09ced873540", "sighting_of_ref": "indicator--b790d824-f086-458a-89e2-ea34a480c741", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dac863b7-2cc5-495d-bf44-4eaab975d174", "sighting_of_ref": "indicator--b790d824-f086-458a-89e2-ea34a480c741", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cff6487-faae-40b2-a0b9-0e9f3fa73f19", "sighting_of_ref": "indicator--5201b082-f2cf-4045-ba80-5134e8c7709b", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64a61a51-fce5-4eb5-a5f9-ab5f1071b73c", "sighting_of_ref": "indicator--5201b082-f2cf-4045-ba80-5134e8c7709b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e8d397d-bc61-4b9d-bb0c-7f466482a005", "sighting_of_ref": "indicator--5201b082-f2cf-4045-ba80-5134e8c7709b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8b317e8-997e-486e-bdeb-abcce3c7459d", "sighting_of_ref": "indicator--aa5d8893-a881-46ff-812d-976619d3a09b", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44d8036b-e738-4bb6-9bdb-007c9b93783a", "sighting_of_ref": "indicator--aa5d8893-a881-46ff-812d-976619d3a09b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2a154d5-d21e-453a-92b3-f6cb6bf8f490", "sighting_of_ref": "indicator--aa5d8893-a881-46ff-812d-976619d3a09b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abb396f8-0422-4bb0-96eb-60019d3b5c1d", "sighting_of_ref": "indicator--e463d103-5e82-4366-a053-652bb0cd0049", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d109517-9bc6-4eb4-b8d9-4eaed778aa49", "sighting_of_ref": "indicator--e463d103-5e82-4366-a053-652bb0cd0049", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--126d68a9-d11e-435b-8cb0-7567fc7f4b9b", "sighting_of_ref": "indicator--e463d103-5e82-4366-a053-652bb0cd0049", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b644cf5b-21c1-42d2-945e-c1562c444a82", "sighting_of_ref": "indicator--14a9fe4d-7ddc-4bc0-ad0f-17f988d10f2b", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dc5990d-5362-4443-99f6-9a623a355b0f", "sighting_of_ref": "indicator--14a9fe4d-7ddc-4bc0-ad0f-17f988d10f2b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7712085b-577b-4deb-a380-a88561412894", "sighting_of_ref": "indicator--14a9fe4d-7ddc-4bc0-ad0f-17f988d10f2b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52c65ea2-1451-413e-a6b3-7ac27a9c9824", "sighting_of_ref": "indicator--81121fce-8d62-40f4-9264-f364b51eadb9", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14263825-a063-4c9b-9078-e81a28b5e170", "sighting_of_ref": "indicator--81121fce-8d62-40f4-9264-f364b51eadb9", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c630239-88c9-4a05-b8cd-006fc69db3a4", "sighting_of_ref": "indicator--dfd740bd-bb44-40c2-8c35-b2d73b70c684", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa7332c6-2257-4cd9-80a3-0b18c5ad864d", "sighting_of_ref": "indicator--dfd740bd-bb44-40c2-8c35-b2d73b70c684", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76fd606a-3ac4-4607-94e7-cd9d4f6448c0", "sighting_of_ref": "indicator--11c703d8-43d6-48ac-b81b-794285656729", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd11ca40-1d08-4b2d-85c1-1f1fbb2027de", "sighting_of_ref": "indicator--11c703d8-43d6-48ac-b81b-794285656729", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccc8bf35-9136-426d-b3e0-ca9f3c183cd4", "sighting_of_ref": "indicator--11c703d8-43d6-48ac-b81b-794285656729", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97c6a67c-d980-4df3-80b2-8d5884db4a48", "sighting_of_ref": "indicator--333f6b94-0131-4bf8-8463-4694e369ce38", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa2e2e45-ab52-42b8-b3f9-dec893f3e2f6", "sighting_of_ref": "indicator--83d8b17c-5fd0-4580-9df3-0c35da3cd784", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--749106e0-1c1d-4e59-b0bc-cee8adabacc4", "sighting_of_ref": "indicator--83d8b17c-5fd0-4580-9df3-0c35da3cd784", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae271dcd-ee79-4d15-b0df-61c56b01e175", "sighting_of_ref": "indicator--83d8b17c-5fd0-4580-9df3-0c35da3cd784", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--583aa416-5b79-4224-8b52-3fe6511712ef", "sighting_of_ref": "indicator--e5e2eef3-e13c-4bf4-9399-01a1122df7a7", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54529ff5-311a-4d04-9a81-1bb5f38f2365", "sighting_of_ref": "indicator--e5e2eef3-e13c-4bf4-9399-01a1122df7a7", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17a6a40a-e0a6-4670-98d5-a317bc8407af", "sighting_of_ref": "indicator--e5e2eef3-e13c-4bf4-9399-01a1122df7a7", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f5688cd-7d2a-42ed-a650-3b45302cc8c3", "sighting_of_ref": "indicator--5d787e0d-e57a-4140-b0c5-38fe0329a46d", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c6f412d-300a-4973-b2f6-a3873b3c7d95", "sighting_of_ref": "indicator--d5a56b44-fa65-47a8-913c-24c4e9807b12", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--643b173e-9078-4bda-9963-a1984898808f", "sighting_of_ref": "indicator--a79a9e95-2f91-46f2-b56c-e732bca53d61", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7df4b406-a86f-44e5-a931-2048af100168", "sighting_of_ref": "indicator--a79a9e95-2f91-46f2-b56c-e732bca53d61", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0afb66aa-a8f6-44b2-ad6c-917dfa5837e5", "sighting_of_ref": "indicator--be1047e4-e4be-4c78-b415-7ce6eee485c4", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c22ea1d7-ac70-4e2d-8292-bc7e92f56d92", "sighting_of_ref": "indicator--1863dd18-f5bf-4e72-a05e-f2aded9c7a97", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--916a46c6-0cf8-4af3-a9a6-f2b9001128b3", "sighting_of_ref": "indicator--53c27099-ae18-492a-808f-09ce18b9bc1f", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c181eab1-1159-44bd-8a2a-e972d6c9e7d8", "sighting_of_ref": "indicator--a92b00d2-bc73-46e6-b553-bf90aa6185b0", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--605bbf17-d034-4d17-9d9a-bc474486657e", "sighting_of_ref": "indicator--cc122d9b-c63a-4d26-bdae-5ea250d9c259", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f74c4a5-b97c-4997-ac4b-11b03ecbfbc1", "sighting_of_ref": "indicator--ba8c2d3f-c095-4973-b66d-5223b6716aad", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb2c30b6-1a78-49d8-9595-adc17d2318f5", "sighting_of_ref": "indicator--ba8c2d3f-c095-4973-b66d-5223b6716aad", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--949ed895-4c34-4523-b538-7d976f76fd79", "sighting_of_ref": "indicator--ba8c2d3f-c095-4973-b66d-5223b6716aad", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73eb90bd-855f-4268-b172-637ff51401f0", "sighting_of_ref": "indicator--cf8274c5-4701-4241-a212-a7882f12b06d", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5dcc45c-4b35-4e88-87f1-5562143ff370", "sighting_of_ref": "indicator--1ed7fce0-f385-4332-8479-901005d7d407", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f0f58aa-2eed-4ff8-9838-8283912dbf3f", "sighting_of_ref": "indicator--efa446f2-310d-441a-afec-c5754064182f", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a38a11c-e37b-4395-8fff-7dc3aa2f695e", "sighting_of_ref": "indicator--efa446f2-310d-441a-afec-c5754064182f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b61ac36-9e8f-4cec-9d18-a24abaf39d7c", "sighting_of_ref": "indicator--46b784e1-2502-42d8-a539-66e3adf39332", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95e00e34-29ae-4d64-8961-1408fd3efa8c", "sighting_of_ref": "indicator--46b784e1-2502-42d8-a539-66e3adf39332", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fd886b5-b6a7-4bff-a83d-c883a8b2d441", "sighting_of_ref": "indicator--46b784e1-2502-42d8-a539-66e3adf39332", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e437b428-674d-42ce-8496-19cf9a2c006b", "sighting_of_ref": "indicator--fd91ef21-5571-4202-852e-2ac65daafb65", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b3874d2-0ece-4147-b58f-ee973e8769c6", "sighting_of_ref": "indicator--fd91ef21-5571-4202-852e-2ac65daafb65", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9b25c6e-4002-4ae5-998d-edefb6086039", "sighting_of_ref": "indicator--fd91ef21-5571-4202-852e-2ac65daafb65", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--807aa66d-e327-4444-8942-ad6bb2dc5201", "sighting_of_ref": "indicator--12044963-f5ef-4dc5-afce-caaec4f46d14", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b320249-0498-4878-aa0b-1f67fab1403b", "sighting_of_ref": "indicator--12044963-f5ef-4dc5-afce-caaec4f46d14", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d926503f-32a7-4803-ae5c-399a65aa0540", "sighting_of_ref": "indicator--12044963-f5ef-4dc5-afce-caaec4f46d14", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd9e20ed-a890-4efc-98c9-203ccb0dfbc2", "sighting_of_ref": "indicator--d90f91a4-3552-4a50-82c4-4720196c5d1a", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9313d631-571c-4369-93eb-98093a351e2b", "sighting_of_ref": "indicator--d90f91a4-3552-4a50-82c4-4720196c5d1a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35287122-ada0-481d-94e3-c282f49fbd53", "sighting_of_ref": "indicator--d90f91a4-3552-4a50-82c4-4720196c5d1a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f6c4c17-f66b-4dd9-83f1-52cc28afd3d5", "sighting_of_ref": "indicator--f85fbdf7-3882-4b3f-9d2f-f257ff62e62d", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bea0af38-1dba-44cb-8f18-926233ca6260", "sighting_of_ref": "indicator--f85fbdf7-3882-4b3f-9d2f-f257ff62e62d", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1f76cc9-512b-4858-835a-14f35a08f431", "sighting_of_ref": "indicator--a428d731-4716-444b-abb9-635ec3720d5b", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ecfc560-51fa-4fb7-990d-dc33f2954f2b", "sighting_of_ref": "indicator--a428d731-4716-444b-abb9-635ec3720d5b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e70a14f1-069c-46b9-ad5a-f36cf87a2a8c", "sighting_of_ref": "indicator--a428d731-4716-444b-abb9-635ec3720d5b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed701954-083b-468f-8b1d-0b0b0c5df078", "sighting_of_ref": "indicator--00784e27-efa1-42f9-90c6-f5a8dfa2169b", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0da66ea-1d41-47e7-b863-13c457f9c8ae", "sighting_of_ref": "indicator--998f6f15-9ff8-4d31-b0fb-b2da5ab457e9", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5866d336-e376-4e8b-8ee9-3c6f6e82fecc", "sighting_of_ref": "indicator--998f6f15-9ff8-4d31-b0fb-b2da5ab457e9", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9625784-63ad-4e3b-a7d0-a0ee567a2429", "sighting_of_ref": "indicator--998f6f15-9ff8-4d31-b0fb-b2da5ab457e9", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--549dd0e0-3358-48d2-a345-ff35144111ac", "sighting_of_ref": "indicator--8c14578f-ae8f-4f0e-9de6-cdcca5e3c4b7", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c67e63d5-0fa0-4cd1-928c-953fd8735328", "sighting_of_ref": "indicator--8c14578f-ae8f-4f0e-9de6-cdcca5e3c4b7", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08ba942d-b763-4bfc-8c75-b4ef498c7dc2", "sighting_of_ref": "indicator--8c14578f-ae8f-4f0e-9de6-cdcca5e3c4b7", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebdf16f4-b109-4775-840b-88748f3b9db3", "sighting_of_ref": "indicator--bf647c00-1675-4a2b-8a5a-0633655b2ee0", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0141227d-7a5d-4194-b256-724de8aa367f", "sighting_of_ref": "indicator--2d29364a-7114-4863-a553-5e0ae9790828", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18ead755-4e1e-4631-b1fd-bfc746d00723", "sighting_of_ref": "indicator--2d29364a-7114-4863-a553-5e0ae9790828", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--843d1aed-860a-454d-a2d0-4cb04bc4d8e0", "sighting_of_ref": "indicator--339c1435-2331-46fe-9431-efddcfdd8076", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0568b084-a42b-44aa-9970-ce9e1eacbdbf", "sighting_of_ref": "indicator--339c1435-2331-46fe-9431-efddcfdd8076", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6802570a-b013-4315-a081-8d3e3a171460", "sighting_of_ref": "indicator--339c1435-2331-46fe-9431-efddcfdd8076", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dff937c-84b8-4278-a2ec-210455bd55e0", "sighting_of_ref": "indicator--a504dc44-d9c4-420b-8c55-28f2808f940e", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e76e5874-6715-459e-ab35-d6391ab46d4e", "sighting_of_ref": "indicator--a504dc44-d9c4-420b-8c55-28f2808f940e", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d76d69da-c5fa-4fda-b057-328399515032", "sighting_of_ref": "indicator--021ab222-b5c1-437b-bc8d-a6cfd7bce21b", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fcd58b5-c368-4a2a-b3f8-c778442fe6b2", "sighting_of_ref": "indicator--021ab222-b5c1-437b-bc8d-a6cfd7bce21b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60389023-028b-486a-b2bd-2153db539c05", "sighting_of_ref": "indicator--021ab222-b5c1-437b-bc8d-a6cfd7bce21b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1547a6a6-da26-40c1-a746-e87e4348fbeb", "sighting_of_ref": "indicator--5fdafd49-4f80-44e4-aa65-f4fda4d871e7", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f722879-1b1d-4e0a-a2ac-e2b258397048", "sighting_of_ref": "indicator--5fdafd49-4f80-44e4-aa65-f4fda4d871e7", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b28eafba-8e7c-44f8-9592-97a8da74e72d", "sighting_of_ref": "indicator--5fdafd49-4f80-44e4-aa65-f4fda4d871e7", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fcb4544-3994-4e9a-b275-09aef036b4ab", "sighting_of_ref": "indicator--bcd150de-146c-4b83-b50c-aa170f8994ce", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b4a8c48-fb0a-47a6-ba52-e38f94b4f068", "sighting_of_ref": "indicator--bcd150de-146c-4b83-b50c-aa170f8994ce", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b552684-2f97-40fe-8bdc-1c83082622d8", "sighting_of_ref": "indicator--bcd150de-146c-4b83-b50c-aa170f8994ce", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5e83b1f-a706-48c4-87c2-8e9a8a1b3e5f", "sighting_of_ref": "indicator--41961467-6050-45a1-a802-347634fd95de", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fc35a5e-c5b5-4600-8903-4f283d635bc5", "sighting_of_ref": "indicator--41961467-6050-45a1-a802-347634fd95de", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8f3aa33-3996-4ae7-a100-bfd4c115f8cb", "sighting_of_ref": "indicator--41961467-6050-45a1-a802-347634fd95de", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a56f42b6-964a-4ea0-bd8c-ca5016498524", "sighting_of_ref": "indicator--d9645ba3-8c96-474a-a135-8b9488a65f4d", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9f7a696-52aa-4c9a-a43a-c51a622a9bc3", "sighting_of_ref": "indicator--5ee0f4a6-ca3f-4efc-b151-cdea92e748d6", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4809b902-dbd1-4c74-8389-b3cf9e1bebcf", "sighting_of_ref": "indicator--41906d80-c87a-4406-a8ec-45be60628612", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e59f9f92-c68d-441c-8a84-4aa04a5043e8", "sighting_of_ref": "indicator--d1dfbce0-653f-4d43-9d7a-fb327f1a9d15", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a886f65-7c0f-417a-9ab1-bafb12dc2ccc", "sighting_of_ref": "indicator--848690ea-78ae-4cae-b49d-e8eae3851742", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2833f1a-2f3e-4370-baef-4fbba3a96cbe", "sighting_of_ref": "indicator--848690ea-78ae-4cae-b49d-e8eae3851742", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e2b95b8-2074-48f8-ac3d-dc66717a544e", "sighting_of_ref": "indicator--e1ec129d-63e0-4508-a6da-564fe3a14ac4", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d83d7e4-f8e9-45c2-b89e-7e009be7ae09", "sighting_of_ref": "indicator--e1ec129d-63e0-4508-a6da-564fe3a14ac4", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e646933f-641a-42fc-9e93-67f1684b7d71", "sighting_of_ref": "indicator--e1ec129d-63e0-4508-a6da-564fe3a14ac4", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8df7ca8-2a9f-41d8-aeb1-86dbb45175fd", "sighting_of_ref": "indicator--785ce7ff-50ff-4ffd-a59d-6dd9925b10aa", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9afb49b-d265-4cce-aa13-18e0d4688541", "sighting_of_ref": "indicator--785ce7ff-50ff-4ffd-a59d-6dd9925b10aa", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--503d5e18-3cdc-46eb-aea0-74711229690a", "sighting_of_ref": "indicator--d157f93f-a1b7-404f-ad53-2c63662c1072", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88004ab5-6a97-4afb-802f-eaeaf4449062", "sighting_of_ref": "indicator--d157f93f-a1b7-404f-ad53-2c63662c1072", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--971c8fb2-51a5-45ab-91a3-ed439c2445e6", "sighting_of_ref": "indicator--d8f09c98-f253-4f19-8afd-544ececdb7a0", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3068e295-d2c8-4a62-859e-d4636f570fea", "sighting_of_ref": "indicator--87902fd9-1b76-49f2-9ff7-1f0482c96e87", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60ed2945-aa18-4682-a4a8-1fe7a355ce5e", "sighting_of_ref": "indicator--23a24909-6383-4e40-baef-fff3242f547a", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e7f0a61-0574-4549-9940-ab17130b4e02", "sighting_of_ref": "indicator--7a245f68-be29-408a-b9e0-a58859bba456", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a4205ce-170f-47b2-92e0-bc5fde560713", "sighting_of_ref": "indicator--7a245f68-be29-408a-b9e0-a58859bba456", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fb498fa-26d6-4ffb-b2cf-9732e8dc3d8b", "sighting_of_ref": "indicator--7a245f68-be29-408a-b9e0-a58859bba456", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c040e40-804b-4f30-ad0d-1fbae61785b6", "sighting_of_ref": "indicator--d03aba34-c0ed-4dd7-b8d2-687b94bd9bc4", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92f020b5-d184-485f-aec8-d2e9976a2bc1", "sighting_of_ref": "indicator--53aa4c26-a6d4-4d6d-806b-d5127f9f6983", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5324caa-48e3-4d63-b976-c3d03a22c13b", "sighting_of_ref": "indicator--67803229-d2a1-41e5-b55a-1b90179efa2e", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2f06f60-c689-44c5-a37e-7cc9fef7ad88", "sighting_of_ref": "indicator--036c17b3-d421-4488-b92b-f52653319e7f", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee254f90-7cbc-4cbc-b61a-cec10b549ebb", "sighting_of_ref": "indicator--3280ca21-68a4-4ce2-90c4-33c516b499ea", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10df1190-ce1d-4e55-9303-ebc9b764f974", "sighting_of_ref": "indicator--3280ca21-68a4-4ce2-90c4-33c516b499ea", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f605f69-0825-4b60-a6d6-c1ccb82916f9", "sighting_of_ref": "indicator--d1b01f60-56b6-4fa8-8dc1-91226a5393fa", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0c299e6-f984-4a6d-8273-345431bbf545", "sighting_of_ref": "indicator--0890b855-e907-4304-895c-ba6c9b06642c", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c932ccd9-949b-4d4b-b09f-499764df60cd", "sighting_of_ref": "indicator--0890b855-e907-4304-895c-ba6c9b06642c", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--026d567f-1b62-4a34-832b-781900e675a4", "sighting_of_ref": "indicator--798d15f6-dcb7-4551-af3e-3eacfbfe359c", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03acdd9f-b669-4ecd-bc1c-23d0a2f2bfef", "sighting_of_ref": "indicator--c46ec08d-2fd5-46f3-a7d9-6166a96b253a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0921e515-e576-46fe-9817-bb6ca9b3f897", "sighting_of_ref": "indicator--56d54368-a587-48bd-a305-bf1107a5ff05", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4b2cad7-4534-4fdc-b53c-ff6da0b8fa01", "sighting_of_ref": "indicator--d3feb459-9522-4b4b-8487-dacac27bd9d2", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e8b682a-0ca6-4728-b931-78c4c46eed1d", "sighting_of_ref": "indicator--0708fc2a-5abc-421a-bc90-e643605f9b52", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7743adaf-0d4c-4b6a-8b97-013f5108291c", "sighting_of_ref": "indicator--8f991615-a84c-4dfb-9da7-ddf5277ac8fd", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d028bec-59b0-487e-9997-3adfe8a122f5", "sighting_of_ref": "indicator--8f991615-a84c-4dfb-9da7-ddf5277ac8fd", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20952466-227a-4c7e-9d26-cb0f57fea68a", "sighting_of_ref": "indicator--8f991615-a84c-4dfb-9da7-ddf5277ac8fd", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f179e3d6-9f35-4f1c-b316-8c9741daa966", "sighting_of_ref": "indicator--5194bcd6-cda5-4c31-8218-9cc1dcc6ec03", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcdea463-70c5-443f-859d-09eb4a89187d", "sighting_of_ref": "indicator--5194bcd6-cda5-4c31-8218-9cc1dcc6ec03", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b00c22e-3148-41cd-b55f-80f9355ae949", "sighting_of_ref": "indicator--94994769-3dfd-462a-8b14-b5e2f59ae04b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8a10517-a16d-4be9-8afd-76c271e677da", "sighting_of_ref": "indicator--160b7beb-ed0a-4dc0-9878-95bac3080e38", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a547c0f0-b55b-4172-bdbf-d2fb689ed77d", "sighting_of_ref": "indicator--160b7beb-ed0a-4dc0-9878-95bac3080e38", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdbe6274-3e8a-4e66-8232-222da46b68f8", "sighting_of_ref": "indicator--160b7beb-ed0a-4dc0-9878-95bac3080e38", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae6dc660-f2c5-499f-9060-d71ce22298bb", "sighting_of_ref": "indicator--4dc7f10e-ddb1-436b-bef9-828a833da2d7", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c792f69e-966d-4c95-b87a-d1a5c674ba0f", "sighting_of_ref": "indicator--4dc7f10e-ddb1-436b-bef9-828a833da2d7", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dae6a8c-8e67-49d1-94d2-15e6bd1d8ec5", "sighting_of_ref": "indicator--ab2257ff-03cf-47d9-9d71-05ff545dbc2d", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b213c259-b1ac-4fed-bd7d-f6c967240b35", "sighting_of_ref": "indicator--ab2257ff-03cf-47d9-9d71-05ff545dbc2d", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--990769de-219d-400a-9784-4d22d935a21f", "sighting_of_ref": "indicator--ab2257ff-03cf-47d9-9d71-05ff545dbc2d", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb412206-1947-4395-8b57-27e0353e9fad", "sighting_of_ref": "indicator--e2194172-21d7-429d-a6d5-fd051eed0cb8", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9571f7a6-1c74-46c0-9a57-3ecc2da56c56", "sighting_of_ref": "indicator--e2194172-21d7-429d-a6d5-fd051eed0cb8", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55832580-3181-43a9-8a91-f9453b8caed8", "sighting_of_ref": "indicator--e2194172-21d7-429d-a6d5-fd051eed0cb8", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b17693e-b7f3-4084-943f-80bef212c9c9", "sighting_of_ref": "indicator--2fba6422-2225-4630-aa8b-f54d84f4f4ef", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f86cdd7d-aae0-4b95-a9a8-83901b19a9bd", "sighting_of_ref": "indicator--2fba6422-2225-4630-aa8b-f54d84f4f4ef", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73e08321-b84e-4599-a7c9-6e7c18b23309", "sighting_of_ref": "indicator--2fba6422-2225-4630-aa8b-f54d84f4f4ef", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--431cb409-8a2a-4bcf-9a25-719247a5a1a3", "sighting_of_ref": "indicator--6dd0a9a5-41c6-45c1-85db-5336f2af41ab", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16fe8e93-a44a-4222-b6f2-4d91f050414c", "sighting_of_ref": "indicator--6dd0a9a5-41c6-45c1-85db-5336f2af41ab", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eea9dd93-4fe0-4846-a100-ed23592fbf4b", "sighting_of_ref": "indicator--6dd0a9a5-41c6-45c1-85db-5336f2af41ab", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--136b462c-e7e5-43e2-b611-d90327c4e099", "sighting_of_ref": "indicator--e906295d-9f41-4149-b4ba-2a81080ab0b2", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ff721b6-d0a5-4580-84ab-59119d80e646", "sighting_of_ref": "indicator--e906295d-9f41-4149-b4ba-2a81080ab0b2", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0308c4b9-1777-4087-9035-8176e7f83387", "sighting_of_ref": "indicator--e906295d-9f41-4149-b4ba-2a81080ab0b2", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdda0425-9646-4b2f-ba67-ed254ad92775", "sighting_of_ref": "indicator--7ce16125-5cc5-4d6f-9836-858c059ccc56", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c0e498b-ac68-4004-9362-38458c51894a", "sighting_of_ref": "indicator--7ce16125-5cc5-4d6f-9836-858c059ccc56", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48284350-3868-41c4-adc6-93f8da6925b8", "sighting_of_ref": "indicator--7ce16125-5cc5-4d6f-9836-858c059ccc56", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63b60a97-2e6b-4399-9aff-e6438bab4d5a", "sighting_of_ref": "indicator--3875c318-ba54-4530-a467-ce6923d8847a", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11c303c4-dd8c-4778-a35d-6a2a819bf9b7", "sighting_of_ref": "indicator--3875c318-ba54-4530-a467-ce6923d8847a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b37fd64-ebdc-4b14-a6a5-21d6597b935c", "sighting_of_ref": "indicator--3875c318-ba54-4530-a467-ce6923d8847a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e30785cf-b4ad-4ff4-8d20-e1b20df001da", "sighting_of_ref": "indicator--29330b4f-cdbc-4402-ba2b-ccebc08d8e68", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cddea66-e271-4363-9af9-2bd6c55ee84c", "sighting_of_ref": "indicator--29330b4f-cdbc-4402-ba2b-ccebc08d8e68", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d52d231b-2908-4a72-9bea-82a20ccc79a6", "sighting_of_ref": "indicator--29330b4f-cdbc-4402-ba2b-ccebc08d8e68", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2cad499-81bf-4148-8246-fa18a905ced2", "sighting_of_ref": "indicator--8237911e-ba44-458e-9755-522b63c87e3a", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e69f29a-ba71-4eaf-9f02-e0f5529bf474", "sighting_of_ref": "indicator--8237911e-ba44-458e-9755-522b63c87e3a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be6dafe6-b628-4cda-b72d-104a0c8800cd", "sighting_of_ref": "indicator--8fd325af-ed6c-4b30-8c50-af390e135d23", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b34cd6c-0420-45fc-a110-f4fa44088a71", "sighting_of_ref": "indicator--8fd325af-ed6c-4b30-8c50-af390e135d23", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--297fbcf7-0e8b-4bfe-b526-708f027064b4", "sighting_of_ref": "indicator--8fd325af-ed6c-4b30-8c50-af390e135d23", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6d72a8c-36ce-4830-9b70-6dd975c866b9", "sighting_of_ref": "indicator--dd3d6fe4-2baa-43c7-8519-3f785ba6a7a5", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5c4d182-2ea2-44de-a7bf-1cb3625196c9", "sighting_of_ref": "indicator--dd3d6fe4-2baa-43c7-8519-3f785ba6a7a5", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76166ea9-82ac-4f01-a3f2-df814e9ad722", "sighting_of_ref": "indicator--3ae783f9-2578-40d8-9b25-babfad3797e7", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96e9cef3-2163-40d8-8502-34239733d8fd", "sighting_of_ref": "indicator--3ae783f9-2578-40d8-9b25-babfad3797e7", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3031f7ea-4149-4887-9cd7-61186efaca2f", "sighting_of_ref": "indicator--d11d4bfc-17c3-44c6-809e-8e4e4fef1c1b", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f40c0913-f65c-46d1-a671-f6938651f9f4", "sighting_of_ref": "indicator--d11d4bfc-17c3-44c6-809e-8e4e4fef1c1b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25466e26-e1eb-44e1-9d80-8721e94f4f07", "sighting_of_ref": "indicator--d11d4bfc-17c3-44c6-809e-8e4e4fef1c1b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26775428-15ef-44e5-b84d-959cd1325237", "sighting_of_ref": "indicator--b454ee88-2fad-4e49-8179-5a644b053171", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d042bf59-6c11-4958-8bba-fe9b715604db", "sighting_of_ref": "indicator--b454ee88-2fad-4e49-8179-5a644b053171", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1dbff24-7990-470e-8a1c-e2aa96833939", "sighting_of_ref": "indicator--b454ee88-2fad-4e49-8179-5a644b053171", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e533e6dd-258f-4e14-a49d-5c1eb8062c27", "sighting_of_ref": "indicator--02ac1b1a-4c64-4064-9b67-8dc50f555960", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8eb21fba-c166-4b39-b987-eb2eed4598bd", "sighting_of_ref": "indicator--4cee7646-d8a9-474d-b284-2b0dfde223e5", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79f46709-1e6f-434f-8326-94c17ca6b7ac", "sighting_of_ref": "indicator--4cee7646-d8a9-474d-b284-2b0dfde223e5", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99dec25a-3105-4c83-8ce6-ab1cd543420f", "sighting_of_ref": "indicator--1b5eb39e-fb1c-4676-b099-192e62caac6d", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--879aed27-c538-466b-bc41-1c0d5acca7eb", "sighting_of_ref": "indicator--1d445c6f-05e4-425d-83ab-50f78967ffcc", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--005b025b-e3ec-4417-b396-a17420111689", "sighting_of_ref": "indicator--9d24c9c6-914b-4d0b-9b7e-0f86a93a31e0", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--797dc121-cdb5-4090-a2d6-f024804b4c4d", "sighting_of_ref": "indicator--9d24c9c6-914b-4d0b-9b7e-0f86a93a31e0", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba510cda-add6-43cb-b5d3-6daff2cc91b9", "sighting_of_ref": "indicator--9d24c9c6-914b-4d0b-9b7e-0f86a93a31e0", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93f342c1-aba4-4096-8c07-2c97d98a5c8e", "sighting_of_ref": "indicator--0d19fc60-fc20-4ec8-82c8-8434f463a2e2", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc10a7fd-e33a-412e-beaf-0328d5aebdbb", "sighting_of_ref": "indicator--0d19fc60-fc20-4ec8-82c8-8434f463a2e2", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e39aad4-0697-4b7f-bff4-332f61f0d087", "sighting_of_ref": "indicator--0d19fc60-fc20-4ec8-82c8-8434f463a2e2", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59ff80f3-fdba-44d8-8585-e962f51eaf06", "sighting_of_ref": "indicator--00793001-bae8-4f41-a175-b60a66a6f5fa", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed25f361-e97a-47fa-82d1-7eafae48f6c8", "sighting_of_ref": "indicator--00793001-bae8-4f41-a175-b60a66a6f5fa", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a99c700-709b-45e1-aa46-4bf509b8accf", "sighting_of_ref": "indicator--00793001-bae8-4f41-a175-b60a66a6f5fa", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75810c6c-5ffb-4c3e-81d1-f0bbf30cc3cb", "sighting_of_ref": "indicator--7d35e914-e723-4d42-a3fa-03744b9a3cfb", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70e3e288-0401-455b-a474-f64dc2f11fbd", "sighting_of_ref": "indicator--5a9369ac-12f6-4525-b2db-4fafc0f1c604", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2edfc7ef-337e-40d5-ab69-cf8ea5f08505", "sighting_of_ref": "indicator--5a9369ac-12f6-4525-b2db-4fafc0f1c604", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c435da2-001f-4d48-bb06-c72450b0833e", "sighting_of_ref": "indicator--17fdbfa1-e7f9-448b-9775-ac347d9501a8", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24e5f46a-cdd9-4386-8a1f-dade5770ff90", "sighting_of_ref": "indicator--2d21e3b5-d335-412c-a67c-6e2d79809aef", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6e37294-fd40-4fa7-bdcf-4c84c15502a6", "sighting_of_ref": "indicator--2d21e3b5-d335-412c-a67c-6e2d79809aef", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27b9734d-2746-4574-a969-5bab435a12b7", "sighting_of_ref": "indicator--2d21e3b5-d335-412c-a67c-6e2d79809aef", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b4dc398-607c-4bf7-8634-52b12af2507b", "sighting_of_ref": "indicator--0aaf1966-5402-4f0e-8dd3-fc83507ceffb", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--917aa606-1677-446f-9478-ddb0f8bfd9b0", "sighting_of_ref": "indicator--0aaf1966-5402-4f0e-8dd3-fc83507ceffb", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83769ef8-0c21-4f3f-bb28-38b90b18d484", "sighting_of_ref": "indicator--c985f66e-b06f-49a8-bc81-9bfbdf039cee", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d325868-3a0c-4bac-bfd8-64641fadc564", "sighting_of_ref": "indicator--c985f66e-b06f-49a8-bc81-9bfbdf039cee", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0aa33293-6796-451d-8c31-738672eb7cd8", "sighting_of_ref": "indicator--c7651292-9143-4dd9-9031-e18f3f4df8ca", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b832575-1db6-4c01-8f32-5806fa0bb498", "sighting_of_ref": "indicator--c7651292-9143-4dd9-9031-e18f3f4df8ca", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41878be7-953b-4412-9fb7-f13460fcef14", "sighting_of_ref": "indicator--04d2c00f-1011-4247-9b9d-042a7ee06a03", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0247d61-6406-4c6a-8ce9-46077e4be509", "sighting_of_ref": "indicator--04d2c00f-1011-4247-9b9d-042a7ee06a03", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0db8a4d1-211a-42b7-88ff-a845cca259a0", "sighting_of_ref": "indicator--04d2c00f-1011-4247-9b9d-042a7ee06a03", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c737baab-0be2-4fd6-8b79-28f6ff61c95e", "sighting_of_ref": "indicator--23f848c2-0902-44dd-a735-16d14b691f4b", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--866f1937-b487-4db9-b14d-a783e929a519", "sighting_of_ref": "indicator--23f848c2-0902-44dd-a735-16d14b691f4b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f4b4970-be25-45be-9aea-ca4eb13ebea9", "sighting_of_ref": "indicator--b1b01449-c81c-4a32-8ca7-84b147e45619", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c17d4b56-d5f8-4ed9-a2e7-9ae3aa6c2993", "sighting_of_ref": "indicator--b1b01449-c81c-4a32-8ca7-84b147e45619", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a2e4293-84d9-448c-a558-519c006b6ee9", "sighting_of_ref": "indicator--b1b01449-c81c-4a32-8ca7-84b147e45619", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11d6a49c-3e96-4f11-a97d-94b279255678", "sighting_of_ref": "indicator--4bc56add-36a8-47bd-8e2f-867bf4b4f311", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dea6f437-5472-4fcd-8ee2-55e7a4efe3fd", "sighting_of_ref": "indicator--4bc56add-36a8-47bd-8e2f-867bf4b4f311", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e13c1f65-eee6-42af-8ef5-989f5eef963a", "sighting_of_ref": "indicator--70266657-b9cc-4947-9422-975b2a65e42d", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24392dcb-3beb-4926-b146-53538c48ecfd", "sighting_of_ref": "indicator--70266657-b9cc-4947-9422-975b2a65e42d", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd0ab81b-e728-4c89-b10f-d12633199992", "sighting_of_ref": "indicator--70266657-b9cc-4947-9422-975b2a65e42d", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15cf2c7c-ac76-44ab-8603-c457adb89c07", "sighting_of_ref": "indicator--fc9ba315-916f-4f85-a8cb-b784892a4eb3", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--878926f9-f988-4de6-a573-bcadb6408421", "sighting_of_ref": "indicator--fc9ba315-916f-4f85-a8cb-b784892a4eb3", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9c8a540-0ff5-42b6-85ab-89c8cbe3164a", "sighting_of_ref": "indicator--24c5f1fb-5039-4590-8449-35077637efe4", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4987993c-53b1-4a34-91ff-f344549b4420", "sighting_of_ref": "indicator--24c5f1fb-5039-4590-8449-35077637efe4", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b07cbd7-4652-405d-b753-94348d431e2c", "sighting_of_ref": "indicator--01d9a5f3-2282-4081-874f-d973acccc876", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43d5d11e-2fcc-4b71-bee7-6c58b894a07d", "sighting_of_ref": "indicator--01d9a5f3-2282-4081-874f-d973acccc876", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7e6f664-2bf8-4e7e-8d24-4bce0bd5de98", "sighting_of_ref": "indicator--3fe9bc70-78fa-4d29-8d87-59633d49d097", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bbb1a5a-750c-4ee4-a8d9-06dd3e21b384", "sighting_of_ref": "indicator--3fe9bc70-78fa-4d29-8d87-59633d49d097", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdfed2cc-2ffe-4a7d-850e-299088186d39", "sighting_of_ref": "indicator--3fe9bc70-78fa-4d29-8d87-59633d49d097", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5e9a108-0892-43c4-a040-1773fea33efb", "sighting_of_ref": "indicator--9b3e11f8-ea5a-446b-bc5b-af2e480efe79", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d1c96c2-4802-4f78-8403-3b6091f5e48a", "sighting_of_ref": "indicator--9b3e11f8-ea5a-446b-bc5b-af2e480efe79", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1bd189f-1231-4d03-807a-c89b37c1cc8c", "sighting_of_ref": "indicator--9b3e11f8-ea5a-446b-bc5b-af2e480efe79", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31cc4ac5-6a5e-49bc-a88a-5f19c28e9f23", "sighting_of_ref": "indicator--dd538cd8-6634-4a88-bcd2-eedc7c04e4bb", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33479c63-29fe-409c-a0bb-b72a83067f9f", "sighting_of_ref": "indicator--dd538cd8-6634-4a88-bcd2-eedc7c04e4bb", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3eaa7a80-0ccf-456a-9be3-14a13e96557a", "sighting_of_ref": "indicator--dd538cd8-6634-4a88-bcd2-eedc7c04e4bb", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4e82093-292f-4c95-a4c9-30c5ed9ebb91", "sighting_of_ref": "indicator--a2b42f51-9926-4fa5-bd7a-7c177c823ee7", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea6aecac-49f9-4d6f-973e-9765a96a019c", "sighting_of_ref": "indicator--a2b42f51-9926-4fa5-bd7a-7c177c823ee7", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b82debe0-14ca-451b-b092-a643cf83e4ab", "sighting_of_ref": "indicator--a2b42f51-9926-4fa5-bd7a-7c177c823ee7", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--352074e2-3d03-456c-9a76-2aa3718ab9df", "sighting_of_ref": "indicator--739f0897-2f74-4f2f-b421-5975c0ae8281", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0662a213-c767-4e93-be21-137bd5dd3c91", "sighting_of_ref": "indicator--739f0897-2f74-4f2f-b421-5975c0ae8281", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe4f0edf-7c11-4308-a5cc-91d271aa2162", "sighting_of_ref": "indicator--739f0897-2f74-4f2f-b421-5975c0ae8281", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e532abb-64d2-4831-a865-146792ba2f21", "sighting_of_ref": "indicator--1341fe33-346c-4260-a911-4962d6ce61c7", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1903d9ce-ff7b-4516-904a-2ceeee9a3152", "sighting_of_ref": "indicator--1341fe33-346c-4260-a911-4962d6ce61c7", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22d028ae-0234-4335-90b2-a76ce315f328", "sighting_of_ref": "indicator--1341fe33-346c-4260-a911-4962d6ce61c7", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a621a60-e4ef-4e7b-84a2-c41ce4a90531", "sighting_of_ref": "indicator--f66a2e9b-4112-4a4a-ac79-5e701f793590", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4006659c-dbd7-4acc-8c34-6f57c2d8d6d1", "sighting_of_ref": "indicator--f66a2e9b-4112-4a4a-ac79-5e701f793590", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b0295d4-9c93-41d8-9328-77aa764acd52", "sighting_of_ref": "indicator--f66a2e9b-4112-4a4a-ac79-5e701f793590", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7fe77b4-b270-4e04-9aeb-c9e5fb393e31", "sighting_of_ref": "indicator--868bca97-ac6c-44ec-9bd6-375dc5c75c26", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a46b5fb-24cc-4fe2-bc7a-d8817767bf04", "sighting_of_ref": "indicator--868bca97-ac6c-44ec-9bd6-375dc5c75c26", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22b43b61-7f31-4f12-b422-5e613fd8f3c1", "sighting_of_ref": "indicator--868bca97-ac6c-44ec-9bd6-375dc5c75c26", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbe53cc3-7c5c-4cc5-8b00-9f47cd001799", "sighting_of_ref": "indicator--9f1cbbeb-ca67-470f-b48e-da4d8c44f46f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fd14ddb-9044-4042-ac77-e59a7b1fdd36", "sighting_of_ref": "indicator--9f1cbbeb-ca67-470f-b48e-da4d8c44f46f", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b11c536a-04c2-496f-b92e-c8f5dddb08fa", "sighting_of_ref": "indicator--2b16b15f-a108-4b52-8ffd-067fb8040714", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96a63975-f0a5-4651-867e-4549dbd96777", "sighting_of_ref": "indicator--f84dc43f-28f0-4b00-9a73-9b4f4fbb1415", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af6ad5dd-b8fb-418b-9224-15d476bd1bd4", "sighting_of_ref": "indicator--f84dc43f-28f0-4b00-9a73-9b4f4fbb1415", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c85ab860-da05-45e5-8c0e-efe103e87fa3", "sighting_of_ref": "indicator--f84dc43f-28f0-4b00-9a73-9b4f4fbb1415", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74b294c3-3ee2-40d7-9bf8-f7e3e73d57f8", "sighting_of_ref": "indicator--ba5de685-8506-41be-8345-9136b2ed0b6b", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a3e5d6f-9b1a-4a52-a84d-7859d9325f7a", "sighting_of_ref": "indicator--ba5de685-8506-41be-8345-9136b2ed0b6b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d1fca74-1420-4082-b265-b987c013fa0d", "sighting_of_ref": "indicator--ba5de685-8506-41be-8345-9136b2ed0b6b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da51ed3e-ce10-4c76-93c7-8c6708c1622b", "sighting_of_ref": "indicator--557a44d8-9dea-4874-a642-58b7dbc26e8f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18af244b-5dd0-4847-9da9-a96614ed1061", "sighting_of_ref": "indicator--557a44d8-9dea-4874-a642-58b7dbc26e8f", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b344bb77-34f7-458a-9de0-7309ebe5b7e4", "sighting_of_ref": "indicator--989c5045-4c9c-4a1b-8d81-9716f9380970", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2288623-9530-4c2f-97de-7705518270a2", "sighting_of_ref": "indicator--989c5045-4c9c-4a1b-8d81-9716f9380970", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--003912bd-de0c-49bc-bfa9-cb8065cdeed2", "sighting_of_ref": "indicator--989c5045-4c9c-4a1b-8d81-9716f9380970", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f96d817-63a0-45df-b2fa-b74bd499a937", "sighting_of_ref": "indicator--10b87679-801a-4918-a651-d643950ef9c2", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3b194e6-8aad-42f7-ad9a-e9d208b09ff9", "sighting_of_ref": "indicator--10b87679-801a-4918-a651-d643950ef9c2", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--558bda6f-c1c0-45bd-ab51-521cf29f65fc", "sighting_of_ref": "indicator--10b87679-801a-4918-a651-d643950ef9c2", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b94f4268-6a92-4bde-b0bc-7f6f116323e8", "sighting_of_ref": "indicator--ce72e03f-371a-4045-a599-4504e29fe6ea", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbb8c2d1-e3a4-4e7a-b3a4-e772901337ca", "sighting_of_ref": "indicator--ce72e03f-371a-4045-a599-4504e29fe6ea", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d27b40fe-de39-4ce3-b368-4f2a7f402901", "sighting_of_ref": "indicator--ce72e03f-371a-4045-a599-4504e29fe6ea", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--520ac124-5d50-4a21-998d-ec3ff770837a", "sighting_of_ref": "indicator--10ebebd1-b3ef-460d-b4c2-4a236b642e9e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51481c66-796e-455f-8496-d08e38a59410", "sighting_of_ref": "indicator--829bacda-8be3-4156-9e56-75e96ba0feec", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8742d450-2b40-4173-adfa-cf476a499acc", "sighting_of_ref": "indicator--a39b442d-6f2d-4d46-b283-8982711f3163", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dc4aae1-f98a-4c4a-8800-76bb05a2981a", "sighting_of_ref": "indicator--be9c6922-1802-498c-9764-cb0dd39c05c4", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67be4c3e-d8bf-4960-b6bc-94cfbed8c75e", "sighting_of_ref": "indicator--559b9598-d11a-456c-9877-856122df9afe", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6332b05-4993-4278-8dcd-48ddc9ad7c9f", "sighting_of_ref": "indicator--559b9598-d11a-456c-9877-856122df9afe", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04c43a54-1525-41e3-b401-fe0e5c65a314", "sighting_of_ref": "indicator--6b799664-1cac-4e6e-b4bb-a6d52191b9fe", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cad2e5b5-c194-45c4-8539-de9fedd5c1cc", "sighting_of_ref": "indicator--d658613a-5180-4223-9de4-cb03b255c300", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ec561c6-228a-4536-8649-5cdb70c4da18", "sighting_of_ref": "indicator--f5361ea7-f160-4a44-b761-710acf88ccfd", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fefe4f73-f03e-4f93-af23-fc5f68e8364a", "sighting_of_ref": "indicator--281e847a-af9f-41bd-88cd-dcf03e708104", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13555a9a-cc8b-4f04-9c1e-afea52a80e2b", "sighting_of_ref": "indicator--00fc817f-910e-4e0a-8141-7729f52342bd", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--877dd85c-14f4-4bb7-99bb-6d081a892765", "sighting_of_ref": "indicator--8517b307-b00f-4427-b5cb-ebf5aa1d13a4", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--063ffb35-fcbb-4c04-a975-f9f7a685f9fe", "sighting_of_ref": "indicator--2d9832f5-3caf-4410-90ad-682a30336f06", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--676d672b-47d2-43ab-9357-2925820d7364", "sighting_of_ref": "indicator--82281f81-6c8e-4893-9cef-eec159b5a702", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6560b962-16f3-44c2-ba8e-329d17765405", "sighting_of_ref": "indicator--87248a02-2a17-45d4-882c-cd60e8d6b6a2", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c85c1b49-d143-46fb-8fde-473068c58024", "sighting_of_ref": "indicator--f9d07545-dbf2-4ac2-9934-2c4b69acdfb7", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6df1732-29fd-44d5-bdde-9e19d6f548c0", "sighting_of_ref": "indicator--f9d07545-dbf2-4ac2-9934-2c4b69acdfb7", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5d9034e-3226-4997-81cf-596e9a481a5b", "sighting_of_ref": "indicator--f9d07545-dbf2-4ac2-9934-2c4b69acdfb7", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23791f6b-2d6d-4f70-8450-780ad047812f", "sighting_of_ref": "indicator--e181906a-d83d-4265-91b8-53e3246f13f9", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adc83a8d-6257-462d-a4ef-cd9ee0a0c9f9", "sighting_of_ref": "indicator--877a6e09-a52f-4962-824e-8e940ad068c2", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46b0bada-932e-40f9-9c4f-f148b585db31", "sighting_of_ref": "indicator--877a6e09-a52f-4962-824e-8e940ad068c2", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--178cec97-cd47-49e7-a18f-454d0bd89a89", "sighting_of_ref": "indicator--4512129b-32a7-4d8b-948d-b8418a1351cf", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ebeefa1-3b1a-4af0-82c5-5a45fd30134a", "sighting_of_ref": "indicator--1407953b-bbe3-4572-b6d8-a9faacbe63aa", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--777ad2ea-64ed-43a1-a8a6-dd37e8f7f91f", "sighting_of_ref": "indicator--720c2544-58c7-49b0-8501-b8704445e442", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c0a2d39-7c08-40cc-af94-786af6e5623c", "sighting_of_ref": "indicator--0e327ada-3909-4c48-a25a-188c82153bc0", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd20fb11-e3fb-440a-b137-32978e2815bc", "sighting_of_ref": "indicator--cd920ffe-5512-4d83-8366-d568de88dca2", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e09cae25-9127-46c2-9921-b36e9351c824", "sighting_of_ref": "indicator--2dcafe68-2250-4acc-af94-ab7eea83ba41", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41595f2c-a0c2-42f5-acca-dd1ac3b53f99", "sighting_of_ref": "indicator--2dcafe68-2250-4acc-af94-ab7eea83ba41", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b29bea2-54ac-44bf-ba9f-6ad134e325d5", "sighting_of_ref": "indicator--9d6c663a-5883-49af-b13b-bbf4c7b086d7", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fe01776-13f0-46f8-a9f8-fa6d329266ba", "sighting_of_ref": "indicator--9d6c663a-5883-49af-b13b-bbf4c7b086d7", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77975972-07cd-40cc-9006-e3e36fb4db95", "sighting_of_ref": "indicator--9d6c663a-5883-49af-b13b-bbf4c7b086d7", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f40ec21a-a794-479d-a34e-a10baf31b152", "sighting_of_ref": "indicator--45eaf44a-8491-4f82-866a-6ffb0e6f54ab", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a880ad5-512f-44de-9161-91c52202e447", "sighting_of_ref": "indicator--45eaf44a-8491-4f82-866a-6ffb0e6f54ab", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--090891d8-1817-4024-8ee6-3a732727a3e8", "sighting_of_ref": "indicator--0bb90239-5398-4d4b-a5ca-3162f5c093b9", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b626b261-0c5e-4fcc-89ea-f0cbe3d8a365", "sighting_of_ref": "indicator--0bb90239-5398-4d4b-a5ca-3162f5c093b9", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5bbb3a6-053a-48a6-9957-ee5c83d59000", "sighting_of_ref": "indicator--4e6ef886-7bd1-4be2-8433-a0d4fead61fc", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2e74eba-688b-4f00-ba28-db8688138db9", "sighting_of_ref": "indicator--4e6ef886-7bd1-4be2-8433-a0d4fead61fc", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdf8f3da-c6c7-4b55-a605-b253e51e1ac0", "sighting_of_ref": "indicator--4e6ef886-7bd1-4be2-8433-a0d4fead61fc", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dea04efd-018f-4c16-aba5-64979cab7cef", "sighting_of_ref": "indicator--5ca4202d-5c13-47d3-97b4-b33679527adf", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9e477b8-7122-4f00-a7f0-abbeb916938d", "sighting_of_ref": "indicator--5ca4202d-5c13-47d3-97b4-b33679527adf", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--503fef58-21ce-4d3f-84c8-e9b0bc1c517b", "sighting_of_ref": "indicator--5ca4202d-5c13-47d3-97b4-b33679527adf", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbbc169d-bb33-4851-8f7d-fd0d44111f33", "sighting_of_ref": "indicator--a692c2e8-1c09-4517-b566-c812266fc289", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ebee29b-58f0-4dfb-8875-4739373cedd7", "sighting_of_ref": "indicator--a692c2e8-1c09-4517-b566-c812266fc289", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c15244f1-b903-4007-97f0-0b105a8c3480", "sighting_of_ref": "indicator--a692c2e8-1c09-4517-b566-c812266fc289", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5a4379a-b8b3-40d2-9b5f-edd0db56ce05", "sighting_of_ref": "indicator--7685d450-3a3d-4f43-8294-e08de07db46c", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec6c8cba-6cbe-43de-803a-fd246029f5d3", "sighting_of_ref": "indicator--7685d450-3a3d-4f43-8294-e08de07db46c", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--945e36f3-5979-4cb9-aa2c-47e39bd518c4", "sighting_of_ref": "indicator--7685d450-3a3d-4f43-8294-e08de07db46c", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--969f9452-65b6-4a34-a9ee-f33f8e71782f", "sighting_of_ref": "indicator--7d93dc76-5791-42b4-b3d7-7f314b32d74c", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6434e26a-528e-47ca-bbdf-2ca616b3d0ed", "sighting_of_ref": "indicator--7d93dc76-5791-42b4-b3d7-7f314b32d74c", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7147b4a9-38bb-4541-a056-6a81f41c27f1", "sighting_of_ref": "indicator--84ca5a7a-884a-421c-861a-cc57154ffcad", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f13dd55-979f-4f9e-80b9-1dd2aceb693b", "sighting_of_ref": "indicator--84ca5a7a-884a-421c-861a-cc57154ffcad", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--475e8eb7-67b9-4087-abf8-fadafbe0fac7", "sighting_of_ref": "indicator--84ca5a7a-884a-421c-861a-cc57154ffcad", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f40fb1a-5bbb-4b42-b9f9-6092abc9b5a6", "sighting_of_ref": "indicator--6cae62dd-d018-42bb-b1e2-b2d732277a5c", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2e6aaac-5687-4de5-a216-866f0b4a9d27", "sighting_of_ref": "indicator--6cae62dd-d018-42bb-b1e2-b2d732277a5c", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53ce8ec6-1316-47da-b8e6-b0c9bb372d86", "sighting_of_ref": "indicator--129db2bd-d256-41ca-bdda-479390042d14", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97d0743a-e912-43f3-9635-289795596315", "sighting_of_ref": "indicator--129db2bd-d256-41ca-bdda-479390042d14", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a12356db-2508-409b-a6c4-19e459d05e79", "sighting_of_ref": "indicator--0ee96cac-1bad-4d4e-b34b-771f1d9da54c", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b407230-59c2-4560-8dcd-0e8fa8d38948", "sighting_of_ref": "indicator--0ee96cac-1bad-4d4e-b34b-771f1d9da54c", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7389c77b-cfed-4afb-b296-b70ea4f3efb7", "sighting_of_ref": "indicator--0ee96cac-1bad-4d4e-b34b-771f1d9da54c", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--848c738b-c4b0-49a7-9704-253ef26ff263", "sighting_of_ref": "indicator--482f54d3-aa3d-4a18-bc3b-6f31465b39df", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--141c82a5-62e2-44a2-9b0d-9f918c9a78ac", "sighting_of_ref": "indicator--482f54d3-aa3d-4a18-bc3b-6f31465b39df", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53f3c1f5-4b3f-41bb-aacb-3480e19be5d3", "sighting_of_ref": "indicator--482f54d3-aa3d-4a18-bc3b-6f31465b39df", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c3d5fac-14d5-4bb3-a2c7-4ec8e4096db3", "sighting_of_ref": "indicator--07cc9b00-71f6-4f69-98e9-6f0ec50fd1e1", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa8743f8-dbe7-4921-92ed-9dbf555e47b7", "sighting_of_ref": "indicator--68f97491-9fd6-4524-b965-4cc01c146667", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61218cb1-d2a7-4bf0-a6e5-372db0d23228", "sighting_of_ref": "indicator--68f97491-9fd6-4524-b965-4cc01c146667", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3069df4-d105-4005-8d8b-fcb45fd92343", "sighting_of_ref": "indicator--68f97491-9fd6-4524-b965-4cc01c146667", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ecf3940-3e90-4340-935c-d5460794bb36", "sighting_of_ref": "indicator--f3070727-f4f9-49e2-b3a0-8e0998d48504", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e855a123-dd94-4a66-88d2-99e40ad43ceb", "sighting_of_ref": "indicator--f3070727-f4f9-49e2-b3a0-8e0998d48504", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8f98a39-02fd-4d11-bb8b-9c425783e1ef", "sighting_of_ref": "indicator--f3070727-f4f9-49e2-b3a0-8e0998d48504", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e670fe9-637a-45f7-a94f-406606aee0a9", "sighting_of_ref": "indicator--29a582af-5ac5-40f2-865a-e82dc1e3ab18", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a91e401c-59f7-47a0-a3c0-85d1793ff157", "sighting_of_ref": "indicator--29a582af-5ac5-40f2-865a-e82dc1e3ab18", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29e5d09d-271f-47e7-9fae-388ce75ef347", "sighting_of_ref": "indicator--40b043f8-9aa1-44e3-8036-6cfbb79ecb84", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b239551-7927-423d-9208-db4c664edc99", "sighting_of_ref": "indicator--40b043f8-9aa1-44e3-8036-6cfbb79ecb84", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b07b378-37e0-4ace-8b8f-c7090374b44c", "sighting_of_ref": "indicator--40b043f8-9aa1-44e3-8036-6cfbb79ecb84", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67263ca3-e9be-40f8-abc3-67b676b56ec7", "sighting_of_ref": "indicator--7045bc92-09fb-4e2f-9166-df677b6e1637", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b14370c6-bf95-49cf-aa4e-738ac561c579", "sighting_of_ref": "indicator--7045bc92-09fb-4e2f-9166-df677b6e1637", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22e31d9a-22a1-4c91-8f29-432b1caafaa6", "sighting_of_ref": "indicator--fc75ea81-227c-420f-8b18-72238aefad6f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c23ef2af-75ea-4d5c-b535-962e7c0cc874", "sighting_of_ref": "indicator--fc75ea81-227c-420f-8b18-72238aefad6f", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b748dc4-04d9-4d58-a6eb-8f186b545877", "sighting_of_ref": "indicator--fc75ea81-227c-420f-8b18-72238aefad6f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c42e0489-0071-452e-86e4-7160aecf3c36", "sighting_of_ref": "indicator--c7943447-5928-463e-8de4-d10561894d02", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05e0dacb-ef2f-465d-80bb-9ef6580aa045", "sighting_of_ref": "indicator--c7943447-5928-463e-8de4-d10561894d02", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--194a262f-2f84-4524-b8fe-d7a8a068e8d1", "sighting_of_ref": "indicator--c7943447-5928-463e-8de4-d10561894d02", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80cc45b0-41fe-49c6-98c3-e0678ae77338", "sighting_of_ref": "indicator--05df555c-c284-4230-bd21-b10f781e6cad", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--258508ed-eca9-480c-aaee-147de155db6e", "sighting_of_ref": "indicator--db24925f-ff10-49e4-b1e0-94116e1b55b8", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ae24c5d-c74e-4cf6-bacc-3d4cdf4d6390", "sighting_of_ref": "indicator--faf50eeb-ebe2-4dba-a381-68c8cdbf1dc7", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e79bf15b-dc30-42bd-8cc0-a914445e51eb", "sighting_of_ref": "indicator--faf50eeb-ebe2-4dba-a381-68c8cdbf1dc7", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d15e980e-ce66-4d60-818d-8ee767bc3e05", "sighting_of_ref": "indicator--314142f6-1e68-477e-ae50-3316536856a0", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5b5c0f9-bc7b-4d1d-aabe-11963c00406c", "sighting_of_ref": "indicator--314142f6-1e68-477e-ae50-3316536856a0", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--599d55b2-6c79-4001-a420-a38be655d345", "sighting_of_ref": "indicator--314142f6-1e68-477e-ae50-3316536856a0", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24f4f827-0d45-465c-8195-60a510eef133", "sighting_of_ref": "indicator--e1633153-81f9-48ab-9b37-2d9f7fc6db89", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b626081-8785-4b48-b38c-9ef015d442f1", "sighting_of_ref": "indicator--e1633153-81f9-48ab-9b37-2d9f7fc6db89", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e45df234-0318-45b4-9522-66e662b8de29", "sighting_of_ref": "indicator--e8bdb269-46f5-40d4-b786-4e97b90fd974", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbbfcc79-9756-4997-8ca8-04676c9f3862", "sighting_of_ref": "indicator--e8bdb269-46f5-40d4-b786-4e97b90fd974", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e313a2b1-dc21-4ce0-87f7-a1afe0daf716", "sighting_of_ref": "indicator--ea2905b2-cfd0-4b0e-a808-5d491a4d2306", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6985c96a-61ab-4e3f-94d7-caa47c58cd69", "sighting_of_ref": "indicator--844ea54a-5485-4ca7-bd95-0e5a3e5b9295", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fe364e3-b2b6-46f7-ac41-841748c1d468", "sighting_of_ref": "indicator--f0ea5de0-8228-4739-8395-f3c3ad0c9a46", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8eed438-d037-432d-9d7b-9bfc6aa0b1f1", "sighting_of_ref": "indicator--f0ea5de0-8228-4739-8395-f3c3ad0c9a46", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--831fbf37-3929-44cd-b191-480171572993", "sighting_of_ref": "indicator--8ccbcb72-4f80-43d1-afe6-c5d2f4302bf9", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b39784e-412b-4c82-9001-5677f2136f8d", "sighting_of_ref": "indicator--8ccbcb72-4f80-43d1-afe6-c5d2f4302bf9", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--693918e9-9b12-4b9f-ad5c-aca0586c64f2", "sighting_of_ref": "indicator--8ccbcb72-4f80-43d1-afe6-c5d2f4302bf9", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc984e07-ad27-472a-9717-0441e5d428bc", "sighting_of_ref": "indicator--407a1efa-0115-46d8-9ca9-ef7bf7b1ad7c", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b16a6880-3eae-4dd9-8963-65005a367938", "sighting_of_ref": "indicator--407a1efa-0115-46d8-9ca9-ef7bf7b1ad7c", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7a901c4-4062-45ed-b8a9-de6ff8380663", "sighting_of_ref": "indicator--407a1efa-0115-46d8-9ca9-ef7bf7b1ad7c", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3ae0295-4d1a-409c-8681-d4986738d218", "sighting_of_ref": "indicator--0a19dc29-6fea-4118-adfd-d414fe3658b0", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef3ad674-7019-480a-968e-8697ae3d2cc5", "sighting_of_ref": "indicator--0a19dc29-6fea-4118-adfd-d414fe3658b0", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7e1215a-c035-44fd-93fa-a2a33fda1b64", "sighting_of_ref": "indicator--0a19dc29-6fea-4118-adfd-d414fe3658b0", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20f9a9ab-3eeb-4f5a-992e-ad43f6b4e929", "sighting_of_ref": "indicator--b8db5cdd-ae73-471c-a2ef-ac34a760ffad", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97d968cb-319c-484a-a09a-931b8b8545e0", "sighting_of_ref": "indicator--b8db5cdd-ae73-471c-a2ef-ac34a760ffad", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--655e7614-f42c-4053-8b86-3e4d8ba1bf49", "sighting_of_ref": "indicator--b8db5cdd-ae73-471c-a2ef-ac34a760ffad", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8b6d5ca-9907-4018-8f63-c48c37be479e", "sighting_of_ref": "indicator--a9443abf-317d-45da-8ecc-3b4bdc1850d3", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2e66cf1-d0f1-43cd-802f-c2fa2cc9c648", "sighting_of_ref": "indicator--a9443abf-317d-45da-8ecc-3b4bdc1850d3", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7506d7bc-6205-4ffb-9cfa-3f8c32197629", "sighting_of_ref": "indicator--f96abbe9-cb75-4bb0-b986-3674a1f2635a", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41f6a342-a6c8-41f7-9962-7083c7d738b5", "sighting_of_ref": "indicator--f96abbe9-cb75-4bb0-b986-3674a1f2635a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3219ea9c-58f8-419e-9c42-01671fca2079", "sighting_of_ref": "indicator--f96abbe9-cb75-4bb0-b986-3674a1f2635a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--017ee02c-298f-4286-ac33-048fa7b11763", "sighting_of_ref": "indicator--5963a127-33dc-4103-8480-f2f1d4f2c434", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e1a39a1-731b-47d4-8868-f301feb51b35", "sighting_of_ref": "indicator--5963a127-33dc-4103-8480-f2f1d4f2c434", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78fab224-250c-4261-87a9-f36cc70ce4dd", "sighting_of_ref": "indicator--5963a127-33dc-4103-8480-f2f1d4f2c434", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2fba60c-1856-4492-98dd-c1c28b48a4a2", "sighting_of_ref": "indicator--d291b736-8eaa-4d47-91b5-b033cfb70005", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6304fc39-0fd0-4f01-bdd5-6e2de5c39c26", "sighting_of_ref": "indicator--d291b736-8eaa-4d47-91b5-b033cfb70005", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abc9b245-a7dd-486c-878d-d447aff07710", "sighting_of_ref": "indicator--829e85ca-dbd8-41a7-8b89-176000f408b9", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--999db6f9-e4e8-426b-abba-5f5a56293ee9", "sighting_of_ref": "indicator--829e85ca-dbd8-41a7-8b89-176000f408b9", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--339d1b1e-d5a3-4ae0-afb3-398302df3a4d", "sighting_of_ref": "indicator--829e85ca-dbd8-41a7-8b89-176000f408b9", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--886ce6d6-f9bc-4b97-ad58-680aa62e8a26", "sighting_of_ref": "indicator--3a4d1484-bfe2-4e11-9a60-bdfec3469cb2", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31786acc-8be2-4a7a-a52a-bc2f46032c4e", "sighting_of_ref": "indicator--3a4d1484-bfe2-4e11-9a60-bdfec3469cb2", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d00f3b2-71be-4072-9005-9b5888b1250e", "sighting_of_ref": "indicator--3a4d1484-bfe2-4e11-9a60-bdfec3469cb2", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68efd82c-2a48-419b-88d1-3f69e15c8dae", "sighting_of_ref": "indicator--bcd2407d-acc6-478b-95e5-f193139a282e", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6761ce76-d20b-4a9b-ac73-0c07b1033a39", "sighting_of_ref": "indicator--bcd2407d-acc6-478b-95e5-f193139a282e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e41aee34-2eb9-4047-a9e7-7b5bdc75eb70", "sighting_of_ref": "indicator--bcd2407d-acc6-478b-95e5-f193139a282e", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d079dfd-5deb-4014-a1ad-706c8bd9fddf", "sighting_of_ref": "indicator--aeeb383f-2771-43c5-9509-a036540f15fb", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6205cced-8324-43f1-bc6e-e40da6f8bced", "sighting_of_ref": "indicator--aeeb383f-2771-43c5-9509-a036540f15fb", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cd7b67f-0e97-45a5-9ef7-f03cc2b7d68f", "sighting_of_ref": "indicator--f4a547ed-f5c3-40e5-8611-a2e253ce396b", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e89c63a2-a260-4091-a32c-db7e20eef663", "sighting_of_ref": "indicator--f4a547ed-f5c3-40e5-8611-a2e253ce396b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0ca0b5b-8b5c-4de4-a37d-d7594d495b84", "sighting_of_ref": "indicator--dd4a5501-f18e-4e3c-b650-cfb91b7ac384", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dce58b54-07ca-4053-94c8-b1e9304d49bc", "sighting_of_ref": "indicator--dd4a5501-f18e-4e3c-b650-cfb91b7ac384", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3c8f5de-62af-4a52-b84d-1d2c9717a93c", "sighting_of_ref": "indicator--dd4a5501-f18e-4e3c-b650-cfb91b7ac384", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88cd5fb1-c79d-423e-b156-9238246ee68d", "sighting_of_ref": "indicator--677e7435-5bbb-405a-89d4-cc4cd1dceb24", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48547724-6946-4dbf-bd45-84f844c708ff", "sighting_of_ref": "indicator--677e7435-5bbb-405a-89d4-cc4cd1dceb24", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67435cab-bfe2-4ff0-962f-416c5c51f866", "sighting_of_ref": "indicator--677e7435-5bbb-405a-89d4-cc4cd1dceb24", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a94ad258-0494-45b5-8a4c-d2db1dd0a3d6", "sighting_of_ref": "indicator--dad3e7ac-009b-4905-998d-9d9e2e1892be", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23ad9722-fe42-4ceb-9d53-c965a2c70985", "sighting_of_ref": "indicator--dad3e7ac-009b-4905-998d-9d9e2e1892be", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bbf10eb-6660-40a1-bf98-c4393cb0944f", "sighting_of_ref": "indicator--5c622dcf-cb93-4fcb-ad5d-52d5d0a53f76", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba0bacba-daf9-42ea-ad83-eeb4c5aedc02", "sighting_of_ref": "indicator--5c622dcf-cb93-4fcb-ad5d-52d5d0a53f76", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46d67972-4982-42c3-9577-fe4d37edb02c", "sighting_of_ref": "indicator--eef948f2-c2b7-437c-bc81-984d6b19f98f", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e407cfbc-a937-4356-b828-40cbd39e61f8", "sighting_of_ref": "indicator--da491701-bfa2-45ff-94d1-bb6b6f0f5b30", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f49c82f7-7665-4a01-9f5f-e8250525939a", "sighting_of_ref": "indicator--994b40cc-908b-4628-8ecc-e9c2c3ec1902", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ab63f1d-3bd7-42d1-a3e5-91dfb382db29", "sighting_of_ref": "indicator--be83c2a7-7005-455b-80d6-d3d4bcfa43c9", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d7cc512-96c2-4f8b-9647-a30adb6a1ad6", "sighting_of_ref": "indicator--6cc64338-87e4-494e-bd2f-989e67bbea40", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--529cc8c3-8bb2-4405-90a3-adddb66d733c", "sighting_of_ref": "indicator--6cc64338-87e4-494e-bd2f-989e67bbea40", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--902e4bdc-ad11-4409-a5e8-39195b6f9fba", "sighting_of_ref": "indicator--8335c4d5-77a5-445b-b270-4075fb2715da", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b53512f3-d24c-4f0d-9bd5-b30db5472a84", "sighting_of_ref": "indicator--c1b0cf96-741d-4130-bbe5-389ea491c7d3", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf034bfa-97d1-4104-9148-4e75f7a40c62", "sighting_of_ref": "indicator--905d47fc-51dc-4b55-88a7-1aee5329553c", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57c44573-7fc0-434b-aa97-17cdf89367b1", "sighting_of_ref": "indicator--1ad08fc6-5ddd-42bd-be8c-71a13d035680", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e71c2b0a-1197-4240-917d-18462c3ca9a5", "sighting_of_ref": "indicator--c1c39a99-6c9b-48bf-936c-ed85dc8ee314", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b495a089-7c55-426e-b7f7-eb17cbbdae16", "sighting_of_ref": "indicator--bbd40156-3dd6-4da6-93db-9f46861e2247", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac91322b-89e6-4c40-a136-4bfef531e815", "sighting_of_ref": "indicator--bbd40156-3dd6-4da6-93db-9f46861e2247", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6634db28-39de-4409-a4ea-67ffb2b82f92", "sighting_of_ref": "indicator--bbd7403f-7c83-446c-9e34-65f8d26cabad", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05a587c4-490b-4fa4-af69-1c446bbe08a0", "sighting_of_ref": "indicator--bbd7403f-7c83-446c-9e34-65f8d26cabad", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e57b753-b684-44fc-83a3-d43748c0af9e", "sighting_of_ref": "indicator--ffeef163-804f-4ce4-8313-b5ab7cbf6232", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8352cfd3-4e9e-4046-86e7-639a9ba63811", "sighting_of_ref": "indicator--ffeef163-804f-4ce4-8313-b5ab7cbf6232", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0571670-6127-40a7-a55d-85eb2ff5c02a", "sighting_of_ref": "indicator--3efa4e2a-4ab2-4429-89c8-2eb6014ad33d", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--733629a6-dda8-40bb-aa8a-03771c74e9e2", "sighting_of_ref": "indicator--3efa4e2a-4ab2-4429-89c8-2eb6014ad33d", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c548fda-3ecd-47d0-a08b-736678d22fb7", "sighting_of_ref": "indicator--aa0a672e-a74c-46cf-8da8-6403aa45ea9b", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02b8d4f7-d9f4-468a-8b5c-3a35f5940520", "sighting_of_ref": "indicator--aa0a672e-a74c-46cf-8da8-6403aa45ea9b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75e94d54-0b59-44a0-8b93-b2d69297030f", "sighting_of_ref": "indicator--54f9278b-15d7-488a-a919-782ca741d843", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b2b05ab-dfda-4c99-ab38-f0b45814094b", "sighting_of_ref": "indicator--54f9278b-15d7-488a-a919-782ca741d843", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf05632c-3000-4839-9d29-b4bd239b2b10", "sighting_of_ref": "indicator--54f9278b-15d7-488a-a919-782ca741d843", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50ae84af-e96e-43ab-8748-018b2412ba18", "sighting_of_ref": "indicator--02f63c03-3cde-47d8-af69-9a395ad3dc61", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--944d79ea-a9fc-428d-a573-619250ed61b1", "sighting_of_ref": "indicator--02f63c03-3cde-47d8-af69-9a395ad3dc61", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebbb2f29-e0c2-464b-8b37-bf89359106df", "sighting_of_ref": "indicator--e00db762-5c27-46bd-9cb0-123279636a01", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--683f34f9-9bcd-451c-a93c-944d30b0de08", "sighting_of_ref": "indicator--5e0bae51-c3c8-4014-84e8-45e2f0c07f23", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59f9b12c-30e6-4be9-b423-6c754bb25219", "sighting_of_ref": "indicator--5e0bae51-c3c8-4014-84e8-45e2f0c07f23", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08e29989-d4e1-4fcf-831c-568de0711a49", "sighting_of_ref": "indicator--0cac6b55-b7b2-4f1d-aa75-ac7d5c2840b8", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58584e70-a307-4c33-83a7-1a649fade14a", "sighting_of_ref": "indicator--0cac6b55-b7b2-4f1d-aa75-ac7d5c2840b8", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5df298f1-7b76-4663-9328-b81a632de4ee", "sighting_of_ref": "indicator--0cac6b55-b7b2-4f1d-aa75-ac7d5c2840b8", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d39115d3-135e-49e5-b4b6-fbe51fefe47c", "sighting_of_ref": "indicator--3e0f23a9-a6c0-4a1a-9840-679f74de4799", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bda31e6-1e58-474e-8061-a96e3e62597a", "sighting_of_ref": "indicator--53175f5b-08a9-42f7-a430-ed9d90c8e7b9", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71a9d937-4970-40b0-b93e-9093440a76e8", "sighting_of_ref": "indicator--53175f5b-08a9-42f7-a430-ed9d90c8e7b9", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f746aa73-1cdd-42cd-b938-1a1ea1245189", "sighting_of_ref": "indicator--bf2904fa-d22d-4db8-8241-7bcb9a098ee7", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce34577a-35a1-408e-b027-ebd75981d6d2", "sighting_of_ref": "indicator--bf2904fa-d22d-4db8-8241-7bcb9a098ee7", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbdd84d3-846e-456b-bf7e-226f955a209c", "sighting_of_ref": "indicator--bf2904fa-d22d-4db8-8241-7bcb9a098ee7", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0efa4c0-566b-4b0a-abe8-2b3a5f91e45e", "sighting_of_ref": "indicator--46a8400b-3082-446b-9d1f-c8b4f10e3680", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69a03f53-7251-4123-8bdc-a0498aec4704", "sighting_of_ref": "indicator--46a8400b-3082-446b-9d1f-c8b4f10e3680", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33d7c50e-f705-42c3-bcb6-d597c5161245", "sighting_of_ref": "indicator--46a8400b-3082-446b-9d1f-c8b4f10e3680", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3511b5a6-f99b-458c-afca-a6a5d3eaee53", "sighting_of_ref": "indicator--cb52cbdc-942e-46e3-8fe2-8f71684e1695", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff738f9c-faa8-44f9-97df-9c497c335bf6", "sighting_of_ref": "indicator--cb52cbdc-942e-46e3-8fe2-8f71684e1695", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d38ea10d-9456-4862-9dcb-719cb0a0841c", "sighting_of_ref": "indicator--cb52cbdc-942e-46e3-8fe2-8f71684e1695", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c3e5e76-e371-4641-964f-f3050affa9c4", "sighting_of_ref": "indicator--be662f8a-4f66-48a0-ba74-ca21d34e9bf0", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e70ac8b9-204c-4b81-8cc4-4ba892a25112", "sighting_of_ref": "indicator--be662f8a-4f66-48a0-ba74-ca21d34e9bf0", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4678c78-7551-4992-b201-bec78b7b5f4f", "sighting_of_ref": "indicator--be662f8a-4f66-48a0-ba74-ca21d34e9bf0", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--115e2428-7960-4ea6-8aec-7d1b1504fd04", "sighting_of_ref": "indicator--25b50521-769b-45bb-a352-31a7b757255b", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88fbfa0f-5ba8-4e0f-a8ab-9726ee6be41b", "sighting_of_ref": "indicator--25b50521-769b-45bb-a352-31a7b757255b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--922958b9-d23e-453b-99d7-fd53a13d0cbe", "sighting_of_ref": "indicator--25b50521-769b-45bb-a352-31a7b757255b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af802b48-79cd-447c-823c-b445a94b9dae", "sighting_of_ref": "indicator--17273b20-b002-4d1e-af89-ede3502c01ec", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c9b47d3-a298-40b4-9f46-1f18cae6978b", "sighting_of_ref": "indicator--17273b20-b002-4d1e-af89-ede3502c01ec", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--657e50ba-373f-4628-9536-630c51f6183a", "sighting_of_ref": "indicator--c7c64a8f-1f69-4fa0-aa6c-a4b108b6f82f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f12960d6-982a-4dc5-8426-8f5f5380c3ba", "sighting_of_ref": "indicator--c7c64a8f-1f69-4fa0-aa6c-a4b108b6f82f", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6af3adea-073b-4190-806b-adea976b73c7", "sighting_of_ref": "indicator--c7c64a8f-1f69-4fa0-aa6c-a4b108b6f82f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82f72029-73a5-4bcf-b1ae-470063a389bb", "sighting_of_ref": "indicator--25948c86-f1d0-4b68-a295-d5d7525fad17", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b9c071d-6b0a-479e-90b3-c40edbe34e94", "sighting_of_ref": "indicator--25948c86-f1d0-4b68-a295-d5d7525fad17", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54dbf0c2-0b4a-4070-927f-761e9232452a", "sighting_of_ref": "indicator--25948c86-f1d0-4b68-a295-d5d7525fad17", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67fa2c58-1766-47be-a23c-2695dc0e0e79", "sighting_of_ref": "indicator--bce55352-79ab-40d8-9b99-5cefb3596a83", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d1477d9-0755-414e-88b7-0207962b847b", "sighting_of_ref": "indicator--bce55352-79ab-40d8-9b99-5cefb3596a83", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d51edb1e-d693-4e38-8444-8718c5d8b50e", "sighting_of_ref": "indicator--bce55352-79ab-40d8-9b99-5cefb3596a83", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--020d74f7-fefd-4010-b83f-cac6959fa9a3", "sighting_of_ref": "indicator--7ade7b00-3eee-4c9d-9c00-82bcd33923f7", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bb547ed-3aa4-43a7-b77d-fdf9e87f03f9", "sighting_of_ref": "indicator--7ade7b00-3eee-4c9d-9c00-82bcd33923f7", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbf57dfd-7a9a-4e00-a6d7-6db27a6f8de9", "sighting_of_ref": "indicator--7ade7b00-3eee-4c9d-9c00-82bcd33923f7", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4569bc1d-6bb9-4a19-8da5-6d7b13e6db35", "sighting_of_ref": "indicator--d37dcd03-d20b-4ab4-8bdb-24352430a3a0", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ae6bdf3-73ac-4eef-a83c-b6e04b6362e2", "sighting_of_ref": "indicator--d37dcd03-d20b-4ab4-8bdb-24352430a3a0", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bc500b8-615f-4ba4-91da-d5666a5006ff", "sighting_of_ref": "indicator--d37dcd03-d20b-4ab4-8bdb-24352430a3a0", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37231a8a-1390-4ae2-b75d-ecf44d52ec3f", "sighting_of_ref": "indicator--53bfe1d8-010a-4571-9d37-953cad4cc4e2", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80c8f08e-5898-4fad-99db-2b5f1a74451c", "sighting_of_ref": "indicator--53bfe1d8-010a-4571-9d37-953cad4cc4e2", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87ee6134-54d6-4b70-97d5-35f203830e69", "sighting_of_ref": "indicator--270c7c69-5699-4f5c-a227-3c56b0dfa950", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a728ce2-68c6-4c58-9477-3f6deb914234", "sighting_of_ref": "indicator--270c7c69-5699-4f5c-a227-3c56b0dfa950", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60ef49fe-d87d-48ee-8431-53698bab2ea6", "sighting_of_ref": "indicator--3c374a4d-3c57-442b-91bf-2209daae87a3", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ebeb00e-ca37-4c0d-86c1-b684a08c3e27", "sighting_of_ref": "indicator--0b6accbc-ae61-40f1-b96c-07b0db717f0c", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c21ad72-7433-4211-b0d1-4d77da714599", "sighting_of_ref": "indicator--896173da-ca64-4fd8-bded-afc563b8156d", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4725e115-740f-44b1-86f9-cdf06c80b9fa", "sighting_of_ref": "indicator--4fbaf729-dedc-4abb-9643-690ebc3c0da7", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d23046a-c395-447d-bf3a-736a6e2f388a", "sighting_of_ref": "indicator--e0b3fd07-9585-44f7-a895-18e89bcea1f4", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b3d8874-c246-4a4c-b777-ae654a73ba5c", "sighting_of_ref": "indicator--d878b824-36c3-42b6-a881-86aea44e300e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87692926-4fb6-49d6-82c4-fc9dbbaa34e3", "sighting_of_ref": "indicator--d878b824-36c3-42b6-a881-86aea44e300e", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5e69e8b-f081-406c-accb-3bb7913b8579", "sighting_of_ref": "indicator--103f9264-78a0-4c9a-94e5-8b46070c6b7a", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8855fcc-0aff-4a71-9038-e40ebc41e2aa", "sighting_of_ref": "indicator--4295f0a9-8d75-44f1-ae71-0fe232b854ae", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93b155b3-2b55-476d-b9b7-5fc76b0f5d89", "sighting_of_ref": "indicator--6f81029c-fdcb-4785-96b7-e522e1c09009", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--306e37dc-402b-4659-97df-abfc9fcee061", "sighting_of_ref": "indicator--40b1f5ff-057a-4cc5-8968-a2c36dcb8b47", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e147e84-c246-4030-bb76-1602d694d8b7", "sighting_of_ref": "indicator--adc7bd72-7750-4278-820c-950dc6855f78", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4f1e23d-6020-4f6d-bd65-72d9809c4e8b", "sighting_of_ref": "indicator--c0025b99-5bbc-45b8-adff-00db86883dfe", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83bb859c-0df9-4573-8eab-5d4e7ac4242a", "sighting_of_ref": "indicator--5a20131a-f4e8-4178-8450-6581926ac22a", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8536af93-774f-4138-826b-6c864dd8ba01", "sighting_of_ref": "indicator--5a20131a-f4e8-4178-8450-6581926ac22a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7be691a6-6ae9-4aef-a8dd-e72581bd0a2f", "sighting_of_ref": "indicator--34e54a63-d0f8-43e8-99f2-498320a9311e", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--806600e2-2d9a-4c4f-9df7-23af8a393a4e", "sighting_of_ref": "indicator--02793e1c-1228-4d59-bfc5-feaa4ac9720d", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a2faf14-8619-40ee-916f-b2263a711f7a", "sighting_of_ref": "indicator--a6431ec9-b5c6-42f6-9ac5-23768f3396c7", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8f8c5f4-300b-4f04-a6b5-f7dcf3af2f35", "sighting_of_ref": "indicator--e7b251b6-4738-47d6-b16d-1c9893818a43", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4eb322a3-fc08-40f5-ac80-50f925b4b167", "sighting_of_ref": "indicator--7c71c830-3e99-425e-90d8-4ca2a4bc133a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68a475fe-88fa-41d4-ab05-68bac34d905b", "sighting_of_ref": "indicator--dfc97fae-8cd5-42d5-b342-17e2bd58433e", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f64992e9-9f3b-4ed1-9f0b-2bdfe84bb7cf", "sighting_of_ref": "indicator--34e67ff2-0c6a-4820-ad1d-d0cb3cc10610", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b01dfab-f6b0-421e-96dc-763c74e33b20", "sighting_of_ref": "indicator--34e67ff2-0c6a-4820-ad1d-d0cb3cc10610", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7ebd1d6-30cb-406f-a9dc-9aab13048152", "sighting_of_ref": "indicator--47719349-3f55-4d7f-882e-806d3dd26541", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b71704a8-5f74-48da-861c-8b66b3cabd88", "sighting_of_ref": "indicator--25aed255-fc88-47d7-b4f4-6f415f054a91", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0499e744-7c2f-47b9-b804-196dcaddadd4", "sighting_of_ref": "indicator--a8fa023a-f1b5-43d4-8c67-7fdbe5781751", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd4c7b34-a367-4462-a17c-015ff1518c42", "sighting_of_ref": "indicator--cb9e9f4c-0b5d-4cde-8444-6e24265e251d", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc9b0b7d-582a-48f6-a9d9-35a925c571a7", "sighting_of_ref": "indicator--cb9e9f4c-0b5d-4cde-8444-6e24265e251d", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--194912cf-3d2d-4196-9f99-0745f09a7a3a", "sighting_of_ref": "indicator--42f6e660-8b42-49d9-84ce-faa6801bcfa4", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41e924da-3d66-47fd-98ef-d93459abe981", "sighting_of_ref": "indicator--42f6e660-8b42-49d9-84ce-faa6801bcfa4", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c244e87d-63b0-439c-b270-673c67898cac", "sighting_of_ref": "indicator--42f6e660-8b42-49d9-84ce-faa6801bcfa4", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93614bad-33ad-49bb-ae73-ced021242d09", "sighting_of_ref": "indicator--6a5d7397-34a3-4599-b72c-3831d72ead78", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a19c161a-ca80-40e5-95ae-c8e7d6b54ce9", "sighting_of_ref": "indicator--6a5d7397-34a3-4599-b72c-3831d72ead78", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b977aaa8-aed6-4501-abde-28b1abe72317", "sighting_of_ref": "indicator--6a5d7397-34a3-4599-b72c-3831d72ead78", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--477dccd7-d959-49f8-aed6-98152057cd11", "sighting_of_ref": "indicator--790d7596-bb68-4997-b07c-d6f39412a78e", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb7cba28-d18a-43f6-bf38-46a0f1f6e149", "sighting_of_ref": "indicator--790d7596-bb68-4997-b07c-d6f39412a78e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b107afbb-7e2e-4c81-b70b-1688c0fc2891", "sighting_of_ref": "indicator--790d7596-bb68-4997-b07c-d6f39412a78e", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c1be03c-ab46-4cc0-8153-84424251e78f", "sighting_of_ref": "indicator--016dc81a-4da0-4d4d-9edf-eccbc7f9508f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--551cc62e-7eee-497d-8adc-7eae603a2d85", "sighting_of_ref": "indicator--016dc81a-4da0-4d4d-9edf-eccbc7f9508f", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f108ccf-bf56-4a78-ab00-821da6f88db0", "sighting_of_ref": "indicator--cd72cc37-98e8-4c2f-8e99-89fc7bfc899d", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a32c448c-b7d8-49c2-9cb6-6d40ec30ce4d", "sighting_of_ref": "indicator--cd72cc37-98e8-4c2f-8e99-89fc7bfc899d", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32e4f043-0902-4995-9694-46ed420e515d", "sighting_of_ref": "indicator--2356e10e-4bf1-415b-b007-fed94b389e27", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0eaf9b0-320f-47a9-b32a-905fd74b839e", "sighting_of_ref": "indicator--2356e10e-4bf1-415b-b007-fed94b389e27", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aad0ab95-a9f6-4274-b11f-28ed1b81a583", "sighting_of_ref": "indicator--a55820f1-531b-4ae7-8752-3e437c06bde3", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92edd0bb-ab38-4230-b515-947ff6771109", "sighting_of_ref": "indicator--a55820f1-531b-4ae7-8752-3e437c06bde3", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f056dbe6-ffed-4ef9-b775-b5a9c159976f", "sighting_of_ref": "indicator--a55820f1-531b-4ae7-8752-3e437c06bde3", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a04437c-c0dc-47c3-ae6f-2c5bcc31d5ef", "sighting_of_ref": "indicator--dc859a3b-b5d0-4d37-bb0e-b199352df7d6", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--808f00e8-f057-46d3-a4bd-3e9a4c4e9799", "sighting_of_ref": "indicator--dc859a3b-b5d0-4d37-bb0e-b199352df7d6", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2de7caa-ae48-42b4-9667-9c228b83936a", "sighting_of_ref": "indicator--78641d73-7ce5-43d0-a46f-5f95194b212a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffe637d0-f275-4e41-8a5a-f2d9ed9c9982", "sighting_of_ref": "indicator--1d601738-0001-499b-bf8d-68d873ba3816", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e94229c2-5448-4dda-ab5a-2b81897af147", "sighting_of_ref": "indicator--50d3c452-2f8a-4ad5-9dd0-2818f06c17c4", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44538a2a-5160-48da-a9a0-018f88ab4565", "sighting_of_ref": "indicator--76211359-9bd8-488e-b76f-d550619018f3", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa3800b4-addf-4cdd-9558-4d63eae2f5cc", "sighting_of_ref": "indicator--76211359-9bd8-488e-b76f-d550619018f3", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ded74bc-c4cb-4d0c-87f1-ca2b7f89e374", "sighting_of_ref": "indicator--76211359-9bd8-488e-b76f-d550619018f3", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd84b140-429f-47b8-b68a-28fdaba0f220", "sighting_of_ref": "indicator--1fe1eb3f-dd98-4df3-b2a7-b537b82703db", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10b6a14c-10e3-489d-a293-d6e0345caf39", "sighting_of_ref": "indicator--11178e67-cdb5-47fe-9a78-9e3d77c8bd90", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76a2cf47-0428-433d-be4e-48e1337fedae", "sighting_of_ref": "indicator--5b650cde-d501-4891-b0d9-5c717ada9843", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00b50db9-bfb0-4608-8d6e-3fa2a2de37a7", "sighting_of_ref": "indicator--9cd9d86d-72ea-4bf0-9148-88f102d59abd", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b860054c-aef0-4a74-8294-0a83af804ce7", "sighting_of_ref": "indicator--15d2c138-1912-4b1f-bb4a-36f6418ef00b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb335ba6-b8a6-44c0-9b68-28c0a81275d2", "sighting_of_ref": "indicator--cd147543-770a-4d6f-a008-dcb130a6bd78", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0b9732f-c200-41f3-8e0b-0e9c0a072932", "sighting_of_ref": "indicator--cd147543-770a-4d6f-a008-dcb130a6bd78", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bb396b9-42ff-49df-be8a-3e24d817ce17", "sighting_of_ref": "indicator--cd147543-770a-4d6f-a008-dcb130a6bd78", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c80b03e9-f595-45e8-8e6d-d6714d141cc9", "sighting_of_ref": "indicator--a023318e-1fc5-4f48-9b4e-ebda2ab39e5e", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--205b3b92-df74-4267-b8c2-3d3f8db15edb", "sighting_of_ref": "indicator--a023318e-1fc5-4f48-9b4e-ebda2ab39e5e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34a4dd5f-7f08-4cab-8e07-8f9df48baa0e", "sighting_of_ref": "indicator--a023318e-1fc5-4f48-9b4e-ebda2ab39e5e", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30149fa3-2d5a-44d0-b014-8beb202f7803", "sighting_of_ref": "indicator--c12b93de-aefc-41bf-8256-c09f24b7aa8b", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72f9d79a-af2e-470d-b859-7be4fff61e78", "sighting_of_ref": "indicator--c12b93de-aefc-41bf-8256-c09f24b7aa8b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f95a61c5-b30c-419a-bad4-c484eca233ac", "sighting_of_ref": "indicator--c12b93de-aefc-41bf-8256-c09f24b7aa8b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82becdc6-fbef-46ef-a68d-6fb90e5c09c0", "sighting_of_ref": "indicator--22877058-2c9b-4a06-9d25-d5a432350297", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6825e9ba-2d9a-4b27-bca3-c09373f0c378", "sighting_of_ref": "indicator--7419c6d0-aa0f-4c60-906b-331ab4f87a04", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07411398-2dcd-4280-83f7-65f79460be7c", "sighting_of_ref": "indicator--d728b0cc-cd70-43fd-9fc9-ca7cd5a39c63", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55c17077-e46b-40d3-8c16-6eeafbc1d1cd", "sighting_of_ref": "indicator--82b3298b-ab41-4679-9973-8ac2098e82dd", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f737a6c-8895-46ef-9cdd-72a2d366c63e", "sighting_of_ref": "indicator--82b3298b-ab41-4679-9973-8ac2098e82dd", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--631ea366-77e9-4aaf-8759-1bb965b12bb4", "sighting_of_ref": "indicator--2b3e28b3-381c-44bc-951d-5ecbf0bdfaca", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--131e3e64-d738-4e55-876b-9cae75dc6098", "sighting_of_ref": "indicator--b2e31729-faa6-4550-8e34-a1a95d4e4587", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--635b41ff-29c2-4d43-81b7-96ddfdceaa24", "sighting_of_ref": "indicator--23fadb6f-14d3-423a-bc1c-e7acf87a7e34", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2af50b8-94ce-4874-ac0d-86858660ca3c", "sighting_of_ref": "indicator--c0ecb0ac-9d0a-46b6-9586-b64a8b093cc9", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d5191dc-22a2-4099-8567-d48a86561377", "sighting_of_ref": "indicator--ef6facff-6ed4-47dc-9c13-845e3b4e0479", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80a1fbcc-bc75-48b7-98cf-5f99f2b19a2d", "sighting_of_ref": "indicator--9a1038cf-f71b-48b0-af44-7b0d55552ced", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--411a4ada-dc6f-4b90-83e2-cfa7471e3d8d", "sighting_of_ref": "indicator--1fe4ea2a-8678-46f5-94f5-c5e9dd579779", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2ae2aa2-dbd1-42dc-8296-d69ecf972c0c", "sighting_of_ref": "indicator--1fe4ea2a-8678-46f5-94f5-c5e9dd579779", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64e903ba-3b18-43f8-ab6f-40a5c84ce018", "sighting_of_ref": "indicator--36da9fb4-a431-48d5-828f-af6706cb008f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35b44fe7-a52c-47d5-8e18-c1c1f4a2ef71", "sighting_of_ref": "indicator--7b3bd19c-5c9e-45be-b14e-0e5e7118c9a5", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d61496d3-1c4e-46d1-8ea1-60f70c5c961c", "sighting_of_ref": "indicator--0d18e3be-f1e9-4da6-804f-9a3f601ca2ed", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2470fbd-16dc-4f88-824a-e4200a28e020", "sighting_of_ref": "indicator--ed476b42-0500-4181-bd57-95d2ebdb5dd2", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60500320-4b4b-4330-8163-2e5cac6777d5", "sighting_of_ref": "indicator--c9ac1bcb-0a9f-4b58-91a0-1c7fda08accd", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a19b4a22-388e-4571-b78a-026159159a2c", "sighting_of_ref": "indicator--c9ac1bcb-0a9f-4b58-91a0-1c7fda08accd", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfa3c8d6-804b-4362-b7be-f35ec3a9f216", "sighting_of_ref": "indicator--3e718c9f-b556-4ee3-9c37-581e429dbe78", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--446c10c7-9dad-4a13-abcd-62b656243971", "sighting_of_ref": "indicator--f6bc42ac-8165-4655-a411-4e6abd4303ec", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d817ee1-e07e-4fbd-beed-77f498fd9c8a", "sighting_of_ref": "indicator--f6bc42ac-8165-4655-a411-4e6abd4303ec", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cd69754-0469-4887-b36d-c6a6b110cb05", "sighting_of_ref": "indicator--ba37638c-75fc-480b-925f-cdad1e9f4e0a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e26e319-9c56-4af2-a92c-708df34d5703", "sighting_of_ref": "indicator--86ace8f0-dfba-424d-9c7c-0dba4c76b488", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa2898ec-a0dc-4e5f-8abe-b4d070cf2a66", "sighting_of_ref": "indicator--86ace8f0-dfba-424d-9c7c-0dba4c76b488", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--126bbeab-ee01-49be-a3f2-566605eefe2c", "sighting_of_ref": "indicator--86ace8f0-dfba-424d-9c7c-0dba4c76b488", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa15385d-861c-4adf-8196-9b4de589ddb4", "sighting_of_ref": "indicator--8cff777f-7d3b-4620-9321-8384159d6e35", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ef0a311-3036-400a-80c4-0398cab75662", "sighting_of_ref": "indicator--8cff777f-7d3b-4620-9321-8384159d6e35", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e27dc2e6-774b-40fe-972d-c2834df4826d", "sighting_of_ref": "indicator--8bd9607a-02dc-4bd3-bec5-376d03c26324", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8aafa9c8-58f6-4803-8ac9-650cb229a523", "sighting_of_ref": "indicator--934e76f9-25b3-49a0-986f-d6c2d55ab823", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d58904c4-47f8-42c5-b8a0-579e20b9c4bc", "sighting_of_ref": "indicator--717175eb-c997-48c8-b917-912e35c66cd7", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73493c92-14c8-4e25-aa02-5461f1be823f", "sighting_of_ref": "indicator--717175eb-c997-48c8-b917-912e35c66cd7", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc5def50-051d-4342-8581-dd2a8ce8d2f1", "sighting_of_ref": "indicator--0a80858c-f0d3-46d0-b40e-6724f568cbac", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97b1a7be-c232-489c-830c-7ae6dfaf8248", "sighting_of_ref": "indicator--0a80858c-f0d3-46d0-b40e-6724f568cbac", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2535c58-b452-432e-a30c-371fde2ac23f", "sighting_of_ref": "indicator--4855b474-7284-42da-bd55-a192fcf913b6", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d804713-68ad-4024-bf9a-4df9fec8f05f", "sighting_of_ref": "indicator--fedc3a4a-09a5-46ab-a72b-3b20f84ff70f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d192e19-b6de-468e-9279-0764dc329665", "sighting_of_ref": "indicator--f28ef65e-a07d-47e9-81ab-1f9549ec8806", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16e69420-5deb-4997-9cdc-662c849a67f0", "sighting_of_ref": "indicator--1effec5b-686b-4226-bef7-fd8b04f49dc4", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c41c454-6c22-4d26-855c-5c029a641aa0", "sighting_of_ref": "indicator--7468ce3e-305f-4bdb-8498-4c9603f0d2e7", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31fbdf86-b483-4e76-846c-09f88673e087", "sighting_of_ref": "indicator--7468ce3e-305f-4bdb-8498-4c9603f0d2e7", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--386128a2-b5cd-4bbb-bf59-2837302dd422", "sighting_of_ref": "indicator--7468ce3e-305f-4bdb-8498-4c9603f0d2e7", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d434c62e-ac28-4563-a443-a9352078ab48", "sighting_of_ref": "indicator--b510c2d3-2e6b-49f3-ab64-a34e774abc9a", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d9b676c-a781-4a54-99f3-8d4811620bd0", "sighting_of_ref": "indicator--b510c2d3-2e6b-49f3-ab64-a34e774abc9a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95bd588a-bdc4-4848-b734-9c0053f8d8bd", "sighting_of_ref": "indicator--b510c2d3-2e6b-49f3-ab64-a34e774abc9a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a26fa5d-8e18-4313-ad8d-41c5beb86203", "sighting_of_ref": "indicator--95167fd4-cb3d-4bce-b916-065924509570", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f34e70a-0086-412b-a357-74719ff626e3", "sighting_of_ref": "indicator--dd55ac31-7fb3-45f2-bfb2-de3dc1ff5470", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4722fc6a-aff9-4683-8063-4dfd429da67b", "sighting_of_ref": "indicator--d858a68a-0d2d-4ddc-b340-25b2cd5def31", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11ec9111-952e-405d-86fc-43ad6896f4d3", "sighting_of_ref": "indicator--d858a68a-0d2d-4ddc-b340-25b2cd5def31", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2789d684-a9fe-435f-aae8-7628588677cd", "sighting_of_ref": "indicator--71c01479-5ced-4681-b0d4-3edc7bc42a0a", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9481c268-2220-40a8-b489-ac7ab835850a", "sighting_of_ref": "indicator--71c01479-5ced-4681-b0d4-3edc7bc42a0a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac994066-5068-4e7c-83e7-1786b02f574e", "sighting_of_ref": "indicator--1ac26b1f-283a-495f-be0a-1c7e99a067aa", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--228e8ed9-6fd4-422a-a5dd-f3940672884a", "sighting_of_ref": "indicator--583da801-e62c-420a-b774-1e6140411bab", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d120944e-61eb-4370-ab65-74f481f18fc6", "sighting_of_ref": "indicator--99ee19a9-a515-4f96-914c-81dc58bdd016", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b837d501-efc8-42f0-aa78-fb07399c21b5", "sighting_of_ref": "indicator--a70fb1e3-786c-4544-9128-c38723cb15de", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87f541d3-1774-447c-9d7c-5fd38ed9842c", "sighting_of_ref": "indicator--caad7f84-d0e3-4c5c-aa06-8d54f6f23eb7", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--516de1df-a388-4bed-b92d-a29ef5bf6a96", "sighting_of_ref": "indicator--0bb74753-707c-48ad-8a05-966b997f7687", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8fe6699-d3e9-42dc-acde-b6fdf3aee3d2", "sighting_of_ref": "indicator--9c1c4dfc-98c4-445d-86e4-665bddd57671", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e5242c4-aaaf-48ff-a17c-b80ab6d888a5", "sighting_of_ref": "indicator--9c1c4dfc-98c4-445d-86e4-665bddd57671", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4c2a5ce-e9cd-42b3-8705-f211f215bf6d", "sighting_of_ref": "indicator--b2ce09c7-6c96-492b-b2cc-9aaa851fe83c", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efe62a58-e69f-4a8a-9f9a-05a7f7fdd83a", "sighting_of_ref": "indicator--b2ce09c7-6c96-492b-b2cc-9aaa851fe83c", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48ed3c2c-c92d-406d-9ab0-b4a6dbe56f47", "sighting_of_ref": "indicator--4f01bc5c-e321-4f69-8df6-82edf5410d00", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b30298c-8716-44b2-b8b2-96e83a073402", "sighting_of_ref": "indicator--4f01bc5c-e321-4f69-8df6-82edf5410d00", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2398746-8a75-4c36-921a-eb6b5622fbca", "sighting_of_ref": "indicator--167cd45a-9327-4ef6-b224-597305d68a57", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be52556b-d704-47a7-a776-1ee3197d2c6c", "sighting_of_ref": "indicator--56451022-e137-40a6-a4e1-549700ea0b33", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc4b9988-3e06-482e-8285-1cefd48a41bb", "sighting_of_ref": "indicator--56451022-e137-40a6-a4e1-549700ea0b33", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f72baa5-7630-42cf-8356-c7f3fbae139c", "sighting_of_ref": "indicator--29e3a0e3-5286-4a40-b2c9-ef2032474393", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7acfe9f4-8d00-4499-b1d4-122fc139ac76", "sighting_of_ref": "indicator--0c5bd3ad-2aca-4065-adf5-954bdf893780", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9e46959-9f57-42c8-b587-42a4ec4262fe", "sighting_of_ref": "indicator--936e090e-4485-4a35-aece-4dbd38aa343b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50fe0178-f76c-4295-862f-e5d86efbd234", "sighting_of_ref": "indicator--125e7a5d-7c5e-48b2-beef-37428c35db3e", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7858a9b4-7c7d-4000-bd43-d45420f1f2bd", "sighting_of_ref": "indicator--bfc47e7d-67e4-4f33-9684-6710cf5ca104", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2fbcada-6053-4a10-9a20-3b445814f56c", "sighting_of_ref": "indicator--f47fcc9a-eddc-457e-823f-11772beece5c", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57c7d7ca-7e4b-4e54-9297-d9dcc5e75e2e", "sighting_of_ref": "indicator--b3ab24ec-0e1d-4e81-aab9-4ea956f52417", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e4fe151-a7d2-4ecd-8ce7-88b84abe4c06", "sighting_of_ref": "indicator--1eb8b63f-eee4-4f73-8ced-17e377b211c1", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd46b3d7-a4ac-49dd-a31d-88f62b99847c", "sighting_of_ref": "indicator--1eb8b63f-eee4-4f73-8ced-17e377b211c1", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b53a77d0-2938-4eed-abac-8294fbb1fa34", "sighting_of_ref": "indicator--dd721b52-1c33-4859-a7bd-f12ced38624c", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d5d4b0b-37d0-47c5-ae38-ba2ff7f16433", "sighting_of_ref": "indicator--dd721b52-1c33-4859-a7bd-f12ced38624c", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28c9cf5b-d409-4171-9a5d-dcd9dfd5c132", "sighting_of_ref": "indicator--dd721b52-1c33-4859-a7bd-f12ced38624c", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f572e397-81fa-4c1e-9c28-766a91d8aae6", "sighting_of_ref": "indicator--7792d090-0b25-4ea8-b9d5-0c11bdd618b2", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8f0f0b9-9f49-4b92-a625-7f1d9a761e1d", "sighting_of_ref": "indicator--cf8bb172-3275-4e6b-8172-41364dfe5e35", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b97015c3-c742-4266-8bce-1eebba363a2c", "sighting_of_ref": "indicator--cf8bb172-3275-4e6b-8172-41364dfe5e35", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b85cb22d-dd2f-442a-9a06-b08f6ec63755", "sighting_of_ref": "indicator--9b0cefb1-a4e3-442d-9ee5-decc305505f6", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9deda3a-42e8-457c-8a69-42a7bf33b0e7", "sighting_of_ref": "indicator--93505f1a-362d-4fc4-8a6e-050d5455f12d", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a874826-53c0-4d3c-b5b0-36f345dd6fcd", "sighting_of_ref": "indicator--93505f1a-362d-4fc4-8a6e-050d5455f12d", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63cdfc51-c8bd-4dc6-8b9c-a5f6de93afd7", "sighting_of_ref": "indicator--1496da31-d600-411d-86dc-490a3e60480a", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8232dc5c-64d0-4e6d-80ae-ad48c9b741da", "sighting_of_ref": "indicator--254b2d36-5aff-47f2-8d27-48697a005b80", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cd75c61-6dc0-4394-acaf-72b35b94e4a3", "sighting_of_ref": "indicator--0107d668-f000-4e38-9c6b-7f79d649e6aa", "where_sighted_refs": ["location--cc47317e-2c18-43a6-8938-dea748a56ad5"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--643b7805-1b3b-43f8-8195-b80b718721dc", "sighting_of_ref": "indicator--113eac2d-e9d4-4b74-9d99-c54786766caf", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f34a92a-faa1-4f4e-9010-9ca0eaf8da7c", "sighting_of_ref": "indicator--6e0a8716-770b-45a6-aa53-80688717032b", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e36d021d-9f67-42ff-97b4-22ad308e9c37", "sighting_of_ref": "indicator--6e0a8716-770b-45a6-aa53-80688717032b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--049e0bc4-9096-4063-ac14-6bd08134d669", "sighting_of_ref": "indicator--f022e633-9664-41a5-a28e-4455c5242c5a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75f03934-b8dd-464a-80af-4a351337ff92", "sighting_of_ref": "indicator--1a685221-205d-4019-8dd8-52e22158bd86", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02bf794e-01b4-4f27-bcab-e6ace69dd093", "sighting_of_ref": "indicator--adfef0cd-8cae-49c0-a66a-cfa94ddd6154", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7b224f6-0a95-42e9-b9ec-b1cc147e829e", "sighting_of_ref": "indicator--1f0d69a1-ff33-4224-aa7d-c0716304120f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f53219dd-f269-464e-94ed-e047fa0abfa6", "sighting_of_ref": "indicator--e7dffca8-8bc2-4ab1-850e-f5d7abe7d7d6", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac427374-ec4a-4803-bf77-c53b498bc0b6", "sighting_of_ref": "indicator--293a7db2-ae87-4728-8fbd-30f578118065", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d68abc06-59ef-496c-b9c7-4f60dbee7b82", "sighting_of_ref": "indicator--5bc6c0c2-69a2-486f-b335-3b8e1219389b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ce10a9c-1d5a-4659-ab84-e2f1f8bfd102", "sighting_of_ref": "indicator--cba1b137-2672-4380-855b-f0cef1a8193b", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23ed1e9a-232e-4221-801d-69f0c22b3d75", "sighting_of_ref": "indicator--cba1b137-2672-4380-855b-f0cef1a8193b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61c631cd-0a99-4d52-b64a-7af6025bfcf2", "sighting_of_ref": "indicator--18cdaab2-8c9e-48aa-908e-9b1354407d2a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--423943b5-2823-45af-a80d-432c726dd787", "sighting_of_ref": "indicator--2ee60f6b-a011-4581-aa52-bdcefd7f758f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb949264-6a7e-4188-ab8c-933d216f26fe", "sighting_of_ref": "indicator--3752f11b-47ec-4a85-9544-5284e8ddaa93", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a23e8751-b3c0-440a-96e3-2684b2971c7f", "sighting_of_ref": "indicator--f2d7b568-dfec-460c-9718-84504e3eecbe", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00495ba1-3c3e-47bd-b3d0-24eb696f7cbf", "sighting_of_ref": "indicator--c98de2bc-f258-4f15-a031-934427353cd4", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa000707-7ca0-4d17-9d5b-8cb40d0a1d94", "sighting_of_ref": "indicator--4d1af287-f285-4744-a36b-a02fdea47e83", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3bcc86c-f02e-46e9-af87-737752c222cc", "sighting_of_ref": "indicator--b6c3f9ae-2921-4094-b1e4-003812441c17", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d63da847-5f6b-42c2-86b0-efebef875e60", "sighting_of_ref": "indicator--c875a1d7-6135-4b79-94fe-5fba383dc76a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69e59410-614d-4d5a-b9c0-c0a6572cf180", "sighting_of_ref": "indicator--7bb12345-1785-4416-aa44-46ff620dcf7c", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26483ba1-5e96-4ae8-8863-30a9beb73388", "sighting_of_ref": "indicator--823264d8-72fc-481d-94a0-c0d8f0e7852a", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69031ccc-8e14-4f6e-9695-cb324cf504e1", "sighting_of_ref": "indicator--3a718697-dc43-4d0b-9950-8dbe92e6537e", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8ddf53e-d145-42eb-92d2-d2bd37b91346", "sighting_of_ref": "indicator--3a718697-dc43-4d0b-9950-8dbe92e6537e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac842f55-4e48-4435-b9e0-9199a2dd5946", "sighting_of_ref": "indicator--022ba8b8-71db-413f-a210-4f40f798b12f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc18f038-5348-4104-a39b-27585605197a", "sighting_of_ref": "indicator--004a2fba-008e-4779-a5df-8a099c54cdba", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c636e3bf-b942-4980-9a30-b61c29e6cc59", "sighting_of_ref": "indicator--68f7abad-74fc-4c83-82c4-6d6883a5fc46", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59655e23-02cd-4f45-9f86-7fb396832fa5", "sighting_of_ref": "indicator--354fe687-ea36-46b8-9ac4-0d99e92349ba", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--007bc15f-8a55-4817-a300-c243c504235c", "sighting_of_ref": "indicator--e626b68c-2cda-4a30-a83a-f89eee0de844", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da67c0e4-269a-4a79-90c5-7b2c0690c5ee", "sighting_of_ref": "indicator--b4de85fc-0e7e-4517-94e3-20bc077defb4", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--508cb80b-480e-4181-aef1-2f24b8e8a45a", "sighting_of_ref": "indicator--5f02c658-46dc-4254-b142-38f3414f79cb", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94bc71c2-2073-4ebb-ba4d-4921db7494e4", "sighting_of_ref": "indicator--ba8d59eb-a136-466b-a6db-9c3d02b07163", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85ed5dd6-9759-4da3-8fa3-7e453155dc4a", "sighting_of_ref": "indicator--4382ef92-3749-4ae0-8ec7-edb4ab575ca4", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd76ae78-d93f-49fb-88da-4a6ba9a1d20d", "sighting_of_ref": "indicator--4382ef92-3749-4ae0-8ec7-edb4ab575ca4", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ec205bd-3ad8-4090-a883-a00dcca482ac", "sighting_of_ref": "indicator--4382ef92-3749-4ae0-8ec7-edb4ab575ca4", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a47915c-9b62-4651-827f-d9ba2195257e", "sighting_of_ref": "indicator--49c47f30-897a-43f2-ace3-2b3065173b54", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1808faca-7ce2-40a8-9908-ca306196f539", "sighting_of_ref": "indicator--aa7fa2e4-5aa9-46b1-9625-7fbfc707116a", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--391b1f98-54f8-4a4f-a346-6920a552f91d", "sighting_of_ref": "indicator--ccab54d5-419e-4b1b-ae7e-c7dcbd34687f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d41af443-b82b-4a7f-bc54-5d76d8dd4920", "sighting_of_ref": "indicator--ccab54d5-419e-4b1b-ae7e-c7dcbd34687f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6ac74dc-fa26-4301-b775-bea0c1216e45", "sighting_of_ref": "indicator--f9124888-d18a-44ac-a0d5-f561c8883cd8", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d755cffe-9636-4d1d-9d51-2abb95dcf41b", "sighting_of_ref": "indicator--f9124888-d18a-44ac-a0d5-f561c8883cd8", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be08866f-bb0c-4414-aaca-4170eb25aa2c", "sighting_of_ref": "indicator--70021095-4fab-48df-a313-670a3c8498ba", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afbe4186-60b9-434a-b34b-a57ffb961980", "sighting_of_ref": "indicator--948a5d2c-a66c-4f0a-8aed-82bc78545912", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5e95b0e-9342-4352-9de1-4d798987db36", "sighting_of_ref": "indicator--b169e9c1-a505-49e3-b381-8966d0f6c57f", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56d6ce1d-d637-45ba-89ac-63c954bd82e0", "sighting_of_ref": "indicator--659396b4-2935-455d-b63d-0da240792395", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fe88eb7-46df-473a-a5d4-f5dc22a00902", "sighting_of_ref": "indicator--659396b4-2935-455d-b63d-0da240792395", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8126016d-788f-47af-8704-ca61f3ac7b47", "sighting_of_ref": "indicator--02617538-3096-4f94-b697-29df0026bbd0", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1e3d49d-255e-47e6-a8a0-1346aa775bfa", "sighting_of_ref": "indicator--57ab4e35-1ede-4c85-ac39-141ae2b33665", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e49a7a8d-f9e4-4087-8051-41046f902d4e", "sighting_of_ref": "indicator--57ab4e35-1ede-4c85-ac39-141ae2b33665", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47a8cbd9-fada-49fd-a589-e52353cf6cb1", "sighting_of_ref": "indicator--e65cbd57-671b-4a78-b9c0-424ca0b6386d", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aabac0f9-a70a-4869-9150-7047d3e7d893", "sighting_of_ref": "indicator--e65cbd57-671b-4a78-b9c0-424ca0b6386d", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81e4b90b-96b8-4c76-8376-78e506ccd09d", "sighting_of_ref": "indicator--e65cbd57-671b-4a78-b9c0-424ca0b6386d", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a9cfea7-0f63-45fa-96fb-73491569b36a", "sighting_of_ref": "indicator--5e05dec4-36a5-4a63-a67d-d06a59d1e7ed", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--972daee0-f653-41ed-8f3c-12665e4e7268", "sighting_of_ref": "indicator--b9d0ed6f-68ad-40b0-acb0-782cdf042ec6", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5272b7f5-9b5b-4245-9aac-5f80b78793e9", "sighting_of_ref": "indicator--b9d0ed6f-68ad-40b0-acb0-782cdf042ec6", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28191056-61a1-46ea-b6fb-18c0c1e46026", "sighting_of_ref": "indicator--e717d8e7-817d-40ef-b5f1-1fe08efa89b7", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f5ec78c-a24a-4d9e-b347-0ba2c8d0c37e", "sighting_of_ref": "indicator--e717d8e7-817d-40ef-b5f1-1fe08efa89b7", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea62e979-b57f-42f5-99da-9698a9d131e6", "sighting_of_ref": "indicator--e717d8e7-817d-40ef-b5f1-1fe08efa89b7", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbb09e4a-214a-450d-b1b4-2573946faa0f", "sighting_of_ref": "indicator--5adc6103-daaf-4c1b-bfb9-762696eca91f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--598f72c4-dca9-4773-acb2-64768e2669ac", "sighting_of_ref": "indicator--5adc6103-daaf-4c1b-bfb9-762696eca91f", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaad5e51-67ca-424a-b264-ea2be77390ff", "sighting_of_ref": "indicator--f8712dce-a213-439e-8816-97f57eee50e7", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca666267-ee5b-483d-9168-3fbce47ec1bb", "sighting_of_ref": "indicator--3ec2683f-a749-4410-a768-1ebf175960f7", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ee78f04-365b-4c45-bc9d-13920cf3bad9", "sighting_of_ref": "indicator--3ec2683f-a749-4410-a768-1ebf175960f7", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b047352-8424-46e2-8527-817ed7034f49", "sighting_of_ref": "indicator--3ec2683f-a749-4410-a768-1ebf175960f7", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2fd41ca-6a64-4c3a-a69b-a3884026c3ea", "sighting_of_ref": "indicator--5afec7ba-d810-41d0-aa98-e764a48375c5", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--729c354b-3069-4c47-9228-d971c0faaea1", "sighting_of_ref": "indicator--8938f6e8-b12d-45b6-bd33-1ebaa5229e9a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d890aebf-f6df-4ae3-b2ab-2445c20db351", "sighting_of_ref": "indicator--80bcf59c-34ee-46e5-8132-19fc66b8e188", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--817bbc3c-eebe-4d0d-b9f6-13e2dcc7ba66", "sighting_of_ref": "indicator--80bcf59c-34ee-46e5-8132-19fc66b8e188", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--130f55f9-a92f-4fa1-bf4c-976ae8d4bd55", "sighting_of_ref": "indicator--58fe751b-fea7-4840-be15-694209ddd8e0", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a26ea6d-3d5e-4bc8-a901-ca9971b14b60", "sighting_of_ref": "indicator--68c66707-b4d7-4d36-804a-ba2607c15e67", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f58075fa-8c0c-46bf-8ebf-e16118ac9a74", "sighting_of_ref": "indicator--a46c8de5-6533-43ba-8c08-4fc5eb23ebdf", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--561ef36d-e9ce-4fee-9ff6-b4884463cf57", "sighting_of_ref": "indicator--a46c8de5-6533-43ba-8c08-4fc5eb23ebdf", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f707238-6f1d-4571-a6e7-6ad905b78bc7", "sighting_of_ref": "indicator--a46c8de5-6533-43ba-8c08-4fc5eb23ebdf", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44d5d0fb-5496-4bfd-99e7-f453a46b6bdf", "sighting_of_ref": "indicator--6825d2af-86b4-4812-8fb8-1bd0dab7aaac", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee623c86-5b21-49f5-a4f0-61cd4c76a9c1", "sighting_of_ref": "indicator--6825d2af-86b4-4812-8fb8-1bd0dab7aaac", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39afb56c-ceaf-44ce-b921-c62db6085088", "sighting_of_ref": "indicator--29293aa8-c3e3-4363-b86b-b694e8fc43ee", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--910aad18-d7e5-4d03-a032-c8f0559fcdb0", "sighting_of_ref": "indicator--abbcbc9f-67e1-453d-b655-645b0a3c1dfc", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfcba373-aa96-4e99-8010-5b54d381bc72", "sighting_of_ref": "indicator--abbcbc9f-67e1-453d-b655-645b0a3c1dfc", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32b55cd5-0710-4e33-ace0-5e081faea40e", "sighting_of_ref": "indicator--abbcbc9f-67e1-453d-b655-645b0a3c1dfc", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b779ad9-1102-4d85-87a5-7646d26bc8a3", "sighting_of_ref": "indicator--351dcce3-f795-4535-a2cb-bf165fbd5d02", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7c01123-ac49-4f0a-b20b-f46c7104e87a", "sighting_of_ref": "indicator--351dcce3-f795-4535-a2cb-bf165fbd5d02", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11feab9b-d4f0-483a-8cb2-f3165832c9d8", "sighting_of_ref": "indicator--351dcce3-f795-4535-a2cb-bf165fbd5d02", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4df495d1-94a3-4962-bf45-7ecbffead487", "sighting_of_ref": "indicator--58d3116b-d37b-4146-96a9-a582985fd13b", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a8aba53-5c84-440e-a2e3-a1f141d55b86", "sighting_of_ref": "indicator--58d3116b-d37b-4146-96a9-a582985fd13b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac4dd820-65d1-40bd-9b58-50dd1c51519b", "sighting_of_ref": "indicator--58d3116b-d37b-4146-96a9-a582985fd13b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6139bc2e-28bd-40b1-ad7f-5f161842b2fa", "sighting_of_ref": "indicator--c971941c-362d-4eab-bb42-8059716562ee", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b8b5506-0be5-462b-a550-5f17d79ebdd6", "sighting_of_ref": "indicator--c971941c-362d-4eab-bb42-8059716562ee", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0a31920-45f5-4f45-8c40-0d10b84db976", "sighting_of_ref": "indicator--fc1fc2fe-ed0b-46eb-b9ff-43b128e5ad3d", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7924abe2-8c7f-4cf9-beb0-6458d5cfee18", "sighting_of_ref": "indicator--fc1fc2fe-ed0b-46eb-b9ff-43b128e5ad3d", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be1b3d1a-bd59-4892-a29e-84935e1c77cb", "sighting_of_ref": "indicator--fc1fc2fe-ed0b-46eb-b9ff-43b128e5ad3d", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74897826-7da2-4161-9a53-6349f306eec7", "sighting_of_ref": "indicator--20601c99-95df-4e20-b127-df65998c2143", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d1064ee-9887-458a-a2b1-8ef214a3c6e2", "sighting_of_ref": "indicator--bf2f9b61-c836-4e02-bf4f-6716bfbd814b", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--512be45a-4089-47a1-a6cc-e537979b044d", "sighting_of_ref": "indicator--b4c5508b-70e3-4b38-ab0d-d9a6129bead4", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6faed614-87ae-41d4-ab04-0a67f6f3760d", "sighting_of_ref": "indicator--a364f6fb-49c5-46f6-80e8-2c2917e30f90", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea7da731-a973-49f0-93bd-aa2f3d13c474", "sighting_of_ref": "indicator--a364f6fb-49c5-46f6-80e8-2c2917e30f90", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23a2f045-d64a-41a5-bcc2-d5909363ec9d", "sighting_of_ref": "indicator--a364f6fb-49c5-46f6-80e8-2c2917e30f90", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edeca98b-df2b-4d58-bc62-77e8f04ed07a", "sighting_of_ref": "indicator--fb88824f-0886-4048-89c0-49ee592bfbc6", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4eecedf-6616-45b6-86bd-33327413caea", "sighting_of_ref": "indicator--e58c7837-4c3b-4c9b-b732-befd20f0239c", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab188f89-2e02-4783-a24c-99c6a7298ad6", "sighting_of_ref": "indicator--c14765ea-1840-4d39-93e0-b2773bf15126", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c0f13d0-5c53-4617-8018-bb8f69475783", "sighting_of_ref": "indicator--d4e5a638-cfcd-4508-9da7-8a19fac9578e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f728e47-cd3b-42e1-89aa-93cfefba4e7a", "sighting_of_ref": "indicator--70bc0499-c0c0-4c6e-8772-dce469c1812d", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3581fb4d-07f1-4ac8-85d8-e14e6201481c", "sighting_of_ref": "indicator--70bc0499-c0c0-4c6e-8772-dce469c1812d", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe38a552-567e-42e3-b4de-a5a70b449613", "sighting_of_ref": "indicator--70bc0499-c0c0-4c6e-8772-dce469c1812d", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b861364f-f8bb-4b0c-b7ff-9fae40cf9867", "sighting_of_ref": "indicator--2c63eefa-70ca-402e-89f7-2678f803c79b", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d14a1d58-3cfd-4cdc-b4c1-cf62961a026a", "sighting_of_ref": "indicator--a074d41a-76c1-4729-8f2f-63907a7f2760", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c524b1e-3b78-4f5c-be43-bc6d80ee58b3", "sighting_of_ref": "indicator--a074d41a-76c1-4729-8f2f-63907a7f2760", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7d93bec-1727-413b-9172-69b0778a62cf", "sighting_of_ref": "indicator--1fb7ca79-bb05-422c-867c-1895c8282439", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--088e54ec-5ae3-4b9f-a77b-702c8d8c4b52", "sighting_of_ref": "indicator--e40c05db-0df1-4b0e-b976-34d332a2105a", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--285aef99-b710-40a8-b613-1c7a17fd9ba5", "sighting_of_ref": "indicator--2c18c309-e3e5-4919-8f3c-eea6a29f5315", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a46a90ec-1ba8-45ac-ab15-ebf9c4b1941d", "sighting_of_ref": "indicator--caad62d3-6573-4eb7-9247-43f0696e6e66", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db090911-0223-4b1a-aad6-af5643195bdd", "sighting_of_ref": "indicator--fff7454a-2163-4b6e-8224-ab03f0f08b7a", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--742ad4ee-270c-4e2c-9ad8-6b706815543e", "sighting_of_ref": "indicator--e95503da-c48e-4d13-8c92-6b7709048aaa", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f3f8c9b-58db-4737-8cb3-cc47d0978508", "sighting_of_ref": "indicator--e95503da-c48e-4d13-8c92-6b7709048aaa", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4bcc2f8-f5c4-4b04-ad10-e0aeeb7c6ee3", "sighting_of_ref": "indicator--44fd5e7b-8b05-4702-aa73-8d13f4939d33", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9ea4956-2406-49b6-b93e-ccd6cef13b3b", "sighting_of_ref": "indicator--0c3e43b0-1a8a-41eb-8ea2-29cfdf967997", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66e25dd5-7ef0-4d0a-8f2a-0928900e4718", "sighting_of_ref": "indicator--0c3e43b0-1a8a-41eb-8ea2-29cfdf967997", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3571813-90cd-4148-adc7-e3423ee0444d", "sighting_of_ref": "indicator--0c3e43b0-1a8a-41eb-8ea2-29cfdf967997", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9e4b3bf-211f-46f9-ba17-fe2d356a89e3", "sighting_of_ref": "indicator--225308d0-35b7-431a-a39c-c42ddee39387", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bc1318c-df09-4301-80dd-6c300db52a87", "sighting_of_ref": "indicator--4c4fa576-6f4a-4cd7-877f-25112ea63c19", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7b1ca0a-a537-4d9a-b0fe-4d4139ba0a24", "sighting_of_ref": "indicator--6e0ac9ff-388f-41c6-ab79-3f8213ca89b1", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29607f17-743d-4b22-8d87-511fde0f9092", "sighting_of_ref": "indicator--ae4d0904-bdb6-4744-8c24-0a98c6e0c317", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e2ede55-5bf6-4fbb-a89a-ecd415e8d6cd", "sighting_of_ref": "indicator--c29e2070-405d-4365-932e-bb19cb1d7e68", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f35261e8-293e-42ef-9226-91c1636c5b3e", "sighting_of_ref": "indicator--842fbfc2-4031-44e8-8e71-f97e369425d6", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04893d85-72d4-43c1-901a-ebda285aaa90", "sighting_of_ref": "indicator--a00e2224-b130-463d-a521-0a6aa660c415", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--977727b4-85ec-4cdb-a4e1-cde3bf9b5409", "sighting_of_ref": "indicator--a00e2224-b130-463d-a521-0a6aa660c415", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e3827af-50f9-4ea0-bd9f-1e1ea390acb4", "sighting_of_ref": "indicator--63132055-1c3f-4071-929b-6f13b708ed0c", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9643af1-66fa-4022-b5c4-a3cac4a8afd8", "sighting_of_ref": "indicator--63132055-1c3f-4071-929b-6f13b708ed0c", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8796ea6-9d9d-4772-9e53-8e1da2eb5d41", "sighting_of_ref": "indicator--4baaab23-2b70-4a4b-b8d8-ca3c3446c120", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e63d13f-d3d3-4552-bd6c-e5a80a009fb2", "sighting_of_ref": "indicator--b0ef5d44-aad9-4d92-9b28-e1d09e63fb49", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41f7f268-b35b-45b5-951c-531376c76f9f", "sighting_of_ref": "indicator--2bf73487-f825-49f2-81a5-d429ad9bdd9e", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--654dbc8e-1878-4201-bdfd-9ad511b24dd6", "sighting_of_ref": "indicator--24c2b118-310f-49cf-8dd0-f5eb5c697acc", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56d62d4d-3752-4cb4-98fa-45e0c9b6e993", "sighting_of_ref": "indicator--24c2b118-310f-49cf-8dd0-f5eb5c697acc", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20c6a744-8d92-4f6a-8e6c-f967a842b335", "sighting_of_ref": "indicator--84526630-62c7-4709-a511-94033fd640aa", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47c77d76-0058-4876-a157-b8f9260bd232", "sighting_of_ref": "indicator--d0c15345-e106-4a58-9395-3e82f9fd9079", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4093444-a645-4071-ab1d-1f51e2304c1d", "sighting_of_ref": "indicator--b80a9f5d-d9a0-4c1f-b3af-233b1683e6cb", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67c4d050-d6ba-41dc-b2fe-8e4e59a3ec3c", "sighting_of_ref": "indicator--4f608e2d-3bb6-427f-b27b-62665c098850", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b00345f-948b-4b4d-b6fe-4c12b2745603", "sighting_of_ref": "indicator--4f608e2d-3bb6-427f-b27b-62665c098850", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1ffbbed-37de-4445-8d46-f3763d3fb5d8", "sighting_of_ref": "indicator--6099a5c8-392b-4312-833c-2755ca19d063", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd44f769-5e76-476c-a247-c875649e5740", "sighting_of_ref": "indicator--f9c3fd30-39f1-4d9b-a7c9-74b5c51a959c", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c0c09f5-e300-4574-b9f4-de011c13d880", "sighting_of_ref": "indicator--f9c3fd30-39f1-4d9b-a7c9-74b5c51a959c", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe56a4a0-1d63-4296-8cd0-72d26a6339d2", "sighting_of_ref": "indicator--f9c3fd30-39f1-4d9b-a7c9-74b5c51a959c", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a6f960f-6977-4498-8461-f2368e70b5e0", "sighting_of_ref": "indicator--9c10510f-cbaa-4d02-b140-20687254e447", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75e8b158-492e-4d90-b6d7-2df021c906f3", "sighting_of_ref": "indicator--605c2988-c014-4e49-aefd-0a27408b94db", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8ff167f-e078-406f-8722-21db9285a006", "sighting_of_ref": "indicator--56ad92cf-c3ce-4fb8-8b9b-f7b5695c7736", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf2876ce-b483-4dec-9a82-fd6842e654c0", "sighting_of_ref": "indicator--47c24fbc-feb8-46d9-836f-22e35ca5bd50", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbdc1f6c-f1a7-4a1c-91f7-68d0d8d51301", "sighting_of_ref": "indicator--47c24fbc-feb8-46d9-836f-22e35ca5bd50", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--295b7075-96ee-4ad3-94f2-c704eb1a322e", "sighting_of_ref": "indicator--e1a1eaf5-d49e-44d9-ac36-f0f2d518779d", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7c419b1-2b91-4b5a-b4ae-67dcf751f67b", "sighting_of_ref": "indicator--46602165-a4ae-4424-9003-9eaa8d9e7a31", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84563be6-869b-44f5-8f8a-84cb6004c49a", "sighting_of_ref": "indicator--61fcf12e-665d-42e3-ac67-a986f6b526d7", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db0042a2-1ab5-4fb1-b23b-703219c7efc8", "sighting_of_ref": "indicator--61fcf12e-665d-42e3-ac67-a986f6b526d7", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1490cb27-a414-49c6-a90d-dc16ff554686", "sighting_of_ref": "indicator--713ac23a-79d2-432b-ac7f-57953421327a", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8103df24-b8f7-4834-9b16-c6597eb95593", "sighting_of_ref": "indicator--c3f8216a-d9f7-4c56-82b7-de0e7f8742f9", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2d3781d-5aa2-4be5-8a03-c8277d607e81", "sighting_of_ref": "indicator--67cd33b5-b79a-4ef1-9182-d09261147f41", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fea9ea03-7a71-4398-a0fc-97f7e608b706", "sighting_of_ref": "indicator--e6610a03-4e34-439b-848f-e924b36d2f58", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcec396b-b9e7-4fa3-9f4b-aaf10b91f64f", "sighting_of_ref": "indicator--e6610a03-4e34-439b-848f-e924b36d2f58", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e503578f-8eaf-4e61-99e5-6be4632231cb", "sighting_of_ref": "indicator--a3363913-1866-45c6-9cbc-e3c60e9829a3", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bf3c61b-6e79-4eda-84e8-2cdbbff9741c", "sighting_of_ref": "indicator--a3363913-1866-45c6-9cbc-e3c60e9829a3", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ae4409d-3868-47ed-bcd5-61be2cb7d471", "sighting_of_ref": "indicator--1d8a080c-8214-4874-b1a7-f5d1d19ca166", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89cf73b7-f66c-445e-b2f1-eececa1070b2", "sighting_of_ref": "indicator--5a96772c-c5ca-4604-b766-baa453c42721", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb0e7930-2db3-441d-8f3d-6a744b51069d", "sighting_of_ref": "indicator--15949220-f220-4ff7-9648-b74370be0b1f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18b0505f-4eac-4517-ae23-d15e149e6ff8", "sighting_of_ref": "indicator--2a822335-8fe3-4975-afb5-679d7463b6a2", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98a8475a-aebb-43bb-8213-40cf6ebd1cc6", "sighting_of_ref": "indicator--c591b454-5d09-4c4b-952f-f9289b0357fa", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--095c35ef-56a0-4ec8-8eab-70ccab1a58d0", "sighting_of_ref": "indicator--3687725c-ba87-48c6-bb44-ac48c65c50c6", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75d4371f-344f-4486-aa2a-c09ec559719a", "sighting_of_ref": "indicator--af3df833-46d0-4bf3-b8a0-17e58bb07b69", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--501399e3-7d96-40b0-b72d-3456898868e2", "sighting_of_ref": "indicator--9689dec5-080d-4734-9fd8-0984c5870ad6", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2bf935c-c6a9-4ce2-b65f-31b2e68adcfc", "sighting_of_ref": "indicator--7c0fef6e-988a-4088-a35a-23a87f1cba25", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--772b1807-0e48-45e6-9456-bbcbc4c73ac9", "sighting_of_ref": "indicator--026da5a2-7c16-40ef-a0ab-299a2fcbed84", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccbe10fb-db6a-4e31-b79e-1adbf7fb363f", "sighting_of_ref": "indicator--229e5adb-35cc-4580-b5b2-eaeef9cbe993", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a23de5de-5533-4a20-8241-6845420a3ebc", "sighting_of_ref": "indicator--30d9658b-7be8-43de-b1a5-a9dfef796306", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9d68317-12ac-4a28-b8db-8899d3385489", "sighting_of_ref": "indicator--0fc499e3-46a1-46de-b5ea-c5d0cf7f6e68", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baa9af22-d3f2-4da2-adba-0970f2d6b5b2", "sighting_of_ref": "indicator--fec2f19a-5730-41d0-b5a9-d5b231bc0e9f", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--768c103d-bcff-43d3-a97f-e35e3fad9536", "sighting_of_ref": "indicator--3b9ff3bb-5b42-4349-8278-b39df6e6cca0", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--365206b0-b5e7-41b4-bcc2-301e85da67bf", "sighting_of_ref": "indicator--09098170-dad3-4572-988f-67245a53d774", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ed0172b-70d8-449c-b11c-479db0d3ffbe", "sighting_of_ref": "indicator--09098170-dad3-4572-988f-67245a53d774", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f838f987-d63f-4999-80e9-63e1aa8d31c0", "sighting_of_ref": "indicator--65e40695-878f-4a73-8cdd-3685fac4d50b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62c5aa80-335d-416b-8701-e42eca5404b0", "sighting_of_ref": "indicator--8e5d84f3-412a-48eb-aa39-cf541495e93c", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--543f08e5-1e07-411b-8094-d5194c2d686d", "sighting_of_ref": "indicator--8e5d84f3-412a-48eb-aa39-cf541495e93c", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee388153-154e-4440-8adc-7f836cd43d7f", "sighting_of_ref": "indicator--8e5d84f3-412a-48eb-aa39-cf541495e93c", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94997b66-3030-4bbf-81df-c66fded930ae", "sighting_of_ref": "indicator--cca50f77-7f93-412b-8f5f-9f48fc2bb137", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8465a4ba-fc4c-47c3-9458-d72403e5791d", "sighting_of_ref": "indicator--a788b263-7be0-494d-8d77-5c8408445235", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1701e68-d651-4c44-aade-b1189610612d", "sighting_of_ref": "indicator--3afa09b0-5eaa-457c-ac1b-410084627c84", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c3828ce-a45a-4bf9-aa36-4d9f7c539a5c", "sighting_of_ref": "indicator--0d190275-34d3-4099-87bb-d36753551a6e", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2bbf5fe-120e-47ce-a956-042bbc8f33ff", "sighting_of_ref": "indicator--a8f35708-ff28-43b8-be55-daef9131bcb5", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6051899e-4fbe-4a77-bc2b-253e74e0111c", "sighting_of_ref": "indicator--c2512830-38f2-457a-9bea-eb533754ed2f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3f4aa9d-7f09-4d3e-9958-4733b1148a46", "sighting_of_ref": "indicator--73965b43-b3fd-4173-a257-b36f47c23061", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0dd8d71-7368-43d1-b1c1-e29162958883", "sighting_of_ref": "indicator--11a11c98-b84e-4a4a-a18e-03d6853a8dba", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--434a13ee-b6d5-46ee-946c-a047381e1cdd", "sighting_of_ref": "indicator--59668511-005c-4862-ab8e-1845ab943062", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f347b5f6-4bc2-460c-9999-5b993d2ff970", "sighting_of_ref": "indicator--92af26f9-61f5-42f0-a568-70583a4802ed", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0b30299-9ddb-4d55-b38c-4814015775fd", "sighting_of_ref": "indicator--023bf3a5-dc47-481d-b2ce-1bf5e8f95e25", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5071718f-9375-48aa-9fb3-30ab19d8d4fc", "sighting_of_ref": "indicator--023bf3a5-dc47-481d-b2ce-1bf5e8f95e25", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3068d7c6-0f8a-4401-a39c-146fbfcbb276", "sighting_of_ref": "indicator--023bf3a5-dc47-481d-b2ce-1bf5e8f95e25", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c15d5cf-d981-47da-b179-7f05e09d2294", "sighting_of_ref": "indicator--9d551702-b8e8-4b63-850c-19bf4a524f82", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76e8a363-f5e3-4f15-b160-5894c284ef77", "sighting_of_ref": "indicator--60b8ac49-623e-4a78-9f27-fcf4848430bf", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d882b546-0a0a-49ae-9bcf-d90dcd39bd3f", "sighting_of_ref": "indicator--fd7ab64d-282e-4a8a-ab96-6c7f3d92b065", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--989e0c7c-e2d4-4ae8-a176-a6cb89e1aa90", "sighting_of_ref": "indicator--fd7ab64d-282e-4a8a-ab96-6c7f3d92b065", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca605650-cef6-4ca6-8810-58fc24815ce4", "sighting_of_ref": "indicator--fd7ab64d-282e-4a8a-ab96-6c7f3d92b065", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2648d754-470b-481c-ab0e-10c379013f8d", "sighting_of_ref": "indicator--c45e4e5a-d6ec-42ec-9f1d-e945c6dc4c3f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d822e463-5669-4a38-b225-932df828404b", "sighting_of_ref": "indicator--c45e4e5a-d6ec-42ec-9f1d-e945c6dc4c3f", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8eba632e-09a8-4cfd-998a-9ee9399fee5c", "sighting_of_ref": "indicator--c45e4e5a-d6ec-42ec-9f1d-e945c6dc4c3f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3b0db29-672b-444b-8c29-05852af0bfaa", "sighting_of_ref": "indicator--a4b71c08-93ac-4f7f-b143-6c982be9ebb0", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b3e770b-ce99-44c2-9020-437543176472", "sighting_of_ref": "indicator--702e5457-d206-42ea-b252-0f91c6696a8b", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--121338f3-45a2-4766-99c1-59522a4f7565", "sighting_of_ref": "indicator--bbe745ba-f4ae-4d4e-8e1b-18e11340578e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7face4c-c950-42ed-8ec2-d561e86c716b", "sighting_of_ref": "indicator--3d578e2f-0db9-4aa7-90e5-ffe9b1cf2e59", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d4cacc9-7699-4876-a8ae-a6230505ee24", "sighting_of_ref": "indicator--3d578e2f-0db9-4aa7-90e5-ffe9b1cf2e59", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29f5d69a-0927-486c-8de3-9dcc4231ad6e", "sighting_of_ref": "indicator--3d578e2f-0db9-4aa7-90e5-ffe9b1cf2e59", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acda6d26-577a-47a0-9af4-7014ce881942", "sighting_of_ref": "indicator--9cb9daa6-f989-4732-a7ba-1e24e55cd2cf", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d63ec0c-e244-4e14-9cbe-c6ecb1f4141d", "sighting_of_ref": "indicator--01b97f05-a7dc-4b6b-9ab6-ae25aed17e23", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa9cef16-b90f-44eb-af00-43af7e2d41c0", "sighting_of_ref": "indicator--01b97f05-a7dc-4b6b-9ab6-ae25aed17e23", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68965ecb-3273-435c-9c9f-a81ab31c6e09", "sighting_of_ref": "indicator--4e88fc62-8f43-473a-b277-9144260d0d5b", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51ca027d-290f-42fc-b24e-1c20c4915f0b", "sighting_of_ref": "indicator--4e88fc62-8f43-473a-b277-9144260d0d5b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a6fa75a-81ee-431e-b951-05318dd21290", "sighting_of_ref": "indicator--4e88fc62-8f43-473a-b277-9144260d0d5b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62121435-7b3c-4cb4-bf64-73d39936f5f8", "sighting_of_ref": "indicator--29a3cf72-0c6a-4f12-ad4a-87d9cfa13c57", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--331382e5-0141-4e07-8f86-a1f25abd256f", "sighting_of_ref": "indicator--29a3cf72-0c6a-4f12-ad4a-87d9cfa13c57", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18f854a7-da78-47f7-bd25-8a626b474350", "sighting_of_ref": "indicator--29a3cf72-0c6a-4f12-ad4a-87d9cfa13c57", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c8a41e6-64ec-499e-acbe-135154d027f0", "sighting_of_ref": "indicator--737d579d-9f34-4b52-8178-a1a49fb6b5e7", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7652955f-2ad2-4c04-8ee8-ecbe1e582140", "sighting_of_ref": "indicator--737d579d-9f34-4b52-8178-a1a49fb6b5e7", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d79a362-e0a4-4635-8fdd-c7a08630b414", "sighting_of_ref": "indicator--737d579d-9f34-4b52-8178-a1a49fb6b5e7", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8729774-ca9e-4de8-a6f4-37a2d46781fd", "sighting_of_ref": "indicator--a82c60fd-a6e2-4a77-87af-ddf00c55df57", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--702117ec-febc-4e40-9730-753a90e1feda", "sighting_of_ref": "indicator--a82c60fd-a6e2-4a77-87af-ddf00c55df57", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97a70228-f3c7-4db1-a34c-8aa0b4b60936", "sighting_of_ref": "indicator--a82c60fd-a6e2-4a77-87af-ddf00c55df57", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6a36062-d398-40a2-8d90-c4858c8298c0", "sighting_of_ref": "indicator--7db5add5-1059-4e34-970f-c0f143fda303", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28cf9746-ac6e-4f59-8662-37abb12ec08e", "sighting_of_ref": "indicator--7db5add5-1059-4e34-970f-c0f143fda303", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0b8916f-bdfb-47f8-a7e7-9e3e53042e93", "sighting_of_ref": "indicator--7db5add5-1059-4e34-970f-c0f143fda303", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dc3ba8f-bd25-4f14-ba71-1768c993e6cf", "sighting_of_ref": "indicator--f537edb4-7a0f-4d55-9c5c-cf5e719791ad", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb37a6c1-5964-4d47-920a-79ac7d75f887", "sighting_of_ref": "indicator--c0ce439a-8694-4e8e-8f41-83d4e856078d", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44931b7b-8d38-4119-ae9f-45afc344df9d", "sighting_of_ref": "indicator--c0ce439a-8694-4e8e-8f41-83d4e856078d", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c555863-eb64-475a-9615-41cf8e9ebbd5", "sighting_of_ref": "indicator--5a7ace9d-7c27-4ab0-99d8-35ce02491f66", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f3a1b6c-0c14-40ae-8333-b048b1f588da", "sighting_of_ref": "indicator--5a7ace9d-7c27-4ab0-99d8-35ce02491f66", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5732bd83-534e-4ad9-952f-f4df6ea3b526", "sighting_of_ref": "indicator--5a7ace9d-7c27-4ab0-99d8-35ce02491f66", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c8cdd90-4ec8-48a7-9b37-f0cc4792b305", "sighting_of_ref": "indicator--2c40944a-480a-47bb-9018-e3e01de2f2a0", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e170b072-7560-42e9-ba40-11e59d72def7", "sighting_of_ref": "indicator--2c40944a-480a-47bb-9018-e3e01de2f2a0", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53f055d3-5523-4e8f-ad4b-bde48e962a15", "sighting_of_ref": "indicator--2c40944a-480a-47bb-9018-e3e01de2f2a0", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5b0e2bf-0737-4bcf-a2a2-f3a9011683b7", "sighting_of_ref": "indicator--8dce1b44-4409-40e3-bccf-b88a6bebf5f3", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7789fb55-3563-4ac4-ab0f-9fb073746e52", "sighting_of_ref": "indicator--8dce1b44-4409-40e3-bccf-b88a6bebf5f3", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93e9feef-b62b-417b-975a-56c7cd7d1f9a", "sighting_of_ref": "indicator--8dce1b44-4409-40e3-bccf-b88a6bebf5f3", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bd928eb-2a76-46cb-a550-ef4da7e9eb00", "sighting_of_ref": "indicator--156e52bc-9a06-4389-bb5e-3e1c71d06701", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3354831b-c061-4545-8d95-5fa4c9a38b52", "sighting_of_ref": "indicator--fc493ea4-fa9f-48ff-ace4-05e728e1b159", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6cc83fa-f567-468c-9264-da824148eb48", "sighting_of_ref": "indicator--fc493ea4-fa9f-48ff-ace4-05e728e1b159", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51ed6eb0-1b88-42e5-b674-e2f47a6f245a", "sighting_of_ref": "indicator--5bc392b2-7ea2-46e5-8d81-a155c4919b58", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19d589f2-cfa3-4303-b539-980779c0543d", "sighting_of_ref": "indicator--5bc392b2-7ea2-46e5-8d81-a155c4919b58", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72a6618c-2970-4fa8-aca6-f321500d6a19", "sighting_of_ref": "indicator--6b348858-c2eb-42cf-beb0-95b9af2a2cca", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08b2a5b6-ce9b-4b3d-986a-6d58ad1be96a", "sighting_of_ref": "indicator--7bfcbfdf-234a-437e-954f-87f6b3db8dc9", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07b0c4b7-47a0-4889-b7ec-1dab29efa712", "sighting_of_ref": "indicator--cbf871d6-a634-470b-a954-7169551bfe91", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5aacef16-dd1a-46d7-a358-1deedeca998c", "sighting_of_ref": "indicator--bdde73ed-45d0-44a5-9717-1a040bfb099c", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92a076d6-e4df-4c62-9d3e-5d84c50681f0", "sighting_of_ref": "indicator--1a6a577b-da3c-4243-a10f-05a4283dc679", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58c46ef9-7a40-4a99-bb99-e8728b7df404", "sighting_of_ref": "indicator--0dab6aa2-4801-4add-a085-8299e8013567", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc9a069b-5b26-4bdc-ac83-6d006f17d001", "sighting_of_ref": "indicator--a9d4029c-faf9-452a-8aa0-9d1a2db74e3d", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f2ff4d7-496f-4a77-8380-c5b9a078f883", "sighting_of_ref": "indicator--a9d4029c-faf9-452a-8aa0-9d1a2db74e3d", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3928e83f-0787-4cfa-96e5-ca6e81d99962", "sighting_of_ref": "indicator--a9d4029c-faf9-452a-8aa0-9d1a2db74e3d", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25436676-0c3f-495a-96c3-48f7ffe137f9", "sighting_of_ref": "indicator--03f44997-2092-406b-980f-2922687117b2", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea5b1dde-84aa-45db-850a-331c19fca2c6", "sighting_of_ref": "indicator--03f44997-2092-406b-980f-2922687117b2", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--420e8a69-30ce-4b75-b307-978de1f0cc0a", "sighting_of_ref": "indicator--03f44997-2092-406b-980f-2922687117b2", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1bf476c-85a8-4ba7-bbda-a7d23b96b869", "sighting_of_ref": "indicator--20376bad-42a5-453d-9393-f231e7ebb03d", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b6030e3-d187-4d38-b622-0bb746a2521a", "sighting_of_ref": "indicator--20376bad-42a5-453d-9393-f231e7ebb03d", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a091020-adbe-498f-b3de-036d087e9dff", "sighting_of_ref": "indicator--20376bad-42a5-453d-9393-f231e7ebb03d", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--903d7859-e633-4e6a-98db-efbd469593e1", "sighting_of_ref": "indicator--b47ce8da-ac8e-41f4-a6e0-bc49ee2581b9", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d813b60-b535-4b9c-86bb-495247e4c871", "sighting_of_ref": "indicator--b47ce8da-ac8e-41f4-a6e0-bc49ee2581b9", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e468344e-2f56-449e-af6f-5d84a020a388", "sighting_of_ref": "indicator--b47ce8da-ac8e-41f4-a6e0-bc49ee2581b9", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55521bf7-ce95-4bbd-922c-c0a63d2bd53d", "sighting_of_ref": "indicator--93576f50-dcbc-4b16-bf1d-6257a4830bb9", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0c5e082-0d49-46f7-b237-ee53f49b61f0", "sighting_of_ref": "indicator--93576f50-dcbc-4b16-bf1d-6257a4830bb9", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3df33f4-f5ee-4993-86c4-32e58a757046", "sighting_of_ref": "indicator--93576f50-dcbc-4b16-bf1d-6257a4830bb9", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64ec84d0-4e37-44d2-a34d-eaa316baf79b", "sighting_of_ref": "indicator--68822c5d-523a-4a05-8ff6-7b3c9a5852d5", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71e5fee9-6b3e-4e47-b4f2-1000eb827a74", "sighting_of_ref": "indicator--68822c5d-523a-4a05-8ff6-7b3c9a5852d5", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2267c082-326b-4d04-8b8a-85cd34a17bc9", "sighting_of_ref": "indicator--68822c5d-523a-4a05-8ff6-7b3c9a5852d5", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d835c252-432a-4d3f-ac6b-5115e4d13706", "sighting_of_ref": "indicator--f1f17c6f-69a8-44e4-927f-020cf690afe5", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19add885-30ab-4230-8fbb-57785bc22c71", "sighting_of_ref": "indicator--f1f17c6f-69a8-44e4-927f-020cf690afe5", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--100ac703-002f-4296-8bf3-0f3a0c9e996f", "sighting_of_ref": "indicator--f1f17c6f-69a8-44e4-927f-020cf690afe5", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe9c048e-a966-4043-ab55-7c9c2a4c3a1b", "sighting_of_ref": "indicator--e3bbb57f-3559-4de2-8e62-c5ed9930474b", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bcd00ed-b2e5-40d3-9e5c-969f124eb7f6", "sighting_of_ref": "indicator--e3bbb57f-3559-4de2-8e62-c5ed9930474b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28cc18a3-a9dc-4654-bb90-15dc07483056", "sighting_of_ref": "indicator--e3bbb57f-3559-4de2-8e62-c5ed9930474b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b37fea3b-5918-4ed0-b5c4-d2d2db4948f6", "sighting_of_ref": "indicator--574958ea-af51-4981-b1fe-2290409c1459", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5eee82b1-33cc-4a36-9a50-8d1ab3bbae94", "sighting_of_ref": "indicator--574958ea-af51-4981-b1fe-2290409c1459", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c71e17f-fa66-42c1-8cc9-f9f1bb015ba9", "sighting_of_ref": "indicator--574958ea-af51-4981-b1fe-2290409c1459", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9925d452-4032-4d13-b192-34f2eb676a64", "sighting_of_ref": "indicator--8c395911-9908-49bc-a373-f577aad84340", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89e04ad9-ade0-4b69-ad88-6562c4e44223", "sighting_of_ref": "indicator--8c395911-9908-49bc-a373-f577aad84340", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90af88ed-ae78-42d0-a505-e4d8281e6e20", "sighting_of_ref": "indicator--8c395911-9908-49bc-a373-f577aad84340", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f8b8969-183a-4364-989d-a2b85a771b60", "sighting_of_ref": "indicator--0eb1dd59-15f3-4454-b80e-ca74a7aa7393", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4bb52de-3eed-4b2b-a056-214314a33d05", "sighting_of_ref": "indicator--0eb1dd59-15f3-4454-b80e-ca74a7aa7393", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86e74864-37e5-4501-a1b1-8d0943f1cb69", "sighting_of_ref": "indicator--0eb1dd59-15f3-4454-b80e-ca74a7aa7393", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef03229f-1027-4fca-bc87-11d93a398b84", "sighting_of_ref": "indicator--692cb54f-7405-4c48-9551-5c0f9f30e995", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4c183f8-693e-4b83-bcf7-bdaeb1f46aeb", "sighting_of_ref": "indicator--692cb54f-7405-4c48-9551-5c0f9f30e995", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d8c0f0b-a716-4f66-ae64-7ca6a65f3cf4", "sighting_of_ref": "indicator--692cb54f-7405-4c48-9551-5c0f9f30e995", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aafa3b3c-d8ed-4f8e-b4d9-5cacc8cacb72", "sighting_of_ref": "indicator--84977cf2-d96e-49a5-afc8-970b3ee4e448", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cc6705f-603d-495b-96fd-a28afd79cc51", "sighting_of_ref": "indicator--88428164-54d2-4391-a204-02055b346d1a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b95485e-5057-4a97-b5a9-c54397f7930d", "sighting_of_ref": "indicator--400aed5e-153b-4bd1-aac2-268807d5f6ba", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f76eaa80-5323-47eb-bac8-5e182521a052", "sighting_of_ref": "indicator--400aed5e-153b-4bd1-aac2-268807d5f6ba", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d640ce02-f1f3-4d33-b695-323321a41cad", "sighting_of_ref": "indicator--07d59f4c-a5e2-474d-8188-ee1fbf7929fb", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1915b5e-93fb-48da-a60e-4e035cdb285c", "sighting_of_ref": "indicator--df28bb43-6bb8-409b-b44c-573379558661", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7877c24-d667-430f-b52e-a13aa912c791", "sighting_of_ref": "indicator--e1153be0-a655-442a-ad0f-b519dccc2559", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02ab0400-3f6c-4fac-b336-1d51969e17db", "sighting_of_ref": "indicator--6b802d75-d38e-4e04-92bf-8cd094cdef11", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a56571b-8262-4788-9d63-6cb82b0a517b", "sighting_of_ref": "indicator--a30f83ad-8d80-4be8-9ec4-c6eb3b1d144c", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc0de89f-b3f0-4f13-b2f9-02fa3d51d0bb", "sighting_of_ref": "indicator--90d5a3cc-eaf5-42e0-9cd9-db80b76f4275", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4143b15f-c4ef-4493-a08a-62f06dadbad2", "sighting_of_ref": "indicator--4bf0df71-c3cd-422d-b1bc-fbfc220b156f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e3222fe-dac3-4f84-bba8-c99e4ee83e3f", "sighting_of_ref": "indicator--dc6526d8-76e4-4f00-b013-48b15f7b46da", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--289658d3-20c9-4e30-b5a2-3f273ab9f06e", "sighting_of_ref": "indicator--027490d1-cf79-4054-b6ab-5eb021f030fd", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf9c10ec-e55f-4cef-a77b-0812f1a0086c", "sighting_of_ref": "indicator--027490d1-cf79-4054-b6ab-5eb021f030fd", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc087f37-51a2-4a91-b2fc-063bb57ee556", "sighting_of_ref": "indicator--027490d1-cf79-4054-b6ab-5eb021f030fd", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77c2c108-b228-4572-9c99-0e28e4dc1a9a", "sighting_of_ref": "indicator--84c47f64-1f48-444a-8c17-0934710adb0f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--058498a0-0ad9-4412-9f46-9550e57954e7", "sighting_of_ref": "indicator--84c47f64-1f48-444a-8c17-0934710adb0f", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c7dea35-ca69-4a3b-a350-e9686406a86e", "sighting_of_ref": "indicator--84c47f64-1f48-444a-8c17-0934710adb0f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5f74a64-7317-43cb-9083-b9ec1c26cc6c", "sighting_of_ref": "indicator--d481ef0a-13ff-4f54-aac3-1d87688753b4", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61fce58b-3706-40b1-a1bf-bbf07f962a24", "sighting_of_ref": "indicator--d481ef0a-13ff-4f54-aac3-1d87688753b4", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3572633d-4ba6-4c86-a0f6-1bfccd300216", "sighting_of_ref": "indicator--d481ef0a-13ff-4f54-aac3-1d87688753b4", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10b57d56-90c3-45f0-a0ff-adf3f4c58037", "sighting_of_ref": "indicator--a99ad9d0-b793-4df7-aa8e-3ffa17b093b9", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2065c643-76b8-4de4-9489-26ca2a715bc6", "sighting_of_ref": "indicator--a99ad9d0-b793-4df7-aa8e-3ffa17b093b9", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62f5c2a0-b672-460b-ac4b-291f2254f568", "sighting_of_ref": "indicator--a99ad9d0-b793-4df7-aa8e-3ffa17b093b9", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--484187f8-ee5c-47e7-9cb3-15d45b01a1d0", "sighting_of_ref": "indicator--61946da3-5c16-47dd-9bba-2f5852fd1c0f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bdbbd1e-4c64-4be1-a489-b10ef23c3484", "sighting_of_ref": "indicator--75162567-8ac4-42d4-ac9e-b1a052776317", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd4ddd75-9564-44b8-9f98-2c924a7ae1b7", "sighting_of_ref": "indicator--75162567-8ac4-42d4-ac9e-b1a052776317", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd2fdefa-492c-4308-be41-aa5b9a4a2b8c", "sighting_of_ref": "indicator--75162567-8ac4-42d4-ac9e-b1a052776317", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c791f0a-1387-45c1-a9f8-f2a66a2550da", "sighting_of_ref": "indicator--14000b59-737c-46c6-8dea-cc5466bfc8fc", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bde0da1-1a76-47f3-bddf-6c423c526ca2", "sighting_of_ref": "indicator--14000b59-737c-46c6-8dea-cc5466bfc8fc", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9eed3f9-eae7-4ed3-b167-6ee039b352ca", "sighting_of_ref": "indicator--14000b59-737c-46c6-8dea-cc5466bfc8fc", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e32459c-54dc-4c37-8df9-7dedceef0970", "sighting_of_ref": "indicator--7f86fe3c-479b-451f-8434-956f97566d2b", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a8b16a2-a605-49ec-a36d-8ecd7906db90", "sighting_of_ref": "indicator--7f86fe3c-479b-451f-8434-956f97566d2b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f37dce60-684b-447d-9a1f-40918688e8c4", "sighting_of_ref": "indicator--7f86fe3c-479b-451f-8434-956f97566d2b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34a8ace6-e677-4440-80c1-bcad65e59429", "sighting_of_ref": "indicator--a4235fae-bcbe-4e33-b995-23c6b44e6223", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f53d4b0d-b028-4c87-9715-aa2bfb1c31ee", "sighting_of_ref": "indicator--a4235fae-bcbe-4e33-b995-23c6b44e6223", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a72af7f4-856d-4422-a771-875084945f77", "sighting_of_ref": "indicator--a4235fae-bcbe-4e33-b995-23c6b44e6223", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--086e2925-6fa0-4604-a4d4-d922ae084feb", "sighting_of_ref": "indicator--097b6763-54d2-4530-96b3-c1488728bb3a", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15b2a088-228b-4737-9ba0-58456a71e422", "sighting_of_ref": "indicator--097b6763-54d2-4530-96b3-c1488728bb3a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7854e405-1fb7-4270-a302-fd9607ca3dd2", "sighting_of_ref": "indicator--097b6763-54d2-4530-96b3-c1488728bb3a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e723494-4997-4b19-9610-1da41d99231e", "sighting_of_ref": "indicator--cbfb8f0f-7853-4ac7-80ec-4d187c8158ac", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06feab2a-2ad5-409e-ae16-0920788e4078", "sighting_of_ref": "indicator--cbfb8f0f-7853-4ac7-80ec-4d187c8158ac", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38e6820b-384a-48f7-9195-e364535a2deb", "sighting_of_ref": "indicator--cbfb8f0f-7853-4ac7-80ec-4d187c8158ac", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35900aec-ac78-435f-bc60-2334e7a94bca", "sighting_of_ref": "indicator--e614198f-05df-48d5-98b9-4a67dc726d64", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dee4de84-3d38-4837-9113-44e34f8e0ad2", "sighting_of_ref": "indicator--e614198f-05df-48d5-98b9-4a67dc726d64", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2aa562b8-c001-43a6-a405-45293ca3717a", "sighting_of_ref": "indicator--e614198f-05df-48d5-98b9-4a67dc726d64", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02187bdf-2084-45bb-9198-cf820b28fdfc", "sighting_of_ref": "indicator--c4b47549-326e-4621-ac12-471b22476466", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6f814de-30d4-415a-8dc3-5204b9498fbe", "sighting_of_ref": "indicator--c4b47549-326e-4621-ac12-471b22476466", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c6b3b6d-7ad4-48ed-b8bd-785befeaedf6", "sighting_of_ref": "indicator--c4b47549-326e-4621-ac12-471b22476466", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0149ec43-a259-4432-964f-266756711c76", "sighting_of_ref": "indicator--daf18e51-f11e-4793-82d5-9645bbc9d19f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--945343d9-660c-4915-8c14-36d820130e57", "sighting_of_ref": "indicator--daf18e51-f11e-4793-82d5-9645bbc9d19f", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6d131b9-840b-4ea7-bff3-b2d6a4403e8d", "sighting_of_ref": "indicator--daf18e51-f11e-4793-82d5-9645bbc9d19f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f58c34fa-87b5-443e-9709-5a19b37bd020", "sighting_of_ref": "indicator--5374a066-209f-4118-8b35-a02b6e08d974", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfd0ad79-2b0f-4218-ad35-3331f4032f1f", "sighting_of_ref": "indicator--5374a066-209f-4118-8b35-a02b6e08d974", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea643391-5d87-43ca-8471-a3433b90f997", "sighting_of_ref": "indicator--5374a066-209f-4118-8b35-a02b6e08d974", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e8b8b6e-e64c-429e-a3e9-9a5edd1eec2c", "sighting_of_ref": "indicator--255ad792-07f4-42ef-b2ae-455afe2b8715", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2c467ac-aeaa-41e3-8093-2588b55ae39d", "sighting_of_ref": "indicator--255ad792-07f4-42ef-b2ae-455afe2b8715", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f46e0cb-217e-4e4d-918d-ed1769608512", "sighting_of_ref": "indicator--8ed7b6d4-aaa1-4bbb-a7d2-2d447f56af44", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f44f489-a19a-4c78-957a-27f856777cd5", "sighting_of_ref": "indicator--8ed7b6d4-aaa1-4bbb-a7d2-2d447f56af44", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18369563-fe4b-4060-b514-df8558140c17", "sighting_of_ref": "indicator--92094673-2f4a-4eac-84ce-281be073b132", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--473b93b3-28ec-411c-96bd-c8e279b15e56", "sighting_of_ref": "indicator--92094673-2f4a-4eac-84ce-281be073b132", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--774fe208-3019-4b86-a7f9-452423467f6c", "sighting_of_ref": "indicator--92094673-2f4a-4eac-84ce-281be073b132", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6320e321-f348-40c9-abbb-6ea2f0c2d964", "sighting_of_ref": "indicator--48b19490-f2c0-46b9-8533-24f05062981f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23613fdc-2c95-453e-8e44-626c949bcbad", "sighting_of_ref": "indicator--48b19490-f2c0-46b9-8533-24f05062981f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b886012-9a51-4db1-bac5-29b6164cc84b", "sighting_of_ref": "indicator--763a1d19-6150-40ec-aa76-cd1c385208ac", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f2a73c1-45f2-46e9-bc03-493f62d3c0ca", "sighting_of_ref": "indicator--7beee345-54ce-44a2-8a25-184b06e25d53", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--707f9884-eed9-4769-bf12-8c603af240bf", "sighting_of_ref": "indicator--cdead951-81e5-4b57-945e-d8ae14e5e0eb", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a09b03e8-a43b-4091-a900-f5048cc99539", "sighting_of_ref": "indicator--d2f5846f-ef1e-45f7-8def-71d16714f1a5", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fe78727-1f40-4a14-9055-de77a1a3c777", "sighting_of_ref": "indicator--d30763ad-222b-44bc-a1a4-c23c29a39a3c", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5e953b1-01ba-437e-afd8-49b3c8c5e81f", "sighting_of_ref": "indicator--4e7cf160-b85c-469d-9743-54935bf898da", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b800b56-453e-4cac-b0cf-5f39141925df", "sighting_of_ref": "indicator--41e51289-44c4-45e2-82ac-6722a0a904b7", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--461c4ac8-da0f-484d-8430-dd20d9dceac9", "sighting_of_ref": "indicator--15fdb1be-b576-4c0c-ad8f-3d756da4edf9", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2d80b1e-881a-437c-8ad7-17ee9657cba5", "sighting_of_ref": "indicator--3a8c4656-663d-44f1-b743-dcff130e268e", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcb0d777-9ec6-4596-9994-5d1f1fa21d93", "sighting_of_ref": "indicator--f461ecc8-7676-4cac-a42a-24bcd0bea30b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d69fee6b-9774-46e5-94ae-afef7c3ce97e", "sighting_of_ref": "indicator--261c0f01-94ab-4ec4-95e8-18ec506b2a97", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bda0e0be-e619-4a06-aab9-c90d7b422d45", "sighting_of_ref": "indicator--e7e97dba-ba74-4638-a82b-e17348f70c45", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc227228-7106-483b-bf40-ae5cbb92cfd8", "sighting_of_ref": "indicator--12b2439f-caae-49e0-86bf-61940d441a94", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34fb05ab-b7d9-4d12-9403-c7549f13e4f8", "sighting_of_ref": "indicator--836661dd-ff6b-400c-a932-5bc210ebaac9", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f0303d5-a710-430b-81c9-861835aa45f5", "sighting_of_ref": "indicator--a28db56b-4842-4a80-8f22-660058d369ff", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dbd266c-96ac-45d9-a82e-6e7d33addc38", "sighting_of_ref": "indicator--b842652d-1ec5-4f46-91c9-9a31d05a6109", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--139e2351-f517-4341-9518-7ba445ed473c", "sighting_of_ref": "indicator--a4cf78e4-2cf7-48b8-bb4f-9d18762bd94c", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9b8287f-c03d-4980-b011-6350d290e701", "sighting_of_ref": "indicator--a9af097c-193f-4376-85b4-d57c4116fc26", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5678adbb-d735-4375-8648-bd2113e9316b", "sighting_of_ref": "indicator--c88a17f5-fb08-4cdb-91cf-96ffe7793463", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cca4fc90-6b1d-4210-abaf-115e741f211c", "sighting_of_ref": "indicator--49e6f1ec-72d1-4b6a-bf57-c2ea901b4a0f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05f5b13e-3334-4587-9020-09a0920ddd15", "sighting_of_ref": "indicator--fc22b459-6411-4da0-adc5-382c39af321a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f005176c-779e-446c-9d38-6f6362638fa2", "sighting_of_ref": "indicator--f93f0839-ee4b-4768-befa-4c365fe86d50", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b96d62fa-342a-42b2-92a4-31ceef5fa9e1", "sighting_of_ref": "indicator--ee61c7a8-bb8e-4092-a31a-b528be4bcff6", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8f9058b-cee2-4ab2-b6ec-def735ede20f", "sighting_of_ref": "indicator--bddc44bc-5f61-4f55-a074-47a7a6759304", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee015980-2907-4368-ad2b-21f4c0c11a44", "sighting_of_ref": "indicator--d8eb4d04-6ecc-417c-a9b5-ba8bd2712e0e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e6dce5a-1ac1-4bbb-9267-a841ee142c95", "sighting_of_ref": "indicator--b037c399-3f07-43d8-bc2d-8646476bb07f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--def750a8-adea-479a-82e8-22db04b2780c", "sighting_of_ref": "indicator--d5e78054-a7bc-4291-96cd-a3de7c1fb319", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89c72858-5a3b-48d2-aa5a-c8d1195da40f", "sighting_of_ref": "indicator--80c0c24f-bd00-4eeb-8622-f580072ce486", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81d9399e-8f00-4937-b0c9-5cf2c0b7764f", "sighting_of_ref": "indicator--5fd23ffc-0b47-457e-a721-ac9b94321e44", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5db2dd1e-2438-4689-83a3-2ac2b57ff556", "sighting_of_ref": "indicator--4e24407b-3b88-4f2f-810d-763572391e9d", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dacfc10-11c1-4c09-ae9e-de89f7330b73", "sighting_of_ref": "indicator--130fb4bc-de29-46a8-b8f9-0098d42cdfb3", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9c8ef8b-41ea-412e-9b29-dc5151ff59c8", "sighting_of_ref": "indicator--a53629fc-3ad5-4bff-8eba-3782acd6c7dc", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4da760e-a707-49ad-8ae0-530263af1976", "sighting_of_ref": "indicator--b6e6e05d-8f50-42f2-bc0b-63ac290863cd", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08785a04-6408-4213-b279-2fbe55f0fc70", "sighting_of_ref": "indicator--6679c8d7-b62e-452b-8130-5abe03528177", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af8359f6-1947-4d05-a7e2-f7c3b38fd513", "sighting_of_ref": "indicator--56a7ff25-bf84-49ed-ac7d-454460cdbf11", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33550c17-380c-4614-a63d-fb1e917bd3f2", "sighting_of_ref": "indicator--c2408d90-d8b1-4267-acab-4107e9f73051", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a5b4639-12cf-494e-bc71-772030d2b794", "sighting_of_ref": "indicator--42072937-e983-4541-8209-c06decaaee03", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e2e2f42-8eda-462c-88b0-aa3d4fb929da", "sighting_of_ref": "indicator--c6b8166f-5a73-491b-902a-e917e2615912", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a43eceb-fd7a-4c9f-bd74-7447d3ff136f", "sighting_of_ref": "indicator--4d63e515-e0aa-4779-baaf-c742adf3399f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f387a57-2180-4d5a-aaa1-20981d82708c", "sighting_of_ref": "indicator--43685e78-83dc-4e7e-8a7b-0e9c6c983bdd", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cef7705-9257-429c-838a-2987bfafc33a", "sighting_of_ref": "indicator--0311fbed-1028-4e30-ae58-aa05ea37e5f2", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ed5242c-b1ad-4a61-b027-7150e107ea5b", "sighting_of_ref": "indicator--4db16a88-cdff-4545-9651-0967dce6b7a0", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48df5a24-ff07-4eab-a4e5-8ac3480434f4", "sighting_of_ref": "indicator--4da350be-9664-40f5-b1c3-f00a44166fc9", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--412cf0d9-0631-41fd-9a12-3658bdab7ed1", "sighting_of_ref": "indicator--14c1d899-3822-4843-ad87-f2a916a55064", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--321c15fa-c84c-433e-b4d7-cd6b8e1902f6", "sighting_of_ref": "indicator--cce6d64e-3721-4d07-951b-c3ece742231c", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3aafa096-2a95-40e2-933a-a55116e64a58", "sighting_of_ref": "indicator--cce6d64e-3721-4d07-951b-c3ece742231c", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f78c3f7-f966-4109-ba90-a346755d130a", "sighting_of_ref": "indicator--c7f84f1e-9b66-4ab5-8733-4fc1a57fc834", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b800cd43-2d82-49c2-bfb7-ebc04ca071db", "sighting_of_ref": "indicator--be3bb5d8-f98a-4373-ab1a-abfd3c90ee26", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48701559-9d7f-4d09-81c6-8f2e240f17f4", "sighting_of_ref": "indicator--7a72ccfb-515b-48e6-9dbd-801d708cf5ff", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12392853-907f-43df-96c7-9eec0074667b", "sighting_of_ref": "indicator--8c0228e8-e4e3-475c-9172-416f3e6b4f13", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bc5fc0a-d74f-4e27-ad10-31269e24d975", "sighting_of_ref": "indicator--7b32f022-c3b4-4853-ac28-9d84bab2bca4", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03c3fac4-8558-4d62-9dbb-6d1875968be2", "sighting_of_ref": "indicator--4b105f40-6d4e-4d62-9677-b36a1c13fc92", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b8b2049-ccb3-4e8d-8bb7-c8364bc24ad4", "sighting_of_ref": "indicator--4511a55a-758e-4a7d-880b-c015fd16b5fc", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--847a64e0-a1a3-4407-ba8f-5ae5f4f9ecac", "sighting_of_ref": "indicator--d385a1b1-311e-4448-a72a-b11c4ea09c53", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a163bcb4-5714-4185-85f0-35226a5a2ef6", "sighting_of_ref": "indicator--f6c8929d-4eae-4189-8e70-46841bd2805f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b55c8cc-67ad-471a-8a73-98ac1a1b5f16", "sighting_of_ref": "indicator--73eb1f5a-314a-4da3-9734-cb7584040f79", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b677dec-12cf-42d5-a06a-f046e9a17af2", "sighting_of_ref": "indicator--71dfc75b-b75c-4fbe-b8cb-8eb45d3c2a5f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6484b0f0-87a4-41ba-a253-56811a0fedea", "sighting_of_ref": "indicator--d2b7a55b-52ed-4369-a71e-dabc1d8648bb", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6bbc9a4-07ef-41e3-ac99-0e8e98cce719", "sighting_of_ref": "indicator--eb37c3aa-567a-4c6d-99d4-94676d9fbb45", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa7c2e81-5d5a-4239-9ebf-6d8e5b849da1", "sighting_of_ref": "indicator--f12afa05-898e-427e-9750-add1f98d539b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9292951f-2fdf-41ad-999c-edc76ccd1a7e", "sighting_of_ref": "indicator--5b448389-a9e2-40e9-956b-6ad90da0a23e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3b97e43-779a-4cbd-ae66-5f93bb98cb9c", "sighting_of_ref": "indicator--002afe45-9805-4a3c-bae6-9a6a22c7f277", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b07d9518-b959-439f-974c-a25e2ca67678", "sighting_of_ref": "indicator--42d9ff6d-ab43-4dd8-8eb3-c4f3147bd3a9", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f6d0fb2-30e8-4d8c-b6b7-755b854808a5", "sighting_of_ref": "indicator--b6c214d5-65b0-46d1-b06f-7acf93f54a4d", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c4bcf4f-7739-4a81-858e-a2dd2dd55ad5", "sighting_of_ref": "indicator--30e81a2c-8a43-428e-b290-5e10d5e8d8b6", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29ccf39b-e2a8-4c6d-bf52-ad0bf731738c", "sighting_of_ref": "indicator--dfc3d5ee-2960-43d2-b0f9-dbee97186c2d", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1dceba2-bcfe-498b-b29d-c9f18c64cc99", "sighting_of_ref": "indicator--bb9caaf4-63b3-4ae2-bb44-4df59b240397", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1d88a11-8c99-4737-bbdc-947d415a6757", "sighting_of_ref": "indicator--3df35a95-3c26-4182-9ac5-630ebbd838e9", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e955ef0f-7ba9-4593-9332-778513d4d9db", "sighting_of_ref": "indicator--e6ea48e6-4d30-483d-b740-3b45be9d5662", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2376ca0-503b-470e-bd99-1bc77a6bea61", "sighting_of_ref": "indicator--b8d83601-32f1-4559-80eb-5926efb11fd5", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b47c95c9-094a-4519-b1e7-6ac6638a93a3", "sighting_of_ref": "indicator--0f202d1f-f3ca-4bc7-916b-43c4f1f9336b", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31696383-1580-40de-95bf-48c73cc2f2e2", "sighting_of_ref": "indicator--90058b0c-ac2b-486e-81dd-b81eca1097e3", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f678a371-e3df-40ce-b819-eabc0c642893", "sighting_of_ref": "indicator--f2727b0a-23d6-42a2-b000-32fe14d866ad", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9aa1ba32-7025-480e-be1e-25a858083e73", "sighting_of_ref": "indicator--fbce75e9-dda6-4481-945a-b92449426f84", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02b863a6-0b92-4a1f-a999-d7b3724a102f", "sighting_of_ref": "indicator--776ea41d-b5de-4172-9b01-706b8ebedfec", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35fb4c67-a39c-407a-9692-9b355bc96622", "sighting_of_ref": "indicator--585b92d8-b5b0-42f6-b198-6065201201f5", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--989c49ab-07ba-4d73-9a7c-3a80ff9e7dd6", "sighting_of_ref": "indicator--b5bf90da-9ad8-4c2a-b6cc-3d016ce50493", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec727897-8bf6-4aca-a391-990f1d15a0da", "sighting_of_ref": "indicator--b5bf90da-9ad8-4c2a-b6cc-3d016ce50493", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a67a9e6-27d0-492c-802d-dfb3554be4a3", "sighting_of_ref": "indicator--bb1f2bd5-2204-470d-a928-4e45c60daf53", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--572c36cb-eb70-4c25-9779-817615e13f4d", "sighting_of_ref": "indicator--2a4b1e80-12ac-4efd-9dfc-bcd5741ce92b", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f2c3ed1-a0fa-4707-ad1a-0a733fe9d8af", "sighting_of_ref": "indicator--2a4b1e80-12ac-4efd-9dfc-bcd5741ce92b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df12f980-950c-43a2-a32f-cea10fbc5698", "sighting_of_ref": "indicator--70604f54-c793-43f3-9f53-e8e3984678d8", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77bf6515-ee99-47e1-a79f-09f886fe941d", "sighting_of_ref": "indicator--70604f54-c793-43f3-9f53-e8e3984678d8", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60f9d8e0-b9ab-4bfa-b958-6de2ee97b523", "sighting_of_ref": "indicator--a0c29058-f646-420b-8150-b2f070904147", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1e19e41-56b3-42ff-b8c6-b152f70d4b66", "sighting_of_ref": "indicator--37a48af7-278b-4da1-8392-e27abfaececd", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f1dc467-01cc-4ac9-92f1-84d90887f6c5", "sighting_of_ref": "indicator--017b9873-ac46-41d3-8761-efa17633d761", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6d07294-8a8c-47fd-9c80-8029c0ce0fdb", "sighting_of_ref": "indicator--b56b242e-7148-420a-8faf-c9f062d5bc91", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df6c1125-5bdc-4a59-aa43-eac50e162d33", "sighting_of_ref": "indicator--fe792501-a31a-42e9-91ed-8e72a97637fd", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f79fb5f-4bc8-4b65-ac92-816ee6e4b1b7", "sighting_of_ref": "indicator--f91454a5-3203-4492-bb27-c315d82c8b1a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fe81e5d-306a-450c-a83c-80b5e260f0e8", "sighting_of_ref": "indicator--0ff0c74f-8092-4114-af7e-b6827870c35c", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f85508c-7d29-499b-aca2-1d74bf163b71", "sighting_of_ref": "indicator--b1d85607-96dc-44da-8ed7-10fd0fb012a4", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--086bef97-b64e-4582-b9dd-c74f4f9f85e1", "sighting_of_ref": "indicator--ef9dd716-425d-4413-a4e9-c6293d2e0cb3", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--313c19c2-d5d4-4540-9d78-db5ac3121dc1", "sighting_of_ref": "indicator--86af5eb0-d8a1-4fe4-a223-5372d97f2f13", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--575efefe-819a-401f-a30a-c60ebeb5898b", "sighting_of_ref": "indicator--5336cb1f-f99a-4039-8b99-372275e478d5", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26157afb-e824-4326-aa07-e7ee74a4472b", "sighting_of_ref": "indicator--c61d95fd-4c28-4003-8109-22ae6d0ed1af", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc78329b-1ee8-4d0f-ab95-ecc1f7c0b6fd", "sighting_of_ref": "indicator--1765dd2a-1168-4596-828c-2d8783700864", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8a4944c-2237-4d58-9704-7eeea58c8a37", "sighting_of_ref": "indicator--0a7f7508-9237-4621-b429-c60c4fcd589d", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69f7d80b-9302-4cbc-ae18-438616a79755", "sighting_of_ref": "indicator--52ee17e6-eb1e-4e45-a0ae-72bba80aeb3d", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d728c748-4401-4e2e-9b6d-dd21ae5accce", "sighting_of_ref": "indicator--70a7c6fa-4f33-44ec-95f6-8d48d570abec", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--daa3aebe-e424-480e-8469-57267752aceb", "sighting_of_ref": "indicator--85cfe1f6-4260-4404-9013-9ae533209ebe", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cff8daf8-b0bf-4195-aced-ebc624648cd5", "sighting_of_ref": "indicator--4eab57fb-eec8-4d25-9ea1-abafba02dd84", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b71c305f-2e51-4671-8690-0f5ecdaacab4", "sighting_of_ref": "indicator--6995077d-7608-48da-8723-53103004874b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f03e61e-34d0-436d-9732-a9d0eec68bc5", "sighting_of_ref": "indicator--91a2f57e-2db7-4e3a-b90b-14c96c4358a8", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c3939ca-8c29-4744-aea4-1acce185feae", "sighting_of_ref": "indicator--7efd0e29-8add-4559-b3ce-92593de9df0c", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24fcc628-c02e-432a-9e80-de0e7a2d35bc", "sighting_of_ref": "indicator--03707888-4989-4798-b270-85a0950ac94f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2a25760-ab88-4de6-b170-fae2baa0d6ad", "sighting_of_ref": "indicator--63d17853-de11-40a5-807b-b0772823a8c2", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0493bf59-212c-4c01-b2d1-8c8a41d2467f", "sighting_of_ref": "indicator--d93d8a2e-09f2-4a09-bc83-5c1465da5d4e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afaa332f-b6fd-467e-aa5c-60d1b0d01693", "sighting_of_ref": "indicator--621d2207-2979-447d-b5a5-ef44fb49fbff", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a1a8d27-0f70-4d16-bdeb-1a1d7fd1c067", "sighting_of_ref": "indicator--71af2943-41b9-46e2-817e-461aef6370f9", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--821fbd08-1f4a-4b44-8d24-86b5618e01dc", "sighting_of_ref": "indicator--f2339ccc-1b5d-4e58-9693-1443db1717ff", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb82206b-4648-45e3-ae0e-e104fb43fbd6", "sighting_of_ref": "indicator--c2cfe280-2d41-47b4-9820-d72bf4046dd3", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9d09ef7-087c-4d20-a90b-96293932ec60", "sighting_of_ref": "indicator--5dcb525a-eba5-470c-9276-4e3b400b5bcf", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2391a1e7-7ac8-43e5-8f62-f769ed0c0551", "sighting_of_ref": "indicator--e0d6faff-cb80-45c1-a724-3de2ce53a697", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--389c64a1-5218-4d5a-8374-3340afce990d", "sighting_of_ref": "indicator--f1596a08-87dd-4682-b3fa-b2aa3b1af25e", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--127ba4bc-db98-4ab0-bb97-5798b83f6ae8", "sighting_of_ref": "indicator--d671af8c-85ac-47ce-9233-3d6796f6219e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b1802e4-14e9-4c9d-ac8d-7d64f6d0499a", "sighting_of_ref": "indicator--1206c955-4f44-4cc7-8d56-e8b838007492", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e1e6758-13e3-46c2-a8fc-7599cf6a4f96", "sighting_of_ref": "indicator--2e59f6ef-5394-416d-8542-2e5a51dacacf", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46f353a4-c1b1-40c1-9f94-a8e73f5bc3f4", "sighting_of_ref": "indicator--c598d78b-496c-4046-b01e-08f4ce32d12a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42340d52-c104-4b73-b20d-3e90e13a1790", "sighting_of_ref": "indicator--3a86f2af-3d8d-4066-a20f-b7811d134caf", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e57e34c-de67-45aa-a29a-511026e217f2", "sighting_of_ref": "indicator--0e357e37-e0ab-4a7d-963c-f0e1f98db511", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e610815d-7c88-4c43-b218-80e85f2fd50a", "sighting_of_ref": "indicator--c760e63a-e972-4cd2-bd91-ece8286fdc7a", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6208cfc-55bb-4bc3-a289-e01d17501d52", "sighting_of_ref": "indicator--c760e63a-e972-4cd2-bd91-ece8286fdc7a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fd0b4e4-9f31-4099-8138-560ef8a509f7", "sighting_of_ref": "indicator--30337e77-6932-4331-85f3-7cd97c46fbdd", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--953b227a-4c0e-43f9-8c43-d6f496835755", "sighting_of_ref": "indicator--30337e77-6932-4331-85f3-7cd97c46fbdd", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba30b8f3-47cd-4494-8b0b-35cb90d108be", "sighting_of_ref": "indicator--a0545839-ff20-45c1-88b5-d4b9b78e19af", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29c22469-c9f1-4efe-b4a7-7c10e37c7008", "sighting_of_ref": "indicator--a0545839-ff20-45c1-88b5-d4b9b78e19af", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9033d63e-5398-4e33-805c-8c3f1cb7cbaa", "sighting_of_ref": "indicator--06b356fb-a36d-4781-b3f6-50b601259e42", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--762202c2-2471-4eab-857f-d42ce80735f8", "sighting_of_ref": "indicator--06b356fb-a36d-4781-b3f6-50b601259e42", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d81aa83e-42b7-495c-ba0c-1e62e4b42ca4", "sighting_of_ref": "indicator--33fe2c9c-d3af-4c38-b121-314b49fcd2a9", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4f6b033-f13f-49ff-958f-1d9e1d2fc50b", "sighting_of_ref": "indicator--6ab998be-2a48-42e8-9f46-3a61cb74d1cf", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--476faf39-4e9a-4a04-9043-7445a71e838c", "sighting_of_ref": "indicator--42e8994a-2cf7-468e-95f8-9da1d0c3e98d", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca1d7c61-99eb-4cff-9f0c-1469c1115b90", "sighting_of_ref": "indicator--0bba6079-4889-4943-886e-e0d6ffaac3b4", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0e1d53f-2c52-4b12-920f-523358b01ce0", "sighting_of_ref": "indicator--f7c7a836-e10f-44ed-968f-8b4f17135efa", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86361384-8e9a-44d3-8f2d-68d4c08be5ff", "sighting_of_ref": "indicator--353ceea2-5682-48aa-abd0-210f1d93317b", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f855f95c-1615-49d5-bbd3-e0e4f220a43f", "sighting_of_ref": "indicator--921e0f60-33bd-40ba-a7e1-0becb52cc300", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09091547-faa5-4f3b-bf69-0ac6d743ba66", "sighting_of_ref": "indicator--3ca93ff4-a449-46ca-b6b1-45942a0f267d", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2518ee89-d9d4-4ec6-8bc0-e83744ec7c2d", "sighting_of_ref": "indicator--52402012-b8ac-4d0e-8da5-903f779635e0", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcc6aaa1-68dd-4e59-8629-16067bf902a8", "sighting_of_ref": "indicator--42c9b90c-59e8-4a69-bce6-11a6e61d2a89", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b6737fc-3e29-4617-a6f2-6dff8b5fd4c1", "sighting_of_ref": "indicator--8265c81a-a0e5-45fe-8354-49191dc837a2", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88ba41e6-ad8f-4c97-8ee7-db39cd7ceb23", "sighting_of_ref": "indicator--4b37736d-4643-4e81-888d-48620fbc234d", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01f88578-67e8-4d12-92ab-875b842646ac", "sighting_of_ref": "indicator--ca11377f-716d-4214-9ed1-2b522b8f01a7", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41df4500-e274-45ea-89f3-e435c683e056", "sighting_of_ref": "indicator--86adad95-f52b-42fc-890c-729ee6cf8392", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09d9817f-638a-4b02-8a8e-630218d2177e", "sighting_of_ref": "indicator--01edbd95-2011-4310-a7de-b859f285c4b8", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd52afb8-e096-4e6e-a762-c87f5d5fe817", "sighting_of_ref": "indicator--01edbd95-2011-4310-a7de-b859f285c4b8", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05af6c11-1cfd-46ef-824b-739bc7674abc", "sighting_of_ref": "indicator--ee0492ed-2837-4e08-9c99-0b6496812742", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--475f6ceb-0fae-4c06-aeac-5324b01a03ac", "sighting_of_ref": "indicator--ac99d577-6b7c-4990-8903-15f8e46a26d5", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f587d76-a12c-4cc4-8dbc-5b0fc6d8bd51", "sighting_of_ref": "indicator--d2dbd4ac-82b7-41cc-9e92-b36321fec780", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17f549ba-1406-43c1-9717-b9669c8fc541", "sighting_of_ref": "indicator--d2dbd4ac-82b7-41cc-9e92-b36321fec780", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ad58207-9e60-4d50-bf0e-467c9411ab94", "sighting_of_ref": "indicator--a26e0fd8-8f53-4d66-a11b-9fb9fdbebbb3", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d9e9884-1327-4c6f-b0fb-c12725e4ff96", "sighting_of_ref": "indicator--43fda288-e8a1-4a9a-b8e3-def7f2b91327", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe272d60-06de-4aba-b0a5-81918d1043fe", "sighting_of_ref": "indicator--c5f696f8-b1f2-4610-ab79-2a94173893bf", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71d701f5-74f4-4c4d-94b5-552610389288", "sighting_of_ref": "indicator--6167cd8e-764a-4908-91ae-9f02e12e7c70", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d1debb1-87fc-4800-8b3e-e60057764c24", "sighting_of_ref": "indicator--4afe1791-d8e0-448c-8369-7237ec2186b8", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c5e3d5d-1a28-46ef-8ccc-f924991c200e", "sighting_of_ref": "indicator--4afe1791-d8e0-448c-8369-7237ec2186b8", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44ec4132-885c-43bc-b01a-119416d44695", "sighting_of_ref": "indicator--0659b127-c4da-4db2-a3aa-a81e1a12b927", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc86b182-a634-4f2e-88e4-ba2d699141b9", "sighting_of_ref": "indicator--7389dd67-ccf6-40ce-93af-79da1dae04ea", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcb43bb8-a6ed-45d2-9b41-d2274ac79000", "sighting_of_ref": "indicator--820cd85e-f8a1-4e35-9226-7a3454b971b6", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4353b9ac-088b-4751-8f2b-724f9c6194ee", "sighting_of_ref": "indicator--3fbc0c28-6624-4584-9030-32298e53875d", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9bef161-7274-4aa9-9fda-63a7c979c948", "sighting_of_ref": "indicator--ad3e208d-4c81-45dc-a4b6-6219dbf25bcf", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0156f29b-6543-4447-ad7c-1c7bdfe852fb", "sighting_of_ref": "indicator--0a6f2b37-cdfd-4fef-9c80-20ce302e3ba8", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22e74ece-3d10-4665-bcbd-79807a563e6a", "sighting_of_ref": "indicator--0a6f2b37-cdfd-4fef-9c80-20ce302e3ba8", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f6721b7-d437-47aa-9c43-2cb9ccd5924b", "sighting_of_ref": "indicator--dbc28b3e-0b7c-4161-bc90-428c8b1d1af0", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bb49f3a-7ffe-4c2b-abfb-f98ff6d438e4", "sighting_of_ref": "indicator--aefc7009-23a5-40e4-9ba2-bc2e04ebe6a8", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0067bf7-5015-41cc-82c6-8c14d752eb0a", "sighting_of_ref": "indicator--aefc7009-23a5-40e4-9ba2-bc2e04ebe6a8", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8295810b-de07-4f67-9db2-afd845f912ad", "sighting_of_ref": "indicator--402e4d6c-f4a2-4fee-ac0f-a49d5cb559ff", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4401cc56-5b0d-4f79-9950-ef41c09ce95c", "sighting_of_ref": "indicator--402e4d6c-f4a2-4fee-ac0f-a49d5cb559ff", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a301fd1-b8a2-4628-902c-25e259290ae1", "sighting_of_ref": "indicator--822af352-bbc6-43d0-970b-a70c49dac47c", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4890afc1-126c-4705-981b-19bd5b906159", "sighting_of_ref": "indicator--f317aa87-8607-44c0-b48c-aba6f1ec1419", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3a40ec8-d53d-43b5-90b7-032938b4d9b1", "sighting_of_ref": "indicator--d5165f87-e195-449d-b9c2-389b070aaf1d", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--379c7052-ee55-4983-bc19-39e9f862ed57", "sighting_of_ref": "indicator--e8ef4984-aad6-417d-9905-e63f9759bc89", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0f6c840-27c8-4218-b4a3-a7c90abe409b", "sighting_of_ref": "indicator--5cbbf198-dd08-4142-9cbe-8a6804d5cfb9", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf333ba8-9a8e-498d-9485-1d093260f451", "sighting_of_ref": "indicator--f8895276-8d04-495a-b1f3-1d0a93b53767", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--909a1ca4-9626-44af-a964-df8d803a299f", "sighting_of_ref": "indicator--1fe9d843-5bc8-439a-85a9-661dadf2b801", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c935359f-9e77-467f-bb1b-8de0b11030c1", "sighting_of_ref": "indicator--b4ef8189-1921-4771-b2fe-8a33590f5bd2", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efc9be75-56ee-4fc5-a72e-6a2610f7e061", "sighting_of_ref": "indicator--396e808f-096d-4c7e-8090-d8aeb463a800", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c21afbb-9687-4b39-b40f-5f9812dbd7a1", "sighting_of_ref": "indicator--8c3adb3d-1bf0-478d-ae7a-08e99663a694", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba8eb3cc-dac8-4a64-8422-d09a27e6a39a", "sighting_of_ref": "indicator--8c3adb3d-1bf0-478d-ae7a-08e99663a694", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca106167-41c3-48f9-aa60-9df66c1251d6", "sighting_of_ref": "indicator--8c3adb3d-1bf0-478d-ae7a-08e99663a694", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3be537f2-e4cc-4830-af57-dde010b3b6ea", "sighting_of_ref": "indicator--d9eb3e0f-f3d1-4777-b93f-b4e4899bf4ef", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bddcc66-c2c6-42fb-a374-04d92997c436", "sighting_of_ref": "indicator--d9eb3e0f-f3d1-4777-b93f-b4e4899bf4ef", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c919e322-8b1b-48fe-b6ad-3f71de6120ac", "sighting_of_ref": "indicator--65ac29c3-fb79-4d8d-92eb-da47221f47c8", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46d1f468-98b0-4ef2-ad93-24df98e9f882", "sighting_of_ref": "indicator--cdeeecab-adea-4b2d-a957-d3d159b9b804", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--044855ae-2b6e-4720-8f1f-58400303560d", "sighting_of_ref": "indicator--3ef0049b-5ab2-4dfd-978d-b81e0ea51158", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6906e11-ad33-4821-8782-c282fe0dd8ca", "sighting_of_ref": "indicator--54866c13-23ef-4f4d-9bc7-3c03c12600ae", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec7b6009-bbbf-475f-a05d-463b7b36a6b8", "sighting_of_ref": "indicator--cb436373-31bc-471c-9bcd-ae4dc726d939", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef730450-de46-4f31-8c8c-0aaf6abbee34", "sighting_of_ref": "indicator--8e2fac7b-70ce-4257-a97e-1f27c0660808", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0511efa3-61e6-4a5d-82dd-874057117e4e", "sighting_of_ref": "indicator--d09ca685-79d7-4ae4-baf8-0e1f2e745c39", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd640c17-5405-44b8-9f54-5ba233bbccc0", "sighting_of_ref": "indicator--9858bb4d-19df-4d23-96ef-f260b0b4fc60", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c84992ee-cc9c-4f42-8a3d-2d6685f6314a", "sighting_of_ref": "indicator--36d473f0-e73b-4d63-a850-0d94af5a6b74", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbd55f4b-b274-4be8-8b31-601f2b7f05d8", "sighting_of_ref": "indicator--36d473f0-e73b-4d63-a850-0d94af5a6b74", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--308d528a-d776-455a-a5f2-438b83ef3f28", "sighting_of_ref": "indicator--2bfd9771-a0ee-4d03-8579-61cc7c7ba926", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f39f6c1-ea68-468a-8feb-a78badf29ea4", "sighting_of_ref": "indicator--2bfd9771-a0ee-4d03-8579-61cc7c7ba926", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00d61d1b-fa5e-4a66-80ab-36edd9fe538e", "sighting_of_ref": "indicator--2bfd9771-a0ee-4d03-8579-61cc7c7ba926", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8c45599-e5e3-48e0-a7ea-bc46d63e5238", "sighting_of_ref": "indicator--61070d54-65d9-4d28-8f4a-9841336ac937", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bb49788-d783-4e86-93d5-770d6f4702e6", "sighting_of_ref": "indicator--61070d54-65d9-4d28-8f4a-9841336ac937", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9afc42ac-eff0-40c1-a6da-80998e6457c2", "sighting_of_ref": "indicator--61070d54-65d9-4d28-8f4a-9841336ac937", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf22d217-0331-47bd-aaf6-cc3d92bf8c13", "sighting_of_ref": "indicator--e3fb332f-c4d2-4b49-b3f5-638143861a19", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64478b5c-8a43-4a34-ac6c-1149cf35b0e9", "sighting_of_ref": "indicator--e3fb332f-c4d2-4b49-b3f5-638143861a19", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5ebf1a9-9c59-4c78-9f2a-bb4c475405e6", "sighting_of_ref": "indicator--2969c25d-5a8e-4e87-b01c-1dbcc344b3ef", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e89a1203-fb04-460a-891a-ca2b7c542697", "sighting_of_ref": "indicator--2969c25d-5a8e-4e87-b01c-1dbcc344b3ef", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4ee81dc-49db-4615-b827-102ddca55053", "sighting_of_ref": "indicator--2969c25d-5a8e-4e87-b01c-1dbcc344b3ef", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--326aa0c0-ffe4-42f5-8a9d-e8722ba2636c", "sighting_of_ref": "indicator--ec2543e4-bb8d-4ff9-9b28-0c3205b3c116", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9e8563d-870d-46b3-8390-cad6c0bcf238", "sighting_of_ref": "indicator--ec2543e4-bb8d-4ff9-9b28-0c3205b3c116", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--930d546d-710d-484e-b446-859fd27f7505", "sighting_of_ref": "indicator--ec2543e4-bb8d-4ff9-9b28-0c3205b3c116", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23b51bfe-99bb-46b8-b8ec-1437ee70d11e", "sighting_of_ref": "indicator--e71a58c9-764a-4dd4-b532-6a60d03a787a", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94b9d25e-46e8-426b-b764-8948584961f4", "sighting_of_ref": "indicator--e71a58c9-764a-4dd4-b532-6a60d03a787a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e301a488-7c7e-4fec-9055-9b6efc514e0f", "sighting_of_ref": "indicator--e71a58c9-764a-4dd4-b532-6a60d03a787a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47387ad1-bddf-4c44-9628-cf496a52ef9d", "sighting_of_ref": "indicator--c1736889-8073-4f17-9e7b-bf788807c189", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--751f10b4-aa74-4754-b90f-688f33f0058f", "sighting_of_ref": "indicator--c1736889-8073-4f17-9e7b-bf788807c189", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2f5d7ae-a368-4dc9-9f1d-26961f9452de", "sighting_of_ref": "indicator--ef101ffa-cb5b-4465-9453-284c5c0aa737", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c1598c3-ad7a-42da-8f2f-548e9054528d", "sighting_of_ref": "indicator--c4cfeba6-2610-4967-9418-4485aa418053", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26c27b56-2384-4687-a73c-86467f271778", "sighting_of_ref": "indicator--0750becd-fa6a-46bc-891f-3ce6b9fafd9b", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d237fa2d-ad3c-4d92-b33c-82d9c28a358c", "sighting_of_ref": "indicator--0750becd-fa6a-46bc-891f-3ce6b9fafd9b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d76885d0-45e1-4673-b9d0-321bc54624cd", "sighting_of_ref": "indicator--0750becd-fa6a-46bc-891f-3ce6b9fafd9b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dc52f02-2706-408a-b3d1-aee4204147ef", "sighting_of_ref": "indicator--55bcd84e-5a6e-4e15-9ea6-3e3e7ab0a98a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b474e0e0-22a5-40f7-ae26-4781773d34b8", "sighting_of_ref": "indicator--55bcd84e-5a6e-4e15-9ea6-3e3e7ab0a98a", "where_sighted_refs": ["location--cc47317e-2c18-43a6-8938-dea748a56ad5"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ac77d21-4747-4cf3-8a7f-591d649931f2", "sighting_of_ref": "indicator--4c5f95d2-f912-4c90-8736-7ca1f38adf13", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f867bbd-acb2-447a-91b3-0b77b93aeea7", "sighting_of_ref": "indicator--4c5f95d2-f912-4c90-8736-7ca1f38adf13", "where_sighted_refs": ["location--cc47317e-2c18-43a6-8938-dea748a56ad5"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2572b1f0-9220-405f-bb9c-37fee9d5e45e", "sighting_of_ref": "indicator--f7784f5e-dce4-464d-b275-486bb978e44c", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dfa7e37-9674-41b6-a7e4-9f8cf597078a", "sighting_of_ref": "indicator--f7784f5e-dce4-464d-b275-486bb978e44c", "where_sighted_refs": ["location--cc47317e-2c18-43a6-8938-dea748a56ad5"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27210a27-73c5-4683-b4c3-dbe8a926fb03", "sighting_of_ref": "indicator--9f22bf7a-9368-41cb-b78d-d1e7e29ff356", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17285ea7-5d69-4778-8a28-9a7b04d9a43f", "sighting_of_ref": "indicator--9f22bf7a-9368-41cb-b78d-d1e7e29ff356", "where_sighted_refs": ["location--cc47317e-2c18-43a6-8938-dea748a56ad5"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0affa5a3-27d6-405b-8dff-d1a12ffe8012", "sighting_of_ref": "indicator--131e29ef-6b36-49da-ae22-8d9b722967b3", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7f038a5-7cfa-4c12-af29-d856c47f496d", "sighting_of_ref": "indicator--131e29ef-6b36-49da-ae22-8d9b722967b3", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2396bc0e-0ee7-4b89-abc7-6342038339c7", "sighting_of_ref": "indicator--54bc06f1-1bbb-44d2-ae4b-ba0d3338f57e", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2d66849-380f-42ee-9474-becedfc4e300", "sighting_of_ref": "indicator--1f99b462-3ef3-4824-ad2e-7cfaad29e101", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8275053a-d72c-44d1-8efa-bac129a03e9b", "sighting_of_ref": "indicator--1f99b462-3ef3-4824-ad2e-7cfaad29e101", "where_sighted_refs": ["location--cc47317e-2c18-43a6-8938-dea748a56ad5"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a11de2b-ee3a-4896-97e6-fa234b2584bb", "sighting_of_ref": "indicator--fabdd473-dbea-4264-b3dc-4f33daf4da9b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1754f63-dae6-4491-a9d9-ac0dacffa057", "sighting_of_ref": "indicator--fabdd473-dbea-4264-b3dc-4f33daf4da9b", "where_sighted_refs": ["location--cc47317e-2c18-43a6-8938-dea748a56ad5"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b6500ca-8027-4a87-8db5-582aa4a03557", "sighting_of_ref": "indicator--d9ab55aa-c738-4612-8d95-c8b641fc000f", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b362a34-8d49-41c4-af48-6df750081c4c", "sighting_of_ref": "indicator--d9ab55aa-c738-4612-8d95-c8b641fc000f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--747af842-833d-4687-9686-ec7ece95a06a", "sighting_of_ref": "indicator--83ba050b-00eb-4cb6-86ae-6f6afa555ff8", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fbe648a-0ae2-4d8a-8a2b-f8680091cdb9", "sighting_of_ref": "indicator--34485892-5e7c-4fe7-943a-f7bfa481098d", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5362d328-6e31-4a6e-b744-4bd1ad15f6d4", "sighting_of_ref": "indicator--34485892-5e7c-4fe7-943a-f7bfa481098d", "where_sighted_refs": ["location--cc47317e-2c18-43a6-8938-dea748a56ad5"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18e7b259-d458-424c-b841-62782a3f56b6", "sighting_of_ref": "indicator--f681c3a0-5917-415d-bd36-922b775bac4c", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb9e1ce3-b773-4f1c-a82d-0d56b5d7b918", "sighting_of_ref": "indicator--f681c3a0-5917-415d-bd36-922b775bac4c", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6aec6d43-ff21-4c6e-833d-95322c7fe11f", "sighting_of_ref": "indicator--e0e10eb5-1345-4096-a2cd-7b9d33bfb6c1", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09037e05-e713-447c-aefb-0b321a9c82e0", "sighting_of_ref": "indicator--e0e10eb5-1345-4096-a2cd-7b9d33bfb6c1", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af7d3ea5-884e-4586-90ab-4d5584c56a9f", "sighting_of_ref": "indicator--217a69de-31d1-4358-b4b9-f78cc0085512", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--575f6fa0-300d-4450-9a22-82c7ba199ece", "sighting_of_ref": "indicator--2842ea33-b4a1-43aa-af77-61be4a2421a7", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29efb363-b2ca-4868-bbbb-0c9129912f08", "sighting_of_ref": "indicator--2842ea33-b4a1-43aa-af77-61be4a2421a7", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da5a7877-37c8-4f86-8dc3-9daa213b57e3", "sighting_of_ref": "indicator--2842ea33-b4a1-43aa-af77-61be4a2421a7", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--331e4f9a-e4cb-4c0e-bc95-6cc4ea90f881", "sighting_of_ref": "indicator--b15c18dd-8c9e-4448-a910-5175cc77d852", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2563285-08ea-4ef5-b4ff-c2f6660ce893", "sighting_of_ref": "indicator--b15c18dd-8c9e-4448-a910-5175cc77d852", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab8cee9a-e977-4261-8c82-8f5267123277", "sighting_of_ref": "indicator--b15c18dd-8c9e-4448-a910-5175cc77d852", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00cb8c7c-7b94-4e7e-86a8-296be28c19fa", "sighting_of_ref": "indicator--1c46b13a-829c-4427-ae59-44ec146c6317", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc2e8014-ad87-4ad1-9014-0b30ba3eb188", "sighting_of_ref": "indicator--3045414e-ba58-427a-9b71-aea1731948d2", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--920a1741-596d-4446-b3ee-d0d790387a8b", "sighting_of_ref": "indicator--aa82cc2d-950b-49d8-89bb-6662cc0ecf4b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--894cf657-e3f2-4957-a7fa-dcf55db0dc00", "sighting_of_ref": "indicator--e8feeddb-e05f-44af-acbd-1a75f2789706", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c5ce772-5760-4e49-991b-5f4219268813", "sighting_of_ref": "indicator--e8feeddb-e05f-44af-acbd-1a75f2789706", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ed5f090-7e47-435c-bcb0-cfdaf0a74fe1", "sighting_of_ref": "indicator--e8feeddb-e05f-44af-acbd-1a75f2789706", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2e4381f-e050-44ca-88aa-1f1b808852d4", "sighting_of_ref": "indicator--50b499fd-b9e8-4d64-b163-f1e196f2e4fc", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61b6a04c-a590-40a4-9caf-0755cf7ef4ca", "sighting_of_ref": "indicator--50b499fd-b9e8-4d64-b163-f1e196f2e4fc", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1177512a-7e57-4b6a-85e2-50a41885207c", "sighting_of_ref": "indicator--50b499fd-b9e8-4d64-b163-f1e196f2e4fc", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1cad3da-90c1-44ed-bac9-408d008e33aa", "sighting_of_ref": "indicator--2dce9b58-c519-4e3b-a072-613918c24260", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf26fa28-d9ef-419c-b4fe-0db3b80015db", "sighting_of_ref": "indicator--e11561b1-cc80-469f-bb77-c29bc0536651", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41bcddc9-f6bc-406f-a263-8cc2cc2e46f4", "sighting_of_ref": "indicator--e11561b1-cc80-469f-bb77-c29bc0536651", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3bcf5c4-8ee6-44e9-81f1-d035adc6dc47", "sighting_of_ref": "indicator--47d7c1fd-ed9d-4dd5-8f14-025763fbfcc6", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac8b59bd-0c2f-4637-a776-066739d0d990", "sighting_of_ref": "indicator--c08dae8a-ec14-498c-8b96-47e34a786395", "where_sighted_refs": ["location--cc47317e-2c18-43a6-8938-dea748a56ad5"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fccce556-d42b-414c-8d97-43562ce73e07", "sighting_of_ref": "indicator--497fede2-07f1-4185-8496-f42ecc544d0b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2530feaf-69d9-46ce-ab19-cd568de093dc", "sighting_of_ref": "indicator--e616f490-ef68-48ea-90a8-8c8274be44d8", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77cf9c8f-be29-4c79-9b6d-f468ee5e2bb9", "sighting_of_ref": "indicator--e616f490-ef68-48ea-90a8-8c8274be44d8", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9eac2e3-5169-4a15-94ac-a38f2aae24a9", "sighting_of_ref": "indicator--e616f490-ef68-48ea-90a8-8c8274be44d8", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d703c9b3-4b66-4da5-bdf4-c3c209484f20", "sighting_of_ref": "indicator--47176356-de30-4abf-8d7e-ffda9e464b39", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--536c4907-4546-49b1-aa94-fac3f0b9724f", "sighting_of_ref": "indicator--532486ca-21fc-4f64-9bf0-1ac9a989e91a", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acd2682e-20c5-49f0-928f-fefeea10fb12", "sighting_of_ref": "indicator--9a5302d7-7e7b-47be-ab61-d012ee1f1417", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d77e50cb-0748-4357-bb2b-910358202500", "sighting_of_ref": "indicator--de2d382c-4faa-4a90-ae3e-50e58c62d86a", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15e6704d-6516-4e52-8a77-9e578a476d1c", "sighting_of_ref": "indicator--895bb9e5-5e11-4b1f-9a75-107a039998a3", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dde7f17-2452-48ce-a95c-1e664b10b6df", "sighting_of_ref": "indicator--6f2e1901-3daf-44b7-9704-56c6e61ff387", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83137f65-3bab-4bb7-ac5a-5edd6231de91", "sighting_of_ref": "indicator--a5b00179-0d53-4b2b-900f-eb68886f6a65", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6811008-e4d0-4f7d-a90a-ee6c58ceb60e", "sighting_of_ref": "indicator--f487a9a5-d055-453a-80d4-628de7adb263", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b6b2a0e-bfa1-4469-93df-f0bdd1dbc772", "sighting_of_ref": "indicator--48061e27-e905-47e3-a6b4-64822358b203", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d99ed5ca-42c6-41e6-811c-2240ccf1d2c1", "sighting_of_ref": "indicator--2f57a32d-0a18-4498-a45c-56769199797c", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--449f11d6-ab95-41fa-b600-35786d2c5f29", "sighting_of_ref": "indicator--7b275924-ffaa-4f91-9701-6cbcae325b17", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54d2f72a-3dec-4efc-b888-8182862de7a3", "sighting_of_ref": "indicator--6858b9d5-73d4-4430-af71-0f5c759c9ecc", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a18aba23-cebc-446b-ae4a-cec5584a0c74", "sighting_of_ref": "indicator--4cc18db8-149b-492f-b170-1cb9d5d70d7a", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--058d6c07-f902-487a-a4a6-eb6dbd0790ac", "sighting_of_ref": "indicator--dc603dd6-d556-4c4e-ab5b-04368e80e1a7", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57365551-1bfc-4cd8-8da0-4ef7a857a413", "sighting_of_ref": "indicator--3bccb18a-dafa-4d20-af02-5adcfc035df6", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f246bf98-7075-4dde-8fda-2580b17de8f7", "sighting_of_ref": "indicator--d7a45a34-8d8e-434f-b1d5-5b0cc002cd76", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c62960dc-3ec3-4ac8-ac11-55a742330ea3", "sighting_of_ref": "indicator--3b95d354-42b8-4780-b6d4-f921a2cbfbce", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34137a14-b1b5-4f4c-b69c-faf826cde374", "sighting_of_ref": "indicator--5a4858ac-c710-452f-b2bb-e56ffd29b64c", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76acf136-13b3-48c7-8151-8094bb45522c", "sighting_of_ref": "indicator--b3089609-6b4b-4692-b585-2dbafe7cdbe0", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8129a0e-8f58-49f4-898a-91e7ef379286", "sighting_of_ref": "indicator--b307d910-bc52-4730-8adb-645f46d1aa68", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57256150-6ac1-4813-aefb-701d3f9c2c79", "sighting_of_ref": "indicator--6bc36569-f270-4261-bf37-4b2d856e1397", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6feaaa8-6f06-4799-b82a-ad02da9808ae", "sighting_of_ref": "indicator--e1d8998c-3ddd-44e7-baef-1c31e7e114dd", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccc9683c-8c18-4fc3-bb92-2eff5f23d0a8", "sighting_of_ref": "indicator--c022c067-2533-45b6-b94f-09acb6f5bf19", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9945630-4db2-46af-bb42-0f7baa3016c5", "sighting_of_ref": "indicator--17aa387f-9363-4a2b-a79b-93aca2451233", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1adbc31-c9eb-4dc2-8ff7-93be30ad7a1a", "sighting_of_ref": "indicator--797eda64-01a3-4577-ae44-c138e6c41fd8", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f70cb40-a55f-43fd-b9fb-32f3225bef93", "sighting_of_ref": "indicator--cab5d525-1b47-4d83-932b-1559a3141a78", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8767edb-ca67-49f2-bc7d-0fa6242a7d01", "sighting_of_ref": "indicator--13c46c9b-bf66-44f4-80de-58629d5a29a9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa10c90b-8e2a-40c1-b598-648e1b4cbcde", "sighting_of_ref": "indicator--3b2ec1fb-11c2-45d6-87fa-54d33dde6b60", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50161b8d-6ac8-44db-b697-e804a720e67a", "sighting_of_ref": "indicator--dfa20f75-aeca-4213-a323-ddcfc5103f6a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02bee58c-e31a-45af-bcc7-7b19b353c08d", "sighting_of_ref": "indicator--e5da611c-0018-44ae-97e5-c91aa8ba1419", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b1aeaf2-8088-4eb4-9604-ec584b31212d", "sighting_of_ref": "indicator--ca1fd143-183f-42d5-8d80-1b3953d33073", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c7f34e9-b02e-4efa-8c63-2377145139c8", "sighting_of_ref": "indicator--ca3b33ec-5d88-4b69-9b62-9b3d963ffa9b", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e95922b3-6518-431f-826b-f809745b8a9a", "sighting_of_ref": "indicator--ca3b33ec-5d88-4b69-9b62-9b3d963ffa9b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc6ade2c-8050-48d9-8676-4bddc04eb588", "sighting_of_ref": "indicator--d5912d4d-3121-4e25-8fd2-4fd4365ff517", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d8cef8b-b99f-4693-9d89-8551e6a4385a", "sighting_of_ref": "indicator--d5912d4d-3121-4e25-8fd2-4fd4365ff517", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d900cdb5-0edf-46b8-a6bf-bf94a3175482", "sighting_of_ref": "indicator--2e90b761-4d26-4bfe-aa0b-32dc0ebcf361", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0603299-7170-4523-b0a8-e2d0aecded55", "sighting_of_ref": "indicator--2e90b761-4d26-4bfe-aa0b-32dc0ebcf361", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e1daf19-fb69-4191-bf64-f8c3506f5dfb", "sighting_of_ref": "indicator--4e6898aa-908b-4bdd-a4fc-4f879c39aeb0", "where_sighted_refs": ["location--cc47317e-2c18-43a6-8938-dea748a56ad5"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bc51252-e72c-4756-a755-dec38bd517cb", "sighting_of_ref": "indicator--a2daf71f-3605-413d-8c74-8a0cdbf0d3d5", "where_sighted_refs": ["location--cc47317e-2c18-43a6-8938-dea748a56ad5"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5953dfd9-706a-41a3-893a-b89ab28a87f7", "sighting_of_ref": "indicator--860cf92b-396f-4b16-bc9e-7978d749b828", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e70bf2ea-9699-4b5a-b601-2d39bdbe860a", "sighting_of_ref": "indicator--8b8082b5-53e0-4a24-b43b-4a3fa54d6c67", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--897bd15f-46b1-4fe0-a02c-f1f6db54e55a", "sighting_of_ref": "indicator--e3ff96ee-ce77-45f3-95da-8c2bc1f43ec8", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a497e79-f3c4-4c72-8854-32dfba1b5dcc", "sighting_of_ref": "indicator--35a0bb73-4f84-40b1-97ca-9258a477d203", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67705a1a-69af-4fd3-9509-1abc9a77cc31", "sighting_of_ref": "indicator--7630246b-50d2-40e9-9017-c0b682188360", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--688ff91e-c83f-4fe9-ab1d-4dbab8002873", "sighting_of_ref": "indicator--7630246b-50d2-40e9-9017-c0b682188360", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bacc13b4-1c98-47e2-9a3f-f48a57a10d7c", "sighting_of_ref": "indicator--7630246b-50d2-40e9-9017-c0b682188360", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--774b04d5-4fd0-446c-8551-5678760a89d4", "sighting_of_ref": "indicator--b17701ff-23cf-4e6e-b9c3-9bff9a2a9144", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cd0b688-0ad9-4336-ac14-1180c3e3492c", "sighting_of_ref": "indicator--d2a71da7-f4c6-4697-88b9-a214fcbb02bb", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de338cc5-fb52-4741-84dc-44b4446c7fa9", "sighting_of_ref": "indicator--38e24489-592a-4b6f-8044-91ef3c957a1b", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a22ae77-f1ac-49b6-88d8-53bbad12f306", "sighting_of_ref": "indicator--38e24489-592a-4b6f-8044-91ef3c957a1b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64852d0b-0968-435a-a434-4b44556837a2", "sighting_of_ref": "indicator--38e24489-592a-4b6f-8044-91ef3c957a1b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c9a0399-daa2-443f-a991-fb08bb7dae77", "sighting_of_ref": "indicator--d896f535-79e9-42c7-bf3e-b10e4e2cd322", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ccfecd4-5ec0-497d-8a11-c0ee6356d47e", "sighting_of_ref": "indicator--b9092a28-1411-457f-9400-a4ce0f114362", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b6e5798-b047-4233-abba-de16b0dfc5bb", "sighting_of_ref": "indicator--b9092a28-1411-457f-9400-a4ce0f114362", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0581280e-6557-4eae-a4c0-40220cf29efb", "sighting_of_ref": "indicator--b9092a28-1411-457f-9400-a4ce0f114362", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cce6507d-867e-4276-96dc-2e1ac6f6d652", "sighting_of_ref": "indicator--85ec70ad-b758-4c57-b27e-6f2ad6fb7024", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0ed8126-e64c-4110-aa82-429ea2f6f263", "sighting_of_ref": "indicator--85ec70ad-b758-4c57-b27e-6f2ad6fb7024", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc0f69c1-88ea-42fc-8942-27540c9095e0", "sighting_of_ref": "indicator--3c47ca63-6d25-47e2-a345-48b0eea74f79", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88d8c6ba-7e3f-419a-9e65-f683a9543b1d", "sighting_of_ref": "indicator--3c47ca63-6d25-47e2-a345-48b0eea74f79", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bec059a-196c-4730-90a7-e44d5301e490", "sighting_of_ref": "indicator--13fe4b89-56de-4553-b751-9da775154fb5", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b7478dd-3b0d-48db-9733-5b695bb0e879", "sighting_of_ref": "indicator--e6923ff3-c8d8-4253-85c5-038dd6cbad63", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b9aab8b-d98f-40cb-a8c9-cb6178e9c3e5", "sighting_of_ref": "indicator--47ec51d6-c916-4c3e-80cd-96f751af147f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32d939c2-eb27-43b3-9aaf-0f644edc44ee", "sighting_of_ref": "indicator--40f9f86e-3d75-421c-852b-fe00e38f6c4d", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6685191-7aef-4814-8bd7-6ba974ad20b8", "sighting_of_ref": "indicator--40f9f86e-3d75-421c-852b-fe00e38f6c4d", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfffbb13-f048-4ec0-9489-5954e01d1c40", "sighting_of_ref": "indicator--91a91a29-0065-41e6-acff-2bb4c569d843", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57b9c466-0d02-4b39-8682-afee7c9e4728", "sighting_of_ref": "indicator--1f8b2aad-9ba4-4a0b-a794-afab26118c4d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18e219f7-4713-4cc0-8059-8cb51c600b0c", "sighting_of_ref": "indicator--674ab86b-7c3d-4bc1-87a0-024b23f0058a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d12d2d7a-b29f-46b0-98c4-bf2029c122cc", "sighting_of_ref": "indicator--4b77eef6-4837-488f-b2f3-6704c1f7ab51", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3045e824-f6ae-430d-866f-df232bcca51a", "sighting_of_ref": "indicator--2d7502a1-3a79-42d5-82bd-176f5b6da2e2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99b1ed4d-8eeb-4f92-8278-284bf45a66e2", "sighting_of_ref": "indicator--2aca762f-6865-4974-9c37-8d154e8204ef", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c856360a-ac2f-4653-a94a-ae2792e1730a", "sighting_of_ref": "indicator--2bf4bcb5-05b6-4d8d-93e6-1f57c10bcd49", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ba16576-1886-4463-a08c-4af7e581ae8b", "sighting_of_ref": "indicator--d08c9d74-5489-48d4-a985-7374e5245d20", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e946a08-83b4-4f3a-b0ca-15cac85e61c0", "sighting_of_ref": "indicator--3aca3a39-d9d8-4efd-82dc-5c41505be1f3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8b30182-03cc-4ff8-a823-3e664adc2544", "sighting_of_ref": "indicator--ceb15ea1-5099-4732-b4fc-2cd3d2f44aaf", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--759fdd9f-6c39-4d90-862c-3fb85d9dcb8e", "sighting_of_ref": "indicator--72327be2-619e-4bec-9111-a74d53139aae", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fd7d1de-55b6-4977-825a-ff668d38d725", "sighting_of_ref": "indicator--37053bd4-134f-4e64-b54c-a958c57af1d1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86ce0c77-5b0b-4539-85df-4dd4f3162eca", "sighting_of_ref": "indicator--b9acca2d-26eb-435d-aa36-4d5c7bff1909", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba4b89fe-edd1-4432-a7c3-c96e83c3561e", "sighting_of_ref": "indicator--9fccf27b-46b2-4d78-a28e-10d51ccd41f4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e19de69f-bee2-4a6f-9da0-6c51ef09879f", "sighting_of_ref": "indicator--5308e627-a93a-491a-812b-7b178cb145d0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4079428-3705-439b-9434-409efd76a369", "sighting_of_ref": "indicator--8a233062-6f5d-4615-bb30-905a8b815300", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--417cacd4-ed36-48f7-867a-85c288135d90", "sighting_of_ref": "indicator--61bd81a6-2c35-4caf-93d8-9b0c53001d4c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b032618d-3ada-4aa9-9d1c-a607c1ccc839", "sighting_of_ref": "indicator--10ee9fab-e399-44b7-8f78-101142e3f575", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac2d9f4b-4142-4cbf-9a67-4e2d61edf611", "sighting_of_ref": "indicator--34822159-c4db-492e-b8a8-715344678706", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b346d927-065c-45e3-8101-e14a5ea0fd98", "sighting_of_ref": "indicator--720044d8-81f2-44b7-a126-1528033b34bb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd972203-cde4-4c90-9b66-4c843a48e7e4", "sighting_of_ref": "indicator--17eb0392-f287-4786-990c-f7f0bc836ac7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc89440a-a3ff-49fa-b76e-a93c26a481c1", "sighting_of_ref": "indicator--1b3a1a4d-92b2-49a8-901a-78f911cf31d3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25417670-9d06-42ae-91f9-5134f62cdd20", "sighting_of_ref": "indicator--1b2be6d8-86e1-4f1a-a0d2-a3f210f558d1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c840744-2ef8-477f-b4bc-cadec7f3cffc", "sighting_of_ref": "indicator--a4b9d066-d66f-4df4-932c-12751a36d096", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--301e1a58-c31f-451a-9c1e-abfc67785647", "sighting_of_ref": "indicator--7914e5f3-821c-45b1-adf0-8c89f9f863e3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eeba0352-d660-423e-b811-9a3ae3db34d8", "sighting_of_ref": "indicator--838feac8-6b08-4a09-afb2-9b5608880ee8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f511ec9-5de0-4f43-8d5d-4b71231182cf", "sighting_of_ref": "indicator--beef8f98-81b4-46ea-9822-af98b623e499", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3519975-a205-4240-bc5b-900cea01e4f9", "sighting_of_ref": "indicator--18417660-a52d-453e-8d70-1d8c8078eeed", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5299cd0b-c586-435f-96ca-8d84a052de4d", "sighting_of_ref": "indicator--df3ce86f-e93b-4b85-a8f4-df5b46f6007a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6013f10c-833b-4722-8686-02e52034485c", "sighting_of_ref": "indicator--d29b043b-7ad7-4a76-b383-d3ac6c868d83", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0676adff-9fbe-4bd6-ae16-ca5c98679e42", "sighting_of_ref": "indicator--e96807fd-db54-41b0-884a-8d82967f6636", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--907e2b9b-932b-4f9a-a9e0-9b692ed9495b", "sighting_of_ref": "indicator--97c89336-d553-46c2-aa32-9904c34fdd77", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c61b048-41fe-4091-9b2b-ecf5ed19694f", "sighting_of_ref": "indicator--186b5557-504b-4b55-9c00-e056c0427c01", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e88d772-c4c3-4caa-a28b-2bc7d845fa42", "sighting_of_ref": "indicator--5c28749c-852d-4975-84b9-45b0f185fcd7", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1aba872b-6c2a-4908-8b22-aaea6fb9f8b4", "sighting_of_ref": "indicator--41d762e5-0e49-442c-a422-221719409112", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ec00681-d819-4168-a2fe-32c8ebc06c9b", "sighting_of_ref": "indicator--4548c157-1fb9-4cd9-9a56-46ce95dcd39f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7b8065b-1e6d-4bf5-86d3-040636971522", "sighting_of_ref": "indicator--70918c9e-9f5d-4356-9a12-51b38d6d7022", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b80b1594-2555-4b98-ac42-46cc873e5b72", "sighting_of_ref": "indicator--0e9db74f-c926-4bc1-8da2-0ec523efbca5", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afafb530-c083-4ebf-92d0-77d69fdb31fc", "sighting_of_ref": "indicator--0e9db74f-c926-4bc1-8da2-0ec523efbca5", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5d16c87-d24b-4e9e-b1bc-efc2c64704ec", "sighting_of_ref": "indicator--7205ab4f-a301-4720-aba3-83784c19c189", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd275093-e15a-4257-bfa3-2db8646e6b5b", "sighting_of_ref": "indicator--a3d96e15-0a63-4f9c-aa11-afe496bd71fc", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--222e8af3-9471-42bd-bca9-ed6b16a11a17", "sighting_of_ref": "indicator--0090adac-c2d0-4015-86e1-13f597b7c30b", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3798c47e-5ddf-4d31-b97c-b306d824d537", "sighting_of_ref": "indicator--5351d7c6-464a-4b02-92e8-4bda18bddc8e", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f74225a2-201b-4303-a819-5b9e3a816ec8", "sighting_of_ref": "indicator--55e7470e-c651-4a30-8e4d-a6f598960819", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5aba899-f695-4860-a35f-801eb02b22d5", "sighting_of_ref": "indicator--86c82c08-401a-4909-9f3a-8bdb6c491eb6", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c115dbb8-165c-450d-80a6-47353c775fa6", "sighting_of_ref": "indicator--525771bc-3372-4d67-939f-d986bc2bebbd", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9482c11b-399e-4cfd-844b-f8254adabfa2", "sighting_of_ref": "indicator--b9ee4ec0-e627-4e22-9245-f1c4b66c7b22", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab619ab9-047f-4722-8963-c577c9687765", "sighting_of_ref": "indicator--08faf0db-a39d-48a0-b749-e1e882668a68", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e895779-8e6a-439f-bd6c-0e75f25943f1", "sighting_of_ref": "indicator--04003fe4-27e6-4adb-b18c-e0906190609d", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e05045c4-5e3e-4bb8-9aef-684d8e6e6fae", "sighting_of_ref": "indicator--27be14d0-92f4-438e-9bb9-2b8b2024f36b", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bf0d3b3-266a-4462-918c-e10f55d9f479", "sighting_of_ref": "indicator--ba8a2f9d-4592-43b2-aa53-ea6c49ea6dc4", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18037049-8d65-4e68-b747-710b575abb01", "sighting_of_ref": "indicator--1b6098af-b8e7-4d53-bf25-b172de2be70f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2baed182-a49e-45a8-8443-7f1cca65f3dc", "sighting_of_ref": "indicator--6d19309d-2464-4191-8604-e713eea62eb2", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81b9e0e4-d00a-4fd1-8c46-ac52c0602441", "sighting_of_ref": "indicator--e6b30175-65a6-48b5-ae88-ad313ececd71", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--189b0b7d-6037-45ca-8c26-5e28604a616a", "sighting_of_ref": "indicator--e1171e94-78f0-44fb-a47d-ad367f82fd91", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b96382e-cf21-4905-91a5-48f7a4f60b5c", "sighting_of_ref": "indicator--a05f24f7-5105-4c2b-9f4f-befec8e8cefb", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1a0dd3c-d0d1-4106-9172-b2191467c71c", "sighting_of_ref": "indicator--f43e5a91-8728-4fd6-9a05-d9944185ca7a", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28f55c23-4323-4703-a2e5-34b20d8970d4", "sighting_of_ref": "indicator--214fd37e-63d3-442f-b869-7dde95fbc686", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--331ae869-78f1-4a79-9b4d-3561ca642440", "sighting_of_ref": "indicator--866e1764-54bc-483b-ad48-77ef7dcbfa6a", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93aa91be-7566-478d-9a00-b9b1991b727d", "sighting_of_ref": "indicator--d35ea6e2-8a61-4d9a-a7c9-40431d13c6e8", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1a9b244-edc8-4382-af27-e418fa3af22a", "sighting_of_ref": "indicator--910be005-6fbc-4bc3-a931-c6aee46d2ecc", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e1fbeaa-9dc1-47c9-b0b2-647dbb204796", "sighting_of_ref": "indicator--48a508d6-0908-45ff-b9ec-0a315cd6fa72", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96f6a748-d087-4114-b066-de67f723d3e5", "sighting_of_ref": "indicator--75f70ed8-db25-4f6d-a02b-aa007aa97587", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--daa994dc-2d2c-4256-9339-35b024d1c97f", "sighting_of_ref": "indicator--bfee68fd-dbd6-45e5-96f1-17800945d7e5", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae730e07-e82d-4995-bf09-948a08142361", "sighting_of_ref": "indicator--e609b329-f267-451b-8eec-da78e1b09424", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd05d37f-ce08-4230-aac3-abb7ed34220e", "sighting_of_ref": "indicator--74ad5f4d-e97c-41de-b55b-73e5a6f51cd0", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f116e16a-b73e-4244-bd3e-c6564ed92dbb", "sighting_of_ref": "indicator--894159a6-0922-46f3-8c66-ef5170bb4745", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbdf6ccc-3a45-43a5-9e28-2284d5819cce", "sighting_of_ref": "indicator--4846ca2f-4552-421d-8f2d-33bdd3b02943", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e505b306-fdb3-4254-92f3-f451a037eb5d", "sighting_of_ref": "indicator--1e873e73-ee4b-479c-8e00-42d758222825", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91aaefc7-4f63-43c9-983f-f5c81d02d9bf", "sighting_of_ref": "indicator--95b5a080-b8fa-46f9-983e-19b0dead6dde", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df9b52c5-5dca-4843-ab33-a1301676b2cf", "sighting_of_ref": "indicator--54481791-74a0-4d10-b2d6-3d5494e214d1", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb55bf9e-8c69-4e64-b014-933bfcc3ebfe", "sighting_of_ref": "indicator--63f62314-1b0d-40f0-a0f1-c8f24175485f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b64e10e-3043-4ea3-a95d-b1eea2110a97", "sighting_of_ref": "indicator--727060bf-f5b4-4d0f-92a8-9a0458983ba0", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51725c23-5484-440e-af5f-676819401874", "sighting_of_ref": "indicator--82222a18-8330-449f-975a-b911e1cea96e", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4adf97d-8355-42b5-8e24-93b18968e386", "sighting_of_ref": "indicator--69a30a2f-6b9f-4e1c-86c6-218aaf4f5f6c", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c49180cb-4fb3-448c-9252-0ae681ce8eb7", "sighting_of_ref": "indicator--b9aeed89-a453-4bba-bd6d-5d23f1b022f6", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c64b6409-2fd3-42e8-9507-367fca7d3bb2", "sighting_of_ref": "indicator--96bd92e7-bd6f-4ac7-989c-879b858eaaa4", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4947621-c9b9-42af-a9f5-0b6a9dfa4507", "sighting_of_ref": "indicator--2eaabc66-8c18-42ac-857b-7cbf5ea9b211", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66416794-39db-44c3-8b3d-54aa0546e56c", "sighting_of_ref": "indicator--cc6748fe-9894-4f61-8918-6a966ac3c1ab", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93236341-902b-4045-94ed-f0e9a1203491", "sighting_of_ref": "indicator--12b81da1-b6f1-4329-856c-3cdc26e3a41f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--377421d1-274c-4ae9-b269-294acc57be6c", "sighting_of_ref": "indicator--b8ff494d-f091-4bc4-8e0f-314d8dd0faa2", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d947a32-a401-42c9-8b4d-391d2b6ee80f", "sighting_of_ref": "indicator--b8ff494d-f091-4bc4-8e0f-314d8dd0faa2", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f60bf502-8e7c-4df4-9844-ee806f4e8b9e", "sighting_of_ref": "indicator--6355a162-974f-4880-9918-ee4fab6838f9", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13c9ae04-bd43-4352-b19c-84a618886b67", "sighting_of_ref": "indicator--6355a162-974f-4880-9918-ee4fab6838f9", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7815de63-1f88-4aa4-a80e-055f726682a8", "sighting_of_ref": "indicator--15701c2b-807f-4df1-962c-33f2f3dd2bcf", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63ef1901-bfa1-4048-81c4-6720d74dce5b", "sighting_of_ref": "indicator--15701c2b-807f-4df1-962c-33f2f3dd2bcf", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63b9eb9b-941e-4ec4-83c2-35965e8fc81a", "sighting_of_ref": "indicator--ff3d58d1-c866-4c11-aa38-f74dcada2081", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09baf14b-9d34-48cf-914c-dbc6a3a8d46c", "sighting_of_ref": "indicator--ff3d58d1-c866-4c11-aa38-f74dcada2081", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53e98d7b-5948-4842-b8eb-000aa7ad82ad", "sighting_of_ref": "indicator--c3caf41d-e0f4-464b-afcc-0490b9f39658", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f04be950-dc7d-4047-bc9b-9cf9d128a1bf", "sighting_of_ref": "indicator--c3caf41d-e0f4-464b-afcc-0490b9f39658", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e0a8aaf-cc27-4d6c-8cad-1df802a45144", "sighting_of_ref": "indicator--993a81b6-f988-41a3-b0cc-5415a97fad5f", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--894f13f3-cac4-40cd-8ca6-45db793fe403", "sighting_of_ref": "indicator--993a81b6-f988-41a3-b0cc-5415a97fad5f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9be84830-3c19-4869-b9d6-12a379f25d0b", "sighting_of_ref": "indicator--79f456ee-25b0-43ab-b0bd-ffec81bcbddb", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dc88246-3018-407c-a243-b6a69b35b8f2", "sighting_of_ref": "indicator--79f456ee-25b0-43ab-b0bd-ffec81bcbddb", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40b64ca2-3ccc-4332-86dd-ca12c39ee93a", "sighting_of_ref": "indicator--6206daf5-8be1-479b-ae6f-102f7228e922", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d571819-30b8-4052-9217-e15e1c2823f7", "sighting_of_ref": "indicator--6206daf5-8be1-479b-ae6f-102f7228e922", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e5f5296-3154-4e08-8749-462e3d3c9e4d", "sighting_of_ref": "indicator--9c671525-4c68-4e36-b276-f2cd02a9f4a0", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb3b8440-22c6-4e6a-a0a4-a9d0da527bd9", "sighting_of_ref": "indicator--9c671525-4c68-4e36-b276-f2cd02a9f4a0", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2b67bb0-1976-4bf0-9258-1bc51a29e663", "sighting_of_ref": "indicator--969909a1-70f0-49ed-98ea-c893f2f85e72", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2f0b208-d089-4506-9505-2eca831af212", "sighting_of_ref": "indicator--969909a1-70f0-49ed-98ea-c893f2f85e72", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--165417be-feb8-45ec-9af0-23e3515e57e2", "sighting_of_ref": "indicator--f6670bb3-87db-4ad3-adfe-bbbb9a46a8e3", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b87f1705-8f5c-4173-82f8-ed3bb667e289", "sighting_of_ref": "indicator--f6670bb3-87db-4ad3-adfe-bbbb9a46a8e3", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7796d87e-a2dd-4af2-8644-23af12598b48", "sighting_of_ref": "indicator--b61b1b05-c119-45d4-8d6d-2571ecd093bc", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10ac6ae2-edfb-440d-bd81-f7343fcf7bce", "sighting_of_ref": "indicator--b61b1b05-c119-45d4-8d6d-2571ecd093bc", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--963a96bf-a0ad-43ec-bb55-5a7c54180389", "sighting_of_ref": "indicator--c82f701a-2cb8-437b-bb4a-e29f7a7ddc6b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfbe3546-d51d-4fdb-9ffa-0b656791f177", "sighting_of_ref": "indicator--c82f701a-2cb8-437b-bb4a-e29f7a7ddc6b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa08166a-a6ed-4e44-bcd6-a2604c7e006b", "sighting_of_ref": "indicator--81deda99-1434-4c09-87e8-d4e791608390", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71f980f2-4e04-42fc-88c1-7a96a464f790", "sighting_of_ref": "indicator--81deda99-1434-4c09-87e8-d4e791608390", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8eff4885-1650-494d-86bd-5ce9c58e57fa", "sighting_of_ref": "indicator--c6225974-a4d1-4c3a-96c4-af638a5f19ec", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1a5f0ac-0fb7-4746-87db-1b6ff7df10a3", "sighting_of_ref": "indicator--c6225974-a4d1-4c3a-96c4-af638a5f19ec", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acc7754c-e6ef-4aba-ae43-55191aee890c", "sighting_of_ref": "indicator--8c14d915-12b2-486f-b5b3-22150414c976", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d97ec9f1-04b2-4faf-86d3-4e6ba11f83d4", "sighting_of_ref": "indicator--8c14d915-12b2-486f-b5b3-22150414c976", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5090ea63-bf90-42e0-9247-fc9824cdeea1", "sighting_of_ref": "indicator--21fdbb89-bcc4-4e3d-83e4-2ef08eea3193", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac695a71-1590-41e5-a598-e0bc245453c8", "sighting_of_ref": "indicator--21fdbb89-bcc4-4e3d-83e4-2ef08eea3193", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4618fa2-ae98-4af8-b0a4-89650988ea72", "sighting_of_ref": "indicator--8835365b-d07c-4655-8058-a33912481b2b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bb42211-fa3d-4617-b112-35bf0587d3cf", "sighting_of_ref": "indicator--8835365b-d07c-4655-8058-a33912481b2b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3a0dc6f-27cf-4814-ab94-d7b6b667cf1c", "sighting_of_ref": "indicator--d67f4e2b-7a88-415c-87ec-f8d76e63777d", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9abd53e8-5e47-419b-b0af-8a1ba2defff8", "sighting_of_ref": "indicator--d67f4e2b-7a88-415c-87ec-f8d76e63777d", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--061eeded-3c85-49e8-b79b-e792479a0d9c", "sighting_of_ref": "indicator--504f2057-67cf-4274-af53-52f96a1b6536", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3417282-6cc2-4250-9f0f-fef54b86b932", "sighting_of_ref": "indicator--504f2057-67cf-4274-af53-52f96a1b6536", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e3dc801-01db-450f-bd1b-981bba318fab", "sighting_of_ref": "indicator--3145553b-dd42-47b8-a82f-521623f129fb", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0d91376-f4ed-4d2a-834e-7ab266148598", "sighting_of_ref": "indicator--3145553b-dd42-47b8-a82f-521623f129fb", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12c6c22a-6007-404c-829e-1d9eeec2b61d", "sighting_of_ref": "indicator--19df2865-964e-45c1-be19-4fd22dccc0ea", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40ed85de-2a87-4678-8d2c-1b0e127732e0", "sighting_of_ref": "indicator--19df2865-964e-45c1-be19-4fd22dccc0ea", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e48eb77b-1efe-40e6-9d5c-26b364e0ee87", "sighting_of_ref": "indicator--3ff5f5dd-531b-43ec-9087-93565c953a28", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4d2c5a6-1942-4d5d-839d-34cc1617fe7b", "sighting_of_ref": "indicator--3ff5f5dd-531b-43ec-9087-93565c953a28", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b952f699-731d-4ebf-bd85-0adff788c6e2", "sighting_of_ref": "indicator--3cb1aa8e-1ee7-4ca3-8154-689755e7b9ee", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7eb30a3e-e073-4d85-a867-4644177e0c05", "sighting_of_ref": "indicator--3cb1aa8e-1ee7-4ca3-8154-689755e7b9ee", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25fbdc5e-ea94-4585-abde-7f39b3ebe7ab", "sighting_of_ref": "indicator--a0584f5d-62c6-4c1d-b05e-e26a047d478d", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09e7edd2-9a18-4f5e-a23d-75b1f370213c", "sighting_of_ref": "indicator--a0584f5d-62c6-4c1d-b05e-e26a047d478d", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d05fba54-8542-47ac-8929-641866d35592", "sighting_of_ref": "indicator--574f3863-6381-44a4-8d52-98f5e196b677", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7221916-ef3d-49b8-9020-e6a4477e23fa", "sighting_of_ref": "indicator--574f3863-6381-44a4-8d52-98f5e196b677", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b09fe8d8-39ca-4890-91ae-eead03e4eeae", "sighting_of_ref": "indicator--cbd029f0-1f3b-4289-8c06-7d48b8be2c66", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56cbac67-98b7-4829-92d7-0c28fcb1677a", "sighting_of_ref": "indicator--cbd029f0-1f3b-4289-8c06-7d48b8be2c66", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25a04ceb-94ef-4c23-9ece-ae043fe5cadc", "sighting_of_ref": "indicator--f4932920-7a13-496d-8701-3a3c8dc87453", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c288cde-78a2-4ffc-9e39-3e729604c979", "sighting_of_ref": "indicator--f4932920-7a13-496d-8701-3a3c8dc87453", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39fc33c6-2771-4fc7-b23e-94281d6084ff", "sighting_of_ref": "indicator--9da5836f-9fa6-45ca-9e59-522abafcafa8", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa537e16-13eb-46e4-9a67-a6c7f05d5f11", "sighting_of_ref": "indicator--9da5836f-9fa6-45ca-9e59-522abafcafa8", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4a04241-ea2f-4d7d-a98c-8f0ba4d08347", "sighting_of_ref": "indicator--740cc280-875c-469c-b83c-7ec56a46f8a3", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49ea3691-a00b-45a2-a849-25f32b4400cb", "sighting_of_ref": "indicator--740cc280-875c-469c-b83c-7ec56a46f8a3", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--018ae362-fb17-4fcb-9466-9818034e4a46", "sighting_of_ref": "indicator--b20bf5ea-c8d4-48d7-b527-8c716336020d", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b03c240-e180-430e-8041-f67b976a9a05", "sighting_of_ref": "indicator--b20bf5ea-c8d4-48d7-b527-8c716336020d", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58a44f2e-128c-4697-ac9f-353730b2e84f", "sighting_of_ref": "indicator--a76f9129-198d-4aea-9eb0-46d8c3e0fb94", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b781291-8abe-4a52-bc76-d692a4215d7b", "sighting_of_ref": "indicator--a76f9129-198d-4aea-9eb0-46d8c3e0fb94", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e5f79ea-6f33-4b63-bf33-77642ba83488", "sighting_of_ref": "indicator--d37f9cf6-8aa0-4186-b508-4f5ebbd2a538", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdbe8f85-28f4-4869-a8b0-0f1865c53a61", "sighting_of_ref": "indicator--d37f9cf6-8aa0-4186-b508-4f5ebbd2a538", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a136fcd2-bcaf-4c0b-a616-9cb4d1121a67", "sighting_of_ref": "indicator--fdd1c8cb-1853-4704-8288-8d8fb2023c18", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed0ffd88-0755-450e-ae14-276d23c61375", "sighting_of_ref": "indicator--fdd1c8cb-1853-4704-8288-8d8fb2023c18", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fea97166-e4d9-4c7e-b989-1274db139db6", "sighting_of_ref": "indicator--a9adb993-c688-44e2-a516-5acbe6a85694", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1be37ed3-454d-487e-b43e-df68c7cc5c9b", "sighting_of_ref": "indicator--a9adb993-c688-44e2-a516-5acbe6a85694", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c194a57c-9a95-4017-a6a8-18e424d560ed", "sighting_of_ref": "indicator--09f828ee-0a81-424d-8961-a5121f043efd", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8adc683-ccca-4773-803f-9c422bb65b35", "sighting_of_ref": "indicator--09f828ee-0a81-424d-8961-a5121f043efd", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92cadc01-bf2e-4303-8f6a-dd245c2f3935", "sighting_of_ref": "indicator--e52874ea-ff4c-4d93-b517-e5874ec3a0ce", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f5f240a-f8ba-401a-9963-0e63d5417a18", "sighting_of_ref": "indicator--e52874ea-ff4c-4d93-b517-e5874ec3a0ce", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebc8bf97-37af-4ba7-a7d5-61c868b0bf3e", "sighting_of_ref": "indicator--4ce4d219-f713-4abf-84e0-4d5009a568cd", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--526fd3ec-b72e-4fa1-81b7-3a8178179ad1", "sighting_of_ref": "indicator--4ce4d219-f713-4abf-84e0-4d5009a568cd", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2652cdc2-9336-4d52-beed-8468034ea2ee", "sighting_of_ref": "indicator--febacca1-f839-4cc1-9626-5dea2f5593fc", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc473652-b19b-4f0b-b6bf-c9ea73f32686", "sighting_of_ref": "indicator--febacca1-f839-4cc1-9626-5dea2f5593fc", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--452d4b88-899a-4159-ab03-0fa60ea204ab", "sighting_of_ref": "indicator--125f8433-b6d9-4a14-b1a1-d45615effbe9", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--321f6761-4a29-42c6-b2ae-915717e99475", "sighting_of_ref": "indicator--125f8433-b6d9-4a14-b1a1-d45615effbe9", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f43d0a5-12aa-43ec-a58b-e3a8f88f5876", "sighting_of_ref": "indicator--49e71e96-3eed-4493-a8ae-294ba26d1802", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c766a11d-93c0-4c4f-b1fd-71739a964b7e", "sighting_of_ref": "indicator--49e71e96-3eed-4493-a8ae-294ba26d1802", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc1b789c-4544-4035-a552-112fa0cf3ce9", "sighting_of_ref": "indicator--339b5337-2db7-449b-9490-0837467ca41b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--770290c4-2d59-45a3-9e61-ec6065d42e34", "sighting_of_ref": "indicator--339b5337-2db7-449b-9490-0837467ca41b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6afee186-47c3-43b8-8503-ec576cf922be", "sighting_of_ref": "indicator--927cf111-52df-4c84-9a6f-d3a0f1dc3d18", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59a8da06-2754-472b-96e5-fae4e6d0b5ec", "sighting_of_ref": "indicator--927cf111-52df-4c84-9a6f-d3a0f1dc3d18", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28581b98-e124-4669-861d-fa77f69c10e0", "sighting_of_ref": "indicator--5ce96266-857e-45c9-8545-9dda6249a16a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b1ba077-0ddf-4057-80a4-b2cdcc6a4d9a", "sighting_of_ref": "indicator--5ce96266-857e-45c9-8545-9dda6249a16a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc9c759d-bc61-4707-8c5e-8c718466fa8a", "sighting_of_ref": "indicator--243797af-2710-4243-9a5a-36d920243294", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--100fccbb-7dbb-4835-9465-433609ad469d", "sighting_of_ref": "indicator--243797af-2710-4243-9a5a-36d920243294", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e509d19-a8dd-4475-80bb-2736e33c7628", "sighting_of_ref": "indicator--287b2f15-f3cf-4bcd-bc2f-87ac63d4dde4", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfb785f9-318d-4eaa-b47c-76418ecaf877", "sighting_of_ref": "indicator--287b2f15-f3cf-4bcd-bc2f-87ac63d4dde4", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c0c5b96-2d68-40da-b5b8-2fd69324b433", "sighting_of_ref": "indicator--72e8bf4f-a60f-45e3-bb34-1e956712323f", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dbdad5c-3876-444a-bf19-26886516a946", "sighting_of_ref": "indicator--72e8bf4f-a60f-45e3-bb34-1e956712323f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a57d9e7-6ba2-43f4-be15-e190165e8f99", "sighting_of_ref": "indicator--4921764f-8e83-4dd3-b230-00a83d11b97f", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e2631a8-0611-4697-8412-23f55c02a50d", "sighting_of_ref": "indicator--4921764f-8e83-4dd3-b230-00a83d11b97f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07cd9989-59a1-4103-980c-b4bab0fa9092", "sighting_of_ref": "indicator--c2f836b1-9d57-4751-8f73-a84c61164c50", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f60da50b-bbdb-490f-97ba-300d415ef9b3", "sighting_of_ref": "indicator--c2f836b1-9d57-4751-8f73-a84c61164c50", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f782559-720c-44d8-9d66-6c9e3a1ba66f", "sighting_of_ref": "indicator--20a19cc8-b565-43b9-aca8-702444751c30", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecd68699-a03a-4798-8b4d-3b6c402dbe6b", "sighting_of_ref": "indicator--20a19cc8-b565-43b9-aca8-702444751c30", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84ebd6ac-7ec3-455c-8751-ebd7a3b77638", "sighting_of_ref": "indicator--5b2c6a14-3626-46ca-8f1c-e3067ddb28f9", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ed6a302-f1c6-4e4d-91b7-d407ed919a24", "sighting_of_ref": "indicator--5b2c6a14-3626-46ca-8f1c-e3067ddb28f9", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec4d0737-d646-4ae7-98b3-4b40e9225849", "sighting_of_ref": "indicator--c9720f56-7cbb-4e35-a11d-c6799bd3f1f4", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28f9fb57-e573-48d1-b10e-2daeb4340539", "sighting_of_ref": "indicator--c9720f56-7cbb-4e35-a11d-c6799bd3f1f4", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f3194b6-7374-4d71-8a32-856359f69725", "sighting_of_ref": "indicator--a055293b-f406-4bdb-82fd-05221955a976", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6a3361e-8f8d-4560-b8ff-b1b39039ce20", "sighting_of_ref": "indicator--a055293b-f406-4bdb-82fd-05221955a976", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffeefa5b-c224-417b-97db-ea0ab1dfea50", "sighting_of_ref": "indicator--a05b73fb-e378-47c5-8e45-0dc4053639c0", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a31c65b0-b0d8-41ad-af1f-bcd265a4bc03", "sighting_of_ref": "indicator--a05b73fb-e378-47c5-8e45-0dc4053639c0", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca131410-61f0-4f06-b1f4-6704470ac329", "sighting_of_ref": "indicator--80ad427b-b541-4a05-8a23-390579017237", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--316dfd5c-5afb-4a74-bbb6-a286f55010eb", "sighting_of_ref": "indicator--80ad427b-b541-4a05-8a23-390579017237", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e242cb7e-2f45-4276-a739-362c4d50f2fd", "sighting_of_ref": "indicator--15a02ffa-ffe0-43c1-8c36-52291a18b547", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44767bc0-ea0c-4ce0-bdd5-a99438a64a8c", "sighting_of_ref": "indicator--15a02ffa-ffe0-43c1-8c36-52291a18b547", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cd1b5c2-a992-425c-8378-0e5847dda500", "sighting_of_ref": "indicator--cfcb466f-3d3a-4adf-bfc2-5295a519f50d", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4436aecf-2c42-44d7-9066-05e77666caec", "sighting_of_ref": "indicator--cfcb466f-3d3a-4adf-bfc2-5295a519f50d", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18cc5220-fb61-47fc-b23c-7335fe9a2449", "sighting_of_ref": "indicator--cf37bc6a-627b-4254-8e57-3cb32cb3502b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af3cdafe-2aa7-41a1-8fbf-bd54821caeef", "sighting_of_ref": "indicator--cf37bc6a-627b-4254-8e57-3cb32cb3502b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56c46ec0-d413-4593-9e3e-7f76daadeba6", "sighting_of_ref": "indicator--7db86515-f37e-4c3e-a286-5521e6e1f40b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df2b914e-a019-4198-bd00-52a335085b35", "sighting_of_ref": "indicator--7db86515-f37e-4c3e-a286-5521e6e1f40b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de568235-cfd9-48e5-8ab3-ec9dbcf0a7b9", "sighting_of_ref": "indicator--1229160e-a780-4f2c-98da-ce16f9d15c47", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9de690c9-c665-4d24-9afa-4f3ad6f33ec5", "sighting_of_ref": "indicator--1229160e-a780-4f2c-98da-ce16f9d15c47", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ffe88bd-7fac-4c41-9b19-36ba7188072d", "sighting_of_ref": "indicator--90767bb4-8818-43c0-9115-f6660076b7cd", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cade6c57-4f59-4f69-800d-521c8c226a95", "sighting_of_ref": "indicator--90767bb4-8818-43c0-9115-f6660076b7cd", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8a614be-56a1-433d-b97e-bcebc1e460e4", "sighting_of_ref": "indicator--41622531-a1fb-4268-b103-71a1a9e75c17", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--605e46d6-a5e0-40cc-b4f8-94aacde7d41d", "sighting_of_ref": "indicator--41622531-a1fb-4268-b103-71a1a9e75c17", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3aa406d8-43bf-4feb-b29c-62d7e5f96847", "sighting_of_ref": "indicator--f77be234-792c-4c73-b725-913e7c02cfcd", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b65b0988-b835-4fda-8474-9b2d32d8ae1d", "sighting_of_ref": "indicator--f77be234-792c-4c73-b725-913e7c02cfcd", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--869f394a-7f47-4c7f-b4f4-ead1c6ec80ac", "sighting_of_ref": "indicator--afe9bf41-7de5-403e-882b-8917a2b009ed", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40d2378d-8af8-4195-9347-6f39f4eacaf4", "sighting_of_ref": "indicator--afe9bf41-7de5-403e-882b-8917a2b009ed", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d403b877-9ac5-4e39-8ab3-bd5692e19f8c", "sighting_of_ref": "indicator--34fe6283-61ca-4ef7-b23a-ccb3c740faeb", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15d4b327-c764-43fb-a7d3-b97d5314328e", "sighting_of_ref": "indicator--34fe6283-61ca-4ef7-b23a-ccb3c740faeb", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82fce263-503b-48f4-b104-ff3eb432e4e9", "sighting_of_ref": "indicator--ce8ff282-43f4-4970-ab00-fbbffe24a881", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55f7dc3f-7481-4656-aade-56bbf1533388", "sighting_of_ref": "indicator--ce8ff282-43f4-4970-ab00-fbbffe24a881", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1b8a3d3-f792-4e41-b115-af4edf34bbde", "sighting_of_ref": "indicator--4cc56778-d145-42f9-acd6-c333089cc822", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31e693da-6696-4d57-88a6-476e73da8935", "sighting_of_ref": "indicator--4cc56778-d145-42f9-acd6-c333089cc822", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e2a1ddf-d7e2-443f-9bf9-ae670fe56278", "sighting_of_ref": "indicator--e77d7068-9d71-4897-b07c-90a3e979f510", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51983fc1-00b3-47e8-be14-71bd74917666", "sighting_of_ref": "indicator--e77d7068-9d71-4897-b07c-90a3e979f510", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--914dc074-f8b2-4d55-aab4-183c2332dba9", "sighting_of_ref": "indicator--3e6df5be-65e0-4bdf-835c-71914142d9bc", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00b6ef44-2be9-4054-8139-d54dc5363d6c", "sighting_of_ref": "indicator--3e6df5be-65e0-4bdf-835c-71914142d9bc", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6edae1a3-f20c-4a4a-bf5e-16d5bcc85d11", "sighting_of_ref": "indicator--3308ff8c-0d46-4983-9845-79c4b35c59e4", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2baf408-5c13-485c-843d-fca8a5e33f41", "sighting_of_ref": "indicator--3308ff8c-0d46-4983-9845-79c4b35c59e4", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--526feba8-be02-4adc-971f-70b6587f7e22", "sighting_of_ref": "indicator--88c8240d-7968-44f2-84d0-a52735eaf9b2", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--590317d9-9faa-40ab-b8e3-f26e529e9276", "sighting_of_ref": "indicator--88c8240d-7968-44f2-84d0-a52735eaf9b2", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05b1f064-4d7a-4af4-9d47-ecfa4e895ac9", "sighting_of_ref": "indicator--36ffe404-922b-4377-ac1f-a1dba7caf10e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b365e3ad-fe1a-4232-8f17-5a9631491951", "sighting_of_ref": "indicator--36ffe404-922b-4377-ac1f-a1dba7caf10e", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d0a15ef-272b-424a-a6cf-c76f887c6d01", "sighting_of_ref": "indicator--af7f5f93-9e71-4497-be2b-7203c6eb4c87", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f78f936-73ed-4776-afb6-d785f18525a0", "sighting_of_ref": "indicator--af7f5f93-9e71-4497-be2b-7203c6eb4c87", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--477683d5-31cb-4786-b252-9951e5d709c8", "sighting_of_ref": "indicator--c3333bb7-8e37-4d5e-8915-bb1d9ff65648", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac36081f-ce19-4405-8b9d-5df98ebc41ad", "sighting_of_ref": "indicator--c3333bb7-8e37-4d5e-8915-bb1d9ff65648", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b28a5927-1288-456a-b8d0-a13a9a69cf04", "sighting_of_ref": "indicator--6e341fdc-b199-4bff-9f3e-8ab20f147ed9", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55e53620-b8e1-4309-b92c-a083689ba293", "sighting_of_ref": "indicator--691cb3a2-ef49-4976-b1be-dd914a87944e", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bf31387-7908-44a5-b361-c4b0d70682b5", "sighting_of_ref": "indicator--691cb3a2-ef49-4976-b1be-dd914a87944e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fa33e99-c516-4e1c-808d-1b024456df6c", "sighting_of_ref": "indicator--691cb3a2-ef49-4976-b1be-dd914a87944e", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25579ff3-5e41-4b22-963d-e1308289859a", "sighting_of_ref": "indicator--679d1871-7f28-47fc-b72c-7609d4109a87", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28da9386-1d2b-41ae-9fd1-2b571c295d66", "sighting_of_ref": "indicator--8da22a75-180b-4f44-bebe-263dba57ab19", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7f6e1d3-c53d-4598-b58e-65bc23072655", "sighting_of_ref": "indicator--8da22a75-180b-4f44-bebe-263dba57ab19", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--faa9a4f4-68b5-4c53-a603-b8a685cf5c6c", "sighting_of_ref": "indicator--e507280c-b3b6-4b1d-aae7-7187e3de50a3", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4274f43a-6fa6-482b-b3f0-aa4de2d4ebbc", "sighting_of_ref": "indicator--4d622601-4b80-4189-9438-66353802d406", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a75e22d-7228-4297-9a52-ed722ff05570", "sighting_of_ref": "indicator--2f2e8ab3-91ee-4a72-969c-af3898ff77d4", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c399388-723c-493c-b3ff-a9e17670b43b", "sighting_of_ref": "indicator--a6f12cde-05a5-4593-ab7e-07bb87d6eb16", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5e4ab69-3f23-49d9-91a9-d6b1ad340665", "sighting_of_ref": "indicator--ae5d7cc2-2a52-46fd-a04c-5a5e6dd2da11", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed53efe8-0c27-4158-89fc-f2a44b9f3def", "sighting_of_ref": "indicator--ae5d7cc2-2a52-46fd-a04c-5a5e6dd2da11", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdb3ccf3-1638-4f26-b6a6-56b03f079b27", "sighting_of_ref": "indicator--ae5d7cc2-2a52-46fd-a04c-5a5e6dd2da11", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d98c743-e1ca-4442-82bc-a81ca50f2717", "sighting_of_ref": "indicator--489beb5c-258b-43ab-82fb-0f36bb86c583", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1c894e2-dcbb-41ac-933a-be2e3a3ba8d6", "sighting_of_ref": "indicator--489beb5c-258b-43ab-82fb-0f36bb86c583", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a406ad3-3390-4869-b7e4-34abd21f2207", "sighting_of_ref": "indicator--489beb5c-258b-43ab-82fb-0f36bb86c583", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b328ed3-8f01-4342-ad78-716d4032a4dd", "sighting_of_ref": "indicator--c9ad1951-a278-4628-8311-1ca9851348a0", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d07bd6d-8c20-4177-a2df-334834998cf6", "sighting_of_ref": "indicator--c9ad1951-a278-4628-8311-1ca9851348a0", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5639c17b-cdfd-4bc9-9b5b-3b643861e3b4", "sighting_of_ref": "indicator--ee6999db-692d-4e5a-b78f-419aeb2acb57", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f1d4c14-3f48-44d2-96e5-80210292120c", "sighting_of_ref": "indicator--33a33797-0148-4abc-84b7-657cb71045b4", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad56933a-50ef-412c-af25-d32d5e25d032", "sighting_of_ref": "indicator--7f31d981-1162-4e3e-8096-120de3f37698", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b68a4e0-ced5-4f1c-bde8-7724693e6651", "sighting_of_ref": "indicator--55529b47-28da-4ca2-929f-989455cf2d35", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f003755c-22bc-4520-a22b-377377603627", "sighting_of_ref": "indicator--55529b47-28da-4ca2-929f-989455cf2d35", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9224c41-6610-4187-9f9c-abbcaf5346c7", "sighting_of_ref": "indicator--55529b47-28da-4ca2-929f-989455cf2d35", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b373cf4-a79a-42c8-bcb5-c9dd1f878811", "sighting_of_ref": "indicator--aef66e5a-7123-478f-ac17-0c04b8f626c6", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59e5d4e9-69a0-4a17-925a-54101e65520a", "sighting_of_ref": "indicator--aef66e5a-7123-478f-ac17-0c04b8f626c6", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e50d9167-0a19-4b91-a21c-d60a2162f996", "sighting_of_ref": "indicator--aef66e5a-7123-478f-ac17-0c04b8f626c6", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b022532-bd9b-4004-aea9-2643bae43c88", "sighting_of_ref": "indicator--cce94883-512b-4fa4-8e71-210cc286b612", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa704dc2-cbe3-437d-a5eb-a0d322546f86", "sighting_of_ref": "indicator--0cbb3121-b3a2-4924-97a3-88b055788c14", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9336a522-61ec-4c1c-996f-70b9172baa98", "sighting_of_ref": "indicator--0cbb3121-b3a2-4924-97a3-88b055788c14", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5aae5a5f-f06c-4be2-b1f4-27314e47a77f", "sighting_of_ref": "indicator--8519cfa7-bc3b-44d4-a9ee-8525e487e35f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50f4c108-c4db-478e-8efd-57a23d9b40a1", "sighting_of_ref": "indicator--8519cfa7-bc3b-44d4-a9ee-8525e487e35f", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2e682a6-f752-4f85-a340-68d6b8e622eb", "sighting_of_ref": "indicator--8519cfa7-bc3b-44d4-a9ee-8525e487e35f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9491b654-bcb2-4e1f-a2f0-c30c8da70900", "sighting_of_ref": "indicator--f9854f53-abbf-480a-9aa1-d86447c82154", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95d12eb0-2e01-4dec-b1f4-ee152bd09046", "sighting_of_ref": "indicator--0d45018a-0a46-4bf4-9438-c22844e27f16", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2abb9d7-eef7-464e-a7c4-5d9c93be3308", "sighting_of_ref": "indicator--b5baaa11-e86c-4bb6-bf9e-b17539b16346", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6403ad4-9457-46e8-bfbc-6c053b185ba6", "sighting_of_ref": "indicator--7b4434e0-87a5-4682-9e8f-5382065de19b", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7264d403-9c70-410b-bc5e-2cf6a6f41473", "sighting_of_ref": "indicator--7b4434e0-87a5-4682-9e8f-5382065de19b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6d2e1fd-423d-4c62-b0eb-811e7255c103", "sighting_of_ref": "indicator--7b4434e0-87a5-4682-9e8f-5382065de19b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c37cda1b-137c-44c7-a463-6e531d282fc4", "sighting_of_ref": "indicator--fdadc513-530f-4511-a0b1-5bafe0e8832c", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7f23a5d-cf32-4696-b7f0-377ca00a729f", "sighting_of_ref": "indicator--d249feb0-9160-431e-8749-ebbeed1c5a9a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f0c8490-4286-4d26-b780-ce5273c0b194", "sighting_of_ref": "indicator--c24a1890-a944-4957-be1e-f807452e0fb3", "where_sighted_refs": ["location--cc47317e-2c18-43a6-8938-dea748a56ad5"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f46e43f0-4639-407a-bf3b-3e204e816e6f", "sighting_of_ref": "indicator--deb9446e-bc9f-486d-8476-c7c32e41eb36", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f87bdf5f-75f1-48ca-954e-74d290554725", "sighting_of_ref": "indicator--f96cbc75-a246-4dd9-b1a6-9d36840ed680", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ee12314-9259-4448-91c6-1137fe926e5d", "sighting_of_ref": "indicator--92f7f05c-921e-4a7d-aa4a-91f6ee17c4a4", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6996a68-1ef4-464f-83fc-31ce4bc31f7b", "sighting_of_ref": "indicator--101f4975-3d3c-4ff9-872a-e04d3b8e1b02", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62612b1a-7562-446e-8999-e793e2373f07", "sighting_of_ref": "indicator--101f4975-3d3c-4ff9-872a-e04d3b8e1b02", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd275d76-e671-4776-8a8d-1d629efe12a7", "sighting_of_ref": "indicator--101f4975-3d3c-4ff9-872a-e04d3b8e1b02", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57eef113-32c5-4ee6-bc3d-4aae9dd0749d", "sighting_of_ref": "indicator--cc7449ce-0d86-4262-8fda-1ddfed2643a0", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5706fca-b172-4114-8159-d70328074b90", "sighting_of_ref": "indicator--cc7449ce-0d86-4262-8fda-1ddfed2643a0", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7b305f2-b187-4de6-8751-f44a645140e2", "sighting_of_ref": "indicator--cc7449ce-0d86-4262-8fda-1ddfed2643a0", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f1c534b-6493-49bb-9238-cae35ef4a50d", "sighting_of_ref": "indicator--96a0fd19-e283-4651-9a83-ac89803dff43", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ce79599-a8a9-4dd0-bb39-e6a714f7a233", "sighting_of_ref": "indicator--96a0fd19-e283-4651-9a83-ac89803dff43", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c43277ee-8d2a-4f9a-bb4f-a738025d8100", "sighting_of_ref": "indicator--96a0fd19-e283-4651-9a83-ac89803dff43", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef9c962f-fcaf-4b9f-a9cc-867acb8cdb0c", "sighting_of_ref": "indicator--6d420c1b-d83e-495b-aa48-41e0f0eeeae1", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b7a645a-bd2a-4f35-bde5-d5ba2171d29e", "sighting_of_ref": "indicator--6d420c1b-d83e-495b-aa48-41e0f0eeeae1", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0ba0b2c-a74e-4423-8f2a-588b902a08e7", "sighting_of_ref": "indicator--6d420c1b-d83e-495b-aa48-41e0f0eeeae1", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4043be2a-25c3-49dc-8913-33feba86f260", "sighting_of_ref": "indicator--61c227a1-6c3f-4941-acc4-382d877e0db3", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f303942-48ad-4ff0-ad90-eec7d4579f16", "sighting_of_ref": "indicator--61c227a1-6c3f-4941-acc4-382d877e0db3", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32ff5917-9d31-4ee7-8409-dd3bfd3f6e0e", "sighting_of_ref": "indicator--349c102a-9ca1-49d0-91a2-3c996a6a786b", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27275862-e28e-41bb-bdff-06ae813005b7", "sighting_of_ref": "indicator--349c102a-9ca1-49d0-91a2-3c996a6a786b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01f4fe9f-3f30-4c56-9a83-297165b90d46", "sighting_of_ref": "indicator--349c102a-9ca1-49d0-91a2-3c996a6a786b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d33f890-640c-4435-b9d8-dd3d7701c6cc", "sighting_of_ref": "indicator--f8290072-9e9e-435f-8a5d-6ccbd86a1745", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3070986e-9666-41c2-a01e-125cefad3a2c", "sighting_of_ref": "indicator--99a6c8eb-8d2f-44ba-a235-809a9e84cc60", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75252837-1847-4dbe-bc9c-6e65e5336df9", "sighting_of_ref": "indicator--96cc41a5-5f92-4f50-b0dc-68785463c535", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3544a057-6351-414a-a8bf-3d7b132eca2d", "sighting_of_ref": "indicator--2920424d-53e5-47ba-80d4-38822a1f4c73", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75e4ab03-2589-4e85-b4af-5d5f0cedd7fa", "sighting_of_ref": "indicator--71028e3c-6b42-4563-b9a0-05344468338e", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1db7949-62cc-4591-945e-82e81fcb201f", "sighting_of_ref": "indicator--ab75191f-8026-4704-b660-23e7356b6b5c", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15f556dd-68e3-4c26-a052-bba4b1ec85a1", "sighting_of_ref": "indicator--839ac51e-7f2c-4b1c-9a50-a167ea098d34", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--008638dd-e8e3-4707-8af7-fb1b8bb808d4", "sighting_of_ref": "indicator--6bf7d8b5-55b5-47fd-bc34-03671eea6c87", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f1c0ec9-63c0-4853-bf2d-19e92a109ca0", "sighting_of_ref": "indicator--b4b7b4f2-28be-4350-9322-9f3536c6215b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d91e8a7-a830-4606-94c8-50a658c294ab", "sighting_of_ref": "indicator--b4b7b4f2-28be-4350-9322-9f3536c6215b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06fa08f5-5cfd-4eee-8d1a-aeda57544f49", "sighting_of_ref": "indicator--2e3dd6fe-a026-4715-a71b-a941e37506d2", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9316f536-8be7-42f0-96eb-9fac8a299e46", "sighting_of_ref": "indicator--77ef506e-0780-4957-9b5e-23881ffc9cec", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d44882fe-24a7-4384-b51a-2fb3165c4108", "sighting_of_ref": "indicator--77ef506e-0780-4957-9b5e-23881ffc9cec", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4c79b8b-2f86-4081-b875-0558becdb60a", "sighting_of_ref": "indicator--058078a3-6103-4e98-a332-94d747b0a2c0", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f376b58-4d1e-42f6-8de3-c083dadd1dd8", "sighting_of_ref": "indicator--dfaa4c06-b41b-46ac-be58-d5ce45aa7f14", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e54753f7-66e7-4b89-804e-0b812d2c2cce", "sighting_of_ref": "indicator--07c5985e-b4b4-43fe-8806-c66fc38732c3", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18191fe2-0517-4c7a-99cb-d98fe5401925", "sighting_of_ref": "indicator--07c5985e-b4b4-43fe-8806-c66fc38732c3", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9d57adc-9546-4188-a71d-d5181e000883", "sighting_of_ref": "indicator--57352b86-b215-4317-ba50-13700510e986", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fcbd62e-53b4-46b2-81a7-e9d61f8bcbd3", "sighting_of_ref": "indicator--9ac60bda-7963-4f4f-9d95-93f40d166903", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15540fce-97f3-4f36-8bde-d80f62d4f7d3", "sighting_of_ref": "indicator--9ac60bda-7963-4f4f-9d95-93f40d166903", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfcf8e04-6d32-409c-b276-1d8ed380f4c2", "sighting_of_ref": "indicator--9ac60bda-7963-4f4f-9d95-93f40d166903", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4fc4709-d393-4b2e-9b80-2fa270a581cb", "sighting_of_ref": "indicator--1f2b133f-a85a-4294-acdc-ad0c9e31cdd5", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--708b441f-c5dd-4465-91ea-22af7614ebc7", "sighting_of_ref": "indicator--1f2b133f-a85a-4294-acdc-ad0c9e31cdd5", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7875782a-f128-4cff-8d9b-c2c0867ab253", "sighting_of_ref": "indicator--9280bc80-f05e-465b-bbab-0b4c0d89fdc4", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4518df6d-f5a3-4f33-aff9-9d5a505ee949", "sighting_of_ref": "indicator--9280bc80-f05e-465b-bbab-0b4c0d89fdc4", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c88c23d-5079-45a4-bbfc-47ab4d377a80", "sighting_of_ref": "indicator--9280bc80-f05e-465b-bbab-0b4c0d89fdc4", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffe8b801-449e-4c0e-8045-2977cdf30498", "sighting_of_ref": "indicator--3be1e3fc-c0db-4460-b9d7-b866863a6dae", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59e4f763-85f4-4913-bd02-4d4a7d431825", "sighting_of_ref": "indicator--5202a7ab-8aa6-49d3-9a9a-97b7fabe3d3e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afb163ab-cba0-46b9-8f44-8a743644660c", "sighting_of_ref": "indicator--f66f6302-d546-4883-910e-7d5dd7a1fd9a", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33407bfe-6a70-4f48-8772-0b0814fb56a7", "sighting_of_ref": "indicator--e739eacb-7dc4-49e6-a4d1-f32ab057384f", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67724d9f-f926-4899-bc82-d37f9ff4f04c", "sighting_of_ref": "indicator--7dfe271e-b0f1-49c2-8f85-1e58f961fc24", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92e1f24a-7432-4022-88a5-1187c30e0d3e", "sighting_of_ref": "indicator--4e8dd744-432e-4796-ae92-0b7c2863bb87", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3cdf2f6-8c41-4c7a-8eb8-58f5582aba0e", "sighting_of_ref": "indicator--912dcc38-35ff-4b2b-b1e2-50c0dbdab500", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2890d36f-95d6-4b95-a76b-84183e223e4c", "sighting_of_ref": "indicator--4e261ce8-5873-43d8-84e2-2d6eb5cedc4b", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dfe858f-e3f1-4767-82a1-1a07bf72c7ea", "sighting_of_ref": "indicator--a47bfbb6-3cc6-45e2-a87e-9ded8ad0d35b", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2000e56-fcf3-4cb3-9a91-6a79036c5a24", "sighting_of_ref": "indicator--5a536b0c-3ecd-44fd-816b-f4c498b8617b", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce069bcf-d465-4a17-9c91-87de489a2262", "sighting_of_ref": "indicator--16fcd48e-8039-4055-b447-8038156457dd", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6464d91-7098-4633-9228-d2120d625f80", "sighting_of_ref": "indicator--73e4699c-42da-4f25-9db8-37f05b79e6fe", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b3175da-1497-4953-9169-93ea0536af51", "sighting_of_ref": "indicator--46935ed7-1830-4986-abe7-b3c1f4dff02f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77c2a052-8b59-40b6-9de1-e41a3d951d0c", "sighting_of_ref": "indicator--46935ed7-1830-4986-abe7-b3c1f4dff02f", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b183e53-f88b-4758-a4db-fdc6f2396b4e", "sighting_of_ref": "indicator--46935ed7-1830-4986-abe7-b3c1f4dff02f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4603d7e-4c16-4958-9b3d-65e9407a43b4", "sighting_of_ref": "indicator--7b892e90-5633-466b-910b-8836023279c5", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--256bd311-2068-4b06-85d1-4cfb6842945b", "sighting_of_ref": "indicator--5af0c5eb-af44-48b7-9b55-dd00ac122517", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--599713fc-5497-4295-8372-d1712a8a9e13", "sighting_of_ref": "indicator--5af0c5eb-af44-48b7-9b55-dd00ac122517", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1ecc67d-d0c7-455c-a4f1-0a312068c2ea", "sighting_of_ref": "indicator--5af0c5eb-af44-48b7-9b55-dd00ac122517", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8546626-8333-4ca4-9336-1b07f1317553", "sighting_of_ref": "indicator--4f53671b-b197-4824-8dcc-6b6e446780a4", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b19616a1-8fcf-425f-b559-58f240432a9b", "sighting_of_ref": "indicator--4f53671b-b197-4824-8dcc-6b6e446780a4", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c433d77-60a0-4c5c-b90b-30e6d0df70b9", "sighting_of_ref": "indicator--4f53671b-b197-4824-8dcc-6b6e446780a4", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a3cd1c9-5868-43d4-ad5d-3282ba70a550", "sighting_of_ref": "indicator--33f842c0-ed53-441a-915e-7dd6904260a4", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d286c40c-4c80-440f-8282-9e925bef4c8f", "sighting_of_ref": "indicator--33f842c0-ed53-441a-915e-7dd6904260a4", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--651de00c-0660-4837-a9db-ed337f68307f", "sighting_of_ref": "indicator--33f842c0-ed53-441a-915e-7dd6904260a4", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75a69de6-a47e-46bf-a6f6-e536d676b3b4", "sighting_of_ref": "indicator--d1edfb35-0e52-46f5-9657-9f4d94736590", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2a17aa3-c914-46fa-8335-a928ed26919d", "sighting_of_ref": "indicator--fac467c0-28f2-49f6-a681-f08ef2a324f6", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ba963ce-57af-4174-a3a2-531265c726eb", "sighting_of_ref": "indicator--af148c1e-401c-4fe6-b5a7-cccbaf4a7b8c", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0282176-f9a8-4e0e-bc88-1c723d3aa8ad", "sighting_of_ref": "indicator--842fe6cc-fa86-4138-b5b0-e768e986e5c2", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cffbeda-b732-4e54-b381-20da68366281", "sighting_of_ref": "indicator--1d9cc7b4-3848-41e0-884f-5c4326bdc246", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58f6ce92-852d-435c-a471-7aa31cb92a2b", "sighting_of_ref": "indicator--9ebb48f9-7ae8-437f-a54e-1fc8ddd227b7", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb0916c0-7f57-45f1-ac42-749ac42267b3", "sighting_of_ref": "indicator--bedef17a-0909-46b0-b1db-d0230c910e06", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d24dbb28-5812-4e6a-9fd1-52bb5ff82d24", "sighting_of_ref": "indicator--623f0624-3a3c-4f13-b70f-ce8004b49838", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6962e91e-cf48-4926-891f-034922b8777e", "sighting_of_ref": "indicator--623f0624-3a3c-4f13-b70f-ce8004b49838", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59230199-c984-45a5-82de-46c255ea572a", "sighting_of_ref": "indicator--a30cc84b-6cb8-4df8-90d0-ad06559d461b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--944ff7a3-46e4-4dc6-befe-cd32fbd7c3ef", "sighting_of_ref": "indicator--a30cc84b-6cb8-4df8-90d0-ad06559d461b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bab33b7-43dc-4b53-89f2-ac3e1eac0601", "sighting_of_ref": "indicator--03538964-a622-4589-a4f0-d73a10d0f1a3", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a71f9002-08fb-43a7-a840-a822b319b278", "sighting_of_ref": "indicator--03538964-a622-4589-a4f0-d73a10d0f1a3", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbd4ba0f-9395-4a7e-9bae-e7c4fd1931af", "sighting_of_ref": "indicator--84c60c57-5d68-42f9-9ca2-c3ab0f48a559", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bfdfe18-ee41-4e1c-acc3-5fe7e43e6a78", "sighting_of_ref": "indicator--84c60c57-5d68-42f9-9ca2-c3ab0f48a559", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b29f67c-936e-4378-a390-b0b22467c783", "sighting_of_ref": "indicator--83e276a6-8567-4e6a-a43a-6168bcf9331d", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b19dda51-c60e-4800-a759-b7e696848412", "sighting_of_ref": "indicator--83e276a6-8567-4e6a-a43a-6168bcf9331d", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57f98081-2523-4af0-9b6d-580724ed4c1a", "sighting_of_ref": "indicator--a4d0726b-9c8f-4d2e-8864-c337c69d316c", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21bda63b-5f55-4941-a4b4-82f0832e2f70", "sighting_of_ref": "indicator--a4d0726b-9c8f-4d2e-8864-c337c69d316c", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c834effb-f5b1-44e5-b398-09da9523a8eb", "sighting_of_ref": "indicator--f251d286-a99d-4717-ac7d-a948850c6509", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eca27b91-8a4a-4eee-a728-26f0f4ca860b", "sighting_of_ref": "indicator--1859cda5-1e0c-424b-a96b-e0e253814d72", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd4864e5-241c-42e7-835c-092ab1cd6671", "sighting_of_ref": "indicator--1859cda5-1e0c-424b-a96b-e0e253814d72", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c2c9aae-5be6-4c92-9bc8-b5f980666b1a", "sighting_of_ref": "indicator--df699f62-750e-40c9-a26b-5703a27353f0", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46404e08-7232-46ca-8b64-f6c25abf9e91", "sighting_of_ref": "indicator--df699f62-750e-40c9-a26b-5703a27353f0", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e30c282-9464-44b4-a7a6-b6659c431022", "sighting_of_ref": "indicator--ca889dde-6c0e-40aa-a194-7f3a89836797", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93ab91d3-b2df-4c05-b4b3-fd4cd6a243b3", "sighting_of_ref": "indicator--ca889dde-6c0e-40aa-a194-7f3a89836797", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b37bd129-2f8e-48bb-8d94-f196ed81aaa3", "sighting_of_ref": "indicator--a0532b64-c5cb-4e53-8a8c-9a460a6e790c", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98b5d5e2-ca8f-4d15-84df-a34b682eedb5", "sighting_of_ref": "indicator--a0532b64-c5cb-4e53-8a8c-9a460a6e790c", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6da5f0ce-f408-4995-a2ac-9e14e4b14c73", "sighting_of_ref": "indicator--ec2e09f3-d0c3-4ef9-a4bf-a7d2422a4683", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b465f62c-89a8-4311-a3f7-0a12427c6bec", "sighting_of_ref": "indicator--ec2e09f3-d0c3-4ef9-a4bf-a7d2422a4683", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0728ffe0-8763-4467-952b-225ef0419444", "sighting_of_ref": "indicator--70dc3912-e239-41a7-8708-1c71f4a83800", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--658da1a6-c48c-4795-80a7-85e4698465b4", "sighting_of_ref": "indicator--4d6efb04-eb14-486c-8c84-c339788922c6", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ce8ead4-8afd-49d8-bf22-d71539074685", "sighting_of_ref": "indicator--4d6efb04-eb14-486c-8c84-c339788922c6", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83e4bddf-2faf-4fb8-9345-093afe57e4f2", "sighting_of_ref": "indicator--ec621cd4-e8ea-4343-affd-a19854b918d6", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73c78421-9c3a-49ce-8381-df936586bb36", "sighting_of_ref": "indicator--ec621cd4-e8ea-4343-affd-a19854b918d6", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fefe5227-69e5-42d8-bcb6-fc981b1f6b74", "sighting_of_ref": "indicator--8d68dec4-c424-41ce-b165-6e1f446fc9a5", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1951771-76b7-4528-8520-22303b95e564", "sighting_of_ref": "indicator--8d68dec4-c424-41ce-b165-6e1f446fc9a5", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3ce7014-3ffd-45f1-aef2-da328406d776", "sighting_of_ref": "indicator--d0a82a0c-c2fc-4478-806d-66a7efaaccbe", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--664298f4-a1cd-40ac-a090-eecb9fed1d68", "sighting_of_ref": "indicator--d0a82a0c-c2fc-4478-806d-66a7efaaccbe", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bf18be2-94d0-4d11-a543-cae367335591", "sighting_of_ref": "indicator--697a3052-3544-47ae-92e3-911ff8231237", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31e6ec5e-18f3-4405-8a20-afee58e983d2", "sighting_of_ref": "indicator--697a3052-3544-47ae-92e3-911ff8231237", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b445311a-7fd2-42df-8fb5-18e9e0058c4b", "sighting_of_ref": "indicator--149a9bbb-d0b9-43d9-b47d-ba0d9e2c474e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34d12a7a-6a0d-4aeb-a609-32b6b019683a", "sighting_of_ref": "indicator--149a9bbb-d0b9-43d9-b47d-ba0d9e2c474e", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ff9f446-9a7a-452c-9595-6026ddebf09a", "sighting_of_ref": "indicator--1d0e3632-a94a-4561-91cc-69dc98604c1b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59faed84-61a9-4fdb-92d3-1032b7b3fcae", "sighting_of_ref": "indicator--1d0e3632-a94a-4561-91cc-69dc98604c1b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76ce0cf1-b579-46ab-bd3b-e5d6d9f93f49", "sighting_of_ref": "indicator--cdf9cf63-6e81-4c58-a05e-e95bf4bcfe30", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e77df46-9c40-4c2d-89cd-6a02558651f8", "sighting_of_ref": "indicator--cdf9cf63-6e81-4c58-a05e-e95bf4bcfe30", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c19c3063-74d2-4a86-a331-ddbe313152d3", "sighting_of_ref": "indicator--ee613375-e5d9-4df3-b850-70ecc87ef4ef", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89922383-46f1-4a3b-8b70-00bf682425fd", "sighting_of_ref": "indicator--ee613375-e5d9-4df3-b850-70ecc87ef4ef", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9328a51e-bd73-49c3-bb1e-135491b7564f", "sighting_of_ref": "indicator--a67982c5-82ca-49c1-94eb-3556cdd11141", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--355dc5b1-4b7f-4176-a9e4-cf5099d48fea", "sighting_of_ref": "indicator--c7ef7809-2d32-4447-9004-a62160961f92", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55790a29-8f17-4c11-ab6e-acebac0843a8", "sighting_of_ref": "indicator--cc0203be-1b59-4944-9a67-cc52f49664fb", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4138f7e4-3832-49ad-a58a-2cd2f7e3d7eb", "sighting_of_ref": "indicator--cc0203be-1b59-4944-9a67-cc52f49664fb", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f9a0c24-82e9-4d6f-a89a-79e8bc2acb68", "sighting_of_ref": "indicator--7e8c0aaa-3ae5-4597-98dc-f576cf62ef6b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b29becab-8439-4b57-ba6c-3b2110c4fe8c", "sighting_of_ref": "indicator--7e8c0aaa-3ae5-4597-98dc-f576cf62ef6b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5c4b972-31d4-46b3-b7f6-2319d5f46d1a", "sighting_of_ref": "indicator--25ed0776-e87d-4326-9ac1-c38a2b7c572c", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33ae4e55-01d9-4be0-93b1-ab729b0a0adf", "sighting_of_ref": "indicator--25ed0776-e87d-4326-9ac1-c38a2b7c572c", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61add0ae-17f2-4015-8053-529e0bd14be4", "sighting_of_ref": "indicator--ad4bfb46-df56-4504-9fdb-d22475f14b3c", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01d76334-0a9a-456d-8be0-c6d3ed41dfd3", "sighting_of_ref": "indicator--ad4bfb46-df56-4504-9fdb-d22475f14b3c", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a431df18-89d4-449d-80c7-2018fa42d11e", "sighting_of_ref": "indicator--4eb2bfca-4dad-478e-9c1f-967db21d042c", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a29ea20c-a415-43b6-be25-eefc54d61cf7", "sighting_of_ref": "indicator--015cd32e-37c7-4e78-baf6-0e9200f7fdc6", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e1cea93-e8b9-4823-b072-ccf5bebf501f", "sighting_of_ref": "indicator--c3b82d27-b179-4e88-bd56-de774523394d", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28a7cdfc-34dd-4180-bc7a-191242b57580", "sighting_of_ref": "indicator--befc1d7c-be71-4ab4-b2e4-25952c04a542", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f73ce1bc-88c3-4aa7-ab4e-b8c6321f81c2", "sighting_of_ref": "indicator--0aaeabf2-5aef-445e-b45f-bda063683323", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b68e525-485e-430c-a14e-dcf25c4e309f", "sighting_of_ref": "indicator--0aaeabf2-5aef-445e-b45f-bda063683323", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0bddd75-5be8-4514-8b98-ed53c7c6b9d7", "sighting_of_ref": "indicator--54fd7d86-c9a2-4559-a666-281b61eaec34", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9b4584c-a4f7-46d4-81ad-62b4a6b76948", "sighting_of_ref": "indicator--6756eaf5-301e-482e-9c7f-08d8d9520649", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0dbb8c7-48ca-4414-b0f0-132de22390af", "sighting_of_ref": "indicator--6f635608-242e-42c9-a09b-4bcb2e5d47c0", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5475b432-9665-490e-8131-ec2250d777a5", "sighting_of_ref": "indicator--38c12042-1647-4cf8-af22-a66b343c342a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--706c1fce-d6f1-411c-b1c5-76eddd5c82c3", "sighting_of_ref": "indicator--7a9cc863-025d-4479-bc1f-85b2d0d3799f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2112751a-4c38-4b18-bf51-aa344945958e", "sighting_of_ref": "indicator--7a9cc863-025d-4479-bc1f-85b2d0d3799f", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93f54035-b41e-4aab-a576-cf099659eac8", "sighting_of_ref": "indicator--7a9cc863-025d-4479-bc1f-85b2d0d3799f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a977345e-6fde-4314-9e76-4494e445a2c2", "sighting_of_ref": "indicator--e0b1273d-e965-46d9-9e20-db26efd450aa", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70c356d5-162f-43b2-8f0c-539ad01e5c57", "sighting_of_ref": "indicator--a2fdf6c3-2548-46f0-bcda-dc2836908573", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c835d8d-9d0c-4202-b692-c7a4b96225a6", "sighting_of_ref": "indicator--a2fdf6c3-2548-46f0-bcda-dc2836908573", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9f5ed00-0ff3-4fb9-81a0-9a8a39e9ecbc", "sighting_of_ref": "indicator--a2fdf6c3-2548-46f0-bcda-dc2836908573", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9208e141-c8f2-4b61-84ca-f2bf0aa50ca3", "sighting_of_ref": "indicator--7e403c43-ae97-41c9-8c0e-aaeecbcc4dcd", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e1125e1-d620-402a-bec0-ccd6b93d9a93", "sighting_of_ref": "indicator--7e403c43-ae97-41c9-8c0e-aaeecbcc4dcd", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7aefd993-d317-4484-a8d1-21268e22ef86", "sighting_of_ref": "indicator--df9b0943-cfc3-429c-8101-7b5be5896d1d", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a70e158-e190-42a7-ba65-eec3fa584eb5", "sighting_of_ref": "indicator--c1bb3758-569e-4556-8489-99d307d522bb", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--910856f0-d296-426b-ab75-02c9e0159a3c", "sighting_of_ref": "indicator--c1bb3758-569e-4556-8489-99d307d522bb", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7eb7b866-822a-4f4f-92d4-8a367d643447", "sighting_of_ref": "indicator--a870caa3-605a-4080-ad25-6218185c214b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e488a2d-daea-4e14-a1fc-493e1b674029", "sighting_of_ref": "indicator--a870caa3-605a-4080-ad25-6218185c214b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92379bbc-c1e6-4612-8273-7b1f1c8cb396", "sighting_of_ref": "indicator--c82ae77c-52fe-45b7-85e2-b0908ee67523", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98b0b029-2086-47c1-b96c-e52cd7f0ec87", "sighting_of_ref": "indicator--c82ae77c-52fe-45b7-85e2-b0908ee67523", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c9ad103-998d-44e8-80b7-3b2817160152", "sighting_of_ref": "indicator--22ec9197-18ea-4274-835c-d20602fa03ce", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0307e62-3bc5-4490-84dd-d7d3f2c9e462", "sighting_of_ref": "indicator--22ec9197-18ea-4274-835c-d20602fa03ce", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2989a54-a76d-4498-842f-3d6de8c57eac", "sighting_of_ref": "indicator--b535a013-b561-4d85-b662-74917a56ca99", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e096ea9c-79e9-4515-a193-52a115f74ab2", "sighting_of_ref": "indicator--b535a013-b561-4d85-b662-74917a56ca99", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36f83e07-e3ac-421b-8ed8-7c2c5ed326e7", "sighting_of_ref": "indicator--51bce739-5384-44e1-9363-acdaf71363bc", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f75c9415-8544-42c0-83e0-310cdd23ccc0", "sighting_of_ref": "indicator--51bce739-5384-44e1-9363-acdaf71363bc", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88c775fa-a5af-4786-8af9-d41ed5d92574", "sighting_of_ref": "indicator--118ae7ae-c59c-4cdb-be05-9c7aa184ead9", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a0337a9-770f-4943-85d5-dc8f312afb47", "sighting_of_ref": "indicator--118ae7ae-c59c-4cdb-be05-9c7aa184ead9", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db4406ec-3446-41bf-bb1b-330c0aa1449d", "sighting_of_ref": "indicator--bc3b59aa-61c3-43c6-aa56-743a47f3c9ea", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7921f61-bb9b-4206-93e5-2e7b4fab7eec", "sighting_of_ref": "indicator--bc3b59aa-61c3-43c6-aa56-743a47f3c9ea", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7438c672-c017-46f4-ba38-c6d9f1a368ad", "sighting_of_ref": "indicator--2df9775a-698f-40cc-9574-40ccc4e31ee6", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53f92bd9-84e2-48d5-91f0-6255cfa53bcd", "sighting_of_ref": "indicator--2df9775a-698f-40cc-9574-40ccc4e31ee6", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adda969d-9e7c-4a26-93fa-b8edc6cfc15c", "sighting_of_ref": "indicator--00de58b3-88be-4185-b9c8-018e54de1942", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c1d253a-82aa-41ac-a410-c1925072b41f", "sighting_of_ref": "indicator--00de58b3-88be-4185-b9c8-018e54de1942", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--110ecb14-6054-46d4-b058-4a4d3164d768", "sighting_of_ref": "indicator--335c7763-571c-4fc8-903c-220875474729", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b753b1a2-9390-4f7c-88a1-6fcd8ab4abb3", "sighting_of_ref": "indicator--335c7763-571c-4fc8-903c-220875474729", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d981b37-262d-4294-b51c-db955b990963", "sighting_of_ref": "indicator--ff9e1500-4e92-4291-9c4d-73ec50519863", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3813919-4a7f-47aa-8d03-4d77a8b4c764", "sighting_of_ref": "indicator--ff9e1500-4e92-4291-9c4d-73ec50519863", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90415b24-fc8d-46d7-9894-56080aefdd4e", "sighting_of_ref": "indicator--41ec6a30-68db-430c-9304-6a2b6c4e78c7", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7058667a-6d73-4d42-ab25-a367da846002", "sighting_of_ref": "indicator--41ec6a30-68db-430c-9304-6a2b6c4e78c7", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d97d3dd-b202-4c64-9170-faeccff409ce", "sighting_of_ref": "indicator--bf95cbf0-5ea7-41cc-b4ed-8b47220d4f2e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a80b70b-ca81-4e52-bd84-c325c383bf7f", "sighting_of_ref": "indicator--bf95cbf0-5ea7-41cc-b4ed-8b47220d4f2e", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d2e9f55-14f1-4870-a4a0-e77a3c822955", "sighting_of_ref": "indicator--0913c43c-c624-4adf-97ec-c9ed58cce285", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--811ade82-c5a8-4db6-8217-d119c85c1535", "sighting_of_ref": "indicator--7b230453-f3fa-4c4c-a64c-97a3505e31ee", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac73ee1c-9a98-4989-9990-640375b21982", "sighting_of_ref": "indicator--d1a94fcc-10e9-4202-8b4e-5cc2c7949ac4", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--862125d3-d9dd-4329-8c34-38144e85a696", "sighting_of_ref": "indicator--d1a94fcc-10e9-4202-8b4e-5cc2c7949ac4", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecbd50c6-557b-4d2e-a42a-d352c8c6a2b3", "sighting_of_ref": "indicator--7d6c50af-8206-4f38-b7bd-c4e60ae251e5", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b9dd7b6-c25e-48a9-89cb-b45ce35d8d54", "sighting_of_ref": "indicator--e8b07b10-2135-4807-a319-f44e74b7e348", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4db0da16-d170-4348-841a-3c0c79ba651d", "sighting_of_ref": "indicator--a051222a-e50f-4645-8752-ceeccd972fbf", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8d5be8e-46b8-445a-a090-942be90be1e2", "sighting_of_ref": "indicator--a051222a-e50f-4645-8752-ceeccd972fbf", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7ed4be3-181e-4ec7-be79-17cbae32e98f", "sighting_of_ref": "indicator--829c16e9-de1a-4f46-9fe4-f09e4ca747e9", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--623ebafe-9902-4218-8072-a70b81f61bb4", "sighting_of_ref": "indicator--b96930ef-e2fe-4107-9fbb-aab4d6ad8c38", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd9a792d-269b-446f-a72b-29ca889d8eeb", "sighting_of_ref": "indicator--e210fd2f-fe77-4323-be56-c4240a99028a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ac07369-a8e8-4249-a8da-d16de6e9a9fc", "sighting_of_ref": "indicator--5336f788-4825-4fd1-ac93-aec24aa6e092", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca794b2d-76d7-4ab1-888d-1e9b3613916b", "sighting_of_ref": "indicator--cccdaeb9-e538-4697-a402-0106811098a9", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71e828df-444b-49be-9ba6-55c026d27119", "sighting_of_ref": "indicator--cccdaeb9-e538-4697-a402-0106811098a9", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af1ca8d3-9af6-44c9-b716-9c466d1eff4a", "sighting_of_ref": "indicator--a3a2b027-336f-4842-ad1f-b1b62677065c", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2b0167d-bb43-4f1b-9023-9f30511ac119", "sighting_of_ref": "indicator--a3a2b027-336f-4842-ad1f-b1b62677065c", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--932a9808-f870-4206-b91c-eb810f6900d1", "sighting_of_ref": "indicator--74b6921d-da07-49fe-b133-6dbbfde149bb", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62bbd849-21b2-4790-9314-0480d40f1766", "sighting_of_ref": "indicator--74b6921d-da07-49fe-b133-6dbbfde149bb", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecb5ce0e-ee90-4bc8-a138-9451cf892a8a", "sighting_of_ref": "indicator--1282ec74-becd-491c-9c1a-1ffa267673dd", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f68616fa-e1ad-434f-9bbb-ff12495c4214", "sighting_of_ref": "indicator--1282ec74-becd-491c-9c1a-1ffa267673dd", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da6943a7-8996-494b-aad2-554c99a0ec5a", "sighting_of_ref": "indicator--ec21d01d-40ac-40c2-8a26-01c7b9f8d0f9", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa10fce0-6504-4b48-be43-a11337ee5958", "sighting_of_ref": "indicator--ec21d01d-40ac-40c2-8a26-01c7b9f8d0f9", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7573c796-5cac-455e-93a2-06ff3243961c", "sighting_of_ref": "indicator--ba0be273-b6f4-46f6-a943-cfb8fff0f0e7", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2358285c-05e7-456d-a293-5e49f8cdabc0", "sighting_of_ref": "indicator--e3e39666-316b-4d44-ad4a-5a591644e774", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9522e14-70ab-431c-b306-0b81373f4c79", "sighting_of_ref": "indicator--098230bb-eb8d-495a-a3ae-85d89f9d0e09", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b52f812b-759a-459d-84bd-1ca76204b608", "sighting_of_ref": "indicator--12852b41-cbc8-4b99-acc4-9a0b68720468", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cab2747-b429-4849-a94b-99929fd6ed3d", "sighting_of_ref": "indicator--12852b41-cbc8-4b99-acc4-9a0b68720468", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b384d0c-2fe8-4732-ac95-7ad9c644c2db", "sighting_of_ref": "indicator--36dff748-8fb6-4d15-b810-6a59ce7a0300", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9564a69-89ea-4c3d-a8a2-891b06b20939", "sighting_of_ref": "indicator--36dff748-8fb6-4d15-b810-6a59ce7a0300", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7785b4f1-95a4-4993-a033-4890775873c7", "sighting_of_ref": "indicator--5338a233-86f5-4af4-afeb-9adc69a8531f", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98240c9b-fa9f-44c4-9b87-56196b752c5c", "sighting_of_ref": "indicator--5338a233-86f5-4af4-afeb-9adc69a8531f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2565e2f5-4a0c-40f3-96af-c040189a9537", "sighting_of_ref": "indicator--c098b9b8-307c-4d17-8c49-bd2bd6112be6", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e184017-78f6-4b4a-a598-9fa7203cc5f3", "sighting_of_ref": "indicator--c098b9b8-307c-4d17-8c49-bd2bd6112be6", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97ae920e-dfc9-4ec8-bb11-52bbdb088949", "sighting_of_ref": "indicator--c6883859-d111-4d72-8e9d-5d7b82d87218", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a493066d-ec99-4ad6-a16b-bb1c4c411c58", "sighting_of_ref": "indicator--c6883859-d111-4d72-8e9d-5d7b82d87218", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98b88b71-ea74-44e0-a7a0-b7d9671593ba", "sighting_of_ref": "indicator--35e1190f-a448-481f-b48a-4aee5c4afde8", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2429510c-cda4-4bc6-a24a-1c9b95042dad", "sighting_of_ref": "indicator--f7a6fb9c-56cb-4b58-aded-25b457e07f9f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d5e0e29-c3f5-4daa-9524-05c26005ee52", "sighting_of_ref": "indicator--7ecb2ef9-57be-4977-aa96-29bfb50b57fe", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fe462e4-deab-4368-a3d2-8d66dff16c4e", "sighting_of_ref": "indicator--37a7c9d1-a2da-4d8e-b858-0807d286833b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3dde7ee-f54a-4df9-87fa-7c4303c4fd07", "sighting_of_ref": "indicator--37a7c9d1-a2da-4d8e-b858-0807d286833b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05b9c983-b747-4e15-bdcb-8a677455f760", "sighting_of_ref": "indicator--5443593b-38c8-4d86-b35d-570c69c8feb0", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--058a03a6-b25a-4f68-b1d2-691443566fdb", "sighting_of_ref": "indicator--5443593b-38c8-4d86-b35d-570c69c8feb0", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e0a7a64-7a0c-46e8-8ba8-04383bd19564", "sighting_of_ref": "indicator--520eb415-3ba2-4560-bc9c-acec31a3e564", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bae1e586-7e31-49d0-8210-4a3bc5dd9ffd", "sighting_of_ref": "indicator--520eb415-3ba2-4560-bc9c-acec31a3e564", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17b68306-a1ca-470e-99cb-1c1e390d9ff3", "sighting_of_ref": "indicator--57f5a61b-fb67-4fd9-af24-0c35869bee17", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a36f1065-fbc9-4149-a72a-f0bd6877bcb7", "sighting_of_ref": "indicator--57f5a61b-fb67-4fd9-af24-0c35869bee17", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ebc5b0d-6061-40ef-b277-2d63b5355658", "sighting_of_ref": "indicator--7f0d88de-71f5-4b64-b676-c6622d106cdc", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adf2f4b6-c331-4e42-b1cf-09b1105dfc26", "sighting_of_ref": "indicator--7f0d88de-71f5-4b64-b676-c6622d106cdc", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c77083e-1e2a-421b-bc82-b7e908243b87", "sighting_of_ref": "indicator--2ac32d96-ed85-491d-85f5-165bfe423f10", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3601e9cd-9c78-4ca4-be90-e011f7bb1c8d", "sighting_of_ref": "indicator--29943cd9-f959-440e-9f55-fa36ff68592d", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--521b0904-ef37-4162-94c0-b1712c080deb", "sighting_of_ref": "indicator--fd15e89a-aac5-4ecb-a6ff-876b0c4fc732", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--472a152e-d357-48a9-90d2-cb702c3719da", "sighting_of_ref": "indicator--fd15e89a-aac5-4ecb-a6ff-876b0c4fc732", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1646dc1e-aee4-4632-98a0-ed5b1a0afc87", "sighting_of_ref": "indicator--9ac201a0-9f9e-4c91-ba34-4a688f189fc1", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--843399b2-c554-4ad3-b059-65a03d9448a4", "sighting_of_ref": "indicator--9ac201a0-9f9e-4c91-ba34-4a688f189fc1", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--425ec1b0-ae5f-4846-8c61-df2a13de0207", "sighting_of_ref": "indicator--078fe487-af69-42cb-9d77-9632a78964d9", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7a1e2ac-d858-4dc9-8598-f96bc21f70cc", "sighting_of_ref": "indicator--078fe487-af69-42cb-9d77-9632a78964d9", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--028c9704-1c70-487c-92c4-40efdeb11f84", "sighting_of_ref": "indicator--da251a8f-39cc-4121-b89e-bee729211c1b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bddf3c2-48bc-455b-a6ac-9bf54635298e", "sighting_of_ref": "indicator--da251a8f-39cc-4121-b89e-bee729211c1b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d8fa2ae-07ca-4442-8edb-61292518a28f", "sighting_of_ref": "indicator--65b2afe3-86c7-469f-825b-56d218839593", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfe1d1e0-cae5-4050-a843-4613c5cc5934", "sighting_of_ref": "indicator--65b2afe3-86c7-469f-825b-56d218839593", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dbedbb6-aa64-4872-ad5c-f53bbc50e358", "sighting_of_ref": "indicator--fe1b9e6b-7528-4e69-8248-e16b8dde59a3", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3abf109d-bce3-4a54-95ab-7fed58831f72", "sighting_of_ref": "indicator--fe1b9e6b-7528-4e69-8248-e16b8dde59a3", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dbbc03d-05b5-4b90-a66e-09fe1a241a7f", "sighting_of_ref": "indicator--ad76ef07-d7a0-4e72-bbdf-8303080dde5f", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14ef3f66-7ee1-40d8-8da2-63b950a02bdb", "sighting_of_ref": "indicator--ad76ef07-d7a0-4e72-bbdf-8303080dde5f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a191d6f-5d61-44da-8661-acd00338781b", "sighting_of_ref": "indicator--0c57991c-e67f-4ec0-8cb7-dfa913c76898", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5264f51a-8b40-4aa4-b5bc-2c3ee7b65b82", "sighting_of_ref": "indicator--0c57991c-e67f-4ec0-8cb7-dfa913c76898", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba981196-8a0d-45a0-af35-1f4a9b228f62", "sighting_of_ref": "indicator--f8a6443c-2c90-4297-8f48-850969510890", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00332a57-60ae-4811-be87-1db6589cc9d4", "sighting_of_ref": "indicator--f8a6443c-2c90-4297-8f48-850969510890", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dd14ba8-e16e-4e17-b968-9abfb2cf1e36", "sighting_of_ref": "indicator--ee4756b6-93f7-45c9-bbfa-926abb051f2f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca4772d7-681f-4b2a-8901-a3aa3ab6450b", "sighting_of_ref": "indicator--c49a18e8-03ef-4e77-9537-72f2e58425d1", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3d8c70c-9f81-4969-9147-d7d7d6a4c30e", "sighting_of_ref": "indicator--a6d798a1-9d2a-4cd6-b304-804baa662011", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f046897-4483-4c35-9626-b57bf9ef939e", "sighting_of_ref": "indicator--a6d798a1-9d2a-4cd6-b304-804baa662011", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af35c6b3-1280-498b-a13e-7091733a6da7", "sighting_of_ref": "indicator--b93a2b49-b22d-4bfb-a2fc-f8a7f2a62873", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3274a20e-4450-4fbb-a446-0b9fcdda2cbd", "sighting_of_ref": "indicator--73783abb-9bc0-4715-a2a1-67344cf18354", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cf72395-6991-4e1d-b720-7669e2232c23", "sighting_of_ref": "indicator--2ac77cd9-c83c-4871-9ca7-bebec135de57", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7990c86e-da96-4306-8190-ada7fb3825d6", "sighting_of_ref": "indicator--2ac77cd9-c83c-4871-9ca7-bebec135de57", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--858488b8-30e4-4774-ad4d-ab99712db9c1", "sighting_of_ref": "indicator--b489dcf0-0866-48f4-926b-333c0d289e05", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6692a012-a7cb-49cb-bf7e-b734aa0bc8a2", "sighting_of_ref": "indicator--4253e637-5196-43b3-981c-e0e3e32aa7a6", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60afc87d-8052-459f-83ed-6a49d512a565", "sighting_of_ref": "indicator--4db2f71e-15fe-451d-8a12-42dff3ceeb0c", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ea3c6b2-dfb3-4571-86b1-e9e794979c89", "sighting_of_ref": "indicator--4db2f71e-15fe-451d-8a12-42dff3ceeb0c", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dd15b06-96a8-4e7f-9f0b-27610eee060a", "sighting_of_ref": "indicator--d6b7d6bb-aef5-494b-a313-f4fa877a61bc", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9142779-f5d6-4fea-a930-2f8abcd89986", "sighting_of_ref": "indicator--d6b7d6bb-aef5-494b-a313-f4fa877a61bc", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3c1c435-9459-49d8-8e8f-26a8af4ff4b9", "sighting_of_ref": "indicator--41247bf8-1afc-4b29-94a3-d733b2aa8644", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82e1d7c2-a301-460e-9936-07a95ae94e66", "sighting_of_ref": "indicator--41247bf8-1afc-4b29-94a3-d733b2aa8644", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8ab31a5-1f07-466a-beca-9fa72ba87dea", "sighting_of_ref": "indicator--cf1d4172-7fcf-48b9-b170-4e248945c512", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64d78abc-8437-43c8-9e71-afadf550fa3b", "sighting_of_ref": "indicator--cf1d4172-7fcf-48b9-b170-4e248945c512", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56d5aaf0-f583-460d-b8da-9985aff925be", "sighting_of_ref": "indicator--7a2b9388-a30e-4f66-9b6e-3e18153f3d68", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53a96c4a-f3a4-4b2e-bd25-e61375726b9c", "sighting_of_ref": "indicator--7a2b9388-a30e-4f66-9b6e-3e18153f3d68", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35cd2121-302b-4f7d-894c-31dce31d7404", "sighting_of_ref": "indicator--bf1d6097-7bac-42b8-ab4c-ad4bfff4851e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2e411b2-a2d7-4bca-83df-207940ceb54d", "sighting_of_ref": "indicator--9a37a740-b191-42d3-a28d-d10ff0198427", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cb1ad23-ad71-4171-bc8c-1f20eab1f25f", "sighting_of_ref": "indicator--9a37a740-b191-42d3-a28d-d10ff0198427", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--277bf860-40a0-4596-a1eb-8226aadfd2e2", "sighting_of_ref": "indicator--dbe69a0f-4da9-48fd-87a8-5b8aa54216f5", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52795419-3950-49d8-bed3-3389dec2d6d4", "sighting_of_ref": "indicator--dbe69a0f-4da9-48fd-87a8-5b8aa54216f5", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--679bcad8-2d98-4667-ad41-6bdb731690a8", "sighting_of_ref": "indicator--00a8ed8d-3484-4539-93ed-3f5beaa35f0c", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3136db89-66e8-4272-97e5-d71c8b0ba926", "sighting_of_ref": "indicator--00a8ed8d-3484-4539-93ed-3f5beaa35f0c", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ae847ca-f152-47e8-ac9a-72fe678d9c61", "sighting_of_ref": "indicator--12cce2e3-4194-4dab-aa93-8463717addb4", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9dacf53-5f6e-40b0-ae27-fd98efe594c5", "sighting_of_ref": "indicator--12cce2e3-4194-4dab-aa93-8463717addb4", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e23e54c-f7c2-4d12-839b-2fd27ac69db0", "sighting_of_ref": "indicator--0bc2203e-df7e-42b0-b54a-1fbdda2ec674", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20fb1a67-2618-47c6-85c5-696dacfcc710", "sighting_of_ref": "indicator--0bc2203e-df7e-42b0-b54a-1fbdda2ec674", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da3dae73-ab3f-41a0-b99a-d4c9e8df362a", "sighting_of_ref": "indicator--03a04292-1ce4-4a78-9c02-09f4643ec850", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79f4a48d-08b3-45c7-b9e6-5b6fd9a09753", "sighting_of_ref": "indicator--03a04292-1ce4-4a78-9c02-09f4643ec850", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bccf3e7-669d-48dc-ab6a-559a5126f68c", "sighting_of_ref": "indicator--14e836cc-abf5-41e3-bec8-1fed634b7ec9", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e7c1c4d-5e61-4ddd-8a88-9d52a1562e60", "sighting_of_ref": "indicator--14e836cc-abf5-41e3-bec8-1fed634b7ec9", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea8a1d05-9bc6-4e92-be0f-c267326afe48", "sighting_of_ref": "indicator--2ff3ff10-0beb-45f3-a151-1f5467f7a1da", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca0046a4-2050-4544-b651-700dbb4c6920", "sighting_of_ref": "indicator--2ff3ff10-0beb-45f3-a151-1f5467f7a1da", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4b922dc-517a-4138-813a-1d152258b20b", "sighting_of_ref": "indicator--0b9e3ce2-f2ab-4dfa-aafc-bf3e9871d29d", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40d97e23-6ffe-4444-80a7-04a8312bdc2f", "sighting_of_ref": "indicator--0b9e3ce2-f2ab-4dfa-aafc-bf3e9871d29d", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27245187-5372-4573-8af0-f058e56000cf", "sighting_of_ref": "indicator--491075ba-44ae-405e-b5f3-6dd8d8e374b8", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c851eacf-ebe2-4837-b807-69d561152db8", "sighting_of_ref": "indicator--491075ba-44ae-405e-b5f3-6dd8d8e374b8", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e72dbaff-126d-404a-b331-26806de2c358", "sighting_of_ref": "indicator--855120dd-61d9-4746-9995-6f3aaf06e3ad", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be6825b2-fe1f-464d-b422-51d464e3edd7", "sighting_of_ref": "indicator--855120dd-61d9-4746-9995-6f3aaf06e3ad", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--871d252f-7608-4796-a536-f3a2ca7a9748", "sighting_of_ref": "indicator--3d22e728-1a05-49d9-8b4c-fb3dfc38c8a1", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5e01230-b696-4076-af68-35cf8e315078", "sighting_of_ref": "indicator--3d22e728-1a05-49d9-8b4c-fb3dfc38c8a1", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4633ad6-df06-4bb4-86f4-6435602669ea", "sighting_of_ref": "indicator--59065a35-bb95-46bc-af0a-7248a4d1f73a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--600d908b-fece-4ec2-8634-686300b7f19f", "sighting_of_ref": "indicator--59065a35-bb95-46bc-af0a-7248a4d1f73a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d96e72a5-e6a7-4035-8c4c-3bed00d19432", "sighting_of_ref": "indicator--de93da1b-b714-4173-a1b1-ea60e65c89fc", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c658d02e-627b-4579-88e7-5243fdad0fe7", "sighting_of_ref": "indicator--253f5b05-20e3-4bc5-be00-14d013004047", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e786de0d-7433-42eb-a260-c9cfdf060bcc", "sighting_of_ref": "indicator--253f5b05-20e3-4bc5-be00-14d013004047", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b53bc651-1ff9-4078-b23f-a046033620fa", "sighting_of_ref": "indicator--6deced33-a778-4d52-baa5-1423a6167312", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83cf07b6-632f-400b-b04d-33d1502c94d3", "sighting_of_ref": "indicator--6deced33-a778-4d52-baa5-1423a6167312", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b729dc09-ad2a-45f0-9cba-0240e9830180", "sighting_of_ref": "indicator--5242c35d-b73d-45dd-99c3-ca435b952d37", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6cd4a85-7577-4616-89c8-d07ef6523d7e", "sighting_of_ref": "indicator--5242c35d-b73d-45dd-99c3-ca435b952d37", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0be8319a-fb65-464f-93d1-9d84d0ab06da", "sighting_of_ref": "indicator--02b942d9-b3df-4147-87ce-b7183208060f", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28c56843-b3e9-4090-a474-b4d536d3a0b7", "sighting_of_ref": "indicator--02b942d9-b3df-4147-87ce-b7183208060f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d447b6eb-de8f-4a46-9990-e83bd56c4022", "sighting_of_ref": "indicator--4cd42a3f-af69-4bce-9734-d3bc154ed6b9", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57857c27-9892-4a00-9c50-93d37b411d30", "sighting_of_ref": "indicator--4cd42a3f-af69-4bce-9734-d3bc154ed6b9", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f30614ef-2b07-4777-95e7-ca2d073006be", "sighting_of_ref": "indicator--8a88aa09-104a-483a-8f2d-622764886f41", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e11cbfe9-9a43-4d01-8c21-90ef3dc42813", "sighting_of_ref": "indicator--8a88aa09-104a-483a-8f2d-622764886f41", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--799561dc-b24e-417b-955c-2b1948eb183d", "sighting_of_ref": "indicator--a60f5c68-055d-4e11-bbd7-ba1a163d24a6", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24bd8395-a692-4995-87e2-c618a570a271", "sighting_of_ref": "indicator--a60f5c68-055d-4e11-bbd7-ba1a163d24a6", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c91abf36-d072-46ec-9f86-4ce21249981e", "sighting_of_ref": "indicator--18abba69-5ebc-4ed3-aabd-a819da130b1a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a8687f3-9eaf-494f-a566-1efa1d1285f3", "sighting_of_ref": "indicator--18abba69-5ebc-4ed3-aabd-a819da130b1a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--333a3880-db00-4a54-8095-ddae13c16b86", "sighting_of_ref": "indicator--9d77a97e-c628-40f0-9f2b-7587ef147d7b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e3578f8-9608-4a48-b234-e95ed3196df7", "sighting_of_ref": "indicator--0d5441a1-a826-4d3b-9afc-f22c4707f6dd", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--204eebc6-0813-4c58-8ccc-45801e9dca35", "sighting_of_ref": "indicator--0d5441a1-a826-4d3b-9afc-f22c4707f6dd", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e62594b5-5571-4956-af8f-08e92ab0e69c", "sighting_of_ref": "indicator--c4673224-21b6-44ed-8c1e-1c025055249e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60040622-726a-47db-a473-ad72fb8c6778", "sighting_of_ref": "indicator--c4673224-21b6-44ed-8c1e-1c025055249e", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ccf492d-f70c-44bb-8107-4c7ac85186a8", "sighting_of_ref": "indicator--63be8df0-c72a-4c90-8c0a-aa05e312ccc1", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12c6ee06-43bf-45c4-8179-f623b5e9f807", "sighting_of_ref": "indicator--63be8df0-c72a-4c90-8c0a-aa05e312ccc1", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ae9ec02-ed3a-4a2b-aca5-37c3de3f11ea", "sighting_of_ref": "indicator--fc13c350-ea3d-4d34-8a2b-3e24156777e4", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cd59038-cb9a-433a-9ef5-f888ac16ce30", "sighting_of_ref": "indicator--fc13c350-ea3d-4d34-8a2b-3e24156777e4", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f50cef72-7d3b-4a1a-a21e-266150349bbc", "sighting_of_ref": "indicator--98b6370a-d3d5-4e57-b146-7ecf3a71d336", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb41201d-153d-403b-a85a-e4b786c08d5a", "sighting_of_ref": "indicator--98b6370a-d3d5-4e57-b146-7ecf3a71d336", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00a0f03b-44fd-42ce-9f1d-6904c95dd7fd", "sighting_of_ref": "indicator--2fb0487d-a404-412e-bd2f-2b4fcc8b7257", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbb2d388-5f44-407d-b2d8-95f5e838ae02", "sighting_of_ref": "indicator--2fb0487d-a404-412e-bd2f-2b4fcc8b7257", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f30bb91-fe43-404c-a321-cfb31754ea1e", "sighting_of_ref": "indicator--fe0b27e9-f083-42c8-97bd-6a2f039cfad9", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9aca299d-57a8-4342-8aa8-7079c596262b", "sighting_of_ref": "indicator--fe0b27e9-f083-42c8-97bd-6a2f039cfad9", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52a3c36e-d45c-4f6e-832d-a1e27e9f598a", "sighting_of_ref": "indicator--ca07190f-a6b4-40ca-9f67-513b6a4dda49", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a98cf0e3-b8dd-47aa-ad89-3d5dc74bb939", "sighting_of_ref": "indicator--ca07190f-a6b4-40ca-9f67-513b6a4dda49", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dc0a911-3cfa-4dbe-a148-1fb8b782f91c", "sighting_of_ref": "indicator--697c2b03-81c0-475d-a454-db6263f118e1", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--313417b9-485f-4cd8-9ff7-2a9a8d239200", "sighting_of_ref": "indicator--697c2b03-81c0-475d-a454-db6263f118e1", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--268d0d89-caa2-43c7-8d61-676a03acfae7", "sighting_of_ref": "indicator--a284f016-0c0d-4859-90f8-37589e5d709e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c4e0fae-0bec-4dcd-acc7-625e17f3a4e0", "sighting_of_ref": "indicator--a284f016-0c0d-4859-90f8-37589e5d709e", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d6cfe99-837b-4c31-9610-28cf6e2243a8", "sighting_of_ref": "indicator--89341883-cfbf-48c8-b93c-f6e4ea96c5fa", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--662b9a63-4d62-4433-a5c9-570102159ea8", "sighting_of_ref": "indicator--89341883-cfbf-48c8-b93c-f6e4ea96c5fa", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8790ca7d-bb9b-449d-ab1a-e246e9961747", "sighting_of_ref": "indicator--9168004a-557e-45a1-95bc-d885c8fb11f5", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c99a548a-662e-4fec-bda4-4ef5177af5a0", "sighting_of_ref": "indicator--f8742075-b0fb-4b3b-b510-33a1647ab387", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8496bc0-8d28-4e03-b82f-57a7e684aa82", "sighting_of_ref": "indicator--48629b74-6ca7-4c6a-9a6f-57ba2ef8a173", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5ca3f64-64d3-4c51-8b4e-d37b240eeb12", "sighting_of_ref": "indicator--3b6df4b4-7d9d-4665-b354-65676b725f67", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f71c27f7-92a8-4e94-badd-e4f2a45cffca", "sighting_of_ref": "indicator--be2aa1a0-9bc1-4aa4-afda-846e943b16ba", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6805d344-a434-4337-afa8-58d1d5ca0387", "sighting_of_ref": "indicator--79f245bc-de6e-4f3f-bc59-1fb7452f2efa", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfc6a4a7-34b9-4d23-a366-0fa6a072c967", "sighting_of_ref": "indicator--79f245bc-de6e-4f3f-bc59-1fb7452f2efa", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14cf1663-67f0-4deb-b66d-df672dd0c559", "sighting_of_ref": "indicator--15b3ae75-be8a-43b6-a90f-893c1b8e3a9f", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c961394-54ef-4060-a50b-1edda49ceec7", "sighting_of_ref": "indicator--15b3ae75-be8a-43b6-a90f-893c1b8e3a9f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85ee3510-775f-4ad0-a28d-7aab39fdee84", "sighting_of_ref": "indicator--137d1ad1-8ee8-43e2-8eb7-024fae0b5d7c", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4abd0c94-0fc6-4b13-b390-95fa0d77f6c5", "sighting_of_ref": "indicator--137d1ad1-8ee8-43e2-8eb7-024fae0b5d7c", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--413691f9-53a3-4268-8d69-fed32de12577", "sighting_of_ref": "indicator--bd1c5b42-92ff-4d39-af01-6dc22cbd44e1", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73af6758-65ff-41e2-ab04-0579ade500fa", "sighting_of_ref": "indicator--bd1c5b42-92ff-4d39-af01-6dc22cbd44e1", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65510069-028c-4359-8efc-611acbb5113f", "sighting_of_ref": "indicator--4c5bb761-b095-4461-911a-60682a772884", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5098d993-2a43-4dc2-b565-4925c8966d31", "sighting_of_ref": "indicator--4c5bb761-b095-4461-911a-60682a772884", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ceebfc73-e21d-4354-ae5b-40dc25529cb3", "sighting_of_ref": "indicator--d36b86b3-b166-43f4-94df-0e502b5ba511", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3d89f0c-0671-4f8e-abeb-ef57c4a02751", "sighting_of_ref": "indicator--d36b86b3-b166-43f4-94df-0e502b5ba511", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd828286-9cd5-4980-9660-40690fb4dc71", "sighting_of_ref": "indicator--65285c50-e482-4f54-9ee2-1e0f174aeccd", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98b1e722-39c3-4d5c-9419-d4b1ffb183ca", "sighting_of_ref": "indicator--65285c50-e482-4f54-9ee2-1e0f174aeccd", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ec237be-8aa7-4e73-9615-362bbe298d61", "sighting_of_ref": "indicator--f067ba7e-eba6-4407-8484-d885e862a2fb", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d673f6b-62f6-4392-8177-ae016dabeb49", "sighting_of_ref": "indicator--f067ba7e-eba6-4407-8484-d885e862a2fb", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07abee34-5df6-496c-a522-0d89e32a0def", "sighting_of_ref": "indicator--e0fa6f11-1272-4df8-8e21-1e848bb4716e", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01bba905-9a3b-4c6f-bada-edd884837cee", "sighting_of_ref": "indicator--d6eb9419-beb6-473b-9f4e-c31efabbc021", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dc1dbfa-9bf0-4934-984a-1a34daaa12f6", "sighting_of_ref": "indicator--d6eb9419-beb6-473b-9f4e-c31efabbc021", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97613d63-dc9c-4799-8e25-6761a721cb5c", "sighting_of_ref": "indicator--2696f978-045d-4bca-844d-3e7a209b136d", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75f6cd80-3ef9-469e-93c9-db2ab127bd66", "sighting_of_ref": "indicator--e272f336-d5f1-497b-9bc9-145c682e641c", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd0dd44a-90f0-4ef8-a308-0eacedf3f59c", "sighting_of_ref": "indicator--675bfbbc-fea8-4e31-b7a9-03cdb5687b50", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efa85dbb-8a75-43f7-a0b6-112fe0df1981", "sighting_of_ref": "indicator--675bfbbc-fea8-4e31-b7a9-03cdb5687b50", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8c0d4bb-f969-48ab-ba01-7ffb26917b2a", "sighting_of_ref": "indicator--5d69eb63-74ab-40e3-8e08-2020961710de", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4698c979-d452-4506-a773-c2f800ba5268", "sighting_of_ref": "indicator--5d69eb63-74ab-40e3-8e08-2020961710de", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dadae247-b435-4a05-942e-3c0f085b9154", "sighting_of_ref": "indicator--9f289a57-8763-4c5d-871a-5493c951ea66", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc2bf76e-b316-4f2a-a6c4-599781120935", "sighting_of_ref": "indicator--9f289a57-8763-4c5d-871a-5493c951ea66", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1df756c-7e1a-4dce-8b7e-6824dd78bddc", "sighting_of_ref": "indicator--af7dc48a-bde9-46e2-82d9-53e3f3d90dcb", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd093612-b48c-4152-a9ca-fc1c5a965e9c", "sighting_of_ref": "indicator--af7dc48a-bde9-46e2-82d9-53e3f3d90dcb", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--339c5c89-e4b4-4ea3-a7c7-f676a0239048", "sighting_of_ref": "indicator--552f18d5-9dfe-43bd-b2f0-923c6234ce3d", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5a0c254-a823-4ed1-a2c4-b463e0f53d2b", "sighting_of_ref": "indicator--552f18d5-9dfe-43bd-b2f0-923c6234ce3d", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab3f9295-683c-4d7c-b132-61e2a3cab634", "sighting_of_ref": "indicator--84ac00a0-373a-4b9f-b4c1-1985f9fd6131", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac5d2699-e6ae-41b8-afe4-168e6244575f", "sighting_of_ref": "indicator--84ac00a0-373a-4b9f-b4c1-1985f9fd6131", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68d52eea-8070-4b45-9b20-3bd63b58e74d", "sighting_of_ref": "indicator--a02b863a-7323-4349-84c0-8e195a85b610", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--056f9490-98be-43f3-bdd6-87ff221062bd", "sighting_of_ref": "indicator--a02b863a-7323-4349-84c0-8e195a85b610", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c047833-7cc8-48b6-b837-4896a07ae898", "sighting_of_ref": "indicator--90b057e0-eaf4-4969-8b9e-e74c1a551126", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e273fb3-a84f-4cf5-9794-2646ceaf59fc", "sighting_of_ref": "indicator--90b057e0-eaf4-4969-8b9e-e74c1a551126", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--487c396a-1a7d-4e6d-82d0-d51e916ca684", "sighting_of_ref": "indicator--adb73a48-8929-44b6-bf6f-2b165c773227", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--755e3efb-b70e-4c8c-a84c-645e76869765", "sighting_of_ref": "indicator--adb73a48-8929-44b6-bf6f-2b165c773227", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0adc35b9-5cf0-4183-90ae-f24845ed8093", "sighting_of_ref": "indicator--645a6758-a4be-47f8-8f4b-8167c475f981", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f661f94-a5a8-4bd2-ae04-325e3e100788", "sighting_of_ref": "indicator--645a6758-a4be-47f8-8f4b-8167c475f981", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cba4a6c8-1958-466c-994a-e3a21d569a88", "sighting_of_ref": "indicator--be79947a-e3c2-4c99-94fa-cd043118d237", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--422d195c-9ed8-46cf-8964-b967f06f2241", "sighting_of_ref": "indicator--be79947a-e3c2-4c99-94fa-cd043118d237", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f965271b-56cb-4a21-a2f4-37facab30cd1", "sighting_of_ref": "indicator--9f470cad-1bcb-4f9d-8b34-65931d3fd1ed", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49ef398d-473b-41b2-b0f9-e025d79ff2dd", "sighting_of_ref": "indicator--9f470cad-1bcb-4f9d-8b34-65931d3fd1ed", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb43b9c8-1aed-4fd8-8667-9307d8b05c92", "sighting_of_ref": "indicator--ba401d97-baf8-4d5c-b040-1ff822607c92", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efca620e-f7c4-4b7b-9706-b8a0b5882f7e", "sighting_of_ref": "indicator--ba401d97-baf8-4d5c-b040-1ff822607c92", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40731b32-a81b-40bd-86fd-88f7af5c09c5", "sighting_of_ref": "indicator--74526509-c5d9-4071-8580-c6903e474031", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--459a163e-0671-43c7-b9e8-3a6794112c4a", "sighting_of_ref": "indicator--74526509-c5d9-4071-8580-c6903e474031", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--beeb94b0-d789-4759-a488-d6fd95269a48", "sighting_of_ref": "indicator--4195a319-577f-48ff-ac8f-6671ece9aa9d", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35182be6-7c91-480f-9e66-1886eeea7e0a", "sighting_of_ref": "indicator--4195a319-577f-48ff-ac8f-6671ece9aa9d", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ede541ce-8d28-406f-9c69-3a147e23e80e", "sighting_of_ref": "indicator--fa67f892-0525-4539-af43-367a1ca963e2", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28f1ef10-6df8-4331-a997-26268d752b3c", "sighting_of_ref": "indicator--fa67f892-0525-4539-af43-367a1ca963e2", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba2f282a-395f-484c-a92e-b198d24aa4ab", "sighting_of_ref": "indicator--85869e4d-51fa-44d8-8b00-40951bc8e42a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36baf2d4-48ee-4780-a1e9-963a468c5765", "sighting_of_ref": "indicator--9270f3e1-ea3d-4129-9009-4288309e2e10", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1a38fa5-9e6c-489e-8919-d20147855698", "sighting_of_ref": "indicator--2a30ad9d-3e0c-4683-a015-6d78271668aa", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4da54a6a-baec-4f19-bb28-5f712722472d", "sighting_of_ref": "indicator--2a30ad9d-3e0c-4683-a015-6d78271668aa", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4138e29e-1866-4a4c-b62a-e0864a34c5da", "sighting_of_ref": "indicator--435db09c-25c8-4d3c-a406-dd4e0f3dfb1e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee46bb50-38c4-4675-9f79-274a83c6eee0", "sighting_of_ref": "indicator--80e539e1-e336-4e35-868b-481d998c924f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d0e1aaa-8ec0-4a95-9e03-e92cbd07d36c", "sighting_of_ref": "indicator--4cee98ba-73a9-4b21-870f-2795afa27d36", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--919aea54-3626-480b-9cce-8ff13d8a802a", "sighting_of_ref": "indicator--43992a78-c93c-4d49-8711-9702e63d90d4", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--504b90eb-6b90-4edd-9bca-1074579464ee", "sighting_of_ref": "indicator--43992a78-c93c-4d49-8711-9702e63d90d4", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d5d1f18-8cef-4415-bc70-0bb130923782", "sighting_of_ref": "indicator--9281cec2-f43c-4859-b6e8-bc5e29d872c0", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dabb5dfc-9154-4551-bf82-415a9e235c7a", "sighting_of_ref": "indicator--a835a014-579b-4579-9060-6d85ea271d68", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f79c46a-50ea-4dfa-9bdd-7d42fcba344c", "sighting_of_ref": "indicator--c6eb1235-fc62-42bf-b6a4-5d90fb2cac33", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6db37e70-897e-439b-b81a-9c4dc078712e", "sighting_of_ref": "indicator--c6eb1235-fc62-42bf-b6a4-5d90fb2cac33", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef57a4e6-dccf-440f-aff8-1f3c43ec96f9", "sighting_of_ref": "indicator--6b01566c-53fc-4d11-a2ca-021d22e09c29", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fab21df9-65fd-4bb3-a77b-9cf871b67dca", "sighting_of_ref": "indicator--6b01566c-53fc-4d11-a2ca-021d22e09c29", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96216fbc-75cc-400b-8f4d-f8352bc6a2bb", "sighting_of_ref": "indicator--0b1c3ed8-439f-4b39-b5eb-0d341dddae93", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bdd79a7-49a0-419e-addd-40da3ac41764", "sighting_of_ref": "indicator--0b1c3ed8-439f-4b39-b5eb-0d341dddae93", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69f18627-1107-493b-b584-7093c73d0616", "sighting_of_ref": "indicator--ebba4a25-8bee-4e6d-8b26-1627dee267a4", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae7daa05-27da-4c08-81a7-47cd62d9c49e", "sighting_of_ref": "indicator--ebba4a25-8bee-4e6d-8b26-1627dee267a4", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa9e436c-399a-4f3b-ac70-14806fe0ff9d", "sighting_of_ref": "indicator--f293a8b9-1513-4a99-bf48-22d51e96f789", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9794c6a9-73ef-448f-88e9-d4cfe9f1ad51", "sighting_of_ref": "indicator--f293a8b9-1513-4a99-bf48-22d51e96f789", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cecf23d-8396-4c81-bbd4-dcd56b4cc2e0", "sighting_of_ref": "indicator--9e932ff6-9c37-4c4e-b97a-fd6f741b37cd", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e258725-1993-4257-ac6b-1e0558add6d0", "sighting_of_ref": "indicator--9e932ff6-9c37-4c4e-b97a-fd6f741b37cd", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ee84a9f-2994-4d80-8dd8-dfa5f55c3ef3", "sighting_of_ref": "indicator--f84d268c-9f33-4c49-9d01-06888834db24", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb56918e-a917-43d2-bc94-155620c1fadb", "sighting_of_ref": "indicator--f84d268c-9f33-4c49-9d01-06888834db24", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--339d8918-8116-4a7b-bd24-a77bdd01932a", "sighting_of_ref": "indicator--953b79d4-2360-4af2-a141-6bdc5a02d30a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa79ce96-56d8-4ecf-bb63-a9ec3352bb0c", "sighting_of_ref": "indicator--953b79d4-2360-4af2-a141-6bdc5a02d30a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4b7a1c2-9d9a-4091-98e5-4dc002278b6a", "sighting_of_ref": "indicator--00f86735-7a4c-493d-a3a3-7403115abba7", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c49ef82-86ed-496e-97ec-e99d979c514c", "sighting_of_ref": "indicator--00f86735-7a4c-493d-a3a3-7403115abba7", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63920080-43ba-401c-b5ad-a17c3c64d34f", "sighting_of_ref": "indicator--3f46e581-23ab-4671-a117-f102e2416a84", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--602718a1-e3a1-4e9e-a8d4-55cf54e87218", "sighting_of_ref": "indicator--3f46e581-23ab-4671-a117-f102e2416a84", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fed00ec0-c50a-429e-a5ad-e53cb06237e6", "sighting_of_ref": "indicator--f3064a2b-af73-4098-9d9d-6173c53d9a19", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0db0899-7873-4483-9bfa-d7bc86209c4f", "sighting_of_ref": "indicator--f3064a2b-af73-4098-9d9d-6173c53d9a19", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c1cac9b-3176-409e-8721-e5a50644c682", "sighting_of_ref": "indicator--52eb2986-d123-425a-ace4-83015d4a17a4", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37c7d427-dec4-4f32-84e4-bc28ef6b47bf", "sighting_of_ref": "indicator--52eb2986-d123-425a-ace4-83015d4a17a4", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--824ad17a-708b-44c1-b725-614916cede7e", "sighting_of_ref": "indicator--56142787-6d85-4359-afde-f520a72e047a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e63fff14-e6a9-4c0d-87b4-1db7e0fc1f94", "sighting_of_ref": "indicator--56142787-6d85-4359-afde-f520a72e047a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7710cddf-e141-41f9-9652-53cdc2e8dafa", "sighting_of_ref": "indicator--ee747c4c-0996-485a-9794-3be26c4f6810", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5932abe5-dca5-4bf8-85eb-3c84e2afe6c1", "sighting_of_ref": "indicator--7f6ede3c-a0f9-4a41-a735-f5db0f8707ed", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6cd71c2-5710-4565-97c4-149491f2caa2", "sighting_of_ref": "indicator--7f6ede3c-a0f9-4a41-a735-f5db0f8707ed", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fbfb3d7-cb30-4ab7-a48c-d2c2dfd61bed", "sighting_of_ref": "indicator--bdeff40d-7514-4c11-aa66-c391b962d734", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85144822-5eae-4359-8614-075dd776cb6b", "sighting_of_ref": "indicator--25940beb-4805-4125-9b45-3e6e68afad5a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d2ca3e4-befb-4e21-bdd9-452677b7d7fb", "sighting_of_ref": "indicator--01adf37c-cab5-4b6b-a7a2-8231ef8fbfb8", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d0ae986-09e3-4745-854d-3ddf5c6c9672", "sighting_of_ref": "indicator--5a0b900d-15ae-4104-881d-c9e0c14549f3", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5948c41-2c46-4cba-8899-cf4e4e331696", "sighting_of_ref": "indicator--99d6a9c7-b16d-4e4d-a96d-2550e60b2d95", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d439c06-15fe-4296-b764-24fa5f7088b0", "sighting_of_ref": "indicator--72036f28-7cde-4ba9-81d8-b6e1b8fd9c57", "where_sighted_refs": ["location--cc47317e-2c18-43a6-8938-dea748a56ad5"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--137f3d91-8f0c-4c02-bb04-16110260ab7a", "sighting_of_ref": "indicator--e3acc46d-8ef5-409a-a310-7ebc1c35c514", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e36bf80-f619-4f0a-baf7-bd5db130b44a", "sighting_of_ref": "indicator--e3acc46d-8ef5-409a-a310-7ebc1c35c514", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ff75427-4b4f-41d5-ab01-6edb64703d7a", "sighting_of_ref": "indicator--e3acc46d-8ef5-409a-a310-7ebc1c35c514", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f022ad4-cb27-4504-9080-9c6215012dcb", "sighting_of_ref": "indicator--23ed5d80-7212-4070-864a-426436484ee8", "where_sighted_refs": ["location--cc47317e-2c18-43a6-8938-dea748a56ad5"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bc2dc67-fc69-45a4-bcf6-8724854125ce", "sighting_of_ref": "indicator--897daf35-7e13-40f8-a224-a2ee162d0c85", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67e9e6de-34ee-4953-86a2-40017f77b827", "sighting_of_ref": "indicator--897daf35-7e13-40f8-a224-a2ee162d0c85", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8150394-b667-400b-a6c6-6fd0e524b34c", "sighting_of_ref": "indicator--897daf35-7e13-40f8-a224-a2ee162d0c85", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98e20853-c5f4-4ee1-8c7e-ef6328f21536", "sighting_of_ref": "indicator--1da8842d-a953-4b05-ab14-3cb4e6c6f9af", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e51dd226-3da8-4c97-ab3d-6dfc776ed88b", "sighting_of_ref": "indicator--1da8842d-a953-4b05-ab14-3cb4e6c6f9af", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--695c0154-6b23-4443-aad5-ccf2e415d432", "sighting_of_ref": "indicator--1da8842d-a953-4b05-ab14-3cb4e6c6f9af", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57ef93d7-7678-4749-a5bf-d0128ebb87e6", "sighting_of_ref": "indicator--e55c043c-a719-43c9-a285-6efc5accf6d2", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c3d2ef9-91b9-487d-8ee2-eeb0b90a4680", "sighting_of_ref": "indicator--e55c043c-a719-43c9-a285-6efc5accf6d2", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e8d1978-3753-4a08-b6da-b32c66ebd38b", "sighting_of_ref": "indicator--f6e35727-8395-4c46-ab32-117d2ce71227", "where_sighted_refs": ["location--cc47317e-2c18-43a6-8938-dea748a56ad5"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32ecb032-9c3b-4578-aca1-4e959dab15a3", "sighting_of_ref": "indicator--578869de-000d-4a3a-a8d4-637dedaa0f3b", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bc7d25a-70d7-49c1-8db9-f68350f947d4", "sighting_of_ref": "indicator--578869de-000d-4a3a-a8d4-637dedaa0f3b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b1354c4-47c9-4445-ac08-a263cb2612b0", "sighting_of_ref": "indicator--578869de-000d-4a3a-a8d4-637dedaa0f3b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbc9958d-a964-444d-b0b6-2cb66f3c66e4", "sighting_of_ref": "indicator--280919f1-3709-4dbc-81fe-7261c9fa261d", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3418fd6-79fa-4745-9d3f-a5338e05d26a", "sighting_of_ref": "indicator--97a44079-7fff-4aa7-a5aa-2a76310244e9", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7ef43f2-2756-40b6-898d-d1db0563208d", "sighting_of_ref": "indicator--0491a985-c5e5-4be8-8f77-cf0b0447da27", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb53e3d8-cd88-4b55-9e2d-58948dbd09db", "sighting_of_ref": "indicator--a949cbba-3df2-4a61-b698-52b123833bdd", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7378f08-180c-4db6-b8f9-9c577daead4b", "sighting_of_ref": "indicator--a949cbba-3df2-4a61-b698-52b123833bdd", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34143bad-92b2-4614-b569-dd17d4493550", "sighting_of_ref": "indicator--a949cbba-3df2-4a61-b698-52b123833bdd", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98f56cd5-783e-4873-905f-b53683212b37", "sighting_of_ref": "indicator--312ebc3f-745f-4b98-9a80-4730e9251a31", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--376a43ba-b2c9-4b93-8eaa-7ea9ee9932d9", "sighting_of_ref": "indicator--7b192131-26fc-4645-9564-dfeabab7df43", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--045086a6-c6c2-4d47-a4dc-215b546bca7d", "sighting_of_ref": "indicator--7b192131-26fc-4645-9564-dfeabab7df43", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c15a52b2-2303-4d20-9953-1b39eb80bd37", "sighting_of_ref": "indicator--fbda0799-7466-4619-8454-b0d6c6353dc3", "where_sighted_refs": ["location--cc47317e-2c18-43a6-8938-dea748a56ad5"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c91f4cab-7fcd-4e90-b41d-6de7d367fb07", "sighting_of_ref": "indicator--6b766dad-6e01-4074-91fa-3834724bb933", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d21fcd9-1236-4a12-942c-c12da9786a8f", "sighting_of_ref": "indicator--6b766dad-6e01-4074-91fa-3834724bb933", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d81efa6-ee60-4ae7-a964-e5d62401a2b3", "sighting_of_ref": "indicator--6b766dad-6e01-4074-91fa-3834724bb933", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6668afe8-faae-4cd1-bc26-de688d2f9bb3", "sighting_of_ref": "indicator--4184339b-6588-453a-a461-6ea87532d943", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75d31eb5-0438-48f7-9f1e-4437f15b2317", "sighting_of_ref": "indicator--b4104558-d4e3-45d1-a01a-b567357bb78a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ad6f864-00a8-4d45-9d7f-29742d65f7a1", "sighting_of_ref": "indicator--5234a36e-d0f2-44d5-9b66-bc322c83f5d4", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff003b9a-ef2a-4ac7-a292-21084c316c4d", "sighting_of_ref": "indicator--5234a36e-d0f2-44d5-9b66-bc322c83f5d4", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36ba9517-d7cc-4a7b-8d5b-d42f2728174e", "sighting_of_ref": "indicator--5234a36e-d0f2-44d5-9b66-bc322c83f5d4", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48eee0ea-68a2-4d8b-a618-eaaa0be98cbc", "sighting_of_ref": "indicator--134724c2-c6a0-4cde-ba65-05b935712334", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0a3d341-9c54-4028-a614-1643c0635b15", "sighting_of_ref": "indicator--134724c2-c6a0-4cde-ba65-05b935712334", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b2d3608-bf41-4b7d-bd66-2f0612a39c0d", "sighting_of_ref": "indicator--91800eaa-031a-40e7-b19d-bdec241a8f8a", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f54ee4c0-0966-44f2-b35c-b82b1ac360c5", "sighting_of_ref": "indicator--d8c07b5f-8d22-4330-9901-b5f6c8bdcc99", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f40a1816-973c-4783-afae-7841ca241549", "sighting_of_ref": "indicator--1a8e5f4f-0ecf-4acc-ac67-fa5b336b2739", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8491b3e0-7184-4f6b-b1e5-2bda73e6b213", "sighting_of_ref": "indicator--1a8e5f4f-0ecf-4acc-ac67-fa5b336b2739", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbbfa22e-2c9b-4d75-8c03-b12667c616a4", "sighting_of_ref": "indicator--1a8e5f4f-0ecf-4acc-ac67-fa5b336b2739", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf50e960-4d3a-4aaa-8a76-85791e9c9245", "sighting_of_ref": "indicator--82b142bc-78d9-44a4-8879-0973034fd97d", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c98c3d1e-a88b-4762-b245-eb81f9d81a6d", "sighting_of_ref": "indicator--82b142bc-78d9-44a4-8879-0973034fd97d", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b01ff98e-b299-43fb-aa86-d3a10b1be2a2", "sighting_of_ref": "indicator--66755001-068a-44ab-9af6-464084a1de4f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7dcb872-1918-4e92-88e6-018493e138f5", "sighting_of_ref": "indicator--84992f8c-7242-45f5-b9cb-4dfb79c97fe2", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f4cf79a-4525-4248-92e6-6753b145d993", "sighting_of_ref": "indicator--a5a5f4c3-70bb-44d7-82e4-c1254a023a07", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a78acbca-63f3-4952-878a-1692119cdfb6", "sighting_of_ref": "indicator--8b2fca2d-0c66-42fd-bac7-ea7e3efe72dc", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b15c6ca-3d47-4d3e-ae78-6304d10e7318", "sighting_of_ref": "indicator--ce29288e-902c-48b9-b486-6f2564242ff3", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0d38170-433a-43b7-b901-6e33bbf1bcfa", "sighting_of_ref": "indicator--ce29288e-902c-48b9-b486-6f2564242ff3", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e18df778-38f4-45a4-a63c-af75f7c0d039", "sighting_of_ref": "indicator--175d1b50-dc68-4b92-bf1f-d1dbf6a67c02", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--675298d7-f0e0-4c44-8a71-4b4ca1d98117", "sighting_of_ref": "indicator--7ad950b6-c358-4ca0-8230-c436a79d5a19", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a08ce419-c799-4e3e-abb5-73c8ddcc5d7a", "sighting_of_ref": "indicator--7b2ef0a6-e0df-46eb-8c56-aed003c2ec64", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1416cdde-119f-41fc-a623-3d7cb671bef4", "sighting_of_ref": "indicator--1dcd2822-c5cc-4eb6-a37d-fccb8cdb38b4", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3221971d-5054-4280-9dda-9de6cf10d227", "sighting_of_ref": "indicator--6233ee07-14da-4a1b-9750-e54da5a83e5a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4aa0ed48-2815-47ac-b1a6-d2284251c4bf", "sighting_of_ref": "indicator--089f1e94-b51e-4310-b670-b0703e10ee08", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80a019a5-219d-4651-aa22-e60a45c7f8e8", "sighting_of_ref": "indicator--d6a6134c-69db-46ec-9ffa-94baedf98bc3", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d8b16f3-8f67-470d-a440-d254cf93f4ff", "sighting_of_ref": "indicator--d6a6134c-69db-46ec-9ffa-94baedf98bc3", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54f3e898-68d8-4e51-8b43-1aa12e2a5da4", "sighting_of_ref": "indicator--d6a6134c-69db-46ec-9ffa-94baedf98bc3", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05a99a6b-8685-4dc6-b3a6-4d27f1fe0cc1", "sighting_of_ref": "indicator--8ec064a1-b6c6-46b7-b29b-2c78874ab5b6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2b6743b-c37a-4d33-bd5d-b0a1402b1c6e", "sighting_of_ref": "indicator--ec582ee9-57bd-4dc0-885a-7f3fe07fb78f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57955c11-8cd4-4301-8839-60b1e9ce209b", "sighting_of_ref": "indicator--0e0a1846-e270-4fc5-87bc-6f4ac405b54e", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad7af6b3-f50f-43e4-a142-95323cc2e857", "sighting_of_ref": "indicator--ca8aeba1-843d-4786-85b5-3f4618858c61", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f79fed7-cd1c-4757-a739-fe2589f149ce", "sighting_of_ref": "indicator--ca8aeba1-843d-4786-85b5-3f4618858c61", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e3035ac-9a0a-434d-9b77-76d395fb2ab5", "sighting_of_ref": "indicator--cb22c0f1-a656-4a23-83ef-4a4d2b7eec4c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9baed17a-94e0-4648-83b9-21c27bb86dc7", "sighting_of_ref": "indicator--26f6c81a-a947-4778-8ed7-54aa29633022", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51dd7925-78c6-41f8-b02a-6a193f398af9", "sighting_of_ref": "indicator--26f6c81a-a947-4778-8ed7-54aa29633022", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de75bc01-74fa-4c8d-b70a-409d57a59608", "sighting_of_ref": "indicator--26f6c81a-a947-4778-8ed7-54aa29633022", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bce66ff0-27e1-4ed8-bb7a-701191f05c26", "sighting_of_ref": "indicator--e44a0381-a4dd-442c-a4cc-153537020af7", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c9156d9-d177-4c22-a4a0-088850154346", "sighting_of_ref": "indicator--e44a0381-a4dd-442c-a4cc-153537020af7", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3bf32b3-7688-4aa8-ae2f-52373ed87904", "sighting_of_ref": "indicator--92c0e213-c376-443a-8ef0-18da6ba449e8", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e426f4d-8b8d-4414-92b5-c103ce0bd2e1", "sighting_of_ref": "indicator--92c0e213-c376-443a-8ef0-18da6ba449e8", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--784a81a8-35d7-4742-9e05-17c54f81fd7c", "sighting_of_ref": "indicator--74dd52e0-c23b-4b29-8e99-3340071a748a", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--beca1df2-50ef-4957-b2bb-5c6064d62bc1", "sighting_of_ref": "indicator--c9a2caaf-87fa-4be0-9184-18034dd1459e", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8779abca-7554-43d2-8536-5646ccb164a5", "sighting_of_ref": "indicator--c9a2caaf-87fa-4be0-9184-18034dd1459e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39ee72ad-585e-43af-a4cc-911730ce3b7e", "sighting_of_ref": "indicator--c9a2caaf-87fa-4be0-9184-18034dd1459e", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--878509f2-cfcd-4026-af9e-7c36dae86503", "sighting_of_ref": "indicator--8a82324d-10f5-4226-8da1-bfd7d7549edb", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5c3b6fb-88f6-4fd3-80b7-feec764c7298", "sighting_of_ref": "indicator--8a82324d-10f5-4226-8da1-bfd7d7549edb", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ef04eae-6c83-4a1e-ae56-7c416059a56f", "sighting_of_ref": "indicator--6d7b0f88-13f9-4850-92c9-183fc5a16646", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79a58dbc-a549-41a5-9c62-84e2f1754720", "sighting_of_ref": "indicator--0838ca62-0113-4f00-ab7f-ceecb95fceba", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28d1e6e8-5874-41c5-b582-ebe66762f1ca", "sighting_of_ref": "indicator--0838ca62-0113-4f00-ab7f-ceecb95fceba", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--daf324bc-e72c-42ee-b305-59fd8e871dc1", "sighting_of_ref": "indicator--0838ca62-0113-4f00-ab7f-ceecb95fceba", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2b8cf8f-23b4-431a-bcd5-bc68e264d32a", "sighting_of_ref": "indicator--7de839fb-5e7c-40ac-bf31-8dfa1f7c2c44", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f62d994a-9bd1-4638-803d-03bd52f2ecc0", "sighting_of_ref": "indicator--7de839fb-5e7c-40ac-bf31-8dfa1f7c2c44", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1101adc-a33a-4a7c-8cb4-18bc14343928", "sighting_of_ref": "indicator--98021887-a508-4523-a6b9-4155a10e74f6", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c36be3a7-886e-46f8-96c2-00b9238f18ec", "sighting_of_ref": "indicator--133b7560-3ae0-428c-ac27-5762be9649b2", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a71f6b5-c416-4aaf-8e4e-d5d2ec7ec784", "sighting_of_ref": "indicator--ab4a890d-f4fb-43e5-aeb1-181fd4c714c0", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b11ea30-4a95-4b43-b7c0-4f795fce5218", "sighting_of_ref": "indicator--1bc2979f-24e5-4fa2-a0c5-a56973a273f0", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22f603e5-2937-46ee-b44c-faafa83eb4fe", "sighting_of_ref": "indicator--075c1307-bbf5-4ed0-870b-ad1869e5e28e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a97289d1-e8ea-46e1-a6fa-59e0452ea367", "sighting_of_ref": "indicator--3e76ea34-2877-403a-b784-e5c344bc6750", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5c86462-cce8-449c-952a-1c77a0d63af4", "sighting_of_ref": "indicator--3e76ea34-2877-403a-b784-e5c344bc6750", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dfb0b00-85a3-4ef3-8ad7-400d936008dc", "sighting_of_ref": "indicator--63bd29b9-70fd-47ff-9b07-c0a6476ba48a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2a89bcf-e636-4887-a9c6-bdc78ee7aeef", "sighting_of_ref": "indicator--167fcd0e-3b2a-4c17-9613-480dcddbda9b", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63578fe2-1179-4f46-9530-cdcb7e1773c6", "sighting_of_ref": "indicator--1492d691-92fa-4b45-9d9d-73a7df3db41c", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7986c13-7137-4673-ab82-83592013053f", "sighting_of_ref": "indicator--e085dc1b-6650-489a-8527-d85847f29769", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--700878cd-842d-402f-b90a-3575436a9018", "sighting_of_ref": "indicator--d6e402fd-b103-4ae0-9d33-b52d3dc14650", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7832ad61-6cbc-463b-9d4b-76fcb3f3fde5", "sighting_of_ref": "indicator--ef969a88-c5c9-4112-b711-e839f1c7239c", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdb664fb-b3ad-4659-82cd-99735909eedd", "sighting_of_ref": "indicator--7bdc39ba-3ebc-47ca-8b83-db6a543f7a56", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--092e9747-c426-4ee4-8f26-b9b852c9168c", "sighting_of_ref": "indicator--614f5ea2-8e8a-4164-9f7c-1dad8761919e", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9a86682-54ad-42fc-afed-f81fc7c6b903", "sighting_of_ref": "indicator--da1abb7c-e165-4bc7-8ef1-d1d455b0a31b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5451e82-62f4-4a72-bd29-d01060ad474c", "sighting_of_ref": "indicator--9b1163e0-6d9d-40c2-874e-20c593abf903", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fc22668-054c-4b22-9bcb-700b646c8440", "sighting_of_ref": "indicator--ca242f41-45c9-457b-a4a6-db2b37dd6eb1", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93653d6d-69e8-4d44-9626-1f632283fc6b", "sighting_of_ref": "indicator--b927da96-61c5-4b40-9b87-b638621748e2", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f901d8c-5c99-4045-a30b-7ec3450bd42b", "sighting_of_ref": "indicator--588cae33-5e00-451a-867c-e96b564857fb", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd9e746b-8707-4a96-82a2-60e0c4128fe6", "sighting_of_ref": "indicator--bbe944cf-f799-49a4-860e-4e94f7b7e7f3", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20cc9c0b-9fd1-4f41-9dc6-59dbce1956c8", "sighting_of_ref": "indicator--55bd5426-43fa-4c1c-965f-d0c3611878d2", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8c343ba-5ceb-466e-9193-31ce0aa96e08", "sighting_of_ref": "indicator--92d05aa4-4130-45c9-ac0d-027925ef2de7", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1595204-24be-42af-a811-fd1f4508d70d", "sighting_of_ref": "indicator--b279c9d6-e21f-4c32-8719-6a8997579ac6", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acf34b0e-f16a-4196-bcef-65341b00f5ce", "sighting_of_ref": "indicator--34ca064e-de86-40a7-b64b-8f40491949de", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f11229b5-7327-40d4-b90b-1762fb203bb0", "sighting_of_ref": "indicator--15e1cbc7-b7f6-46f8-8b57-60807af276a6", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cff9391-c671-42aa-964f-b902d3ebc55b", "sighting_of_ref": "indicator--15e1cbc7-b7f6-46f8-8b57-60807af276a6", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cd51491-20f4-4629-b97e-1055cee6cc8f", "sighting_of_ref": "indicator--15e1cbc7-b7f6-46f8-8b57-60807af276a6", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--114dfc81-ae9b-46b5-a2a5-003391c46c24", "sighting_of_ref": "indicator--b1a031a8-99c5-476c-b5c4-b9647d44d223", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--952dfecb-c4b8-4843-bce2-e54bba8b00a3", "sighting_of_ref": "indicator--b1a031a8-99c5-476c-b5c4-b9647d44d223", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4e8d1b0-070e-4fe9-93aa-d846b7f8eaf8", "sighting_of_ref": "indicator--c1968654-e294-41f1-ba9b-49599f485ddc", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40b82f0b-bfd8-467c-a8b9-ddb76f50c80a", "sighting_of_ref": "indicator--a6232768-9c18-4928-ab84-2fa4dfa13194", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24b902c8-ccdb-4972-8a95-959df6777b9c", "sighting_of_ref": "indicator--a6232768-9c18-4928-ab84-2fa4dfa13194", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e3d36b1-d03a-49ac-9d47-65c20757c7e7", "sighting_of_ref": "indicator--993c85f8-c2c3-4a73-8d56-5ca88d1c7180", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5db8e06d-585b-4422-9ee5-30b8e9a362f5", "sighting_of_ref": "indicator--a93e3856-edc9-429f-9955-ac632df772dd", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--019a4e48-007f-4bc9-b717-a1eab1129d26", "sighting_of_ref": "indicator--051c6459-ce01-4fd3-a7fd-3b3a66ebf09c", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a65ecca-0cd7-4dfb-a8f8-ca7562a046e0", "sighting_of_ref": "indicator--84b82199-c22b-496e-9ca8-365682c77b6a", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--507dacdc-0325-46bc-8c45-1c4d220b5131", "sighting_of_ref": "indicator--84b82199-c22b-496e-9ca8-365682c77b6a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb7d8b5e-cdfb-4f79-bd75-e40fdd2c07d7", "sighting_of_ref": "indicator--9b6ee98b-3f03-4232-99f2-7a62203eb803", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6239eec5-912f-4332-915f-c04670567a8a", "sighting_of_ref": "indicator--7f8536b8-ce7d-453b-967d-6bbdc26ac63f", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5f71729-59e2-42c8-8110-c63d01988c05", "sighting_of_ref": "indicator--7f8536b8-ce7d-453b-967d-6bbdc26ac63f", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec63af85-5f8b-4384-b042-1d0b0742de48", "sighting_of_ref": "indicator--7f8536b8-ce7d-453b-967d-6bbdc26ac63f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9621f201-943b-4b7a-a9f4-9471672a9d37", "sighting_of_ref": "indicator--a849998f-983e-4d77-bff4-d2eba62dae47", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14787f78-1bbc-4f85-9baf-b789eba546e1", "sighting_of_ref": "indicator--cbb3c920-4b4d-411c-92fa-94922688812b", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89bc88da-9ed6-41cf-9fc2-c424ffb2b642", "sighting_of_ref": "indicator--cbb3c920-4b4d-411c-92fa-94922688812b", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--128c5ea0-1004-4e70-8973-951d9e175c87", "sighting_of_ref": "indicator--cbb3c920-4b4d-411c-92fa-94922688812b", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40ac0e24-4e4b-4cb7-a367-75d115f7fc99", "sighting_of_ref": "indicator--bf03c3a2-fb49-456f-b8cf-51b4a3422061", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbc26b36-bafd-4f6c-938a-cff2e0047e4f", "sighting_of_ref": "indicator--84eb63a1-1546-482d-80db-eff13da5e0cc", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37d0bfb8-8f1f-46cd-9024-b72f542dc946", "sighting_of_ref": "indicator--84eb63a1-1546-482d-80db-eff13da5e0cc", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4afc6541-ff5a-46aa-80c4-4047d0bcb29a", "sighting_of_ref": "indicator--c29e853a-7850-4300-9779-c1b3309fa7e8", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--196d5999-01e0-498c-812f-527fa37d6384", "sighting_of_ref": "indicator--5efd2647-aa2d-43a8-a627-262279e85a44", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--466c412f-556b-4b65-8af1-66ee908e1149", "sighting_of_ref": "indicator--0769c2f8-2ba0-4dbb-9ef4-605257816dcc", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d70559d1-c306-4993-9957-bd2f8feaba18", "sighting_of_ref": "indicator--0769c2f8-2ba0-4dbb-9ef4-605257816dcc", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a42cf1c-52d6-4977-876f-814a4392098b", "sighting_of_ref": "indicator--13433d8c-2519-4c58-b58d-88e8ddd11ff9", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfa89416-7179-4816-81fa-d2e9e85dd32f", "sighting_of_ref": "indicator--1a2cf9fb-5f98-4f38-b03d-3d5e4ed9affe", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd2a98a4-7af4-42dd-a719-6b1710cc44e1", "sighting_of_ref": "indicator--931b8091-70d4-4bb3-a4c8-9980c6f927fb", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70258507-08be-4e1f-937c-adedac74f0a3", "sighting_of_ref": "indicator--c8f932e2-089b-443f-909a-a5f4d8e173a6", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efd8d9ac-7190-4f30-9a3e-27c8d0dca0c5", "sighting_of_ref": "indicator--c8f932e2-089b-443f-909a-a5f4d8e173a6", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4a7f52b-a9f9-4fe9-94c5-72f08d08b57c", "sighting_of_ref": "indicator--70ab9cc6-99b9-48e4-8eed-fa0e7c61c5e1", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9b07191-528f-4fe6-8663-c174e1035c31", "sighting_of_ref": "indicator--39b6b843-8f88-4d3e-b695-19fdd1d03e5c", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eec7bdfd-c1de-4aae-885f-92e365d657a8", "sighting_of_ref": "indicator--39b6b843-8f88-4d3e-b695-19fdd1d03e5c", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43a5b67b-b7e6-43d6-a83c-e608b8504b59", "sighting_of_ref": "indicator--31eab777-728f-4fe6-bf36-4409de0dff9e", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d4f6cb6-b9b7-4435-9c0f-15b3d5e0833d", "sighting_of_ref": "indicator--77fac271-921c-4e33-a931-116dafe72684", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d627899b-282e-4271-826f-1958ec127650", "sighting_of_ref": "indicator--884eb4c6-3ce1-41e0-9db6-fff32099e2d2", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64887b5f-b65f-4cb8-8bf7-f93c1d335425", "sighting_of_ref": "indicator--93912022-2e5b-42d2-a380-8fa8afd229eb", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f50dbd70-a232-48f1-9994-8cc437ccbb7e", "sighting_of_ref": "indicator--9cc162a0-f043-482a-a4a3-afa6a6992e77", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94b95a4e-64b7-480c-b7e4-8fdf955828de", "sighting_of_ref": "indicator--9cc162a0-f043-482a-a4a3-afa6a6992e77", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58cffb42-a17e-4303-adf3-e50843b59c41", "sighting_of_ref": "indicator--ca58d03b-08a5-42dc-ba98-79910cf65802", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ab4ff1a-1575-4f5f-b10f-c8cb72cb8135", "sighting_of_ref": "indicator--7d9b7a27-a3c1-4d34-acdd-97d3c3fc96d4", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4edb05f3-98ee-4767-adc0-3c5b9d41aee3", "sighting_of_ref": "indicator--65870bfb-dd98-47b7-b887-0d0231d4ee04", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d229765-0698-4528-8286-4924844cc532", "sighting_of_ref": "indicator--8d72c2d2-ca53-4de4-8a4e-c60dc4a74eea", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08890394-7bc5-41f3-867e-03fc4eca8685", "sighting_of_ref": "indicator--f52b48d0-7b8a-4691-a66c-98e588b90964", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f71d5c31-31cb-4ab8-9005-68ebc9a5be09", "sighting_of_ref": "indicator--5886c04b-535b-4535-ba36-77d6524b1bba", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95a50993-d02d-40df-bdcc-8fbef6ec386f", "sighting_of_ref": "indicator--60987a02-c260-4737-82a8-5b07dd92e43d", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a6fc360-85f8-46ba-8f47-d6151b675b51", "sighting_of_ref": "indicator--c6ec67aa-3cd8-4a13-8252-acebd2fc615a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc1aed38-f0bd-4553-bb32-687518ad31a0", "sighting_of_ref": "indicator--ad1fe9e6-08ae-4756-9eb9-dfc108d04da6", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4c63300-75bd-4128-8c2b-a9e8abed8a60", "sighting_of_ref": "indicator--738271cd-8e52-4df6-abdb-3f78b57e7601", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--742d0b8b-0489-4311-8e68-ddfb1765664c", "sighting_of_ref": "indicator--29fc8df0-e336-4a8a-8e3a-98ca86a95b2f", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4129991d-c095-4c98-9bba-76bbf7f561b4", "sighting_of_ref": "indicator--e62cc2e8-591a-4e96-bf26-3914788c0f46", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2367ed2b-5588-4a81-b386-cdff046c66f4", "sighting_of_ref": "indicator--2469fb67-e6df-4965-bda1-94b275d26a96", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b129d597-7029-420e-ac3d-211732234ac9", "sighting_of_ref": "indicator--25ca106c-d74f-4192-9a32-66d811ab6464", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01ffc82e-2285-482f-a388-f67eda517c01", "sighting_of_ref": "indicator--ac364273-75ab-4727-9420-ed3100e818c9", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cd34b90-8f7c-4ab7-bf7f-921525c18cb2", "sighting_of_ref": "indicator--1531ec1e-c1ae-4c48-a6d1-46ad1cdd98f2", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--956a176a-31c2-46d9-87b4-8325db60e01e", "sighting_of_ref": "indicator--1531ec1e-c1ae-4c48-a6d1-46ad1cdd98f2", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ec22f0f-960e-41bc-8a4a-b31f2725d7cb", "sighting_of_ref": "indicator--1531ec1e-c1ae-4c48-a6d1-46ad1cdd98f2", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--571351cb-5ff6-4799-b329-176aa5bdee83", "sighting_of_ref": "indicator--3f0a3c0c-0900-4d29-9718-2e7d6c6b1785", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68bbd6fc-6d5d-4a2c-8715-8f5d25213f96", "sighting_of_ref": "indicator--0b9752bb-373c-4302-9f5d-a551c9d8f24d", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47d64c82-9710-4824-877e-b3bad05fa00b", "sighting_of_ref": "indicator--65d822e3-3898-4e3d-bc20-6679a59ecb6a", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5505939d-8399-4973-a663-0df543f8d0e0", "sighting_of_ref": "indicator--65d822e3-3898-4e3d-bc20-6679a59ecb6a", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dabd592-2470-4190-9bba-a461d7a234d3", "sighting_of_ref": "indicator--3cc27d77-4718-47e3-b628-f98581c996fe", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9612db3-f1b9-42e2-85da-6ab1ed979a26", "sighting_of_ref": "indicator--3cc27d77-4718-47e3-b628-f98581c996fe", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7db891c-df84-4cb8-af86-7139d23a05a2", "sighting_of_ref": "indicator--bd1385d0-3f54-456f-95fc-19611165794d", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--536ea5d0-02f8-4161-851e-6a5cc8f55d1f", "sighting_of_ref": "indicator--6ea69b4e-2a6d-4108-be95-c926870d7d38", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07db77da-1dc6-4b1b-ba54-81ee193acc0b", "sighting_of_ref": "indicator--7c3080cc-5052-4822-a9c4-d4ae1087729e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94df436f-53b9-4216-9d46-63d0b54c2aed", "sighting_of_ref": "indicator--3321dabf-d225-4f19-9136-58ff10802a84", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ec3d1ac-0ce1-4015-9c50-8e263569a576", "sighting_of_ref": "indicator--27197ec3-c0e0-4f1e-b0a8-4ccc83c54d12", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fbd643b-bd02-4769-8e87-48770ed18319", "sighting_of_ref": "indicator--f20e3821-1ec5-48e1-8a4a-ac3d1045745a", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afbaed72-4d09-4694-9a38-d60a2a4ba1cb", "sighting_of_ref": "indicator--a6b1330e-b77b-4199-89b3-54a6212a1cea", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d48b380d-30b3-4a3f-8ceb-20487d7db621", "sighting_of_ref": "indicator--3e754084-6b04-4de8-a859-e7aac189c5e3", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5b9472f-80de-4818-b2e8-ae6dc77d01e6", "sighting_of_ref": "indicator--152f11eb-a131-4871-b957-7b88b773a060", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baafa6c9-d776-4cb8-8592-e1fdacd023cf", "sighting_of_ref": "indicator--6d23919a-3da8-4771-ba01-f94b1aadf429", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a1d3138-7600-456c-8c39-20e769dfdc0f", "sighting_of_ref": "indicator--6be62c64-0ee6-4240-8c38-83428aeb4dde", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa40603d-308b-4688-9a2a-06efed433ad8", "sighting_of_ref": "indicator--247985a1-0932-458e-b145-3622a477a578", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c01a7e5a-f670-4412-b9fb-6f2f2ef20de1", "sighting_of_ref": "indicator--bd00658a-ad0f-46ab-b1a8-206b04840732", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99f7b45a-b17e-4e20-93de-17de52ceae2e", "sighting_of_ref": "indicator--bd00658a-ad0f-46ab-b1a8-206b04840732", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40bb111c-a412-473e-8ee3-ba9825e47c32", "sighting_of_ref": "indicator--bd00658a-ad0f-46ab-b1a8-206b04840732", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9dfb8f9-4dbc-4289-81c2-124a701aef13", "sighting_of_ref": "indicator--78aa4c79-a5a3-456e-9ba5-78a9abb73484", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2afb1973-2aa9-47c1-abea-bcae3b806cd6", "sighting_of_ref": "indicator--495969a2-dc3b-440b-bb36-afaf32dc9a0f", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d01fc843-33ea-4fd3-9f4c-a3681eabc198", "sighting_of_ref": "indicator--495969a2-dc3b-440b-bb36-afaf32dc9a0f", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--072cd69f-cf8b-4f13-a1b8-a1defe389e1e", "sighting_of_ref": "indicator--73b6eae3-5eda-4e5a-88eb-d342f94e8a75", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--801bcb35-f452-4649-b8af-68fd03dad507", "sighting_of_ref": "indicator--73b6eae3-5eda-4e5a-88eb-d342f94e8a75", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb9241aa-93b4-40e9-bf15-6a2f33548674", "sighting_of_ref": "indicator--b7268489-e7fb-4051-a179-e7b3cdc73322", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44037092-2e29-465d-9360-ac1d876632ef", "sighting_of_ref": "indicator--82bf3847-123c-4725-bc90-e652df23913e", "where_sighted_refs": ["location--7360c163-a106-4b0b-8afd-46fdd97a1e7e"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d17b5c37-ee71-407b-b1a6-39496b5e2dde", "sighting_of_ref": "indicator--82bf3847-123c-4725-bc90-e652df23913e", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c50b986-044c-4fc5-ba8f-0ea783176898", "sighting_of_ref": "indicator--82bf3847-123c-4725-bc90-e652df23913e", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37d57f0a-28c1-4111-b601-ed9c5616c66e", "sighting_of_ref": "indicator--fdbcc36b-8eee-4e10-84b4-35561d8f85fd", "where_sighted_refs": ["location--2e2d6be2-b37b-4392-90b9-f00de406b669"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd253839-8beb-4373-bdc9-4df5bc4abd13", "sighting_of_ref": "indicator--fdbcc36b-8eee-4e10-84b4-35561d8f85fd", "where_sighted_refs": ["location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--374939d3-01da-47b3-a3f5-8bb719f912bf", "sighting_of_ref": "indicator--bfa01aaf-7977-4762-950a-38221014e042", "where_sighted_refs": ["location--cc47317e-2c18-43a6-8938-dea748a56ad5"], "first_seen": "2026-06-15T00:00:00.000Z", "last_seen": "2026-06-15T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "report", "spec_version": "2.1", "id": "report--7d790143-37cd-444f-bbed-cf85e878184e", "name": "Threat Report for 2026-06-15", "description": "Daily threat intelligence report — honeypot bruteforce, web exploit, and anonymous proxy detections.", "published": "2026-06-16T11:00:01.656Z", "report_types": ["threat-report"], "object_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "location--7360c163-a106-4b0b-8afd-46fdd97a1e7e", "location--2e2d6be2-b37b-4392-90b9-f00de406b669", "location--40fb0850-77d5-4096-baf9-9e9c7a4d0bf3", "location--cc47317e-2c18-43a6-8938-dea748a56ad5", "infrastructure--8861577d-b408-4680-9df2-ec96d0d4afc4", "infrastructure--8f32a0f4-03a6-487b-ace4-45ac772216e8", "relationship--8c996743-b605-458b-aafc-527238767bbf", "infrastructure--8aa43d0f-0aab-4f23-9925-5d289d8b8289", "relationship--a8561e63-0960-41e6-855c-a8850ac68d96", "infrastructure--dc19848e-5b6f-4f97-99b2-3326544ec73e", "infrastructure--1ed3d2e2-2d8e-467c-b5b0-c9833af77c27", "relationship--bb8aa938-0c00-41ec-8681-bd854cb68ff3", "infrastructure--e2e9eed4-370a-459a-a9e7-5759984f2373", "relationship--fdb4ad53-0ca8-4ec3-9beb-32bbe2cc5b33", "vulnerability--cfd202b8-23f2-4da0-8b91-8dfc20bfa257", "vulnerability--959e92a4-5c87-49c7-84e9-05987dd9a656", "vulnerability--56396261-db8c-43a9-aa6e-26fda3e6d2d6", "vulnerability--dcd22dff-dcfe-4953-a717-d5f7995ab85d", "vulnerability--cee9e8b2-8a5f-4336-8e8e-05d53f967e71", "vulnerability--73f12446-306f-430a-b214-3d2bbefbc8fb", "vulnerability--fb5c13fe-ad37-4059-80d4-95aa86895d35", "vulnerability--a1f6f84f-041b-4d7a-a59a-e7bf0952776c", "indicator--50cb789c-0ee3-460a-91a9-a55c0cd470da", "indicator--d7ca0b6c-6643-4cc6-b46b-c517a916dce0", "indicator--e88945e9-0bce-4d85-9d77-86f9bbeab9e5", "indicator--7b279f8a-94b7-41fd-846f-c4f880228765", "indicator--e419c180-1018-4181-ae03-5d4ce5c39185", "indicator--ba0bbe6e-b329-4dc0-9a48-4f917ca4b6af", "indicator--a98b2d4a-53ba-48b5-9e1f-784b888157e3", "indicator--e1fe1b55-2cd1-4926-b741-a48b50d67cc0", "indicator--8f71bd70-2a5a-45be-9a4a-a8f33560e3aa", "indicator--8d4f8ecc-ff75-4de0-b29f-610f76b683bb", "indicator--1e1dfe1e-0d83-488a-81ce-42b8cbd50eff", "indicator--4488d9ae-490b-462c-b8a2-ae3a249580f2", "indicator--9cb1efa9-4afe-426e-a57d-745244bc9b70", "indicator--621cfe67-9043-417e-b5f3-c69131fc029f", "indicator--95dfc5fe-4c3b-4b84-8eba-f388e919568a", "indicator--8c29b324-1d73-4e71-87df-f98c010aeb73", "indicator--358e1e2b-7c74-48f6-8995-aa94d05b8da3", "indicator--2cd091a6-a58d-48f1-9d42-23908ebde50d", "indicator--7b3affc1-c233-46d0-b244-716f07eea2ad", "indicator--36eb24e7-2ec1-46c3-b795-049003691808", "indicator--9378ec50-d605-4e26-84e8-046cfb6a2d71", "indicator--79a21988-e404-4dee-a444-3a749c71e6f7", "indicator--fe8e7b45-bd3d-4f15-bedd-236f902362f4", "indicator--23707196-da2d-4ddf-be71-8453d3cf08c6", "indicator--f0974943-0b7b-46c9-b330-03a2d56ecee1", "indicator--11406546-24d4-494e-8c60-a9e312c52af8", "indicator--71bb2150-7026-4c0d-a9e7-3845790e6d6a", "indicator--5680db28-0b46-4767-b1c4-ea907237ef49", "indicator--da375f38-29e5-4ab0-93ff-19b1516157ea", "indicator--b069919b-04df-49f2-bf40-5231c9d66537", "indicator--ea20fb87-6891-4505-b2e6-729f6a589efa", "indicator--04621efa-f481-4699-b0d4-4b95396ed64a", "indicator--f6ae1527-0b40-4080-b988-3b2a2fc02e65", "indicator--dfed09fc-cf9a-44c6-b163-9c3729eda7a0", "indicator--88632e1a-8985-4935-abe4-be7f324db46e", "indicator--809737df-c4f4-47ef-8fbf-bb4023668ccd", "indicator--7b82ec48-4dd9-4c08-bf31-3d18c8394a77", "indicator--94d64ce3-e98b-4688-8992-9e785ba2d472", "indicator--10cea4d6-c147-475f-a671-a95fd81eac48", "indicator--9343f80b-0bbe-4265-8993-74f143e288c2", "indicator--414b1004-25c1-4c81-ba01-edce273c4201", "indicator--09a30603-7bb1-426a-9210-6ebeeccc020d", "indicator--46c158a8-e743-4f69-850f-28cbdabcc744", "indicator--7c677559-6090-410b-a508-ddf14184f892", "indicator--ac8f9a39-394e-447f-8fe3-311123de4d5d", "indicator--11fb69c2-43d5-4c13-9b7b-570e31d45b90", "indicator--0eb897f5-1c39-48e7-9e4c-684163981a51", "indicator--7143baec-e736-4d7e-b295-2bdc7d2201d9", "indicator--44add0b9-caf5-42fb-a108-e6e324eb1cd5", "indicator--c2a8be54-99e0-4df8-bf06-12b40090c533", "indicator--99164086-988c-47b2-9695-098b79ef9fd5", "indicator--fa981710-115b-4c30-a99a-c88fc0018a28", "indicator--e9ea51b8-6466-43af-a921-99d5555f5a3a", "indicator--7c87163b-b704-43e7-a3de-53761d685292", "indicator--fba26761-d59c-4625-8ff9-4333d7f6d9e3", "indicator--400d74b5-2262-42ab-a428-d2b108da0b47", "indicator--ac2cd4eb-b4f4-4d8e-b5ce-1f804db384b7", "indicator--f5974ad1-92c5-4dfe-ba6d-87e2d4005b1a", "indicator--98c44b61-01a4-48c6-aa78-980bee32cfd3", "indicator--ff2f65f5-32b8-4701-819c-08bd5535fe25", "indicator--aaa053f3-f2cd-4c09-a2fd-f1239258c915", "indicator--4567fe8e-7051-4f7a-af9f-5dfacc35af2c", "indicator--6dea92ec-0d70-42b7-bfd9-69caa2bac19a", "indicator--20456473-547b-412c-aea3-866e8bb30b67", "indicator--fdb0df33-444d-4748-ac78-8bf3e38a975a", "indicator--76e75deb-6889-4165-b9a4-a5da8b363e8c", "indicator--173589ea-3323-4538-a866-c4ac30235e7d", "indicator--c9bd20c7-3d99-46f1-864b-1a007a52bd57", "indicator--db471cc5-b7bd-4d82-90b2-d1d2b90307fb", "indicator--bb1b28f6-a2b8-4c31-ab58-9e187f2ac217", "indicator--6c6b721b-26bc-4a95-8865-0234cf79c03a", "indicator--56b27160-380e-4fa2-b93c-1fb35dbf2285", "indicator--b9dc52d6-19fe-404b-a002-c33acb72ff0a", "indicator--79fb7df0-35e3-4c32-a630-d72670cb60b2", "indicator--6057b9fe-2ae5-43dd-863b-3e7841593ee1", "indicator--9f8cd0e8-54f6-44a9-ab84-d3b8464c9a73", "indicator--c6ed3cae-f942-4a70-af7a-7e7525486a92", "indicator--531b5166-9c8c-446e-abda-1628d2bc7b8c", "indicator--ba6d9c80-67e8-4b6e-ae42-96f963c0bd60", "indicator--8b66c126-0899-49ec-a806-b0dc940925d5", "indicator--6a81e1d9-0f0a-4055-a2ed-36233e794c09", "indicator--48a24b01-f9f7-4f84-9e01-e0a27f6002ea", "indicator--cc88810f-8fa2-4f30-ad37-26a3a031a15d", "indicator--dd1270e3-1289-4d4c-8aa2-93a7d48a7a88", "indicator--2ba72097-7101-4be6-94b9-e29f97e06c9e", "indicator--ea591b44-6223-4f35-be72-176ca7b00514", "indicator--4fc7c640-a79d-4587-9f49-0cd2ed667e04", "indicator--5c0abbed-7e6d-4b18-9636-c76c314a6142", "indicator--96d57b23-b164-4bbc-ba96-30f47d8a73b0", "indicator--a7284625-554f-45ee-874c-9cfa2062242b", "indicator--c4ff9347-bf21-4e6e-9c4b-387c3b27046f", "indicator--002c6ea0-a454-4716-a7e5-91935c835f25", "indicator--c19fb8d3-96e3-4738-953f-a060ce696db8", "indicator--7318532f-e523-4dd1-902d-d2ba42c7bd47", "indicator--fdb16cf1-dc3d-4710-bbcd-45ac7c3f8642", "indicator--4864865a-0182-4b93-8d56-6f5cdbfddfd4", "indicator--dc998157-a2f6-43da-a1f3-ce6a3b9a9ce5", "indicator--dbb38272-1a9b-4de3-9ffb-ae67bad9cada", "indicator--d9b71770-035c-4e6d-a679-068008494bdc", "indicator--e88ce125-06cb-49b4-b29b-5c994e3264eb", "indicator--5e448485-5f52-435f-a31c-23451e2e9047", "indicator--2d8125ca-7014-401a-ab05-4a3d1e100fe6", "indicator--f1d620be-1439-44e8-8c82-826dce9cc252", "indicator--69317f60-fc8b-4a0f-8e2a-ad8363694a5a", "indicator--0972ebab-f77e-49ec-9c25-b77b420f3f35", "indicator--1072e53a-dc7e-4e01-875e-68fcb4996518", "indicator--05d521ef-188e-4ac4-8cb3-4c0d7b9bbfae", "indicator--6b1e9995-bf5d-45c6-8c6b-96cdd0340fec", "indicator--4fae05ce-31b3-4365-a975-2a059dfc1704", "indicator--6d3115ba-1fcf-4eb4-8ae3-3ab2e0bdefd2", "indicator--08bb221a-06ef-447f-8a7f-920abdbb8c35", "indicator--6dc069b3-2da5-4433-afa1-fdbbbc7b92cf", "indicator--d5cef03d-9a46-42bf-adcb-32c4daa58388", "indicator--6e3ca4ec-f5e1-43d6-8127-242eb666ac41", "indicator--1f6407ae-eff9-4062-a388-137bcc706687", "indicator--e8da037c-c83e-4b87-8cea-69b27fe37b68", "indicator--937696ff-d25e-473d-8b19-2b5516ec82b5", "indicator--59a4afa9-9c47-4ff8-b889-b542c99f2700", "indicator--6a42b68d-ce15-4bf3-bcf2-1903a9a3ede8", "indicator--e7dcf742-2e58-4d2e-9df8-f7247d496386", "indicator--869dbaee-2d91-4b0e-a0ca-87403366b102", "indicator--73d9bc8a-4594-489b-877b-03734a08b76f", "indicator--cc3c92d7-1f1c-47ac-8fd0-777480617324", "indicator--6f19b9df-e034-4563-afed-d8da7391f0ea", "indicator--a1c96486-32f9-47d9-9385-3928acad0260", "indicator--6688c530-9288-4eb8-9fef-cb73acebd9fd", "indicator--6102d00e-9950-4590-a6e5-ebe4a66c21ca", "indicator--4a86287a-ceaa-4c48-937b-60628aa127a6", "indicator--b7630d54-c11d-44e0-b0a6-ba20f02e9180", "indicator--05124c91-2235-4cca-bd30-d69a2c88ff5f", "indicator--c5e2f9d2-87d9-4426-a9b3-80d5d40a5e24", "indicator--fd52a780-d733-4402-afdf-e79d37ca8878", "indicator--7ef38510-351b-4491-9735-e5117b7f7e4c", "indicator--d1ee6c5b-6641-4f02-a2cf-4842d8810a19", "indicator--69d715e8-68ba-418a-8d4b-78ccf1981181", "indicator--a5419937-bd73-4ce9-8eec-8af061250a5b", "indicator--2b1e9c40-4e7a-443a-a941-0befcddfffa2", "indicator--738a0f91-3418-41fc-9a2d-000687c38668", "indicator--e47e7fb1-1d4e-47e8-bfc6-372f43bbc7ad", "indicator--1312cb33-79e4-45ba-b944-a5ba87b98a00", "indicator--ffa4e37d-b3c6-4d9e-bffa-eaa963429c75", "indicator--ea752b61-6e12-4e27-a909-7f2984930e5c", "indicator--138b6402-1ce8-441e-b051-e6834753c35f", "indicator--e26859b5-d42d-43ac-8929-a643fad4f6ae", "indicator--a8946d54-7faa-41ca-a043-e4dad95abe70", "indicator--19f44252-c4cb-4aaa-9d74-f933ce571c9f", "indicator--f5d41fe9-3686-4ea6-9171-1d4da6330c89", "indicator--b182df99-6833-4e69-872f-1ca48c1b0541", "indicator--fe910bee-a999-49c6-9d47-7199c6f892d3", "indicator--a6fb157b-b98b-48e0-91f3-c5a8d66bca5a", "indicator--710e2ba8-d5a3-46f5-8569-ac7aeba1155d", "indicator--109f8fac-6db5-49f4-b9af-ee308f96e100", "indicator--dd11e023-1ff7-4f2d-bd1d-735e6efd6b54", "indicator--259acf36-53e0-4fc4-b5a0-12df1bfd26fc", "indicator--1aaa1f05-f7df-47bd-a842-2a464c49f8e4", "indicator--15ec4030-c150-4da5-b636-bec4ab112ebb", "indicator--5f514598-08c2-4514-ada4-da0bbc955eec", "indicator--fcaf196e-8fee-4836-83ee-dd568d94a8d6", "indicator--769174b0-3e50-4173-97f5-586198a54cbc", "indicator--bdfd9de0-88c8-4b5c-9cd3-05120c22f97f", "indicator--07bcf547-463c-4da8-a3ef-5420cf6ccd8a", "indicator--bfd6abc1-905e-4589-87fe-938ef98a9a71", "indicator--c6860e61-5f90-45a5-84d2-922b6d51b600", "indicator--58bd9cde-4d20-4c87-a530-41badba43a03", "indicator--ca9c0c0b-4f0f-4c2d-b125-445e700b0679", "indicator--cdeb8f0c-aade-4218-99b0-fa93c0b77733", "indicator--6de2b2ad-4192-4b8e-aae2-0a1868e56934", "indicator--cd338a38-47a1-4c9d-a24b-c0b1cb85c66f", "indicator--c5c6677d-53a0-4647-a7bc-b0dd11147cbd", "indicator--15e6d1cc-536a-4743-af5a-af1f13e417f2", "indicator--9717223d-c260-4520-80f2-94f8664930da", "indicator--7357187a-8445-4997-a49b-526d61d24a07", "indicator--edbd1437-db5b-462a-9843-7e6a7e1b59c0", "indicator--7c648f7d-dbb2-4cba-9fb0-ae88e026715e", "indicator--671d9416-991a-4efc-bd2f-fa590741aecb", "indicator--130a5f1a-2971-4c9e-a352-630f9ecfb254", "indicator--0fdac3af-3ff7-4f52-bf4c-c70f1e96b959", "indicator--e9770f33-1365-4e95-9a05-88cde5f61d54", "indicator--be497744-c86d-409a-9e54-c5bb72d0ab96", "indicator--235cb056-cab2-47c4-a0b6-7f30bdf37e9d", "indicator--3786ffd6-83a7-44a2-946f-d4eaa94a0530", "indicator--2d39a5bf-6878-4abb-ba37-04af34059821", "indicator--77841a81-2524-4f7a-bcca-eb8902b5e87d", "indicator--95372a32-17cb-4a8c-be35-fde53486534b", "indicator--9f849e77-cddf-4740-b478-71f8f6d344f6", "indicator--2fcbccff-9647-4cb5-8663-fd9db496bdf3", "indicator--9debcbd8-3bdd-43de-8847-c3e012709646", "indicator--fc5eb052-1749-44a5-a904-900e8a53efb5", "indicator--39b8166f-e990-4dfb-9853-41daa77a19fa", "indicator--48ee9c04-0ade-4d69-aab8-8df9ec5d7913", "indicator--0019c169-5966-4540-bb8b-90b0530f8799", "indicator--3ceecdcd-4237-4288-95fc-554595cd61d3", "indicator--8dd9468e-492a-42d0-a731-deda102b8002", "indicator--4d918566-195c-467a-b492-741fd4385585", "indicator--0c9d7d2b-a616-48ab-a549-f57d76b8dead", "indicator--7c69a555-2bb6-4b4a-ac0f-514aeba14693", "indicator--b3089e96-4404-4509-98a9-beebe04ef832", "indicator--f44b36f4-4870-45ff-87bf-6bd63c366907", "indicator--aa2feda9-1848-4306-81b9-e0d03cc093aa", "indicator--c62fea59-c764-4600-a6c6-effa8537bede", "indicator--c595e75f-7468-4417-b843-4b0850a699ea", "indicator--67fa9dca-fa9c-4001-a65d-ec4667978ae1", "indicator--933d8b35-beea-4805-92af-da18cc73f727", "indicator--c3dc2047-10ce-42f9-91b2-ead0dcadee07", "indicator--b6b1324f-a0c6-4783-bf05-c8589f9993fa", "indicator--9506df39-c1f2-4b69-8770-718b05d6af7b", "indicator--46ea9d99-5062-42bb-bf9f-c811b05c76fd", "indicator--37ef3ed5-17a7-49c7-bdb1-9d35887dfa83", "indicator--5f119d4b-f9a4-4143-bfd8-f25753817918", "indicator--c7e023d8-c347-4a8c-b41b-532e63c3581d", "indicator--bd9cf1a8-c132-41d5-a20f-09a2a28f092c", "indicator--b8826630-e2c2-48b6-99da-6aa8bbca76c5", "indicator--97f28c1e-1325-44a1-b0ec-9b1fbdd8b16e", "indicator--5bf57792-d214-40c4-ac96-623f47b13424", "indicator--8cd2b09f-49f1-4792-af5f-4015a59da0fe", "indicator--f7c043d5-595b-4529-9aa1-cad706f02a15", "indicator--e88bea6e-7b5b-4712-8787-173592e6c89c", "indicator--8016d7a3-993c-4b9a-a838-1dc0a3a3b92d", "indicator--2dd3e4e4-7fda-4133-a8d3-9942b57b7fb3", "indicator--c57e3819-b754-4020-8aa2-c71b34513c6c", "indicator--31540aa6-c716-40d9-b070-cc84dabc4d4e", "indicator--26a1c4d9-713b-48e3-ab7b-e7576d4b7926", "indicator--e344f77d-93bc-4f74-964a-a97ca7d33dd5", "indicator--12e0e75e-389e-4ed8-b03f-7edadbcadc7e", "indicator--a3d2ba41-bbd9-458c-b6e4-77719f33d29d", "indicator--d874f390-5d30-498b-8ee3-97c6a4a12f1c", "indicator--42a6a536-136f-4213-8e2e-5f7c8a64eb43", "indicator--1612186a-cccb-44e1-8e7f-064f13b0de5e", "indicator--3b15483c-abfa-4a8a-85c7-27fdd4f83bd0", "indicator--9840b53d-f136-4ed0-add1-c42672315638", "indicator--f7c88314-b756-4e49-952f-736ede4583a2", "indicator--b71a960a-d84c-413a-b86b-7622dc9be89c", "indicator--5b2b28d2-6b1d-49ca-9fc1-8342e443711b", "indicator--ec79d681-cc34-4e0b-8218-2b2d546abbba", "indicator--ece703b4-ef27-4a1b-b9cb-d4878ce9146a", "indicator--739784e0-5efa-4772-a828-e354f2711861", "indicator--36cb3800-3d35-4f55-b631-79ec390f8adf", "indicator--850cf872-7b44-4ac3-8d28-a9ca10e36dc2", "indicator--3c4f5ebc-621a-46b3-9419-a9e4b4b593fe", "indicator--127e3fb5-aa27-4f25-8b1e-63d243b05d71", "indicator--1d17b539-ab35-4d93-a185-cb3008584500", "indicator--06adc8f3-3a29-48d9-9c3f-c3f38b1059f0", "indicator--67631075-2690-41ba-b541-2ae347ef9797", "indicator--083fc2d7-c106-44a7-b9fb-d7e6a1c22876", "indicator--a47a3727-2eec-4d86-88d0-1a9fde7ca2e1", "indicator--4f2be587-1142-4205-9057-1ffc259fde9d", "indicator--9efd161f-7c3a-4753-8977-fa8f489c7f50", "indicator--b9540563-c650-4355-931b-769eb83b0142", "indicator--b05ff26a-1dbb-4c8f-bf52-2b9069f85110", "indicator--aa8d9d5f-c089-4422-ae96-542f8e8151f6", "indicator--f7fedf1f-54ff-45ab-bc50-4a94717363a4", "indicator--7591e450-aacf-4f48-b6c5-5406b43cf59d", "indicator--57ecb1e2-665a-4f16-b8ae-04381a6c66ad", "indicator--c0e81ad9-9a30-4a5a-9445-b371d143e855", "indicator--c770cb44-5055-4180-877c-4fdcd2f37af0", "indicator--ccbb3564-ca1f-4158-b8fb-984908e7282c", "indicator--0404b176-e67e-43e5-b915-c06ccfb65b34", "indicator--b4d29ce6-3a5c-4e89-95ab-2618c0525601", "indicator--e505ab3d-32da-4a02-89bc-4a93468eadc3", "indicator--7bcd9de7-23d6-4c18-9f22-d832c79b66a7", "indicator--3de266b4-66db-4f70-a6d0-96eab82f833f", "indicator--b0ca3f0c-450e-43fb-afbc-dd03dfead902", "indicator--cf7afe46-a5e3-4c03-a68d-00f03d2e428e", "indicator--4b2f3318-21ce-4c90-8a55-4d8514fc000b", "indicator--2ec40918-fd01-480d-9803-1e0380098bb2", "indicator--39306c10-b629-4354-ab89-bb58af65a196", "indicator--41b2ff6e-f8e5-47db-942a-7828ebecc121", "indicator--1cd31a26-6188-4761-89d1-d498bf31ba81", "indicator--d6ec5bda-8542-4e19-aa77-94c7604a559b", "indicator--cc756fff-a697-4178-a7e6-b591caab4b8e", "indicator--ffcb4876-f843-4381-a29c-5d589ea5f32e", "indicator--4f78a452-b1ed-4e27-9fa1-b2316c347e82", "indicator--382a848e-3b76-4f3c-ab47-7be61ed18fc7", "indicator--28698ad6-bf52-489d-ac24-7eebb988df00", "indicator--bdd24249-2673-41a4-824e-db2209a0a8d3", "indicator--a0f95e9a-db17-498d-ac30-bd399292cea0", "indicator--6d9a775d-f0ab-47f0-b276-27d83970fbc9", "indicator--c49dd51e-9412-4e2c-a321-61978f48ee36", "indicator--3ed1c246-fa74-44a7-8548-372c1d95b8e1", "indicator--2a03679f-aff9-480a-89f4-63d88fa3f92d", "indicator--b798959c-c291-4ad6-8d55-0e1cf95f0df2", "indicator--e25aa1ff-66cf-4a17-8a8b-e6efdae97851", "indicator--29419421-0ea7-4291-9c7d-21f2b6e1b383", "indicator--65dc27bb-cb96-4ebc-91dc-40a75940ceac", "indicator--c0bde6ea-1fa6-4182-8f3a-73545daab7d1", "indicator--eb8cae29-e583-4cf0-a994-d880a7d3e0f6", "indicator--0e71ae36-a70f-4538-89b9-33a14786e094", "indicator--20ce31ef-5549-43f7-89fd-7ff5e0f41ae5", "indicator--dbb26de9-b700-4de5-8692-c2ca65053062", "indicator--51d812a5-e53d-4a65-a51c-0d63eeeed523", "indicator--a0fa41d3-1fb1-45b8-86b2-aac32a32d075", "indicator--9061c458-37a8-4d51-9ac8-b226244a7c25", "indicator--aa775b68-41d2-453e-b01a-8497f96caaa1", "indicator--1880139d-8a5f-4944-be14-4f1b99a9cf06", "indicator--af9d17cd-fd1a-438e-80e5-287ed556632a", "indicator--f75fae1c-362f-4868-b533-3fb6fd80dd6e", "indicator--af9ea32e-7f58-44a7-a63e-9d40ccb927c1", "indicator--736ad5b5-238d-4451-8981-bc1290b5a511", "indicator--ce6c1e29-4477-4a96-a714-1a13b02d6c6b", "indicator--27c73226-9858-4e27-9c41-9c61fc828539", "indicator--bb50f969-acad-46a3-8275-2081076441ea", "indicator--f730b941-19a3-4de3-bd62-87cdd856a714", "indicator--3e01945e-5d1b-4524-992b-e11f5aa00e5f", "indicator--070a644b-7308-4920-86da-723c149fc726", "indicator--2e34049e-826a-4eb5-8c3c-248bd63c87bd", "indicator--620bf022-44e0-49c3-89ef-f8bf578853ff", "indicator--782eabf8-2881-414e-bb5b-65b3df3ab11b", "indicator--6f993dda-5ce0-4967-b0b6-1747e9693786", "indicator--8f80f225-66e5-4e9a-882e-55b71e02d510", "indicator--e5e68df6-4a9d-43e3-be2c-d0b51a4f1e8b", "indicator--6e1b1377-be0a-432e-a684-7e4c517b4fcc", "indicator--3797cd88-845a-4b47-94fd-c6ef707e9f27", "indicator--8ae0d798-c9d9-4ffc-a001-33d5581573d0", "indicator--1a4ebf0c-b753-4de8-8780-40bdee80f39e", "indicator--32fea690-971f-469e-9f97-19f6df365b5c", "indicator--4cf43dfc-c9c3-467e-8fce-b9dc5a35fa4a", "indicator--2ce382ac-be00-472f-b824-ca79d0ae3d99", "indicator--b46b026a-a235-469b-9f6a-ba718ea99802", "indicator--4311152d-28ee-475a-8413-4be97699bb05", "indicator--b88e4ca4-b455-4894-8224-a0c1afc1b946", "indicator--cc775b1c-4ffd-4adf-9c50-49c041cf405d", "indicator--d8e91725-b4df-43ac-894c-28ac4ed53d10", "indicator--2b17169b-8c16-48bd-9560-9c64a8045355", "indicator--8884aa12-1e6e-4447-9cd5-1e03337536c0", "indicator--827ab610-07dc-45bd-b635-957ddb9fdae0", "indicator--ba412a62-d05b-4e29-8982-2b190bd7bd4b", "indicator--79297644-8e65-4a53-a100-7b260431969f", "indicator--d558c3aa-277f-4431-a9b7-da3eaed28965", "indicator--985500b0-c776-447d-97d4-8780eee077ce", "indicator--ee6a4f3c-bb27-45cc-860e-027938456196", "indicator--32d602db-9567-430d-bc6b-67ab67591596", "indicator--bd598aef-0e93-4a55-b231-9e23b38109da", "indicator--944d205c-a8c7-4127-96c5-70b20af60c38", "indicator--f5733529-f564-4e4e-8a7e-adc0ad14355e", "indicator--7ba77f45-b683-4a06-9f93-74e5d2152fbd", "indicator--a9a59e8e-930b-415f-815a-e2b1d637f2d5", "indicator--73eedf0d-cda1-45ac-ad14-035bfbfe4cfd", "indicator--0165d751-05a3-4d70-beaf-dc7b84535549", "indicator--5200b490-c80b-414b-a348-7bc73fa72250", "indicator--f7c95922-7ef6-4af0-a74d-8832dd5b7958", "indicator--ed1b8bb9-03a3-4a76-be23-43389b7ca537", "indicator--d73ef272-90e8-40a8-a131-f65903e18922", "indicator--c68853d6-90c6-4901-8e7b-cc15830ec555", "indicator--40c3825d-4d08-4be5-812a-400447c80477", "indicator--880e6f1c-a06b-46e0-9c1d-a218c62a9de4", "indicator--c23a7e08-e7b3-4f9e-af12-0f6647461ff9", "indicator--f6350bb5-afe5-4a95-a7ab-ac7e4d440c1f", "indicator--92922274-db86-4be4-ba9e-fd1348f406f1", "indicator--4ac9b604-1829-4f43-a3fb-4548b89eae02", "indicator--8576bc0f-eeb4-4014-b476-eda965844787", "indicator--d04308d5-2ab9-4d47-a7d9-fa35fcf72a12", "indicator--1bb3122d-1a25-4319-938c-99463f11cd7a", "indicator--b1ce3c01-4dbd-4b3a-8d38-13a9bd7cadff", "indicator--70066eb3-efb1-46b8-8b77-afef9889e76b", "indicator--4bf92b2c-ed98-45f7-a925-1016c44b1e30", "indicator--1bec7cc3-193f-469b-9809-5dc6c8f84641", "indicator--97ab048f-294f-4640-b665-58f3abfac07f", "indicator--35516ff8-e9f5-4d69-962d-293cb278cc9f", "indicator--71e6678e-18af-4b60-8a40-c0bb56b9fdf9", "indicator--53eda91c-c694-4963-9b90-639557df31a8", "indicator--328fdd26-26cf-4e46-a932-97818a015f20", "indicator--b0de3817-6b59-4812-ab06-efc3d36fd791", "indicator--d0a22108-d07b-45d3-aa90-4cacfcf71c47", "indicator--490924d2-b711-42df-bce9-fd1651756073", "indicator--09f373af-7c12-4a2b-afd0-5dcffdd1bcfd", "indicator--6a2a44c9-caaf-4bd2-bee5-aa451b95c1c5", "indicator--fd668cac-74b1-4dd9-a1db-c3a287faad2b", "indicator--acef7c66-d3eb-40d9-832b-bc13c7f9ba24", "indicator--7480d641-d205-401c-81ea-2096594a0af2", "indicator--3ca0bd3d-1ca2-4d64-b530-8859edaeb0cf", "indicator--ac323122-7e09-417f-b6f7-981db3758868", "indicator--b1e5dcab-8b59-4163-a33f-ffb3657e8104", "indicator--6fb73f7e-b1cf-4733-b3ba-a9d4474fad85", "indicator--636814f3-87d5-4e7b-96bd-51f2203de407", "indicator--e8a8e4f5-742a-4a6b-b45e-a88c410c3cf2", "indicator--eba63d22-7f8b-4db6-8f95-6db286a0946b", "indicator--fb34bee6-c9e9-42d6-920c-aa7b29bc602f", "indicator--aae7ece4-540f-4e22-8e06-bbf935e2017e", "indicator--3b08d3c0-cfa2-4708-9ea0-b72b4cb0a83e", "indicator--328867a2-dbf9-4369-ab31-8382e650890d", "indicator--ccff571c-c74d-454f-8269-a3434766a44d", "indicator--ff6cbe35-925e-4536-9b13-4032c8397a5b", "indicator--86929f54-0a8f-4e77-988a-e8bda9fafa9f", "indicator--510156af-2aa5-4249-950b-2b27cddeb8d1", "indicator--c33e45a9-ae41-44bf-90b1-8e8ca985fe94", "indicator--7f69ce8d-5d20-48b1-b5d5-ba0167ecf48e", "indicator--d3649a1a-5ba9-4df4-8e46-b38bd9947936", "indicator--121e5026-fd84-4330-8f05-5eb6cf9fb14b", "indicator--75e9cedf-5f01-41d9-b757-c67c0b790d36", "indicator--8e3edf66-f60b-4bd3-b54c-26d5c79359b4", "indicator--70752951-88b0-493a-bc68-f6a250ae2dd1", "indicator--12bd86d0-985a-4015-9437-9ddfe7ce07a2", "indicator--75a645dd-4c2e-4c82-8768-e8da967d718a", "indicator--35b3a49d-47de-41ec-82ba-fde16f63798c", "indicator--ff3134b4-492c-42b4-8d5c-1b49f0371d29", "indicator--8e814851-6821-494b-a79d-73fc691e1ea0", "indicator--438f060c-59f3-4721-a24e-1270c7b142a4", "indicator--09ee4c4a-7276-4ebd-995b-693636ff28fb", "indicator--3174719e-b440-4524-8575-a180e0b6792b", "indicator--ba71ddbb-bec6-42bd-b31b-4d9831fae8d9", "indicator--d8e2dfb7-82b6-461b-9533-50262d21d601", "indicator--51e70664-aa19-42ce-8024-a4e86731c813", "indicator--e91ca646-d48e-434e-9a4c-eaca355cc32d", "indicator--5d1a84fd-0f16-4efc-845f-183c0bd5eae4", "indicator--67a76dbf-5a0b-4251-92d0-d874c9afab3a", "indicator--e5717cfc-d567-4567-a8a9-6a7e15d10c2a", "indicator--ab59e995-0d08-492d-bb3a-81aa4348de83", "indicator--bae494b7-3036-4214-b380-4203dfa4ba9f", "indicator--af0ecf00-92a3-4291-8790-466f38b6c977", "indicator--16b838e3-0d34-4263-b9af-beee11529a76", "indicator--e19f9b04-f4a2-4265-8ade-5325a56dc41b", "indicator--9c0e6c35-b016-4938-af8b-9051cac67662", "indicator--108c5ef4-462b-42a5-8029-8492a8104fda", "indicator--c0eafc13-66e7-4de0-b32a-14a15bfed204", "indicator--476398ba-5160-44b9-9e1b-7d8a419624c8", "indicator--2c299aa2-2eac-40c3-b59b-6016f03725cb", "indicator--9f7ddf48-0175-4020-b196-5920f7426db4", "indicator--f0f7e711-6fd9-45d6-86aa-2d6beb37ef56", "indicator--49f53c12-cb58-4c0d-991d-6d7ea36e0437", "indicator--4dd036d2-50a1-4ff1-a0cb-077e4545a873", "indicator--8ea5703c-7d86-4f0a-b59c-9d13489e97af", "indicator--ebc8688f-b0d1-4344-a3e9-b9ec750fc224", "indicator--f8451a62-b013-4db1-9f3c-7a570022d300", "indicator--d33f4bf2-c6dd-4f68-92a8-baa91fc6f7ea", "indicator--9860f854-7709-4619-b314-9d3652993387", "indicator--e8a48099-9c00-4cdf-b477-841e51fb811a", "indicator--29cde6ae-9e42-4f14-9ab9-a1ca25a65d9b", "indicator--6f2349e8-113e-446e-9922-e9a4c8cdada9", "indicator--0afa6421-7f80-4cfa-a3d0-454c74fa1b09", "indicator--d60ce198-d402-43ad-aac0-cb82362e5d6c", "indicator--c34c9fc0-a97a-4573-a975-d885a6808d0d", "indicator--fed131aa-e628-4373-ac28-bdcc2268f32b", "indicator--df6d0ec6-c054-4e89-af50-1de634de9745", "indicator--dc153bf9-9ebb-4995-a7f5-9f7aed4c4841", "indicator--ad76ca0f-bf43-4265-aa73-479da59ffd10", "indicator--82c82f5d-33ae-4c75-8b80-e7cce7d0ba1c", "indicator--eb33c129-c1fb-4672-891f-cf93dc1f0aba", "indicator--944f8f75-a0bf-41a4-a450-dd15d4193da0", "indicator--d6a98636-02a9-4946-8644-3b5c24f4ab84", "indicator--dbea050d-3ab3-49ba-8ff3-91dbe69c9320", "indicator--064f1a31-b850-41fe-a560-835a35fd13d7", "indicator--4a1963a5-ab2a-419f-8ee1-686654a9dc74", "indicator--3c59f79e-172f-489d-8415-9447b36f12c4", "indicator--648ab9cc-d9c5-4def-b614-76a7f5c3fe75", "indicator--5cb3d341-4f52-4b94-bfae-a1eb154bf0e4", "indicator--a5384016-3a83-4339-8000-e0ba1f0594d9", "indicator--87c1a0a0-62b3-424a-8713-89669978c2e8", "indicator--d8861f21-fc2c-4490-97fb-9c3ec5f71992", "indicator--a729db50-aa80-4e0f-a6c3-0d4c5fafed53", "indicator--48498eb7-c8f7-4442-8f95-ad4731acca1a", "indicator--9b203a17-aa16-485f-9072-55e3ac6ec6fe", "indicator--050e6f1b-ee3a-43ce-adb2-7e942017c93a", "indicator--38e576e9-6e57-49d1-a7de-f2b770655274", "indicator--052437be-98ab-4a52-b883-817dc17bd7ea", "indicator--b7171942-2ca0-4770-b798-278c5d28f1d7", "indicator--859317a2-d10b-4a97-bfeb-31c591e2b0e1", "indicator--0645e6c4-37be-48fa-9a91-fe2c517dcd65", "indicator--980b906d-7822-4523-97b0-2d9efecc74e3", "indicator--f9507405-ec1c-413f-a0a2-11bf9e5d8625", "indicator--d8548d14-e755-48ec-a060-d0a936ea3ab1", "indicator--5902374b-f87d-444d-9a46-bc025f3c77a4", "indicator--e3e5cd79-ea1b-45cb-87c5-7718380d0489", "indicator--b5baa4ec-fd70-495f-9170-51ffcaa1e14a", "indicator--3713a088-a430-48c2-914b-c599e8634bf2", "indicator--73bdf590-1df3-45bf-be08-466f4b2ed467", "indicator--257831f9-d74a-42b5-aa3c-ee51a767f413", "indicator--a964b760-e26f-4de0-8d0c-32b641c83f92", "indicator--3fdc1c11-3df0-4fae-813e-ac7744042b6d", "indicator--74748e41-e7bb-4042-9388-4a51dbe27ab4", "indicator--c3ac61ad-0877-40b4-b149-75e4f57b5a7e", "indicator--ef0b7fbe-27f9-4749-8bfd-7a344785fbb9", "indicator--59d3c82c-c3f0-4d66-bb72-4ad02c77af58", "indicator--916fc4ec-900b-4247-bfe7-620bb2dc4339", "indicator--5fffdce9-baea-45be-a178-5150ad150283", "indicator--363ac680-ca2f-43e5-99eb-863952053954", "indicator--88f71e2c-0b9a-44d0-a03a-4726269696c6", "indicator--09f43bdd-ccbd-48ad-820c-aef7a144ff54", "indicator--b2bc8a4f-7ddf-452b-ac20-694b6fa0fd25", "indicator--567b8480-100f-4e3a-a0fe-20bc1336f350", "indicator--0bdd0dd9-0ad5-4f2a-801a-00efc01545ff", "indicator--f76229d7-ecbb-4977-b692-0c9ec509a63f", "indicator--95d7b570-0aec-4e20-9ef8-470c63e34eb6", "indicator--51a72fbe-1689-4c6e-8ce2-18776075d004", "indicator--ad01005b-9f7b-49e9-9568-9c7b9d01a0ab", "indicator--e9dc3579-dc25-49f8-a4f7-c82f134c3a6e", "indicator--869a40a4-3307-43b4-ac73-c81c90991d28", "indicator--6a745a43-04bd-45ed-a937-4932a24f5b2c", "indicator--7a6d082b-aff9-4c7e-b415-d5ce564db182", "indicator--3bf84d1f-9dc3-4e69-81aa-6d0d36dfd8a0", "indicator--b43d2e78-6399-4372-859c-1d8bcc5f4af0", "indicator--119445d1-3e0b-403c-9a2c-427721ab6a1e", "indicator--e43731dc-b783-476e-bc14-5a68843d5018", "indicator--b61fadce-51e0-464b-89a5-9906a0a41c49", "indicator--dc7374bf-337e-48c0-8191-d1c505a7db95", "indicator--ba60b1cc-774d-4e26-bb9e-3611b91a7cbe", "indicator--b1fd3481-b31a-43ee-8cab-0e8f67db9c59", "indicator--d6f8d0e6-7ff5-4168-9c60-990772801c1f", "indicator--be3e8c1b-d926-4ca6-a70b-540e013ffe15", "indicator--d1daa625-f658-4e59-9f08-9a9d30a0fea1", "indicator--b40ced8e-5232-4277-a622-408ae9660e3b", "indicator--3c1ec230-35b7-44a5-9507-6edc80acb172", "indicator--404dc626-dd87-4bda-83ca-109a30a9073a", "indicator--f3da913d-5f38-4be7-820a-d5ffb8bb70c7", "indicator--87e162c3-65ff-4fa8-902c-3d08325ebd9e", "indicator--d4d237a9-8e11-4834-bc7e-f76cba7078a1", "indicator--f02c4d2b-f2a0-4390-8fa1-28594008e9ac", "indicator--ec87362e-23ae-4535-b585-490255433285", "indicator--5e3897c1-3809-4c61-b4f5-739b05784f73", "indicator--a33eae45-dd65-4d29-8c87-ad277ae5b09a", "indicator--f1a4002d-7b03-47b0-a73d-7e0867a3111f", "indicator--0c682887-9211-45bd-9d67-9c4aa877413b", "indicator--38a64e3e-9769-494d-aaa6-19c2d0d6730b", "indicator--934c891e-2520-40a4-9b48-d81683e30053", "indicator--06d469c7-5909-42d2-b0b0-8a79d3254325", "indicator--f8537181-48d2-4df1-a6f6-5c941533b6df", "indicator--18c3b4bd-3a43-4d14-bb93-efe6db920015", "indicator--6aaea74b-0da7-48bd-95a1-0a68156a03ef", "indicator--c0f2fc0a-42d1-4d3b-ba18-decb91e5eefe", "indicator--b4c2eb68-34f9-4bf0-8b67-1f46d3b7f1c9", "indicator--0ae448c9-8670-4fc7-b7ab-a28f405db4f8", "indicator--7445ea7f-1e72-43ed-98bf-2d0f9eb49a38", "indicator--1f42eaae-152a-472e-a423-2cca3b235e86", "indicator--cbe510e1-5f53-48ff-abf7-0fc1831e2c94", "indicator--05d7d959-1fb8-4878-a04b-ac8659c17d15", "indicator--d658c397-3f3b-4155-a144-e0cc4babcad3", "indicator--febd8706-96ff-4059-b825-ab97e3148611", "indicator--71c3576c-bb67-4d3a-af42-ca113c081c08", "indicator--e1676897-032f-49bc-87c3-cd6e9aa478c1", "indicator--a42a26fc-549a-42f1-a9d8-3d6fe78cdaf1", "indicator--5eeb1991-4024-4ef6-9a63-534783e7c7cc", "indicator--56777d42-89ee-4f0a-a00b-155977d206ba", "indicator--892dc476-1153-436d-9145-e0a4bf342f2c", "indicator--24563d1e-fa57-4869-a834-cd8ead7ed40a", "indicator--8b0ffdcb-3557-4024-b3bf-5e153b5fc246", "indicator--cc466231-f0e2-45e3-8014-66456fcc7849", "indicator--a2affa9b-5499-4a44-a64e-4394bb0e80d4", "indicator--16a4c7c4-0111-4a98-9443-1ebe0ef3be3a", "indicator--0bbf2e1d-a6c0-4381-bf8b-a2a8088d5ee9", "indicator--36bc3fe7-75cd-4ad3-b2ad-c2f3f5d5bb42", "indicator--366b3d05-277e-43f6-b6f7-b5fb15b14136", "indicator--e8bb268d-6252-4747-9ff8-2f56a794368c", "indicator--cbcaedec-6a42-462a-949c-13d76530f4db", "indicator--5d16d2b8-d5ce-45e9-bb25-ce619c41ae88", "indicator--beeed883-705e-4881-8078-3693c92d6210", "indicator--8eeea2bf-0e67-4b8b-8948-059bc49e9acc", "indicator--0d90f2c9-fd12-418a-8d32-4c0428e92312", "indicator--4200d17b-9485-4e00-b09d-bfa0ed67b070", "indicator--98ab5311-1d9b-4e61-8ff1-38db76ac3afe", "indicator--4f0c9f5a-a5d2-49f2-a6ed-2b32c1eb5e2b", "indicator--114e630d-68e4-4801-9f9c-db0d503ef16d", "indicator--c075a356-4ee2-4e2e-a214-cc25dae7d6d3", "indicator--d67c2554-ebb0-48a5-8a2f-73a4970f7019", "indicator--3b2afabd-2000-4a3e-987e-586e0b7098f7", "indicator--6e8505ad-44ca-4560-ab7f-846e581e94c9", "indicator--76fac808-e9fc-4600-8ac1-1008efa5bf67", "indicator--9aaa1242-c4d1-4f88-aa35-951206f9d331", "indicator--7cad7a47-2c2d-4c71-8b89-5ae9ddf5c3b5", "indicator--848b1b3e-e440-4280-804f-57459b30b1ae", "indicator--6a5c402b-ee9f-470c-8f2d-3f0eff9820b2", "indicator--2fa67b4a-c06b-461c-a01d-8afc6991c4f3", "indicator--fd7ae577-738d-4f40-926e-6e376de8245a", "indicator--c1fd3616-5c89-41d3-918c-32fcae55c2cc", "indicator--8088732a-555e-4977-a981-694b997a9391", "indicator--ef5b83a2-6124-4b8b-9006-23ea30c7168f", "indicator--98d76245-8585-4ed3-bdf3-de7ce3e1c665", "indicator--914a3fe8-3738-4709-b183-c8e7a8396d6d", "indicator--7becd405-4a9f-4e27-b678-0827c09dacf6", "indicator--d2c03622-0a48-469e-a963-515aeac96e14", "indicator--56d9b36d-cc8d-43d5-b2a1-15358ff8c054", "indicator--0143a209-f2f6-44ab-b72c-bf84e2180857", "indicator--88a5d84e-ae39-47bb-b315-e54183a1e1c6", "indicator--ddfcaa0b-f3a3-4570-8bf0-69c2e9c3d6f7", "indicator--e0da0a16-982c-4990-8efd-0f2060cb5adc", "indicator--4ed8d49b-6cfe-4c0b-8f3f-2a52787505fb", "indicator--1cca5533-1167-48b4-b9e3-8fafd2fc6db2", "indicator--1203653b-f774-4025-ade8-ea1672060add", "indicator--f92838c8-8679-44af-bc0e-1268526a76a1", "indicator--375c4356-2995-4a9f-a982-f48a79b3555b", "indicator--2fabf988-63e8-47ca-a4b9-530064d976fe", "indicator--88b788d8-f59f-418b-8a4f-b492e3598b61", "indicator--a94260e1-f232-47cd-a29d-3f257eada804", "indicator--be25906a-632d-4c95-b5bc-5b802d25184b", "indicator--9eb49675-da1a-473f-9875-0a84b10873cf", "indicator--d963cb8f-6ce8-4e3b-a9ef-ce79f2e3c3f8", "indicator--0c0f4eeb-7b5c-408b-abbb-9675b9edbac6", "indicator--5ccbf480-f9ca-47f7-a4ae-a41aa924d42e", "indicator--6a29d385-85de-4873-acb1-898561178fea", "indicator--4408daf0-8e7e-409b-934f-0c2184ef9271", "indicator--37ec3bc9-9e1b-497e-aee3-d167c5e16be1", "indicator--8389c23d-d08e-45a7-afdf-e563de3fd0d8", "indicator--2a44649c-77d0-46a7-9691-5e2060e6e30d", "indicator--659f72b1-df7e-4549-9de2-42ac4ca69365", "indicator--e891bef4-4661-4f27-ad4a-83acd1bba620", "indicator--59e76f65-be6b-4bbb-b166-16d8839c7be2", "indicator--8ff9b6c1-011f-4674-802a-c09352102482", "indicator--78a28ae8-676b-452a-88d5-401095ebc250", "indicator--ea4e4bcb-93d6-4812-ab47-70f8193aaf26", "indicator--dce7b0bd-24b0-4b34-b5dc-28d9ebeb6000", "indicator--e89829bb-8c6d-41b7-85d8-664d39c65b29", "indicator--8a8f0adc-a1cc-4fb1-8ae3-a02bbf29c442", "indicator--ab4287f1-6816-4638-8922-5817ae6e2eba", "indicator--cf47f45e-3f2c-43a2-b050-6c8096e2b3f0", "indicator--ded86f7b-686b-4d06-a094-2557e9c37e6c", "indicator--f8ce94ca-e6e4-44a6-98dc-4065163c0a3a", "indicator--d251f18c-597a-45bc-a44f-6a08a072bb1f", "indicator--183ee8b6-6f11-41af-a35f-6c2d580392da", "indicator--11d0c00c-59ce-42cf-b2b6-084cf79dbd95", "indicator--dec884bb-1871-4d8a-97a6-75f5bf898999", "indicator--f79a0f8d-cf16-478f-8014-c4e69bd18746", "indicator--3667abd1-e9ba-4e84-a805-bcd19f9590f6", "indicator--503e37b6-ab29-4c32-b493-181bba31ff91", "indicator--cd30b0bb-1e0b-455e-b19a-98be50f66d6e", "indicator--8050bb88-7b4a-40e0-8ab3-0c9fec591918", "indicator--e7d03808-df27-4ec3-9073-08406527b7e8", "indicator--54896786-c0c8-4d54-8eba-1db3e2c03157", "indicator--fc9abf08-a6da-4303-976c-1b598e058e36", "indicator--93436f62-0287-481f-b11e-f5a4ca07b701", "indicator--3a72200f-70ca-4b2c-99e0-118b95b215c2", "indicator--0045f65f-068e-4e1f-86e1-7f118c77d9b6", "indicator--9995649f-092c-4767-b1e0-2baf09b5ab3e", "indicator--a2f91465-3ff8-46da-8da8-6db1833759d8", "indicator--d50f7de2-86a4-44b9-97d2-6545be89d2ec", "indicator--7fbaa366-ea11-490b-9239-fcc8289d7d37", "indicator--cf255e88-08e1-486e-a1b9-03316da50af9", "indicator--188a6c8f-b0dd-4c14-91ad-2f479b3ae9fd", "indicator--c16fde00-24c3-41db-89d8-41efebbd2d5f", "indicator--c69e1bb9-a73e-44d0-b24a-13193d612f9a", "indicator--c4578c1f-1f28-44fb-b2a1-1819b9da576a", "indicator--a2e846ff-7cc8-4363-927d-2c32ca794775", "indicator--9701819c-ee1b-4333-865a-acd267d2439c", "indicator--0e77d785-4d44-4f02-bc98-6b913c3e5bed", "indicator--0c5b4584-fe25-46e0-b826-e4b271f3ca83", "indicator--0b0d53ae-1371-4eeb-bbbb-853730b765ab", "indicator--664a0ef1-cec8-49a3-b455-cf3036aabc2f", "indicator--8423fa82-c9d0-4d9f-b4ea-6013b701cde0", "indicator--084a711b-ed7a-4717-8d4c-59208757819f", "indicator--018d83d9-12f7-4416-967c-9bceed800c97", "indicator--b4518e76-905e-42ef-bcfe-f4ae244598e8", "indicator--fe9cfb00-0172-4d2a-9568-50697d6e5cff", "indicator--61548227-2041-4c8d-81b3-9dcb8ed0e33e", "indicator--466ff925-3e08-48bb-9346-192190dcea05", "indicator--e1944d45-1e9a-493a-9400-bf331ce08933", "indicator--c5fcd9ba-b229-4252-a7c0-e4734058512c", "indicator--0477ac87-7521-44ac-8cbd-71d253e673c9", "indicator--68ae6f42-1801-4e86-b4a0-c41ea776fb9d", "indicator--d16aee17-5a2f-4b2e-8873-c6923852f524", "indicator--cc49c30e-7863-47ef-8bc6-c430864b9c54", "indicator--9531100c-a04b-4363-bc6c-6fbd8ee955be", "indicator--b3f7e8d4-a902-487b-87ec-f78794f5bc1e", "indicator--faae5a17-0bae-47b6-85c2-bb74d6d05ecd", "indicator--78c0c6f2-2e14-4ed3-a3e5-b9c8cd0f2528", "indicator--71ddbd22-5023-4222-bc63-a9e4addb62b3", "indicator--9bc52da8-dc61-47ec-aad2-e82b5cf312b6", "indicator--77579c37-8952-4110-aca8-a03e3d9d8e8f", "indicator--3521d435-ded5-4587-81bf-3fa01af8f0db", "indicator--812a06cc-e558-41b1-9e42-7c20f4c9b00e", "indicator--899fd7d0-7c7a-4c70-a7e3-76005c0dede8", "indicator--d7963b08-dfff-4b0d-9a37-f7251827419e", "indicator--d32d9b53-3ae2-4a16-b828-5678186a65ac", "indicator--11860a85-6a91-4468-bdcd-204e8080eef9", "indicator--1af6428b-a56c-41ec-afca-851d4a32a2df", "indicator--6b7ab6fd-3667-4357-87dd-55ce7d6ea39d", "indicator--c32bb710-b63b-47fe-8956-fd56614ce374", "indicator--520d3cc0-bda3-4767-aefb-c939662e2336", "indicator--eec4e86f-6a21-4281-ad6c-1c7580f0ffd9", "indicator--a9659125-00c6-4576-b0b7-cacca466709f", "indicator--1bc68bbe-faf7-420b-8278-8932802ceea7", "indicator--5bf4041f-84f3-429d-9ad8-8606259c8251", "indicator--1f396885-533e-4415-b8d9-22ee95687be3", "indicator--2405c083-a13f-425b-880c-ba6cc6ea381a", "indicator--482096f3-a136-4e63-9d4b-34ebe6fa2b49", "indicator--4b20650d-2040-489a-a675-86b4841a2075", "indicator--86fa390e-0fa4-473f-896f-608122810cc2", "indicator--27f812a1-41e6-47b6-9d58-f06827804198", "indicator--88b30a28-fa2d-418b-89e6-bf0366c125bd", "indicator--5d9aecd5-7373-4f06-bb36-ba453f315ce1", "indicator--bd232045-1f39-46ba-803f-065b91d11bf0", "indicator--264dccef-9cec-4558-a768-0c2115a7728d", "indicator--1a55e3d5-b7a9-4438-b50d-c84d4b6f716b", "indicator--3bc9c3bd-0702-458b-a552-b4a3d86495da", "indicator--235d321d-10cb-47f8-88dd-bffa6e46d056", "indicator--d5bd4418-3eb1-4fb1-8fe0-bbc5160d1e6b", "indicator--b617eb4a-157d-4712-9d54-b358d29f38b3", "indicator--8953c386-ade0-49bd-b148-0be547c2cb6c", "indicator--e3f75330-8dea-45a0-bba0-4a775edd17b6", "indicator--7e15f3e2-84e8-4b4b-8bc3-09604ed5bdb4", "indicator--5d1e51cc-2c3c-4587-9a06-e1ce80ef4c41", "indicator--10198ce0-049b-4796-9e61-0b420b00ec17", "indicator--d2ed3883-d979-4923-bba2-5e2da0c6bc0d", "indicator--6df80489-95a9-47a7-b378-5654f3025419", "indicator--84797e8e-7e22-4812-87f5-ed6aca7f018c", "indicator--07ed8f62-936d-4dec-b4f6-66f061eea7fc", "indicator--c2f68693-2214-46ae-a2bc-45fd986e960f", "indicator--af50aacc-7b47-4711-a0e3-20a1a7a58d04", "indicator--04912255-4745-4eb9-9920-34aa131e1f50", "indicator--5eff8521-9f25-438b-bdf8-c10c9ec36d3f", "indicator--384670aa-2fe6-4d5f-a724-4788f09d0eab", "indicator--30d463fb-bb1b-468a-b3d8-cf8de0441c75", "indicator--3b9cb483-ae03-441f-bbda-add63e94d480", "indicator--1942e4eb-13ab-4377-8d7b-38166b0fb099", "indicator--6e73bec2-d161-47c8-96d6-f5b5dd04c98c", "indicator--7cebeafb-7812-4215-822e-cdc010d5bea2", "indicator--d663c023-f9d3-4b62-b4c1-2990a7a3d08d", "indicator--56864321-1398-456e-bb24-34e92377c423", "indicator--8a636380-dc9e-416e-a53c-da93a183d7a5", "indicator--c33365a0-638f-4559-a0ee-3c2272df2fe2", "indicator--b1fe4ef5-5378-490d-abcb-bf2cd1b02e8e", "indicator--563141ed-63e5-4310-8007-81d487bdf7f8", "indicator--46979046-91ae-4084-97bd-5d2ada02571e", "indicator--0142994c-0d08-4f6d-b5b2-936745b7fe0e", "indicator--55f63b01-c297-4e43-a6b9-0bccca8cd9d6", "indicator--cff971a9-b4d9-4815-9b7c-6ecc92b6a6ca", "indicator--7e520c6f-2caf-4512-beef-7165f7433911", "indicator--8da70745-5438-4fbf-bdf5-d90a97222d17", "indicator--464d7fa2-9abc-4e89-8b44-9e87e4fde2e6", "indicator--e3a5fbb6-0253-463f-b664-dacabf62ea72", "indicator--73a8140c-6e02-4c60-8864-4e5cd0939506", "indicator--768e42ce-d003-4b27-8baa-4c0a2e0a93e9", "indicator--4b05ca5e-2e4b-41a3-ac1f-c78cf88369b5", "indicator--4ec22bf9-347f-4c83-ad84-e60a852e20d1", "indicator--e16f73b2-cd8a-4f59-a5fe-d79fc34e70c1", "indicator--6688fea5-99f6-4459-a603-a16a92deacd9", "indicator--71387ad4-6fba-4a5f-9d0e-6f70072cf434", "indicator--4bc5935a-8fe4-4b9f-89d9-eeb06e1ecc6d", "indicator--1f5e77bc-9a77-43e7-a252-951e105a359e", "indicator--13cb9f91-a114-43cf-b53e-3bf4c861c7ff", "indicator--4466f0f3-56c3-44cd-b9d7-d3f49ebc744c", "indicator--cf4db7c5-c0ef-42df-93f1-dadfee0b3c6c", "indicator--799c273b-b99a-4a73-b372-1898b0da76d8", "indicator--13e9fb15-4d99-46a3-8ded-fbf0fc4f8502", "indicator--9277b9e7-48c6-4a38-8eff-f3a03bd199d5", "indicator--956ab404-33d1-4c68-814b-265aebf105c0", "indicator--00d8ff06-7021-4d85-8289-4a34abd64410", "indicator--0a66e042-91f1-4367-a51d-be4053c4dc8e", "indicator--95ccd6fe-f909-4e99-86cc-c0bc15f0c48e", "indicator--03fe2572-34f2-47db-89eb-62b94d0465d1", "indicator--4f121a6b-3b4a-450e-9738-89f1661dbfcb", "indicator--d326deba-a56f-4ef4-85c4-9603c84f0322", "indicator--9e31f432-22e2-470f-8428-e7173a0ab64d", "indicator--f38ab8d3-2938-4ff1-8fa1-b9c2e53eb1d1", "indicator--f1566bd1-0980-4d43-837f-966da266e446", "indicator--216e4dd6-a7b4-444c-ae9f-13dc5d8f1e29", "indicator--0d33cf1c-3552-4457-8e70-eccb43be29e6", "indicator--7c4eca40-ffdf-489a-9452-604265faa9fe", "indicator--01e21f6d-6698-45ed-a68a-cf87f980bb64", "indicator--e7f4624f-0fe5-41c4-b5ee-cf6f054fcf0e", "indicator--9e3351ce-0fdb-45d1-9ca8-ad89e20cbf39", "indicator--9dc46848-6cf3-4546-a00e-4ef049409fca", "indicator--4cc8091a-39eb-4d11-afee-30d94a2ae792", "indicator--0f3ce12f-cf56-4c1d-9d04-348bd5702c67", "indicator--90370f9d-a8b3-4483-8d17-a7e87d7bcd81", "indicator--e72be471-ed33-436f-909f-886b68c39f08", "indicator--57e115ae-127f-4e25-a4d5-ba020a0aa5ad", "indicator--51b254e9-dcf7-4b96-b02f-0bb6d5503912", "indicator--1c4863e3-e3c5-4f8c-9d84-cb5d71ee4e76", "indicator--bddf30bd-84f2-4a08-91d2-9a559f2cf36b", "indicator--78023b5e-c073-4882-af05-845917f51a95", "indicator--2de6dc78-4e7c-49f5-91f1-e7e73ba0f283", "indicator--f32a08cd-cbc1-4716-abb4-597ee87f7b7c", "indicator--e4027212-d451-4546-8b83-636b16b71316", "indicator--3c3a5dda-a469-42ac-85e2-8ac4417c70eb", "indicator--d36ea88f-e475-4620-a26f-c175b8669867", "indicator--2fba78ca-a8a5-4be1-bdfe-0db86d509485", "indicator--ac3c5573-2d1e-48b4-90e3-8e026b4f88e0", "indicator--44d8558e-07f4-4cfc-8572-e685b09c021f", "indicator--842a7e2d-3cc4-46fc-be36-42cd0ff3877d", "indicator--58d2484e-7cca-43e4-b9ac-2b27ab7c2618", "indicator--87acb9ab-ba6e-4cfd-a3cf-291628c51a56", "indicator--52ef1dc9-723e-4630-b51f-0fb410a6836d", "indicator--d7010a5a-d6da-4535-9647-7aed041fe80e", "indicator--f5abfc15-11c1-4e96-8569-0fe059dc4dfa", "indicator--808e96ee-965d-457e-afcc-71880ea7781b", "indicator--518ba04a-952f-4ca3-b743-f1a7df4e6a23", "indicator--3a486dfc-a7e1-43a8-944d-ad523705d260", "indicator--a1a8fcd3-5ef8-4627-8316-d175c7b42cc5", "indicator--9795dda7-8d9b-4b40-bf08-4be04372d994", "indicator--61730939-b21d-488f-9dcc-01c5f77872c7", "indicator--fe7d291e-c661-41f7-849a-566e5bb9d245", "indicator--4d703b33-bccb-4121-8745-e73927a61999", "indicator--98759f96-a5c9-4f50-b135-3f30ad217882", "indicator--1d468407-6d96-40eb-83b6-f136c284d0d0", "indicator--f7ea2cbc-67cb-4b57-bd9e-639a85cc85e9", "indicator--909b7f2a-490b-4520-9bb0-6929d6f7bfec", "indicator--b592d269-2ab0-47dd-9a4b-f7e3288377f0", "indicator--88c176e9-a62f-4eb5-b838-c03e9f86207f", "indicator--1d1e8359-214f-4f73-bd40-48e6d4dd770f", "indicator--7f1e7b43-e808-4ceb-aaf3-779878258a14", "indicator--caeb2426-d397-434f-b91e-8428320a1ad5", "indicator--5ac56a2c-8a09-400e-8777-1c6090a6e6c0", "indicator--490875b8-0f29-40c9-9f78-86de4ea9d2ba", "indicator--5900b573-2d13-4edc-a479-6b88f0279001", "indicator--fb322bc0-6025-46af-af28-e80bc5275687", "indicator--a71654a8-0451-4aa0-bdac-7dd255756caf", "indicator--f89fef59-5047-4ced-9976-2beadd7e4a30", "indicator--0457f8a1-9920-47e6-923e-c9d37d53734d", "indicator--c3973e96-fb98-4f8a-8f8c-4a9313fb6b23", "indicator--7a50c86a-1ff2-4fd3-a7b8-6db6e0a14dad", "indicator--d4441beb-9832-490c-83a4-0c3e72311fe1", "indicator--6f6a1c4c-9c6a-45fe-899e-05df4e058768", "indicator--038d528d-c399-4c70-ad4a-95737fc2c8ef", "indicator--49669c1d-201d-402f-82c7-bdf03496e09c", "indicator--bb2f4933-a8c8-4f6e-86c5-fba05d9a3fae", "indicator--087fb005-5f76-4985-a82f-c43dbbb89b6e", "indicator--79899239-db72-472d-b343-d17cf80f6ffc", "indicator--70932f78-bbc0-49d1-b4a8-ff53d9fe6462", "indicator--c229e986-4b01-4b21-aab6-22814700bc7f", "indicator--6e6947af-26e3-4b71-b794-b8de127a33fc", "indicator--67b94ca3-aa46-45c9-8b57-872ba11a17f1", "indicator--02250828-7c50-4e94-9ffb-aea0dc56c826", "indicator--6f06ad3b-8146-4a33-95be-1e276353c12e", "indicator--0fdef3dd-e3cd-4c07-9bdd-81f7227d2c74", "indicator--392ad526-1ddd-4613-a910-32c0b1a7e6c9", "indicator--6b08c677-378d-4f93-903d-55f937ff233d", "indicator--1d86abaa-4a77-4aeb-84ca-b8fcdf3311b8", "indicator--d528f38d-a578-42bb-a0cc-31a07f785f79", "indicator--b9d1f338-3269-4e4a-bf1f-73d1c70d9c74", "indicator--b3cbe0c6-e87d-4462-8f69-36ffd91d2a03", "indicator--cb6cab8d-71e5-448e-a5ff-88139399e203", "indicator--df2ff629-a372-4ef2-9dc0-faa53ad64cf5", "indicator--acd6a37c-dba1-4673-a7fa-d23a0343c35b", "indicator--88b90443-cab6-46dc-83dd-b45eb2839d27", "indicator--b1910e29-5aea-4671-9399-a29906d9ff80", "indicator--cc4af55e-322f-40ec-96b0-a4631e58b2b5", "indicator--be8ca97f-6629-4c86-be6d-329cea0381e2", "indicator--08e88893-6aa5-4a52-be7b-7881f02f9760", "indicator--6db2ecc7-afb7-4067-bfff-126efe0338c0", "indicator--58504c36-bc16-4ee6-8676-bd73d7002c42", "indicator--517c4786-a6a5-439e-8911-baa10bfb993a", "indicator--2fc6c201-e4d7-4578-bf3d-680d7fb5665b", "indicator--19d07883-a4bb-4577-9adf-6ca0931308ad", "indicator--353309ad-c848-4ce5-965d-d7e4a411c5cd", "indicator--80a85199-fab7-4609-b6a9-e013729d6c06", "indicator--a4f1ed59-b391-47db-ad1b-f3782931e4e9", "indicator--e8aa067d-2bee-4163-aeba-f20e8bcf44be", "indicator--261086df-dd9f-4207-82a7-390e7d4c0451", "indicator--fa27a925-c47c-4e7a-92b9-05b50b022633", "indicator--9bba31d5-5f68-4258-9a9d-ddc12457f768", "indicator--14c56cdc-558a-43d1-b1db-b2bd4ccfadbd", "indicator--ffeaf2dc-9412-42a6-bc1e-568d9b10b7ed", "indicator--50cd559d-9078-4b8b-a10d-9f87324d9cb1", "indicator--96122006-be61-407f-bda4-ce63317b73af", "indicator--61427bad-773a-4f91-9534-e5600535bce5", "indicator--9f0417e7-82e5-4522-8baa-4bed63b5f5ad", "indicator--e655b36e-e524-437f-ba31-b5acd2d4b1f7", "indicator--3266b255-94e2-41c4-b74f-7e61dfc99cbf", "indicator--a26121f2-9bc3-4551-9883-3c1723dcc0ad", "indicator--73c5f557-1c29-41e7-8fbb-2ba49b26a7b8", "indicator--30e9e481-1a09-4589-95d6-a1a090e2972e", "indicator--241d6d3c-468b-4ca1-920a-b133ef6e0313", "indicator--134f2294-2a5b-4c12-8576-b7f124f832a2", "indicator--bc6e7196-68d9-4fdb-90d2-c32c4708cc66", "indicator--91ff06da-f182-4741-8286-bc333f082ef6", "indicator--dc1f6f2a-c8da-473c-a236-f0be202b2501", "indicator--ec22654e-dfce-47f0-8437-06e3b49192af", "indicator--4176b9dd-5d3c-4fc3-a23a-9a1dcaf16401", "indicator--7c5c551e-2369-46aa-ac96-9d0b2cd14b3a", "indicator--99091fc8-cfe4-4f48-a0ca-64ac26647e45", "indicator--b11307f5-d653-4227-8b4a-cc20cb18733e", "indicator--966f0a1f-a6ce-4a4c-9833-54f173a16529", "indicator--f4075485-61b0-4fa8-b203-0faf492a05d0", "indicator--6fad1a79-7aee-4ed9-be6a-c8aec5af8310", "indicator--6a5bd03c-0422-4642-8245-08646827ba3e", "indicator--7c005b27-c1dc-43da-ae79-0688cb5d4443", "indicator--297740b6-d222-49eb-ab2e-87bbc116cf99", "indicator--27766d95-27a6-48fa-9305-72c84509386f", "indicator--297e603d-0886-4dbd-869c-01f86138cc41", "indicator--62fd7b8e-6160-464f-afdf-95d264334f0e", "indicator--2ba93277-6039-4e32-804e-cf9ddcbe0c73", "indicator--ec2c680d-7b9a-4a5a-9954-c835106dcfb7", "indicator--7ffb2d06-6fa9-48dc-aa99-1e5840dba814", "indicator--779c7c92-59e5-4627-adff-f4d57efb6ab8", "indicator--21cce790-6f66-471e-a03f-bfb4f2bd45b2", "indicator--8429e8b3-b127-4662-806f-5fbb87d113b0", "indicator--cfc97f62-ae96-4424-a71b-411d181a8f0d", "indicator--ebcc1e86-5218-4248-ab32-ee6d30d4aab1", "indicator--7ee80998-e290-46a7-85ca-ff8ba7a06573", "indicator--680d7170-5ab6-4dee-9af9-f2b0049e99a8", "indicator--08799733-9a84-4985-b771-adc0fca73fb4", "indicator--558c439f-fdb7-4f8e-884c-8038abacc260", "indicator--c3267b23-d386-485d-ba85-231e5bff360c", "indicator--01e05774-a92b-4d28-ab8e-7f096d7fd3b1", "indicator--a29d90be-525a-43b7-b23b-a210cb4ed011", "indicator--d736c018-2261-45c1-b54a-f0053bc59e95", "indicator--0fc364e3-b8cf-4873-bebe-d9501de9f68a", "indicator--ceeca1cd-5258-46b4-a5e8-50ff54157ead", "indicator--fb8fd134-db31-4799-94d6-88e3b9f47cd2", "indicator--946cd8df-fc05-4452-bd4e-df3688c2241f", "indicator--100e0b06-ab7c-4bc8-9b65-3cf37fac2cb2", "indicator--c44beaef-1ab6-4bc8-8eb6-d2ba8dcda6d4", "indicator--c8e2e14d-6120-4998-acd3-aac43bc7b5e8", "indicator--6afc956d-9111-4167-bfda-ce6073aaf542", "indicator--626a47d8-ef1a-40ba-b3fb-b458cf03226b", "indicator--ae37eafe-15bb-4c6e-91cc-b295c957d85e", "indicator--056e2700-6a15-480e-baa1-adae4f1b2c48", "indicator--12cfb7d5-f5e6-4779-8083-d8f3573b010e", "indicator--dcfadc5a-7b88-4652-b10c-5e84e3f30900", "indicator--c7317f4e-05ad-486b-bf21-e4bd79845952", "indicator--ad8df646-a5ea-4928-9587-959de970374a", "indicator--5f2eda0e-d76a-462d-9e07-7a436ea7aada", "indicator--a5ad1f99-5756-422a-82fd-17b04decabed", "indicator--a1351db2-5c35-453d-ac8b-116f68f84ba8", "indicator--2a31c636-cbcd-4a67-bcbd-5bee219926fc", "indicator--bd3bd607-9493-4f07-9dd3-29d725b34dc5", "indicator--5c4d8c94-050b-4896-b594-591b89493a38", "indicator--faabf62e-b30f-4e36-b3f6-2ec90109663d", "indicator--d2152156-02fa-4c71-a70a-2b6935890ffc", "indicator--d8af20ec-2987-4d40-bfd7-c5b7de96f2c5", "indicator--a40f41b3-0f1f-4e17-a40f-02499a99e054", "indicator--8f548598-07f8-4b16-8eea-42d5ddb1ce2e", "indicator--7303ad1d-82ed-4c49-b24e-c7d66a5c0024", "indicator--0d933612-17a6-4a60-9b8b-e73cb15ac932", "indicator--cc739008-c7be-46d4-bbfc-3f8054c83592", "indicator--c653620d-2f68-4d6d-bb29-436394d2b9df", "indicator--6b0d0cf4-fc07-4fb9-9905-92bf23bb0ea2", "indicator--162c568f-e906-4926-8436-659ab0e59350", "indicator--c7866b7b-9285-4359-b737-3cb9a75ec8fe", "indicator--daea16dd-77f8-40ab-a4b0-2d1ed2c8b4ba", "indicator--e97603f8-cb26-4362-8d83-95a841589217", "indicator--3ba09c32-9f73-4fe2-a46f-7700b112e0bf", "indicator--0f8b3580-c7f9-4b2c-b9be-892c5ab125f7", "indicator--dbddb2eb-c1ff-441f-a43b-1b59a0068878", "indicator--0e225c2b-0a8f-430b-adcb-4fc074d47a64", "indicator--2d5c5421-fca0-4b73-8430-87f767251264", "indicator--6a60de4c-e0cb-4120-aedf-ca3d319f8087", "indicator--4d3bdcd0-b0cb-4561-ba17-685cefede9f1", "indicator--25a044cd-c63f-43c7-8d5c-2063591287e3", "indicator--4f01fb8c-e564-44a3-846f-2240de46e19f", "indicator--9fe80bba-d761-4319-93bc-91c00d4a5042", "indicator--f5924435-eb30-4d2b-be55-03c2ca42f6e3", "indicator--7c1d8c28-f44e-4f68-8b60-38b1ab450e42", "indicator--d303b2e5-b2d3-40bf-b768-dd64335b3a8c", "indicator--89d9665b-3ee8-41cd-a9de-e4d0c66893d0", "indicator--8fe7c14f-0036-4834-820e-7902f8fe5f5a", "indicator--718606d7-fcda-42da-9163-1e0a0126c776", "indicator--c15fee04-911d-477f-ad46-0bd8bc9d8089", "indicator--28fed2f7-b516-443a-938a-8dbb025ab4dd", "indicator--fd701408-1a91-46f7-a905-d2ce0e55dd50", "indicator--dce1297d-85a9-4667-869e-8cbfe9d70c97", "indicator--2c75a90d-4762-4525-916a-5545466d21f3", "indicator--bcd25cd6-a779-4bf8-8799-eb2fe9a1583c", "indicator--d2c91eb4-2ee7-40ae-8bbb-be64cc38a2ed", "indicator--08167c90-e05a-484c-b1f0-783da50b4762", "indicator--0f233908-5c13-4241-ac5f-6860f39dc651", "indicator--f8ec18fc-4774-451d-a08a-9cf975f4a5e1", "indicator--b51121b9-6ea0-419e-a72e-506a71e2bbb1", "indicator--337793ca-b8aa-4a85-a5a1-58539ea324a5", "indicator--34a6a8bc-aca3-4abc-bd81-ad6a09ff9233", "indicator--f4b3b82e-e37c-4e6c-a89a-061422862b89", "indicator--febbef9e-959c-4c80-b395-39b8be80a51b", "indicator--8fdc1c66-a030-4457-803b-dacc42b60f2f", "indicator--72aa4b30-32bb-4d4a-bca2-e54399fc4d49", "indicator--35806cb5-794d-4313-b352-ab774b39e8eb", "indicator--4b2ed417-2cce-4ac0-a498-373213d72688", "indicator--0799c980-536b-4766-aa90-f5cfde27aadb", "indicator--38fb15a4-50a4-45ee-8620-df3a5b62e53a", "indicator--e98a3f2a-2bd5-4bb3-aa39-2f983d8fdb8c", "indicator--69cd838d-6d4c-4298-86e5-e90dcb9cb66a", "indicator--10256a8c-0424-424e-9e52-8cd148dc6b7d", "indicator--b53b0762-fae7-4fa5-8b23-fcd8c503d847", "indicator--e67da9ca-06fb-46bf-97a2-8421d55be849", "indicator--fe701690-10d2-4adf-b257-fb03f4ee48e3", "indicator--df47be1d-c25d-4435-976e-e92771a776dc", "indicator--37d37519-9997-49fb-86d9-ccdba8a1a12c", "indicator--d9c9ce19-2a58-4e09-a6d1-a646e272ff3f", "indicator--a8eb1e8c-7a49-474f-8a4d-01c2ab673007", "indicator--8dda83e8-c518-4dbd-af91-84204d0b60f7", "indicator--b8ec0526-08c9-459f-b11b-dcc148bf0029", "indicator--fddfb770-8a0f-4518-b888-a1c7c3c0bd65", "indicator--2262766a-3007-4d46-aeec-48981c747bfb", "indicator--99912d51-70b7-4bc6-b125-230a020e8bb8", "indicator--168b503b-c9d3-4484-93b0-73a83ff6750c", "indicator--f52d6d0e-5182-4be5-986c-2f82d2523a0e", "indicator--bbacdee2-46ed-4aeb-8ca6-b2f57a0ab1a5", "indicator--87e394f2-fbcb-4032-9b52-c2e2ab80648a", "indicator--f98ecc46-fe1e-4936-8f1b-533c96eccf8b", "indicator--4e18b12c-7793-4937-9803-1c7cdbd3cc0f", "indicator--80a457ad-f181-4a75-bfae-2fbc265269e2", "indicator--0fe84b91-357e-4f5d-875d-41de26b8c4a8", "indicator--a0cd5b78-4805-4671-a3ac-d5cb271aaf22", "indicator--f7aa096b-3aee-4edb-9f43-ad47433d900b", "indicator--12e69ae8-68f1-4caf-8463-51353d1e6eb3", "indicator--af76326c-6357-479a-971f-5799b27e5cd4", "indicator--e9aa03ff-20eb-4aac-a012-25f4b3062920", "indicator--791761b0-2a18-4d52-bb7f-22f65cefbd2a", "indicator--6e1df27c-5360-4f8f-bd31-133ed4dd7a5e", "indicator--62a334f0-df90-4375-ac7f-96781344d465", "indicator--b1b54f87-2edb-4be9-84a2-36ae6f7de9fb", "indicator--4e0c477d-f9ea-4bf5-b4aa-2bd3cfd5b79e", "indicator--18bb4853-4d10-435b-b28a-452b26d02890", "indicator--d675cf6a-e6af-4a1a-acb2-a327342fb560", "indicator--54d661ad-80ff-4091-a2ed-19434278d7dd", "indicator--0640ef13-f606-4a4c-910b-a4dff5d91dbf", "indicator--f946bbbd-2416-4e83-8096-66e2e3f70b10", "indicator--d36178b5-6332-4c9b-88ac-a9bff22109c2", "indicator--94f6fbb7-c078-41b9-bef1-56300b89de06", "indicator--aabf5d62-d87a-4341-8691-14e89ee36375", "indicator--eb89d638-b036-4424-b250-467903ce6170", "indicator--53c398f2-6bd1-481e-a521-5a44a1e85ae2", "indicator--45610b72-3b0c-46f3-92b3-60bed43abe1e", "indicator--730eccd0-ca76-40b5-afec-512ab6af300c", "indicator--26005e0e-cddb-4e1d-a8ec-8c982fad142c", "indicator--3d4ff83b-72ae-4bf2-89a4-8b3b12eeb0cd", "indicator--b4f9a53f-728e-4a96-b853-cb55c4663c37", "indicator--18608e05-d51e-49e8-bb7d-97f8ebef39d1", "indicator--8ec72e71-a2d3-4a64-8ae0-d379dbb7181e", "indicator--a3a9ee67-e18a-438c-86d3-1e7315e2c92b", "indicator--f1a2e014-6b88-4b29-b24b-92903aaf2574", "indicator--94a9d774-ec98-49ad-a9ff-1071208303b8", "indicator--460e5a7a-727c-40e4-a402-89a3fd845e7d", "indicator--d3c09ee4-49da-43fb-bd1c-631df49715fc", "indicator--e9d72cb7-f31a-4734-a46d-cc5f9750d8cd", "indicator--d0853259-0eb9-4da8-94c1-7e942825262c", "indicator--9bb32900-37c2-4c25-b400-b618962ca21a", "indicator--e69ba3d7-0eb4-41fa-9911-6503d5cfe454", "indicator--5886a890-cf3f-44c6-b658-15f898fedcd4", "indicator--5233b7c8-acd1-441e-a159-37ae5cac623f", "indicator--6a70dd5a-2e98-453a-922c-9d0313bc8dec", "indicator--b72c3e65-c4b4-405b-9938-a218bc769475", "indicator--48d79b02-df96-407f-87d3-47b49eb8c7ef", "indicator--fc68a7d0-94ae-4d35-b70a-5c736f8b9bea", "indicator--5dcfd407-02e5-4ad8-97a1-29a9364a9778", "indicator--b3e888b1-7d3d-4e68-a001-449df1c6f5e4", "indicator--1b8d8782-a84c-4813-a80a-d6943574bf47", "indicator--807b39b3-1cf6-4f7a-b068-389cadc88cd8", "indicator--6eb19f1a-350c-432b-97f5-2f36d6acec04", "indicator--5e32d8b0-8ca7-4727-8ffd-5927747cf7c4", "indicator--62d02558-42bc-4a93-a3f7-76acaca42a5f", "indicator--7384fa91-7454-41b2-acf6-7510626c57a1", "indicator--06f440dc-a3aa-401a-972e-e310582a6ac6", "indicator--45ac8280-cc4b-477c-a935-a228b637255f", "indicator--311c98ab-6b5d-4c0f-83bc-cda2ec13eb69", "indicator--8129a5d1-d015-46cb-a435-8a9ffc310990", "indicator--aae9827f-9e30-4002-b3a4-58823aacda0b", "indicator--ce50ccbf-9cef-494f-a23b-a1dc47612dac", "indicator--204f3da8-13c3-4179-9a2d-100e4c8425b8", "indicator--9cd733da-d3e4-4359-8663-3c83b42c84b1", "indicator--e0423f28-450d-4b52-9202-f4a1b134c4a5", "indicator--b103942b-d7f7-48c5-ba6c-ce0b57253d86", "indicator--8dcd5a9f-970e-4352-8b8f-e116b5b40337", "indicator--d6e06c30-a911-409c-b882-80a742b48450", "indicator--252aad4e-af6f-4b8d-9291-d26c6eff44d2", "indicator--aee15814-0353-49cf-97d2-d3c58929e66e", "indicator--df85ff4f-56b0-4757-930d-bf58bd0890d9", "indicator--7ef1b95a-8a88-486f-8867-a5a511173601", "indicator--a65abcb5-7f04-4871-9501-a34835837952", "indicator--60ad8d17-30e9-4c47-a454-f0359b62fee0", "indicator--2ca39f80-55b5-4792-9da8-37212488d20f", "indicator--b81770db-30af-4b71-9957-3979fb40e7fb", "indicator--bb33a070-2bb3-4c6d-8255-340cd3912459", "indicator--dcd088e3-bd3b-4587-9757-bb5421cadc77", "indicator--806679fb-0990-43e3-aa6c-e52ea7128d77", "indicator--91f2eacb-4f41-4e03-848d-3890bb61fef3", "indicator--5e023e66-431d-4223-94b3-d26cf3ef9dc2", "indicator--eeed18c4-8ae3-4afd-aaf1-0b0995e0e37f", "indicator--9575b20f-953b-4487-adf9-3cf29651a9a6", "indicator--bfd61488-8fd8-4afc-9d2d-0d8e30957591", "indicator--7ad24410-45d9-4c1a-9ee2-f5c1d9d5530c", "indicator--52ab0b28-fde4-4312-9939-585dad78f0c2", "indicator--11ecd42a-8bb3-4d32-831b-88dea2bf6eb8", "indicator--3ae39f68-611a-4c73-b9d8-a20cc406dc02", "indicator--071ec3ec-5dbb-44e6-b6b7-540cc0f99385", "relationship--db914718-59ad-499b-94d3-29c00fcde47c", "relationship--842fac0e-81eb-4cdf-ac62-b4dae130d847", "relationship--8e3bbedf-a1b2-4d6a-a833-8a56d0834bc4", "indicator--b94e8c27-2cc4-4a68-a26b-b02116b404e8", "indicator--444a0a87-0d4c-417c-83c9-2641f141d246", "indicator--528f4801-47a1-4ab8-80b6-98365bb74372", "indicator--2e7e7800-db83-4dac-93c1-a14abf9385dc", "indicator--361adfd9-762a-4195-a597-b04faf34000a", "indicator--3076384b-c64c-4620-9eb4-6ee806dfd33a", "indicator--0c9b882e-ddeb-413a-8d49-b8546f592aa7", "indicator--b884aeb3-2687-46f9-a393-dedbb7d293d7", "indicator--82e13786-9be4-4581-93e7-2920192f2c4d", "indicator--529bd8e3-bf4f-4cdf-8dfe-ccca1ebf8b68", "indicator--8a0c86f3-335b-42ba-9d93-c529023d62e1", "indicator--c70df7b1-9538-4339-b7b3-505df493b9ec", "indicator--eaee5c14-a1f2-4ab8-914b-56dd40d9a3f2", "indicator--0d87e408-2c4c-4d27-926b-b1b1c7142b5c", "indicator--fe677f09-9d56-4a83-84bb-506f4f880871", "indicator--30209d76-feb1-4acd-95c8-8009d3a23c52", "indicator--6c00396e-4843-4c3a-acf1-47a8bbb9a59e", "indicator--4b658fd1-fb9f-4e5c-af74-4ff260b05ce5", "indicator--9c5275c8-e3be-4938-a171-f8d1e4eff0e4", "indicator--310111e4-d4ac-42b7-b496-4c6050eb2bb2", "indicator--db8cec5d-49e5-4714-bb72-3f9be00e1365", "indicator--ec762704-d927-4f91-9f9a-e45691f20a99", "indicator--add900f3-cbef-44e5-a3be-78d5cfaf9918", "indicator--5c6a2f31-f80e-4a3e-b725-9cb4ac1c7369", "indicator--40736c60-3c44-4369-b3dd-4184e389762f", "indicator--d0ee5113-5699-4e48-aaf8-7074b431e267", "indicator--961db625-39b0-4dd4-a844-205437385dec", "indicator--b7f31bbf-ebf8-45ec-883f-a8104b83e003", "indicator--139a3658-8e49-483f-8e4b-5d901088fa5e", "indicator--6ab31201-73db-49be-9c04-8bb68144e851", "indicator--d505d833-43ad-4c93-8b19-4a4e8e11ef46", "indicator--4324f960-0b1b-4d06-91d0-1d0f0d0d89a1", "indicator--af11a67f-e2fb-4840-96f4-900445e2aec8", "indicator--a5cb73c9-1fd4-497c-a6cf-fd064487ebac", "indicator--ece709fc-11d0-4e26-bdc3-37d7d0f49b82", "indicator--bea38052-5515-4b5e-8630-07679b2c02e8", "indicator--dd902a5c-8206-48b8-bd21-bfe68ed86b17", "indicator--94aed6d1-a382-4707-8450-8209caf6ddcc", "indicator--e3c633b4-325e-44c9-bf46-5ccad3ecfafe", "indicator--98e36f77-d061-4f4a-a757-62bc818dfa84", "indicator--785ad1a7-8d2a-4df6-826b-6bb4e7ea1b0f", "indicator--d84977b3-308d-41a9-93f0-1d82e7dd2d80", "indicator--10453024-c8e2-4d41-a71a-7b79f0367c70", "indicator--36f4a759-4462-4319-93ec-2a76f27e6db1", "indicator--df92c2e7-7090-4995-a015-3762b979f9bf", "indicator--c7f0d5cc-f8b9-412c-a417-88423722f5a9", "indicator--6af6509b-0df3-4a3d-904c-cd8f38350a41", "indicator--0c846180-b8bb-4641-806c-e3211b83223b", "indicator--66be6180-5b6a-4c2a-9ab6-dd026712a05f", "indicator--9d5f1279-f5a1-4809-9656-7677244e55cc", "indicator--8d85336a-97d6-4719-8fc0-f7d7cd35f712", "indicator--5ae9946b-8bb4-48e8-bc39-64de5632de86", "indicator--5336d149-602b-492d-a3f2-59cac10b5530", "indicator--bbd4dafc-6846-42b9-a230-f12c5ec00a0c", "indicator--99100345-84db-45c8-92c0-1d4060a846d3", "indicator--ccf1fe3b-212a-47ab-b035-3be264d3ea5d", "indicator--c1cdc627-8284-4d9b-86ed-31ecd6dffc40", "indicator--6b703e1b-b97f-4fbd-95b5-058f75dd7c0c", "indicator--1642bd62-4a15-4005-aeb2-e1fb95f49195", "indicator--36e0debf-226a-461e-b5f8-e47fdf92fae7", "indicator--df8efbd3-a00a-444f-8880-ffc294e663f7", "indicator--d42cd7c1-9aa1-4a48-9c79-069d4bc51427", "indicator--628b50f5-1ed4-4ff3-8521-96a700fc5c9f", "indicator--31c61681-90fd-490a-a560-d1dc8f65f168", "indicator--4bd15375-6b41-49d9-8896-53cc753acf3f", "indicator--48fdf4a1-8419-4079-9646-4e2e448f56ad", "indicator--0e34cb59-df0c-402f-b9ca-473a29197665", "indicator--0d9698ad-0c70-405d-a3aa-0fd2ce802702", "indicator--6373ef12-531a-4ab4-bc61-67d2adc75d24", "indicator--356b9e26-3178-4d02-ae59-694cd344969e", "indicator--86259bad-4a48-45ca-b488-e29a5d5f8c87", "indicator--a4c95ef3-41b1-4916-97a6-ce0b90872f19", "indicator--2bb1bb04-55a9-4c9e-be0a-e4237c066b53", "indicator--8dfc59be-825d-478b-8871-65e1e0616d77", "indicator--c35b3e99-7d49-4dba-986f-5e865251ef9e", "indicator--198b6f43-d3fa-49e0-9339-c07d82a8730a", "indicator--e396742a-5389-47b0-adc0-2dd79fdaf56d", "indicator--0364cb0b-2fa5-4186-b824-6f48962b1d1e", "indicator--ebba5bd3-d211-4a44-96e5-9f66ba458383", "indicator--8a500a59-7e6c-4a10-9795-f4e861d2a633", "indicator--a9c5acf8-e510-4976-94d5-b3a6f5368f20", "indicator--d683da46-d2e6-44bc-ab49-00e5063109c1", "indicator--cf689e7e-515c-47fe-9e49-b8f3c159de75", "indicator--7f7a6bf5-2825-40f6-af51-10ea71aa37c3", "indicator--5d757479-e854-45d1-993f-e952eecd2bdd", "indicator--fbf7afa8-c09c-4ef4-bec0-8d59a35e4b04", "indicator--32374d74-127b-494f-b76c-dc6107b5d16e", "indicator--4878efd9-95a9-41d7-ac0f-e3b3bd184bff", "indicator--6343d7a3-a61f-424a-a16e-a2214a2e75cd", "indicator--8c5f779d-1561-4bf1-b85c-469d65ea7972", "indicator--d35ce39a-c1bf-4aaf-a6c1-c83262856fae", "indicator--f1e7a815-f7e1-4ce0-bdc2-934979102ca8", "indicator--044062e3-bc0d-4a7c-a459-e55a2f316e24", "indicator--70313915-4e77-46a5-a5c7-41c56c76d2e8", "indicator--6d8dcc01-ec6f-4925-aa2f-f766b2145791", "indicator--9dcd0436-4fb4-477d-bf26-b64e79b4ea04", "indicator--f262376b-611c-46d7-8845-f203b453c48d", "indicator--19c8656a-c880-47c9-a250-f0c73d32a8cb", "indicator--01956912-8232-4283-842a-6275ab39cd43", "indicator--99a2116a-af7b-4f75-b1e1-78dce07facb5", "indicator--815c8a1a-d6ae-41f9-ab71-4edba463ac18", "indicator--fbd3442d-968a-4543-8ff3-7f61d3811101", "indicator--e5043720-d5c4-41e6-991d-56c363339fd0", "indicator--9546a681-6256-430d-9234-2ac9828a5bf9", "indicator--4f995934-fce3-4db9-b2e4-bbe3c89bbf7b", "indicator--b4b50ec5-ebd0-4b53-ad60-9012c8a58462", "indicator--ed891643-5b15-48a1-bd60-1144cf331a74", "indicator--d1d76766-a649-43ba-9297-f573c6f69645", "indicator--ccca33dc-7154-4e83-9d63-d282b2b0b791", "indicator--62187c1a-74c1-4d82-81b2-39cd7668bb55", "indicator--13b5651d-9f24-4ede-b0db-15caf567423b", "indicator--b88fdaa9-01d4-414d-902b-e5c500ac7d50", "indicator--2a92fc00-3dc8-493f-a9ce-205a1f63448a", "indicator--9d640c8f-043a-4ecb-8766-7e338321682e", "indicator--eb5a47cb-7374-42d8-9681-da009d3df8e8", "indicator--fe85b7e9-59bc-4f22-bd6f-557ec41ee186", "indicator--e4d71757-d3d4-46ce-9667-f146531c8a51", "indicator--7d9ac5d0-3f9d-45b4-9de5-9cd62684cc76", "indicator--8bc4b493-f71a-4dfb-bf7e-8954266dd80a", "indicator--ae43e164-73db-43b8-baaa-cf3ac5b83d67", "indicator--5e9d45b8-d793-468c-87f3-8218e89f0b01", "indicator--17e154f5-d16a-4a0a-bc1a-5292a2a08bff", "indicator--dcd42a7b-790f-48d6-a6da-f34dd5a2a2f6", "indicator--4f075762-0b01-4d9c-a61f-d5457061b41f", "indicator--a9586046-5180-44a0-b4cb-a5948c59d203", "indicator--fe4438e8-43a7-4339-8d1f-755e179c9a4e", "indicator--5f2ff18b-9273-4549-9323-f3284bbec933", "relationship--9a23503e-4fef-48bf-918b-797479addb4d", "relationship--ba550571-30e1-41ed-a18e-81611e64d62b", "relationship--30dafb22-5dee-454b-a490-af6e97eb7f28", "indicator--29884931-c840-4bf8-abd0-de69be84b645", "indicator--fbc419cf-7e06-4056-87c8-9868578c712a", "indicator--b2b5e54c-cf46-4134-8711-5f81e961ad5b", "indicator--32bbc33a-f874-4cff-aac4-47b777a62569", "indicator--3703135c-0088-4405-83d0-a5cf0db8ddf0", "indicator--02148c02-73c3-4d4a-bf4b-f4e5f755e258", "indicator--58fa609a-23c4-4889-b0a6-d3259c3f5e48", "indicator--313d5001-1c93-47c0-820c-0bb83dde3f87", "indicator--14347a4e-17a4-44d3-b0bc-c054a0ff1289", "indicator--3e7ad8fb-7584-4bf2-84c9-8c67074d3727", "indicator--0336ce97-f66d-4cb0-b456-619ec97bcc12", "indicator--62f9b657-830c-4856-8996-1aac327fbd5e", "indicator--99053499-87fd-4b1d-b9fe-d35e95e3ae4f", "indicator--1ecf74d9-c4ca-4b1b-8abd-5541ae43d176", "indicator--aa4b5b92-eb9a-4842-a52b-73064d296418", "indicator--7a0018f5-abd3-4ec0-8047-c9cd96c39536", "indicator--fadb7a5b-6de1-442d-b64c-e958a8bc84f7", "indicator--31a2c8db-68d5-441c-870d-b6ebd446b92b", "indicator--f1e5ac9e-6617-445b-939f-f7ec365fb615", "indicator--8341ceda-0bd1-44b7-9bdc-617c9571e00a", "indicator--9bb1e43e-ae9d-4db0-9607-596c2d5056d4", "indicator--a830ada7-fde2-4400-a89c-db540a30b30c", "indicator--3c5e8285-20ea-4710-a75c-822766dd486f", "indicator--d07a2467-542c-4278-b1ee-2aca865e218e", "indicator--4cbb4a3c-4aae-46a4-968b-d1ee46ad7c64", "indicator--bc8c6ec6-1b5f-401f-ba07-26a4f5d1a695", "indicator--ef1d00bb-93de-4364-93a5-3305623579ef", "indicator--ce2a8a71-b6fc-4577-9012-eb32fcb5e7ac", "indicator--22e9188f-06d3-4acc-a0bb-ac38ed64467b", "indicator--f699712f-69e0-4b6f-860d-52c7ceba1dba", "indicator--97021770-bbbd-494f-af69-0918725cb6b6", "indicator--67be3117-55b2-4097-b1e4-0534c12ffbe1", "indicator--0dc4f3fe-39f3-4524-81e9-4b9bc71dbd65", "indicator--b03834ae-e4f5-4667-8a57-585c566dc395", "indicator--99cbbfb1-9933-457c-b9fa-e23c8298f330", "indicator--bc162adc-6f7b-4a35-944f-73edc2d166df", "indicator--657621a0-30c8-439a-be99-f4bcb5c73deb", "indicator--d9f50de5-08cc-4b4b-a6d3-217d126dcc2d", "indicator--5b2d3f35-f4b2-4b6d-807a-8b3b52b859a8", "indicator--039c6fdf-7b37-4566-8754-9966420fdeb8", "indicator--99d2cbde-cf55-4ea9-9dd3-4fda3d1713d6", "indicator--3df14a67-8b43-4a5d-81bf-9f686c046b0b", "indicator--3f0cb3aa-75cb-47e6-894f-8b67e30c4b4c", "indicator--366be674-6e6f-47d6-a9a0-833c3fd4901b", "indicator--5a3205f0-00f9-4b84-9379-a3edd7b16c33", "indicator--89f83df3-2564-44d6-bcd7-157de9631640", "indicator--5013f213-034e-4916-929b-2614d930b1d2", "indicator--b26d682b-3fe7-48bb-8640-82326fc019b5", "indicator--96fe53c0-db59-4cff-b323-ec889e39f9c4", "indicator--96f1085a-1f48-45ab-8dd9-e32360f8a2df", "indicator--6e4d45bb-f007-4232-868b-2c4e6be2a7a3", "indicator--93822f48-7335-4e28-9f2a-4990d2c27073", "indicator--e33f2329-6fbf-436a-8577-7b3de3746b26", "indicator--a1927dcd-e876-4875-a386-4a692ae3c0eb", "indicator--9c9e52b6-61a8-4c84-aa9e-94e21cd1c7c8", "indicator--13404ab8-ad4c-401e-b6d1-f9c295915d1c", "indicator--a763a449-6903-40dc-97a6-92408a5258b3", "indicator--954bd56e-ced1-42ca-91fc-68a24fc734eb", "indicator--0ee56ff8-f297-4baf-82a5-368757f4cd92", "indicator--630c56b5-eae8-4f54-86a6-13a3d49854d5", "indicator--6ca51073-3c83-4706-9132-a219656500ef", "indicator--0e9483ba-fded-48f3-ac0f-11772a88d26b", "indicator--a0227685-5a1f-41e3-a06d-60402c63e236", "indicator--a0a6fd0c-b19d-4285-becb-f0accdbb82df", "indicator--633dd3ba-fe8a-47a6-9720-13a97e6c9a22", "indicator--b190e452-64da-4eae-a622-7946c784926a", "indicator--eb893bdf-7cc0-4ec7-a97d-ee257550345b", "indicator--57e97f66-a56b-4839-8192-7aaa679030ab", "indicator--231106ba-6ad3-491d-ac44-48a71c4934fd", "indicator--61eaf168-c192-4be0-963e-f88e0d78cb19", "indicator--8d874791-497f-4109-a7d3-99fc9995b2aa", "indicator--3e2bcaad-910d-49b0-85c5-edf0aec5bf83", "indicator--746f5d10-96d2-4a20-ad54-8220ddddf805", "indicator--c88d51bc-7c24-4c3b-9526-59c91794b578", "indicator--61c2297e-91ca-4552-931b-6e73d494dd02", "indicator--0eac3a44-2c71-4b41-91e1-3e129757afbc", "indicator--fcc15fe6-87f1-4379-8a87-6df41656f33f", "indicator--b0c1f6bc-667e-43d6-91ce-f707fe118164", "indicator--06638bf2-8563-4c0b-9278-da607f82803b", "indicator--28342e81-30f1-4a6e-87ff-ccefa554ee05", "indicator--21bcdb56-b45c-4a77-a0e6-b7a831ac3b82", "indicator--80560d80-fc22-4e32-9753-52e5dc620ab1", "indicator--983716c3-80c9-4515-b69e-84ee1a5e02dc", "indicator--f41b88c8-a23a-4855-bd7d-f1752d93065c", "indicator--2e2ff780-8017-44b1-a49a-a3b78d686433", "indicator--cf4e8252-cec9-4edd-9a6a-8521917acb42", "indicator--2d7aef16-2e00-4b05-9666-40d4cfc58da0", "indicator--7d513696-9049-4c58-9599-b35e6da312a8", "indicator--8974457e-b156-4c1d-8ac3-3058c12e8b6d", "indicator--fe6a9cc9-1c28-4502-b1b9-a7f3f9838067", "indicator--19bacd76-7236-4fc7-98b6-f1c9e12f94f2", "indicator--58d64d65-c06d-4ea4-b80a-f0b85d961d46", "indicator--be65e4f2-adc1-4838-8710-e027f87be9d8", "indicator--002c0f0b-660a-475a-a489-2986b57c0401", "indicator--667cdf96-750f-4005-8fb7-0e46ec2feada", "indicator--62c350a4-04fd-4850-8628-b1da60f3d39d", "indicator--4e3a4002-58ed-4ab3-8613-a7edd5ad9f0b", "indicator--fb205340-3633-4af1-bf87-f07897a9e7c9", "indicator--6881233a-8e06-495c-ac6a-804cbc96ac75", "indicator--dea9c0ec-8df0-400d-878f-00b9f6711e60", "indicator--d995d413-6451-49b8-ba53-4ea7a65f4023", "indicator--6e8d3caf-3c20-4ca0-9f70-d3625b4a1095", "indicator--a61b5bb6-20a8-4b36-9f0d-c126401528c8", "indicator--e6df93f7-5743-46f5-a24c-e44b921d9ff9", "indicator--575705d4-cea5-448a-9f8c-4bf44a35810b", "indicator--1b3ab5b6-45ce-4f61-9655-975ef03ece26", "indicator--7a0000c0-cd09-4923-bae7-8fc608ef7ef5", "indicator--42b03596-a37f-4636-8c84-6b35ac2e6155", "indicator--c63dd3ac-0a55-4486-bfab-46049b96478a", "indicator--84c60aa3-83ff-4189-a63c-fc6992c6a9e0", "indicator--2bcdb37b-f000-4cb6-8d03-012bdc7fda5d", "indicator--bed0fa45-aa64-4ddb-b111-3643363502b5", "indicator--4319d32f-a263-41ac-acc6-07ee26afc4e9", "indicator--26f3cd4b-e248-479f-9cc3-b32d9e145596", "indicator--bc3126c7-4264-465f-a243-bac924468cb8", "indicator--02c79fcb-1279-47b8-8e51-d68a079c9eef", "indicator--bb5d3e1a-721d-4b29-b0d3-a823b8390d65", "indicator--8b85b98c-2ef2-476e-addf-63596894e502", "indicator--752167ca-f80c-4425-aef5-2ec783bcf551", "indicator--c1893f1c-a643-449a-8565-af77f9f908c5", "indicator--913faab6-b671-407a-92da-5a0fb7649e38", "indicator--bb0685ed-bbfb-4115-a22e-e8beca2d15eb", "indicator--b5819c8d-1620-468c-b609-4f5732646b16", "indicator--d27f1ac3-08ba-4166-a250-c6ae2556fb63", "indicator--586f2cdd-f60c-4759-9bca-b58aa0909cc3", "indicator--8a21c4b2-e12d-47da-b6d9-9048fcee468e", "indicator--51f979c0-3fef-4334-bfaf-ea728f875b09", "indicator--2d811aa4-75c9-41a6-a635-2b05b8f77550", "indicator--4e91e404-c88c-4925-b6dc-8eb000311fc3", "indicator--915f2c8f-5350-4394-b898-eaf4a7e95104", "indicator--5392a9fb-c613-4d64-a413-1f3792ed5e4e", "indicator--ec7a46d9-17b1-4140-a54a-734c626fc4cd", "indicator--8d398a81-0cb7-451d-8702-bc54cfa4935e", "indicator--8abd879a-a144-4bd6-8878-5c00b41b9ae8", "indicator--b15856d9-00c9-4b4d-8161-3e8e613de135", "indicator--3f9aca74-f249-4d5c-b341-ef7d79677b8c", "indicator--4d8db6c2-6652-4f32-9e24-ff10ffdda3cb", "indicator--a13a177f-ece8-4d2c-89dc-1ee5ef71cbf5", "indicator--2732f4cb-3eda-4b83-96e6-8fbccd297efa", "indicator--513520c6-3da7-42e7-bf15-4496b402d534", "indicator--f1d83707-4a4a-48fe-a8b9-51f4cabc2db7", "indicator--e616a013-c1f9-402f-968b-7641f6c93ba3", "indicator--5e894344-f30c-47a0-8f47-413ee6c16f48", "indicator--618dd797-3acc-4507-82ce-065f3c25a387", "indicator--c9a03833-1c4d-4395-a4c7-b57f3d2b66b4", "indicator--6e3efcd4-f7be-4730-9126-a241342f8fb1", "indicator--fe0b9c9a-1447-469a-bdd9-cfe60ba13b46", "indicator--5c0ec55e-9cb5-40b8-bd83-45f09fece394", "indicator--5b7619c1-cf82-49f7-b014-1bacf9934286", "indicator--f28082cc-664e-4114-ab84-2ca721c1c4e3", "indicator--088b0922-9fcf-41d2-a370-448923c3e952", "indicator--44182137-7c1f-487b-af68-ab942da56933", "indicator--972e607f-6a1d-4331-aea6-fc407c344654", "indicator--4930ac0d-7cb8-4ae7-9616-fcaef04b956a", "indicator--d242ba1e-8d3e-4591-922f-17fd049e5523", "indicator--b59768a6-a182-4dfd-9020-bc82ebdf3544", "indicator--347926ee-dc3f-4af7-a8f9-fdbac35c7a2e", "indicator--0dbd7111-8ea4-4608-a720-b0a7c052d6ea", "indicator--996f4717-1b20-4828-bd4e-a26ef19709b8", "indicator--17964f36-6cee-4cbe-8486-00f3c913afbb", "indicator--effd7aa0-281b-4b96-9185-9926fe318542", "indicator--9c6f8303-11c8-4e91-b55c-0d0a9e37b262", "indicator--bc72433c-c082-4eb5-83cf-9e48d651c37c", "indicator--b8d8394a-9e7b-4ce8-ad45-e5a07bb5c133", "indicator--56c11ad6-ce22-4106-b924-04b5a2f0a782", "indicator--555f7b48-b250-4424-89e2-476658bc2f31", "indicator--c58a2e0d-2cc3-4c11-b399-f342ff79383f", "indicator--2f27eca7-69f2-42f6-b279-a4507a9e95ad", "indicator--26edc1a6-1944-4a91-80cc-742f9b90b1f0", "indicator--8cc388e2-ab1a-4b4e-9bdc-1af96ec24782", "indicator--9b8c0fca-baab-4be3-8c28-c710ff7bda6a", "indicator--739440b1-26ad-4499-b9df-eafdee3450be", "indicator--3742da97-3933-41b5-8613-25425e188ad7", "indicator--d9da82a5-c8bd-428f-b086-a35bc36ec55e", "indicator--e6e65af5-d891-4445-af93-3322e946ea35", "indicator--d18eff8d-b979-4f5d-aedc-294fddca06f8", "indicator--8b00068c-2657-4276-8601-973fb80f1b90", "indicator--60f982f3-7b47-458b-957b-c0393d87e726", "indicator--b057a04f-aa65-4cf2-aebe-bdf7563c239e", "indicator--8a04c145-9a69-416f-96b7-96a14ea1bf40", "indicator--0dbcdd39-0c25-4d30-baf5-59fc632c13b8", "indicator--33125a8f-2ee0-457d-827f-587765811d1a", "indicator--2584eade-e174-4a6e-80e3-d566829c1ffa", "indicator--214ec7ec-89dc-4e50-ab3d-2e5dddbb1660", "indicator--5b8ca41e-294a-4e15-b473-f0e2e813f2c2", "indicator--8d9a25e2-0894-4eb7-839d-cc1652040ff6", "indicator--132dc66f-2431-4b88-96fc-33f776dd3ec4", "indicator--cffd9dde-d3dd-4cbe-97bf-9b5fa30ceb30", "indicator--51958640-2aec-40b5-a9d5-11f6414e2a29", "indicator--a9995a9a-f497-44bd-bd63-8f5b3a4b12d1", "indicator--d978b5ef-8196-4bf4-8315-6ba68d288e05", "indicator--8068aeb1-e606-4ef1-8bfe-5b5ef1685836", "indicator--45967273-b8b2-4a8d-b550-df7014cb6365", "indicator--f61b7208-86bc-4242-976b-d52e8c1bec01", "indicator--f2b8ecc6-e592-4b8d-a7ec-90f8b09763a2", "indicator--ef9efdf9-7681-48a6-a1f7-ff5ab7253900", "indicator--e8134056-b9ba-4e3e-b247-37c440e30b92", "indicator--81e27f7c-d641-4283-a395-3bbaca99ecf7", "indicator--d311d960-da3f-4b9f-95df-4cde77d4ecdf", "indicator--8385d6fd-2e95-4046-8140-d05b5a24c0f1", "indicator--3cb9f572-ba17-45bb-bb26-fac3d4d37df0", "indicator--7b266917-b1e3-4edf-a0a4-c655482bc34d", "indicator--09822f8d-6ad3-4d29-a3ad-f89ee6130bf2", "indicator--ff04d79a-d305-4e53-83b0-b8397d8b3915", "indicator--7363f8b7-9884-4e16-bb2f-c972bf8b845d", "indicator--5dc6ba87-01f5-473d-aad6-4cb5621fb2fd", "indicator--069a6127-0ec7-4e84-a2f1-bd920d0baafe", "indicator--5f39be09-737c-4967-b71e-1c41c704b808", "indicator--f9acd7f8-fc67-48ac-b4eb-f1c0c8a9c6de", "indicator--96d57ae1-03ac-4f95-aa5a-a5b607343ef0", "indicator--2f4a0181-b5d4-4123-a4dc-c72b23dfd7c9", "indicator--3e648738-5270-45e3-b5f6-8061ba9f9df0", "indicator--2340be34-d34b-47e9-bb4a-11aac16763ba", "indicator--d207f260-07bb-4e9b-a159-8464358be7c8", "indicator--588eb7aa-3e4d-41c5-af94-1d5a348bac04", "indicator--ef50ee6b-5854-4563-b633-a81548746ccc", "indicator--196ba061-fe13-459f-acf0-7ac4002dfe5f", "indicator--24e24c37-ad22-46dc-bc55-54b8ff661120", "indicator--36a87803-ad08-47f9-816f-5a06f9236b38", "indicator--8e5750ec-31c2-4e96-9544-95278590e8b1", "indicator--13a61b3d-f1b0-46a9-8ac1-89215760f05e", "indicator--571c4b30-370e-4772-9191-bedbe9824301", "indicator--75bfa908-f5ce-4ef9-be4a-edefeda4bf3a", "indicator--5c6ae41a-127a-46e3-bca5-6b12cf838ff0", "indicator--4819af1b-b3ff-437b-b01b-f1ed1194619d", "indicator--5e281cca-9aba-49e5-8cd8-0d6c3a915329", "indicator--39740ce1-0f40-4239-8fb1-bdb99654e553", "indicator--316e1ee8-8bd6-459e-8a1a-6efb8a890c73", "indicator--5838b2b4-83b6-40d5-8af5-ebba443751fb", "indicator--f2cfcbcf-abf2-4a45-8032-a3ac2b2e63c5", "indicator--582bbe60-6755-4c50-be59-59d77d13d502", "indicator--d03dce27-e6dc-4218-b8d0-7744a70d3119", "indicator--4aae07c8-abb8-4269-8da5-72b09ad17714", "indicator--0def64d0-8b24-46f2-aa62-c27b78667417", "indicator--1479f3e8-47ac-4887-b3a4-2b182a81e885", "indicator--eded5cb2-f5d4-458f-b863-fe3c055f8ddc", "indicator--ff63a3bb-7331-463b-b94e-63f68cb92b1b", "indicator--3834749d-bd3a-442e-ab52-b522f9ab2180", "indicator--7a6a1ee5-8f98-416f-987b-45ab6c673d29", "indicator--9fbb240b-b997-4a55-a58e-f00c7c3354b4", "indicator--7b2ec929-75fd-489f-8dd6-6cfa7a66fbc9", "indicator--74e128fc-6dcf-47bd-80bb-118560cdcfa2", "indicator--8f34ff2f-08bf-40f5-bd86-28cce886f7bd", "indicator--26fcac20-d9a8-4b4c-b8e8-e36d4d0a9013", "indicator--ea407b79-9741-4f23-8665-89b791482bf0", "indicator--035ce2b5-c482-433e-bb71-4a828150342f", "indicator--3e44dc48-db3e-4069-aea8-6be10e6740c1", "indicator--fc07dcc4-6fbe-4ec8-9ee6-574f75f2084f", "indicator--7e5df142-f14c-4c05-83e4-f8f012c08550", "indicator--7d54046b-53be-4824-ac9a-84ead50cefc1", "indicator--ad1e45d7-9c50-41fb-ab71-95b172ea0dd9", "indicator--6a387ca0-6aba-45c5-81da-1198e849f60e", "indicator--8da85945-8c49-4f1f-9f71-f718d8297c95", "indicator--10b1fef9-b762-4090-8c28-39c5871f7bac", "indicator--d185e457-4d20-4e2e-bfea-eac391be075f", "indicator--30bb98e7-6da9-4168-8b3c-b3a9a0b4cfa4", "indicator--fcea57be-6d2f-4dbc-9ab7-1a202f14054b", "indicator--71432531-ffc2-42ba-b601-42f51cd8cfa6", "indicator--0d1f066c-8014-4ab8-b8b8-3957e45d640d", "indicator--b50675fb-38f7-40f0-a221-86a203b4d46b", "indicator--ac6fb212-e667-4c05-87c5-b701a2563237", "indicator--81875b2b-1aea-487e-af74-997a6b3008a4", "indicator--37500266-8052-4ace-9d12-83bd4179d9ee", "indicator--faf94c5d-4e36-49a3-96f4-6fa1e6484abf", "indicator--d7bd9d54-9258-4a37-a969-fea46b93f8a0", "indicator--9902771b-fa6f-4fb1-8593-66db6d3cad84", "indicator--d1822f5b-7343-4332-b944-de40ab10536d", "indicator--e1b3806b-4600-4c0d-b98d-354065284467", "indicator--4347049e-12ad-4e54-951f-adfbafee583d", "indicator--ee6398f3-6968-4f71-b875-d4b5d047c050", "indicator--00d7d009-146c-4c81-ae85-9bf16d914a9e", "indicator--8c677ad4-a49c-4ce1-809a-1bec8f803f4a", "indicator--3eeaecb1-345b-4a06-8208-580a5438d650", "indicator--b422d5c1-b241-4a4a-8de2-10b5be282302", "indicator--dda55a02-3499-45b5-b7d9-e244a620915d", "indicator--0fb172fc-9a64-48bd-9983-ee12ac341afb", "indicator--32ecf690-68b7-45b5-8f92-f6e3d3068864", "indicator--3dd36156-32d5-4d4c-b7c6-a92df4ec4d4e", "indicator--7be817c4-675f-4299-8153-c623fe5d7b66", "indicator--022d046e-0c3e-4413-9194-5f5dab15feca", "indicator--1dc796cd-3334-43fa-b495-855a7f7fef4e", "indicator--7ca85ccc-6156-4f80-8c78-53233512f4d0", "indicator--3e1a46bc-5468-4f7f-b29d-525eae897ce1", "indicator--d644e04b-cb4f-4cb3-92c2-55257dffacec", "indicator--58fca2ff-f687-4383-8f23-360c31a3d5bc", "indicator--f54d8218-361d-45e4-865b-831c7656a2fa", "indicator--1e71589a-ede1-4cec-989b-0411e1cbd5b0", "indicator--9058212e-8eba-4b94-9d1c-effebea8d9ff", "indicator--d7c00916-9fd2-4284-ae2b-0d35de24594f", "indicator--eb79cd07-a7cc-4ece-901d-38479665cddf", "indicator--134a313a-fe48-4d58-b551-bdf5b0004caf", "indicator--a1dc4e61-3d19-409f-8b13-b32ff6db41c7", "indicator--a9838eb0-0ce4-4b12-9751-1bffd0269328", "indicator--b9d3ce99-561f-4a27-90c9-0474cb01c1bf", "indicator--0bfd85bc-1041-4199-82d3-77403f448342", "indicator--edbcede3-07ac-459a-bc74-65297a20b411", "indicator--2ff4d6c4-1898-45fc-a125-41c3aac4b162", "indicator--024403d7-a216-43d1-a641-026515cd620f", "indicator--63fd43c4-0606-4ad2-b0cb-a1fd356d7fe6", "indicator--2619c235-8eb8-44d7-8f71-a1a1c95d613a", "indicator--d361d397-cf4d-4c6f-a854-e2acf082c87d", "indicator--a8cc71d5-e945-451d-9719-34358dac7c31", "indicator--a3c8086a-029a-4133-85f6-2e5f85e8b6a3", "indicator--0c80d658-7120-4f2d-b963-95fb87919a42", "indicator--27696aff-1f31-4cb8-af34-81f3e8536924", "indicator--d20ee372-6ae7-4d23-b421-83c97a6402b6", "indicator--46e2dc3d-a626-40a9-87f8-00dbf8f73e1a", "indicator--05e03a52-025d-4ebd-954d-6024cdf25059", "indicator--55335e4e-232c-4c85-9d92-03dc64ba0cf9", "indicator--ce4303b9-5646-4c95-bfb8-1504f3fd0505", "indicator--cd6a5780-eabe-4b5c-a2c8-9f3388eff868", "indicator--a661be81-12ff-40c4-80f2-fda278a10ddf", "indicator--a72a26e1-0667-4e9c-be98-df0ab6e3ff53", "indicator--649ff0a0-2294-4dc7-b34d-0d562fbf6242", "indicator--1480fffd-223b-4f04-81cb-fe8d241fc687", "indicator--3cc2d7c4-8ad5-409c-b921-9dcffd915d09", "indicator--43210ff9-6f8b-4869-b65e-acc09f309fdb", "indicator--18d6c0c2-fe64-4a36-8db9-daf52ead1598", "indicator--eb347dac-bf3d-41fc-88e0-cab001f2b643", "indicator--67b1f3f1-5eb4-411e-8eb5-a3cf82f4a9db", "indicator--e7f33ad4-ddab-47c1-8c26-59b011ec4ec2", "indicator--6bb2bbe6-842c-4447-8be4-760ae8ef96d6", "indicator--b9272478-4bd4-4a19-baa7-c47a19d20411", "indicator--0579f89f-2468-42a4-8f20-59db5715467c", "indicator--d9b19e74-94b3-4fb5-844c-81a008d13136", "indicator--10b81bc1-dfda-4d4c-bb9c-fd5c95e44506", "indicator--25a3e2d8-e6c8-4be7-b464-f282e85b62bc", "indicator--83d39a27-b4cb-4289-bd09-b9d8d9e56c2c", "indicator--0551bbc1-4492-4669-a814-be5928c48e07", "indicator--6c875713-4c01-4804-a694-dd4b5f56f8b9", "indicator--d33e91b3-51cf-432c-bf3d-7e8cb4301435", "indicator--570b8c02-97d8-43a2-b01b-9b6a2755cfa5", "indicator--15f955df-1b4b-4c44-97b1-5bc7d78a604c", "indicator--2de9662c-17f0-4dd9-8aab-43b0e35c7e6c", "indicator--43551a55-b06e-4268-b9d0-dd915f506d16", "indicator--64f29309-50ba-411d-8a87-a59ba910d96a", "indicator--3f2b4415-f4d2-42fa-8df0-eac13288a8b9", "indicator--fc2ec6aa-f289-4106-8b87-b8db15f56b47", "indicator--c06e8be5-a6cb-4a38-96a8-83d5321dab7f", "indicator--2ce03d52-c0ef-4f24-88e8-e1439da144fc", "indicator--c3cf6d80-c7bc-4440-ac63-0552c59743d1", "indicator--bac7fe7a-9039-4131-bad4-c0dbba70e000", "indicator--e60ce254-06bf-4629-a57e-081f79170a06", "indicator--7498641c-39a4-4b93-94b1-2e111fed2c7b", "indicator--d1ccc037-98ae-48a1-9941-24652507b98e", "indicator--bb9eac48-d102-42fd-8563-7f83d9fa57ea", "indicator--753c8a22-e29c-402c-8f88-29bd4cc727e8", "indicator--75ee7857-95fd-4f03-8d12-9c5b5d6120f4", "indicator--058f5b54-7127-49c4-81e6-2e5c209a0528", "indicator--81a5b85e-feac-4be7-a334-4240b537a4cb", "indicator--efe29767-73a1-4563-b884-8ddc7c3e0e9b", "indicator--c001e361-fe82-4596-b0c7-92a31b9adf56", "indicator--f9b0acd5-08c7-4bca-8884-3af909741898", "indicator--d0936c10-285b-4378-a90b-542b6c417d64", "indicator--5293822d-4b51-44c7-a577-2b550011a55b", "indicator--e8d9ed24-8fde-43b2-842f-4678802a370c", "indicator--ab24dec3-3918-45d8-ac5d-e35f29b09f2c", "indicator--92b97ef9-7bec-4626-91fd-bef01ba975bf", "indicator--294574d5-8d34-46e8-bdc9-e960f76a5e88", "indicator--8b6b9e95-ba16-4fe5-9395-63eda311c644", "indicator--f4f8c5c2-941e-4cd0-95d0-c2b3f3297389", "indicator--f66b6bcf-92e2-44c4-af80-937933226872", "indicator--22f1a52d-96b8-443e-8252-912744b066b3", "indicator--1902d378-8fe6-4d88-a8ab-f66d7d08f9b1", "indicator--6ac57ace-fe50-417b-8022-10d807718b94", "indicator--c1eb51fc-7eca-4c54-8470-a5e74c3bbfcc", "indicator--53dfeb9e-b5c4-4b15-b8a1-506e033d9320", "indicator--ee1efa45-6e46-460b-aa1b-29828c8659d8", "indicator--0ce1d033-70c3-4e8e-8c87-df098cdc90f5", "indicator--30344869-6a22-408d-bbdd-772abb0a144a", "indicator--8b8553d7-0a7a-4597-9207-3a0113548846", "indicator--2f54fe83-412d-4c12-8b87-c4c629e7778a", "indicator--c1d53d5c-76c0-43d6-9eba-defca02130ed", "indicator--a04969e7-0cfc-405d-9daf-a1525d8721ce", "indicator--76534f99-a1a3-4c05-88e3-82860f68d522", "indicator--8c191cc8-7dd9-4e3c-8a0c-c824304a55b7", "indicator--fbe37a75-b211-4def-a46e-c736cc6321f3", "indicator--4a0791d2-87c8-45cf-94ce-2ebad7e4f061", "indicator--46a49c7a-7cb9-4033-ae0c-39fa17eac451", "indicator--20608f46-c769-42e6-a980-bd0422cafaaa", "indicator--a1faddf9-b324-41a3-b876-7f43d563afd7", "indicator--f25c1804-2260-4811-907d-fb46566eb978", "indicator--31c20a2e-3c0b-43a2-9e79-816eeda2ae49", "indicator--0ee70acf-56bb-4d73-9dd0-54e392943ca0", "indicator--27c5b75b-b019-444d-8734-dad9f23e3e70", "indicator--1221ffa1-d0d2-4cff-a741-7110972d862f", "indicator--a235232e-17dc-4a61-8079-4c6c9193cfbd", "indicator--0e224dab-5d71-42f6-815c-a88009d7bbeb", "indicator--fee9c95e-ef8d-4c90-a897-52c96744cf63", "indicator--4ad12f08-3504-40f8-ac89-abd60e42bf35", "indicator--2fe5637e-d8d1-413f-beef-4d81779c2c2a", "indicator--663ccf84-2962-4da5-81a4-95027c4830af", "indicator--7a9a1186-ad63-42b2-9f00-9ef938afb90b", "indicator--5478bf11-9eb6-4d05-a924-ff4652075600", "indicator--651f3f27-67b0-42c6-8243-848c5d17dbed", "indicator--5e5118f2-289c-4960-9808-8f72b5b5ab37", "indicator--01e1ad23-0c47-492b-9e78-f25879d6a59c", "indicator--8222d42f-358c-455f-b616-bb0232082496", "indicator--f40e75be-285e-4391-9e44-b98463ece00b", "indicator--7bdd5061-5b28-4488-bc72-1dae39c45597", "indicator--3577df0c-434d-47df-9258-5ee425b4d6f7", "indicator--c3fed5cc-782f-42f4-ba8d-e5c98449c702", "indicator--9d009f3f-8d91-4aa4-959e-d9386575ad62", "indicator--e528f127-110e-4f72-afd0-b84babbefde1", "indicator--662ddb8e-b4ac-416f-b86b-82ff6a58f7d4", "indicator--41b9868f-74c1-4b61-bf3c-bb5ffb20f0af", "indicator--ef4307df-755b-4b3c-b2bd-1d39ae7b3853", "indicator--b96c4341-760c-4d64-bfdc-27e7fa2d8807", "indicator--6ea34555-f862-48ee-a840-c7fcbfe8694d", "indicator--b69609d5-b186-4d58-a214-648173961d9b", "indicator--b6db8175-bf52-4e85-8aae-99e77eb9114a", "indicator--952edb7d-1586-49b5-a27f-8bc344aa2360", "indicator--33b8e94b-13c3-48d2-a096-93caad1c4157", "indicator--64649661-56fd-49be-b018-2a3e0b4284c8", "indicator--ff47eb4f-5ca6-4e9d-acba-0c5f903ab80a", "indicator--dcff903a-fe58-423e-a651-5a006e3db666", "indicator--cbcfdd44-7e10-460a-98c0-48701b332995", "indicator--af62b6df-d208-46cb-a3aa-8298e0fbce10", "indicator--68da790e-c497-4e73-aefd-1fdb966791e2", "indicator--d1397c96-fa17-449f-baa6-235933fda8d3", "indicator--971c4df1-d301-4c06-bc87-321b4ad0bf1f", "indicator--a519a47e-be84-4f37-a92e-208e15308690", "indicator--1dda5355-a31a-4c48-ab78-667a65d15c0e", "indicator--45ea4d9c-6557-4dfd-ba0d-c54ec61cbdb8", "indicator--dc380f86-2b7c-4c56-8f80-d9942655bb16", "indicator--25a58ecd-1893-45be-b969-02c50c6d1053", "indicator--65c69f83-6295-432d-be59-1861ee4a01a9", "indicator--a6b8df29-f8d6-4376-b6c2-4fca9a43a031", "indicator--a52ee9f2-ceae-4384-b6d9-bb1e08baef22", "indicator--853b7b72-ea70-4c62-a8f5-99ddb62f95d8", "indicator--0653ce48-0e8f-45cf-ab94-f1ec8f331e30", "indicator--caf73be8-51af-4312-9b09-a26c017ad1b7", "indicator--3b4ce264-15f2-4d8c-8e8a-7c3c5b60a991", "indicator--e7654a92-f87c-4f44-b3ed-7783c2eecf4d", "indicator--4746ea07-85c8-42b7-8b8b-814b586d91f7", "indicator--f94f0625-f7df-4a37-9f6d-0a5337f5d43a", "indicator--2d59d4bf-c8de-4bb6-89a8-cf632b2fea15", "indicator--23a97bc2-b536-4f2f-99bd-1cfcf6fcef0f", "indicator--f611d331-1942-4937-a8bb-7c7fefac1796", "indicator--18482516-2fc8-4fe1-b7dd-117b15a44c52", "indicator--89061fa0-9a45-4cf5-ad59-ac3b2c2c28ca", "indicator--86005c94-00b5-4269-8f0e-8d7c8996dd37", "indicator--0e25526c-6fd9-4344-b061-d8fcf72b3056", "indicator--7985b8b1-de79-42fd-86dc-c46eda4358de", "indicator--a6baafd9-2a8a-442a-975d-ab4befd0301b", "indicator--2ee88f4f-30a3-4064-a8c0-929c6c766fde", "indicator--339daaaf-2670-489c-a8e7-87d4225d2735", "indicator--2a10a28f-cc1c-476f-9d7d-0d02bc190e67", "indicator--0a00523e-38e5-4b7e-a606-50d3c8152e94", "indicator--482b5132-a9bc-4ae8-a5e5-5bbeb459d5cd", "indicator--ffad12e6-d8a5-4851-86df-f66329b67d27", "indicator--a21e50e3-777c-4987-b17a-4dea01199a8e", "indicator--282800c2-ad19-4263-a759-713a16df7b74", "indicator--4638fff6-d419-4d0a-a11d-c1090c57ed2c", "indicator--48d59ec5-155b-4067-bca3-da1ca2773f4e", "indicator--1a21ee14-85d1-478f-abae-7a5e18e914fa", "indicator--ec84ddfe-1739-4be1-bdca-52505878a957", "indicator--e35579c1-6a73-4533-a213-c2d071904f25", "indicator--65c6b78e-28c1-450b-90eb-1671dfb1142c", "indicator--de64feb9-3093-44c1-a619-4a279d13ec39", "indicator--77364422-5160-4774-9b24-cfe4b6d80e6b", "indicator--edd2ec40-a577-48d7-870d-864439105ff2", "indicator--92884599-efe7-4a6b-9709-58fe892b2cec", "indicator--396b0a18-b02a-49a2-a454-1f91e4c8a932", "indicator--f2fdb9e8-6df9-4f62-9bbf-fcf794e4a88b", "indicator--a3e5ed27-f62f-43a2-b815-b09db4b32630", "indicator--dc68043b-cd5b-4126-953e-572ed06e869b", "indicator--f0324118-0a0e-4ad5-95e7-f9b52d8900ee", "indicator--43931a4e-3303-46a2-8fa0-5e9a2ac7aa37", "indicator--357ee7b0-84e5-4e37-8ec5-510277f3a1f5", "indicator--7099014f-58bd-4447-823b-72866af92827", "indicator--b0d97896-d589-4e9c-9b04-9fc861e26f9f", "indicator--f95db260-1db5-431a-a0bc-7fb27fb64f83", "indicator--67acff7b-3ed9-4408-a250-9e781aa7125c", "indicator--e2478b67-0efe-4e4d-9e2e-532f2556ae42", "indicator--28d2365c-a7f4-4160-989e-55e161f01667", "indicator--2b333955-e2cb-4f88-b0a6-c7f7519c31be", "indicator--830f80ff-e6d6-46a3-9e1c-5020d48863de", "indicator--b429034d-4154-4056-8943-473ad2005794", "indicator--cac0dd54-abf9-4a5d-8062-bf15c105af9b", "indicator--b3ace1a7-286c-40cc-a8f1-5ee5d9b612b8", "indicator--b4bd2576-d4e3-4237-bc68-d2afe8603162", "indicator--160c67b5-2da7-4b95-82b6-369a018fba51", "indicator--d7a6a071-fe06-45ec-a886-e103b6d263bf", "indicator--201990d4-58dd-42f8-bcdb-36091993d3b8", "indicator--cd8af4a2-7e0d-4bcc-8be4-94e4cd78278c", "indicator--d04da712-3cbd-43ad-ae1c-8770e1145b08", "indicator--297506eb-92e6-4523-bd23-b58960fd9b9a", "indicator--521714eb-c46d-4416-82c6-3a3ffb1618ee", "indicator--4d64a9ed-e400-43d1-af16-fce062403a69", "indicator--a3f6b589-e781-4705-ba77-dd00dfaaa059", "indicator--c81458ca-a5b2-4e75-be91-892262dc238c", "indicator--e112d7b4-1ac2-40d3-9190-1bc694ea22a6", "indicator--8a11a7d7-d1ec-4f63-93ad-5754e5170f59", "indicator--3f90fb5c-2394-4c88-8ef2-11aa2af1e659", "indicator--919a925d-4ccb-479b-b10a-f692159d1230", "indicator--5bab0b58-e2cd-4bcd-b61c-ae6f9178565b", "indicator--3a809a98-d4c5-4070-b501-4efb78f9009e", "indicator--6c25224a-2a19-40af-bcbc-aed01990d1c3", "indicator--aee5b5b5-d6ca-4846-86f0-05b455909108", "indicator--0a0f7f42-d9bf-42d2-becf-2db5cd25e55b", "indicator--b85b0cfc-b7e8-4ed9-8c5e-328f2d87ef17", "indicator--bc7a492c-893c-4e4d-9052-7df8e037d30a", "indicator--529c437e-d15b-4a9f-9a86-9f890c377505", "indicator--5ef49c03-0c56-4c6a-94be-5f3e0028aead", "indicator--b72e5049-3c67-4122-8812-3c460b6deb44", "indicator--a40798fc-7f8a-4143-bcbc-7ccffa772d08", "indicator--11f3fece-05bb-46c3-a339-4bcb31e83ff6", "indicator--2cadb6da-7f9c-4295-b1ed-0f69d366e000", "indicator--6c4ff9d5-f029-4984-9edb-a43a07d72b1c", "indicator--5ba8ace6-dafc-4ba7-a362-cd80a7513590", "indicator--cab20d90-3170-488a-8be3-f8d984f65fdc", "indicator--78e1c046-c0bf-4e00-b2e5-4a0a2f09c144", "indicator--cc2c9b06-801f-4f71-bc56-1b9ceb4a26c0", "indicator--d22c2ee1-d366-4e82-9280-524344dcba17", "indicator--d8860cb8-fe5f-4661-977a-83183ae93513", "indicator--b43d679a-335c-45bd-8ef9-f47e1b8cd437", "indicator--318be8d8-bb32-436e-aaa8-d056ff1121c1", "indicator--87affd6c-e0b3-48ed-a43a-dc2377bbc8d5", "indicator--38ac0695-4ef0-45e7-bf93-b66503d7744f", "indicator--a29d3fb2-6bfc-40e8-8882-9919719379cc", "indicator--733955fc-bd9f-4fcc-81a8-b46009f947a6", "indicator--1538293c-1fc8-4a96-9696-7294ee2d2478", "indicator--51755924-a2e0-4ef6-b90e-0ddd43666c56", "indicator--55c5f284-d486-48ea-a3d8-1ae0d9ca3a8c", "indicator--664de9cd-46ce-4a31-92e7-b621b78c7192", "indicator--f16bbe33-5565-4c91-b46d-cb23a3161c04", "indicator--cbd61edb-b67c-43fc-8230-09fb230b9392", "indicator--ce4b82db-5cb1-4de7-beb9-222c297f925d", "indicator--9993a0af-1664-46c2-b88c-1599baa8174f", "indicator--29fb4bca-377c-4681-9b85-b07edd367203", "indicator--3839d4ac-6a5c-4483-b21c-b32d2194d4e5", "indicator--6b593125-4257-4ccc-9d32-4ed8099cc8c6", "indicator--cbb3f415-76a8-417e-87e7-fb49d5dd3e9b", "indicator--473a7853-ccff-4bf3-a65e-520c4a69d317", "indicator--bb75f0a0-a478-480f-9ca1-f0e432628c62", "indicator--0a558a42-d59b-4e93-aeb3-b3448c6fb17a", "indicator--445810e6-f5de-4550-8f48-8f4671387a00", "indicator--373d2bab-d791-4b77-ab6f-bfe061ae2f46", "indicator--088e00df-c64a-4ff9-b541-3d7d788b6eb1", "indicator--55e22ba7-e922-4f7d-8fe2-345cdad7247b", "indicator--66599b5c-a803-446d-a48d-7d11b872a9a6", "indicator--9c627764-fec4-4e3b-9338-a246d9a7a083", "indicator--003101e8-22d1-4dd2-b7ca-604e3d8477ae", "indicator--a4bdbd28-826b-49ef-9743-80d7c9c25a7d", "indicator--5a86cd4f-0e1d-4b30-9808-a511ce74a7e2", "indicator--fa58e80e-6c09-4e47-8097-a921c3303dbe", "indicator--a11beeca-4df0-46bf-9cb9-32d64e7febcb", "indicator--acaeff38-3a15-4b42-9505-ba96247fbd14", "indicator--7b32e740-ccb9-42da-a9e2-29aacc20987f", "indicator--c7e5a023-66cc-4729-a0e4-065ce0b2c67c", "indicator--cf314525-f8fb-47fc-9267-f5c37936dff7", "indicator--7df133e6-29d8-48bc-a1f8-a7e21c57a84d", "indicator--3f04fc79-a085-4553-81fb-229c72bb64fc", "indicator--f6328932-88fb-4d76-a54f-203a175b6f15", "indicator--8abaeabd-fb91-4859-bc1f-71d21f989044", "indicator--8b05895f-cffe-4fcd-b2ea-6afde404f648", "indicator--d8f46cb8-ec0b-4a62-88c0-915fd5644a52", "indicator--5ca7d05e-99b6-4f23-8ac6-ab406ae8ff09", "indicator--73e96728-9f45-44b1-ad50-df025f12f4d3", "indicator--d3cdc167-95fe-4e13-a02d-4663bda33732", "indicator--86463d6b-cc6a-4e69-8244-4ad71b69d6e6", "indicator--a611c7ab-76c0-4e60-8a62-79a2567efd03", "indicator--9695e6b8-fa77-483a-b5e1-da359bed4a09", "indicator--33080c7d-98ef-4b7f-8703-3b53581b289a", "indicator--bab183c8-e0fb-4a1b-80b8-6f24077de517", "indicator--da6c1a28-914f-4830-9269-13286351a81a", "indicator--b326dafa-b67b-49b9-b9c2-a65147d3e1d0", "indicator--6d3a9982-d2bc-4aab-b2b9-797d6c47bc7b", "indicator--21c18641-f717-41cb-b9fe-fe70115e2134", "indicator--7ac10d18-bb21-4ce5-8aa8-ca1e66689de3", "indicator--11b7bed0-33e6-4242-b9d5-6364c94a3bf9", "indicator--0f63026e-429d-4c97-9772-d906b51d1a82", "indicator--b835b743-d428-4538-b63b-ed7693ddba15", "indicator--41784abf-c6b9-4fd3-b7b7-51147fa1b450", "indicator--9a8ded13-5f31-4261-8c04-1d45a57b9bee", "indicator--f0be593b-a012-4d26-9a88-3d1b7a71be1a", "indicator--a0ce9f45-e9bb-44fd-a36c-44f2f58285de", "indicator--a5012160-2949-4357-b27e-e1df90c11bff", "indicator--c576299b-c359-4fb6-9874-ecebd6ea9c88", "indicator--252853aa-7271-412a-8f44-caaa79ca8600", "indicator--e060253b-6685-4f64-b562-02e6ff24651f", "indicator--0b32c50d-a8d5-45e0-ba0f-63b74745c10f", "indicator--300d1559-1e23-4c62-8d85-b2a7d36d4cae", "indicator--8e916bfa-f719-4009-b6e7-3a04ca1e4d36", "indicator--646e49a7-ac2b-422a-8693-4e7bd79c5a0f", "indicator--09a5155b-146e-457f-a1cd-16d49f34abce", "indicator--edc485ee-9918-4306-a347-b55e4ac89935", "indicator--9ca62517-9cf2-4583-9f4a-3adfa4902338", "indicator--2c284ff9-1eca-4a9f-b1d3-ac93b8248bac", "indicator--05f2ea4a-2bb3-447a-9c86-f74f73f15751", "indicator--b8638a1b-edf1-4341-8e6d-059d2bba4224", "indicator--4323cb63-d4ce-490a-848d-c20ac7616da8", "indicator--68f24d2b-c523-4470-9e7e-d4c933932417", "indicator--4a9d9a15-e510-4462-900f-8df22fc21bc8", "indicator--3d4bc432-6b37-43b1-a70a-5be91d840621", "indicator--25f0f942-6e80-4b70-8307-0f10b04bcc01", "indicator--7326c957-0d93-4e18-ad40-261edfdb3055", "indicator--0bbb7bc3-26f2-473a-aeaa-43d2e4e4c893", "indicator--266c9a08-f5f4-44d1-a8f0-da8dd6b4f25c", "indicator--1c29cfdb-8cb6-49aa-a237-fdc82f197ea5", "indicator--1e0f10d3-c695-4e65-bd4c-130f4964b82d", "indicator--6331cb33-023a-48af-b54a-d334f8b3afb4", "indicator--2d47f3e8-a28c-4a4b-bc0e-e514b825d1ff", "indicator--5b2d543a-a197-4895-8bf0-2ce3d65409c3", "indicator--fdb3204b-5690-430d-9562-317ebd1d54e7", "indicator--220c12ea-1bf3-4cb1-9b96-1a15008b9b6d", "indicator--cbf88d72-52bd-4b94-bddd-7d1e0d8e5172", "indicator--1eeb6c27-d892-4380-b70a-76f2f33dfca8", "indicator--312ca1c8-1d6c-4385-9f32-c04231b59bd9", "indicator--f0222b9e-1a4e-43a6-8664-3e2f98ac2d61", "indicator--b172c2a7-17f7-4df2-b6b7-8b9ce4039c64", "indicator--b6c8a94c-7ed6-4de8-ad57-9c659963da9d", "indicator--a37a1b6d-7b4a-42ec-b2f5-35c333fb9246", "indicator--39acf386-db9c-41ca-a853-1a73047b9bc4", "indicator--5f2cc872-007e-4271-a016-04324d555267", "indicator--493782ea-3367-4ead-a5a7-b277720c5f7a", "indicator--0d9400bc-6175-48dd-a2fa-8b2e0e2af8a2", "indicator--b9b85269-ece6-45fa-bf43-3f0933d67d33", "indicator--1c2040f5-ac9a-488c-9e73-19fd272941fe", "indicator--69891323-fc0a-4019-ada0-bee8dacec532", "indicator--2ce76cbb-3c60-4c30-8468-a31f5bb32ff3", "indicator--2129f8a3-16b4-4e8c-adcc-a7df425136cf", "indicator--83e0a48c-45b2-4049-81c4-135bdc1dc37b", "indicator--c7aa16bf-3a32-4d49-8d19-b298e470bbb0", "indicator--296b039a-0465-4052-aacd-d0865282fab7", "indicator--761581e7-ce8b-40bf-9c90-0f236f4066df", "indicator--80c7ad68-6828-4c25-b63e-f6e66257a311", "indicator--0a1f2cad-a86c-4efc-91e6-dd6f8322498f", "indicator--d5d2a4d1-4e4a-4d76-bc05-596bbbbe170d", "indicator--2c34d976-d096-4a55-9f2e-c1228dcc69dd", "indicator--93b4fe93-6eec-4e1c-83c2-77a3ff928332", "indicator--4a5e050f-9b06-4b42-97c1-987d87342778", "indicator--e95424e4-0f1c-4aba-be10-ed479afe1ad0", "indicator--a7f19dd4-9c8b-43c5-bc3f-054b903d7a49", "indicator--1a7e4321-744c-418c-a7a7-87ffd391f555", "indicator--b90d89f5-0dd8-4cf8-a542-9b08453187ee", "indicator--fa6c99e2-d641-48a5-8706-157590078c25", "indicator--a859054a-2920-485d-8ece-b4bb13da3200", "indicator--0f196a0a-6e9d-4e56-910f-04dee93255e4", "indicator--0d459426-fb28-44c1-8786-6c051da87f0a", "indicator--b3a6ff57-ee0b-4772-a110-34158df251bf", "indicator--9d8812b3-6c56-47ff-8c67-2e404bbceb13", "indicator--9d26afb1-75b2-4c85-bf14-130e31fd032c", "indicator--938c2a3f-dea4-48f8-8acd-75bd602e6a1e", "indicator--8bdcb9eb-9e1a-456b-9871-3f5de023b6d4", "indicator--1b9b12d8-56f4-4d5e-9f6c-47eaddca8085", "indicator--147c4e5b-70b4-4b6f-8ff1-4e43186ce3be", "indicator--5d963748-9a2a-4f01-b4f8-d5e43d5fd721", "indicator--feabbb3d-dd99-4bb0-81c2-bf10794ef85a", "indicator--ccc62de6-9d03-4fc0-a3b7-1309d28dda27", "indicator--93c61565-95b0-4448-8a9b-fd0a71cf6858", "indicator--adcbf623-bacd-42ff-9546-ec932fa7d88f", "indicator--026541ae-b624-45c7-8a80-972e7aba4957", "indicator--249d3b0d-f1ae-4daa-b52d-710157310d77", "indicator--0afcba22-023e-4218-9183-3c3cc1132792", "indicator--4a73f089-6aa8-4b9d-80f3-0fa4cc8c2438", "indicator--d5f93389-7e8a-407c-b7fd-7c9b74aff577", "indicator--68b9e14e-4765-4492-8a71-c5bb27a71c0a", "indicator--4e0d706b-8809-4f18-8794-bce370adb278", "indicator--5ac24b00-95b7-45b9-ba34-b2fda0ede299", "indicator--a00d7dd5-0fb5-4210-972a-2644835a952a", "indicator--015b332f-f5eb-4ecf-baaa-1de873dd5c08", "indicator--6b4de648-fb99-4597-b5cb-c46977616614", "indicator--df544356-8ae6-4523-89d1-43f0f4255577", "indicator--09c690de-c338-4988-9d22-11ea8b0b4255", "indicator--f9b88669-69ac-4054-9582-78b2bb732242", "indicator--3a957aba-33f4-4650-9e94-f5967751bb42", "indicator--d9990042-5a27-4388-ba27-0cb69d829188", "indicator--f0a8bc35-af4a-40ad-b66c-bc9962fb11b5", "indicator--fa5c2f0f-150a-474c-8c69-8e2518dfafc9", "indicator--3abd843f-d78d-427b-b2c6-6892ce1b9c4e", "indicator--5150ca22-deac-4596-aef8-c37cc8415c66", "indicator--8a0d933d-4865-4442-87f1-f0fcb32ab56d", "indicator--e3aa7642-cafb-4bb7-83c0-1b8c4b3b1496", "indicator--5d886b09-e9b7-465e-b925-38ddf5b84e5a", "indicator--036d35d2-5a6b-4b6d-8efa-321eba50c1b0", "indicator--36efc57e-fa64-4e3e-844b-8c928c17a41a", "indicator--ba835bd2-31b8-4f07-ad51-dba779da8d1c", "indicator--5535a70c-c36d-4004-921e-9a9ffc998a9b", "indicator--5040c58c-1247-4339-ae92-b50020ec87d0", "indicator--b81b0760-f607-4b33-8810-a376382ba8e3", "indicator--96f20927-8022-41c0-9728-cab2fcd5c20b", "indicator--2f98e8f5-b307-47c5-8a19-bd563a9ebe60", "indicator--0544602e-5e7f-46e6-b53c-4290416135c5", "indicator--97f41dcc-eca4-481a-8746-1f2f725e5176", "indicator--b311ce16-9025-4aa9-a505-5116a05038c0", "indicator--3d2c57ef-8cb1-42a9-b5b4-452d7ccab96c", "indicator--c388f504-8a03-472a-940f-94aee0d96fab", "indicator--87f56625-bb2f-4fdc-8876-8c5d36113590", "indicator--ac87a48f-4776-40c1-a5df-4220fcfafcc7", "indicator--4d05adc3-7373-4956-aa54-f110ddc8aa5d", "indicator--0750d162-3408-45ad-9809-07961b4cf62a", "indicator--3039646f-5d2d-45b4-b65c-f8d455f8e915", "indicator--971b9ff0-5241-42c1-af98-06829d5a002e", "indicator--72ba4603-1f6b-4b2b-8787-048d629ac163", "indicator--26808f61-69e1-4dc0-8212-f30ba1b05dc5", "indicator--379327f4-b240-4fd1-b8fe-4da359e22936", "indicator--0b42205f-fd27-4a84-950b-342a7824e55e", "indicator--67f5c8e5-a075-4476-b5f9-801a98a26eef", "indicator--3f804fb5-0828-4342-abc8-61a5d081454a", "indicator--7f94f659-6aac-4366-81c1-ef2b693460db", "indicator--ebe36bd5-8289-43b0-ad15-7d555deeddbe", "indicator--156e5481-25c2-4c11-ac1d-a456c0e1df1a", "indicator--dc1d9e25-fbdf-4091-bb51-717b92bc5627", "indicator--ea9be8a7-e289-41c2-b5f1-5ddc9634bdbe", "indicator--24f8403b-5116-4198-b2ad-c69a56cae5c6", "indicator--c5d1d0fa-aa21-4c5f-bdcd-a437b9de6c57", "indicator--5855c87e-d604-4142-bbe1-703b0fa0e7f4", "indicator--d1fa7b40-2852-4b68-9ac8-6ce00668a0de", "indicator--5dca760a-1e8b-402e-a98d-1523a76d9868", "indicator--8bec4faa-da0b-4fcd-a63e-fe91accc60c4", "indicator--ef1faf65-e1e9-4e40-89d4-e95b33472ef2", "indicator--5320fdb8-279b-433f-9832-939817a04b2b", "indicator--0dc1d2a7-3ca9-48f9-8e80-5e35f0c1c778", "indicator--545019b4-30e0-4058-badc-cbafe3573c74", "indicator--fe896045-81b5-4b3c-a015-654c07f5c598", "indicator--0529d4db-6e80-403c-893f-b9ba70009708", "indicator--5c732fdd-bc91-4287-9514-d25c3459b08d", "indicator--79a7c91e-cbb1-4056-ab4a-46a505238348", "indicator--e512ee4a-9225-428f-bfa0-f11cdf89e460", "indicator--4ee96823-4ed3-4caa-9d8f-59df8b400ab4", "indicator--4edd8ff7-6f8a-416e-a7f6-95e303a90944", "indicator--ff9a3230-cd49-4200-add4-39c16b222640", "indicator--680bdde0-45d2-462a-9185-8fe2bd46bdc4", "indicator--a316ef52-71c7-4a61-bb26-ca5a3bbb3d74", "indicator--4b8c489b-adb4-434c-ab5f-2429acc65ec5", "indicator--77371b21-7a9f-4a13-90ff-825fcd419f82", "indicator--9bcbb90c-d41d-4188-8c34-56628947e979", "indicator--ae0f7c8d-096d-4d7e-9555-aad3ec95e7ed", "indicator--dbd3cfc7-708a-4410-a7d1-d7c8740a975f", "indicator--50ab0d8e-7361-4d2d-a69e-11e8598d51dd", "indicator--03133773-a595-4ee1-979a-0e925b3f637c", "indicator--9fe8c0de-2a0e-4953-bfa2-71fb1600d0da", "indicator--842f263c-a2a4-4d34-86c9-a9b933f58653", "indicator--bca88ceb-b334-4a05-9817-52ded793a8b7", "indicator--71a00f72-f779-4843-bea4-cb5ae1956fae", "indicator--bc524948-2515-46a0-902c-aa8b6b4c2fe7", "indicator--11b66287-0f41-4b2e-8cf5-5ee39de2309a", "indicator--e18f6af6-c54c-44e4-baad-f48f8ee1b2ae", "indicator--56b8b6cc-e6d9-43ef-8eef-9b81a5e2c6f5", "indicator--b9a5453a-6411-426e-b3cd-3f60c90e54e3", "indicator--c3c2870a-d3d0-4440-957e-0a726fe17744", "indicator--6cd74310-37ac-4fdb-9396-6da799bc5aab", "indicator--182a3271-10ec-44f4-b051-6c66538211a6", "indicator--c4a747fd-f981-496a-9334-14e7c0514dda", "indicator--78c42679-8935-439d-a2bd-d6f4f9b18f0c", "indicator--ff72e911-26d0-4e30-8a15-91ebb87b13e3", "indicator--72d60272-3bfd-4c4c-834e-f8c171ce7253", "indicator--fe7bbe83-5d3d-4e63-82bd-e4a498b5cf12", "indicator--ffac7b1d-0148-4908-af7f-3ecd6afc35d2", "indicator--67ab1614-7718-48bf-a63c-2e9cfe1774a6", "indicator--06ebac7a-8b00-4118-af2c-f0171b13a4c3", "indicator--6bb8dad1-0f9f-40f1-88e5-3f13afd83de4", "indicator--c62c3cac-9db6-4642-9202-96a9021115e7", "indicator--a6c797e8-f89d-42a2-9d41-b1772030c995", "indicator--8a55819f-c27f-4382-a87d-960a57b8aee5", "indicator--5d4a4e0c-d964-4ac9-8644-dea259e26261", "indicator--c961a6cb-99a1-43b9-b91d-7be16d64118d", "indicator--e1f2250f-6dd9-4d22-9d54-5e05b4ce93c1", "indicator--7dea94dd-d9e6-4cc4-9a2d-5f138e5505c1", "indicator--27d2d23e-3363-4239-b7b2-daaccb3d489a", "indicator--6dbd2f5b-c827-4f6a-93f8-eae25219678b", "indicator--33892c6d-b9fa-4582-a903-2814dba93044", "indicator--e29ef5b3-7246-45b6-9b07-b496a0eafc47", "indicator--10238c98-dc37-474e-8432-207fcecb1aef", "indicator--a70be611-858a-4d83-bbcb-0e65e9bc4454", "indicator--0f4f3443-b18a-4cc4-b329-e9c41da15709", "indicator--4e7986a7-64e4-4cc4-bfe0-bcae50105108", "indicator--11aeb3ec-7038-4c98-beed-668c9f0c1972", "indicator--70d31986-d4d6-4d12-82a3-82ee76eb2d99", "indicator--4482a00b-9b8f-4934-8231-b87fc21dbe94", "indicator--46a222bb-b1de-47a3-9788-8f20dc1b21e0", "indicator--0a862b6e-1199-4f39-b835-30945d0f1e52", "indicator--f238681e-b548-4bf6-acfe-94b16eb82ce0", "indicator--004a1367-bbb3-4021-a205-3f9114e1988c", "indicator--c65264c2-9ec9-420f-a2a5-4884862e248a", "indicator--06682adb-22e1-4e45-96f4-f41761f8c5c1", "indicator--9f550fd0-1496-4a06-91ed-b227959e73b2", "indicator--74775abc-5005-4c61-b708-357989f3aaf2", "indicator--a5c0068c-c790-49ee-8432-93c13a0bb251", "indicator--b5891e5d-b69d-446a-a60a-82110035a5f5", "indicator--eb932356-26a2-4523-ab81-be7db76b11d3", "indicator--f6e5764e-8f61-41cb-a47b-dc24f20753b7", "indicator--70e04ee9-8b4c-4925-89f2-9433c0bf1d6e", "indicator--91153919-54d1-436f-a86f-13ce7341cc4e", "indicator--6b384f96-e163-4be1-a3f4-b464d037dbec", "indicator--66c1c6c5-9122-41e0-b5aa-641b73d40026", "indicator--e6c27593-1784-4490-8a96-ec16ae0e5b8e", "indicator--a5c243e5-805f-4444-b465-ef7d7dfa2644", "indicator--07e54501-501b-4740-a33b-24c0c960d711", "indicator--b83d0e90-61fd-4139-8d3d-b4075748c93b", "indicator--7018df25-6357-496a-b5dd-619909bfc0bf", "indicator--541facd4-ade0-4a92-92c6-597519c75a12", "indicator--ff2c7cfb-fde4-44c4-b8e3-719fe786ff19", "indicator--b7e4c9af-5f20-4ef6-ba46-d5926564bdd4", "indicator--0d473d36-15d2-411e-8b72-e27e7e27ae0d", "indicator--2a73a49e-4b58-4a00-973f-bfee55cd51ae", "indicator--80f9d3d3-0593-4dc1-b9d5-2a5111b9d7e6", "indicator--111221b3-197a-4b50-b36d-cc486f34544d", "indicator--5d64f1e4-e5ca-47b1-a9fa-31a313e55704", "indicator--5266d8c1-e68d-40cc-8082-eddda9880287", "indicator--b32e9acc-6428-47b6-b273-ecfe6a9ef331", "indicator--88762892-6e5c-4e35-9d1e-124a1ddf7060", "indicator--b1c1df6b-c043-4270-b637-5934bf44e4be", "indicator--b3685a1c-849d-4070-99dd-e0be7241af8b", "indicator--27220df7-9e0e-41c6-a3ee-19fea5e8ee23", "indicator--892b6742-6218-4ef7-a53d-f378149543cb", "indicator--889c9a9c-888a-4c9a-931e-6bb6caaa93a5", "indicator--e29e33c1-a1ef-4715-9dfd-7557d1fd82fe", "indicator--8f8d5ee6-687d-4908-aa2a-d8af7fa5b9be", "indicator--ecb3a4fb-5e77-4ff6-baed-5e5ce05c73da", "indicator--4c06db5a-147b-4b9f-802c-58932787d197", "indicator--d6b03a9f-4951-4b9a-90a5-5d45f1976508", "indicator--5963fcb0-5126-4fa0-a120-73918355fa70", "indicator--f92568e5-7634-436b-b382-64067c3c1b9a", "indicator--9c805ed6-0738-444d-ab80-0ddc1896854c", "indicator--53a5a5c3-3df0-423e-a3d8-f674ad92675b", "indicator--6c0baf3e-f0b4-478f-8fcf-7de010427bec", "indicator--51fa608e-7348-4106-b821-5b7c9f858d42", "indicator--2cadf921-856c-48d7-b964-b17caf35f15c", "indicator--a7a5c69c-6409-4b53-9e53-a4d44dbcde9e", "indicator--3210e73d-1521-4e91-b455-72b9761df169", "indicator--23fde0ae-bcb7-4ab2-ac0c-e3a2ae914e8e", "indicator--469cdf5a-5339-47f8-92ef-0e168a2d26ba", "indicator--6237b6f5-49ee-4ba6-b374-0008167fb399", "indicator--d0884884-26d3-4110-8ef7-27db1450932d", "indicator--790f2b91-be27-4f19-baab-8fd202fbc8de", "indicator--b3ae2f28-6f05-4e18-ab5b-38f0f57fbbc0", "indicator--5954490b-dfe9-4cd4-bf8c-ba839e0c9b09", "indicator--0641e828-1370-4da7-af00-7d9590f8dc53", "indicator--ba65419e-d188-4cd7-9f9d-80bfcbc0681d", "indicator--9ea06f93-c9f5-47a2-ad91-6e5f157105e4", "indicator--b94b4633-0ef1-4308-9719-f1d33a76a4d6", "indicator--31e320c6-9789-4c56-9b8c-3b5fc2957f24", "indicator--640c9fcf-78b0-4d90-8418-db7021aa4b21", "indicator--0d7b5dd9-a83c-4973-8662-01f281d04d4e", "indicator--450ca267-77cf-4135-ae9b-0d4365949d22", "indicator--d26c81f5-fd4a-4857-a347-4faf37482c56", "indicator--9801baac-c0eb-4d25-9798-968f937632a1", "indicator--0f8682fb-4524-4fd7-8077-cd6405f022a6", "indicator--431564d4-c038-4cb4-99e2-53bbd6260084", "indicator--5ce1a179-7382-4c0a-892c-cff3c6e3513d", "indicator--e3277e17-1678-4096-8542-9b89739f0980", "indicator--055b0968-24ab-42d4-93eb-651d294b9dec", "indicator--cadb22c9-5cbd-42b0-8a98-778b484cdef5", "indicator--0f50234f-c15b-45d1-8f49-cc91c934d0e9", "indicator--d35906c4-e2e9-4c85-924f-e57e1a1357b9", "indicator--83f6904a-7614-44b7-9bfd-4bff96b71f4b", "indicator--3b8622f6-4291-484f-ae9f-4edaf30a018e", "indicator--e1e1b5dc-665b-4713-a3e9-771e4652af72", "indicator--ff4764ff-6058-40f8-b4c8-1c665d8bc4af", "indicator--f5f8e228-6b12-498d-9456-25324080bb8a", "indicator--aed57ae2-8985-4dcf-833a-42951e40ad41", "indicator--43a8c626-8377-4f3d-9ff8-ae7e7c3b5b4d", "indicator--51c8f1f2-7ae6-4fec-a0db-46ad5b35c094", "indicator--bc423c7f-fd25-4382-9cce-8c29d59c1c1e", "indicator--f90da525-f338-4fd7-9374-6a4e47207751", "indicator--8beb82ec-60ab-4c1c-b09b-7179c5705747", "indicator--3944c074-0c92-47ad-8908-382effdc2fa7", "indicator--5fbaa86a-c90a-439c-ac33-e9fdc2df1d81", "indicator--9824bd04-97cd-4614-9017-5a5bcd5fcb91", "indicator--ecf4efa9-9c4c-4a44-bc2b-c429cf9aa7cf", "indicator--516c6a23-4a74-452f-bb6b-29935c0c5743", "indicator--0d5c74a1-8b45-4a0c-b9cb-e068b0a036e7", "indicator--47997d26-974e-46bf-be2b-35fe215cfe43", "indicator--32b17adb-22a6-43e4-a21c-4452067d06fa", "indicator--4618aa89-2278-44c1-9ff0-2fda09b07920", "indicator--84ecf088-0859-4eda-9d7f-26351168c93d", "indicator--8eca05b8-a01b-4ee6-bdb2-ab7c6d0378c9", "indicator--83981fc6-fc5b-4033-b5fd-51003db44f9c", "indicator--ce881c67-2335-4f0e-9dfc-0cfd8534edeb", "indicator--e2bb1d58-5619-4969-8f67-5ac77d905323", "indicator--404752a6-f67d-4455-8057-a880eed4f4d2", "indicator--86334749-d2b7-461f-9d64-b3662070169b", "indicator--a4781fde-215a-436b-98e8-bfef6f470315", "indicator--39a4893b-f5ea-4cc2-a0b4-69062fd5309c", "indicator--fc1de712-0e45-4d2e-963c-983411aab45c", "indicator--c96f685a-e8c5-417e-8dca-f8e3421cdcb6", "indicator--3818e985-3897-4f38-8f99-058a06539da9", "indicator--e69a3491-2163-4117-ac19-95c7b9c40c0d", "indicator--040bb94f-5c49-4993-b540-2f1e5068aecf", "indicator--4169901c-3edd-4552-96ba-a21abb7cb78c", "indicator--17638cf9-283b-4836-afc7-a183cda7e667", "indicator--24bdc1dc-b0ac-4acf-9230-3378a1c0e74a", "indicator--317cbb86-6112-4bb6-80ad-b9990968b125", "indicator--517332d0-24dd-49cf-b3cf-c37adb194d1a", "indicator--85c05dd0-a8b0-4c5a-958c-4d8d25bda9ba", "indicator--09b1d469-5957-4b41-8e2b-ddc76f737481", "indicator--c75336a3-8b41-45e7-af51-679d329c81b2", "indicator--b9284df3-bc3a-44bb-b15b-80ce9570b07e", "indicator--54520923-09ea-43c2-882c-a554370cf9fa", "indicator--db22a7c3-003c-41b9-a032-8a341fc49e38", "indicator--f39f3b58-4122-4ce2-88bb-c294f2b3dd43", "indicator--ebe7b682-2736-46cd-8e5c-bbfc9748b6bc", "indicator--40145d45-9a98-4848-b4a9-56db930eaf5e", "indicator--8b0deb14-df77-47d6-a4ce-6e9dc0b9a511", "indicator--8f3cb481-2a50-48b0-a664-6c5647a4d9b6", "indicator--4f72b3a3-6a4b-4281-82e3-7adcc2de072f", "indicator--59cf2b32-9b0b-467a-89a4-75f0d10e9ba3", "indicator--bbf05d4a-0314-4438-9505-d5cfcc3217fa", "indicator--522ae093-5016-43fa-bfc8-1cee6814db0e", "indicator--eafbd67c-fdde-44a6-8fdf-80e5dc0206a2", "indicator--7f0a1857-4203-4ae9-8ca8-78f5baa7806b", "indicator--cd690b08-2c72-4566-8621-a5184832c614", "indicator--ba657614-1863-4c79-bc99-3d1bfcbec31c", "indicator--57fa8a99-e4fe-41b7-b2a8-277c7594be23", "indicator--71052906-aafb-466f-b549-58c61d5fe8b4", "indicator--6d8773d4-14ec-4b0d-87b1-3cbcb4119b44", "indicator--aa9d4c7a-b268-43d9-a5bf-1b0592cb4c4a", "indicator--aafeadc8-11f3-4a85-ac6c-f8c6de9b3343", "indicator--ead26e93-d160-479d-a24a-9b5641b8bc53", "indicator--7e0562fe-60f3-4e6e-be77-e65acfdb69f4", "indicator--ca181057-2f0a-4080-b80b-8f3d692b5dc5", "indicator--c801fddc-195d-4eb9-84cd-5093d6ad5aa9", "indicator--5f2bb23a-1fda-4b8a-83d3-ab0758901daa", "indicator--f7472785-d6ee-453f-8947-7c5a51d49f33", "indicator--a72a0010-d043-4f4c-9fc9-ec30eacb8f34", "indicator--1b9da328-be95-4f4f-9299-5a55582d82d0", "indicator--5eac4463-0c10-4b85-bea7-e19aad3caec2", "indicator--18f98ca4-c8b6-41a2-86d7-6f42d212bfa4", "indicator--cd5e33e1-59bb-46c2-a571-f5fdb36a009f", "indicator--70d70f98-3a0a-4254-b23d-9a23bc3d51f0", "indicator--d024b93b-d1dc-4753-9ca7-d9cefadb853e", "indicator--b5a43ccf-785b-4498-9ec6-8f856d823151", "indicator--61ae91d2-dacf-41c4-9330-59411527999e", "indicator--1ff23d73-1c05-425d-874e-a5939836397a", "indicator--14da5c2d-3381-496f-98fc-f4a11e7bcf79", "indicator--1b71747b-57b2-4120-aa85-07910c618f56", "indicator--abeb1ccd-7a96-4d23-b711-66c54857afa4", "indicator--dd32d9e0-78f3-46b2-a368-23a768f29346", "indicator--9f7528c5-61ae-46eb-a53c-da5829c67b7f", "indicator--536337e3-0acd-42ea-9b85-69aa75dee700", "indicator--d778e8b9-13b2-4a28-9b72-df20f37efbf8", "indicator--04c540c6-7d84-46a1-a7ed-acde2f7f0f29", "indicator--5706eba8-06b0-4b70-a8de-bb1a6ad82d3d", "indicator--1834dde9-f665-465c-adfd-598f4ea90119", "indicator--377b1e71-41d3-4855-b63e-cf1afabd75d6", "indicator--2306e3d8-68d2-4e48-b682-cdb44160c318", "indicator--107dac8a-102c-4e05-941e-9bbb16e7733c", "indicator--17f3f0b9-01e4-47be-b852-0712aeebfba4", "indicator--f50ef41c-38b1-4287-92cb-d7e31fc60cee", "indicator--cc62cfa7-344b-4092-95ba-0495a11d8fc5", "indicator--a0e72ff4-57a3-4d9c-afb5-42370312b40b", "indicator--9a16bbe3-9836-44ae-9952-7fd96a5553b1", "indicator--4d4bd099-474c-42e2-a34c-e0c217e561f4", "indicator--51b20a47-fe3c-4f19-adc8-ab30548af5e7", "indicator--cdf4e9d2-910f-4a5c-8ef5-ed97d86ccd3d", "indicator--6854d4ed-432b-4e75-81c4-1a70a57ac90a", "indicator--3f380547-9c93-4151-886b-07d385829e09", "indicator--ebcc20f6-736a-4a14-b314-4e9f2bdc1ca6", "indicator--877a3d15-9d8d-45ac-a5df-d14e90a6b57f", "indicator--3ed36fb4-9fbc-4de8-96e8-e15cbbf98c9e", "indicator--f6af9f5c-ae68-4f8b-91a6-4e307fe2ff68", "indicator--fcea42da-09e6-4a28-a6e6-2344505d1a2f", "indicator--65b8f95f-5b75-41ab-8dd6-b2235fadab6c", "indicator--8f826c16-10b0-4402-bb3b-2dbfafe04e20", "indicator--94342cd0-9a05-41fb-ab0f-04844f7a1f93", "indicator--9e01a446-9ef7-4762-84ca-8a952f3fead9", "indicator--907b4c14-9628-4755-b03a-0fc6a8d8eb0b", "indicator--2b1db6da-5450-4c7f-a663-74cab2d24ede", "indicator--37535129-f9f8-4e7b-9c6a-5109c87614f6", "indicator--2d29a863-a276-4e4b-aae3-40def432cad8", "indicator--a407f8e0-3649-4771-aa51-3366d25b2591", "indicator--bbbcf036-1ea9-41cf-b5d5-48397a937ed0", "indicator--47554c22-17bd-4f34-b445-256b8d5448eb", "indicator--d709d045-7e67-4b7e-a518-3f0f384883a8", "indicator--f8debc81-8259-4000-ab31-273348ac3db6", "indicator--73197d79-f3da-44bd-b726-a524e9f40a33", "indicator--e1e36eee-95d2-4e3b-b8ea-4e658c3c649c", "indicator--61c48f6f-be3e-4585-95d5-5f00d988e321", "indicator--bf8fb6c7-fb37-4823-b469-bc1e4f6e176d", "indicator--d1018f93-a35a-4517-be55-e6ec3010628e", "indicator--0d4e42ee-2261-41df-b813-78331fe589fd", "indicator--80fc5065-ab06-411a-b983-4f2a079a2712", "indicator--09bd5d50-2674-4577-b211-946d33ab4128", "indicator--f72d9a0d-12a3-47fa-a739-7dea8a849a97", "indicator--fa279eac-36f1-42e4-a205-24b97361feec", "indicator--73f1b6ae-5bfa-4cfb-9ae7-78d01f7bf8cb", "indicator--f06d0831-f57b-4f7e-aa17-364112b47c6b", "indicator--954ef32a-ebe2-4938-abcb-591f8f19bfef", "indicator--185abd9b-40ee-4aea-87d4-22d636d4e35c", "indicator--2fb372a9-22fd-47a1-ba8f-98ca5184fe2b", "indicator--83207f9d-6728-4208-b174-d4efdb65c44f", "indicator--1a54c9c5-8752-42b4-81a5-f9887ebbbd8e", "indicator--5cd5b5c9-9c2e-4030-a72e-7d31b9859beb", "indicator--6b7ac1ac-fb59-4d0d-bded-6241432c7a1c", "indicator--b85b3414-846e-44c8-bd7a-402a7b409b55", "indicator--f2f339e7-c000-45f6-b1ee-3e9e9b4c48d2", "indicator--4092920e-9410-4e28-9757-e7377e38ae78", "indicator--f1006570-7d45-438d-bd79-c33b6c31ae04", "indicator--6b72990f-e2f6-45b4-943c-a82231645ba6", "indicator--c687746c-6910-4d6a-bd7c-c1b0d976517c", "indicator--25ac29c8-78e2-4892-904c-1f3372f16acf", "indicator--59279396-ebdb-477a-8e63-29fcc4b665ce", "indicator--56feab40-db7c-4b9f-ae05-a9ae428809fc", "indicator--4ad61a6c-2c6f-4b68-8c26-e576cbe09ed6", "indicator--d3f8e1a9-106d-44a8-befd-41e36c828dca", "indicator--8106d03b-e42d-452f-a2d2-80ee7afe1d79", "indicator--77afbbe2-144d-474b-b39e-706347b6fe87", "indicator--d5337715-41ee-4b20-8a1c-f8635c47bb4d", "indicator--317e679c-f148-4d18-ae07-4c6670f426db", "indicator--34f0fefa-c57b-45f8-99d6-135b937a1efc", "indicator--91fc10d0-c20f-4381-b0e5-64694614d4c8", "indicator--610505d9-8ceb-4a53-8209-35ec0ceb1f61", "indicator--c7f0d34d-af52-4e84-9018-7cfe1f861e01", "indicator--1b628772-1bae-4b8e-a7a7-638380e8c77f", "indicator--dc589368-2511-4eae-90a1-f4432c60869f", "indicator--ddd64080-4dab-41ce-b584-e102ea6cb15b", "indicator--534adba9-b76e-4583-90a8-d47b91968bbe", "indicator--e43c67c6-94c1-4394-8d88-bd7a55412008", "indicator--e515e052-3a87-4477-b2ce-f1e4d4791148", "indicator--ca3525a2-f62d-4c4d-a7fb-2ea838b9da6a", "indicator--d55ef9a7-bcaf-4b88-b694-a62366dd3749", "indicator--ebd285b8-6b66-4e41-81f2-154d65376f45", "indicator--d75c16d5-0836-44f1-bf04-f2fa8bab3676", "indicator--b99fc310-bdac-4c3b-9e60-e6416913e98c", "indicator--cab282f8-d96a-4bf0-a451-fa8d47f2268f", "indicator--98c59dc2-03ac-46d1-ad7b-0c78c936e4a3", "indicator--2669b54f-e9ea-47e9-844b-002d07013640", "indicator--28df8ef0-efda-4eda-95c6-f164ab185b4b", "indicator--c0dbfcd1-f368-47fc-84b0-7fd39cb83386", "indicator--d96c717e-a4d4-4427-a081-9a6d5349bb86", "indicator--c9d0dfd9-e332-401b-9ecb-0933cde0f060", "indicator--11a9cc7a-87f9-46ac-a03a-22fc8e174069", "indicator--349a8365-d121-4157-a098-c9e6fbd102a7", "indicator--a65e5f98-e265-4f65-9520-3e3b9cefed4e", "indicator--7fa92ed7-8ad9-4393-bc04-7e947769f896", "indicator--d40f69bd-5763-40d5-8940-f34bb2ad305b", "indicator--93efcd3f-1ad7-48ff-96e8-0f2d67198285", "indicator--3ad470c7-7003-4fc6-9f65-5be629075494", "indicator--b3fec520-e0a1-41fc-93d2-a24d27024e91", "indicator--2474bf29-7d65-4de4-b3e8-583a92cb1d46", "indicator--5a1a188f-cf45-46d2-8bd3-cf6cc634df7e", "indicator--f0419f02-e008-4ba9-ab4f-ef260eee1f61", "indicator--ff9de8a2-dd17-45b1-9726-2f613cfd0cc6", "indicator--5b2c7845-eca6-4516-99d1-9c545e12f960", "indicator--03077877-9363-4f82-9a28-65599cb56076", "indicator--13e29c2d-4b7b-44ec-8026-c7c6453f5127", "indicator--0f775253-59cc-42fd-b296-0fb03725d830", "indicator--01d979de-6034-4525-9b11-2635a429af72", "indicator--290f1e66-0025-4586-9353-db939016898e", "indicator--bf2e92b9-ae36-4444-aa5f-eea80826c0bd", "indicator--ed065016-33df-40f2-90f7-145a9196fdd7", "indicator--2e3782b5-5985-49fe-9591-fd7a70327689", "indicator--7d2b9937-405b-47c0-8eba-7603e083ed93", "indicator--f3ec6e04-f91e-46e9-bbad-9b8ed1a54de1", "indicator--28f70ea0-c12e-48fa-88f8-f59b2af06b45", "indicator--46cffb20-4f55-48be-a057-e440ccb00f79", "indicator--6bf56f7d-902c-49ed-b21e-d81608af8d25", "indicator--e64fa299-58ac-41ba-974b-92155f113047", "indicator--9dfe9296-bb8d-411f-9386-8fd6c4797264", "indicator--053209df-2775-4316-9b32-19ca46598ee8", "indicator--4d73a27d-e152-4ad0-9eae-940985721392", "indicator--d4abe877-80d5-4d47-9af0-ae74ab499aa4", "indicator--ab1366ad-9577-44a7-9a0e-84f9f7fab1a4", "indicator--65a8e5f1-bf84-4578-8565-b482ddceda75", "indicator--518ad1b2-31c6-46d5-bc00-fef7f39c41b9", "indicator--3f05cb26-dec7-455e-a6be-29371d34535a", "indicator--9d08539c-cf17-4ffa-b006-687e0907e5cd", "indicator--5fc825e0-76fb-4e39-8dbe-81165f49e152", "indicator--efa8158d-3f68-4cad-a5e7-5f20c33debb4", "indicator--03e17917-2841-4a38-8a92-bf3a0a036b01", "indicator--0defbadb-167e-4810-b074-3e490dc43283", "indicator--95104d5d-f230-48b8-9643-25b04ee76eed", "indicator--a4de84cd-0e61-4883-86a8-5956ef4db170", "indicator--a8adf705-ee92-45f9-8307-5c1d9c5106e2", "indicator--273afd9b-3fcf-4b87-9f86-065d74fa62a8", "indicator--3f2998b1-d7ff-4f42-9374-2315ad5bee82", "indicator--aad3ddfe-2494-47fc-b8f0-3b482764c155", "indicator--4d1b60dd-f5bd-45bd-ad79-6231ebdfb63b", "indicator--1e372599-6f6e-450c-9945-e4cfba1da18f", "indicator--975ec3f8-7231-4db8-80ab-757fb5597c86", "indicator--62eedb7f-76da-4794-9883-daf1fae77724", "indicator--c0f3a28e-cdc1-436c-8070-7002f1198a86", "indicator--87d71b1a-78a0-42b5-89a9-27923e203e56", "indicator--e20fa5e5-e9fd-4993-a156-91391b7897e9", "indicator--fb431ec2-81dc-4ad1-aeff-1fbc651642ca", "indicator--3c6c2eb5-2cf8-4604-aa79-99e84f2a0b5a", "indicator--e6f73e1d-7d61-4685-afba-7aa916b665f9", "indicator--abacc21a-0381-4eff-9e71-22eb0ecb7e1f", "indicator--bebcee76-8a7a-4d1e-8bf4-3ebaffd4413a", "indicator--6273f20c-6178-4ca5-86c2-c8d8bc48994d", "indicator--e2ecbd90-4398-4146-aa8e-dd6fb7ae32ef", "indicator--cb6aaead-32d5-4eca-a7a5-83afb86bd7bb", "indicator--bf6b1ae4-b3be-4667-9eda-720c75c2edca", "indicator--d63b4d05-9671-4d12-ae35-ce34fc729760", "indicator--635a6a66-4e63-4b37-84b3-a7fac20d46f5", "indicator--06bcf366-3961-4ea7-b99e-13bff6dfe56b", "indicator--0bd65bac-e9e5-4ffc-a0ba-0f87612f2ac0", "indicator--16c2d5e5-db90-4668-a4a2-797e2eab28b1", "indicator--98c89e2e-d5f6-4dc2-a6c9-4572f36a076c", "indicator--7cbc403f-d6b8-4827-8045-44346f02c123", "indicator--4fbede46-03bf-4c0a-abea-1c65cc05e7ce", "indicator--f61b1636-4153-45fd-9b3b-4138cb260fdd", "indicator--2b308521-90ac-42df-a087-aa8b0d784a8b", "indicator--5c04a5fe-3b43-4147-8cb0-8f2eeee4f8c2", "indicator--835394c5-fd6d-4139-b70b-60e45e9e379d", "indicator--043a3b2f-4dda-4e4e-80a9-ed34f8c9f676", "indicator--30a90339-86bd-48fa-a4e3-562c70e79606", "indicator--bc686cff-35a2-4b30-8e04-7ea5514258f4", "indicator--63d8dc28-68a6-4ea9-a884-e74e409e2df8", "indicator--b60f57ab-5922-4297-9060-055606d7b5ad", "indicator--752dff6a-c77e-43f6-9f9b-4604cdd5f1bb", "indicator--1ac44984-cd8b-484b-ba54-cf1601c180fa", "indicator--87bf317a-98a0-4694-b37e-879ac6891164", "indicator--a93f282a-32db-4f23-924f-f4e41b6104e4", "indicator--9fcd40bb-f4bb-4f2a-9285-ba283a253b96", "indicator--dd877dea-618c-493b-bb36-a1579b1e3fd3", "indicator--8327557f-371c-4525-b625-a51442dc9123", "indicator--256a086c-24f7-432d-ac0c-ab2c4ba486dd", "indicator--68496eef-ae01-4a4c-9ac2-a1932b68931c", "indicator--1f63c7c4-1758-4bc6-bf36-b8da1b42beae", "indicator--b8068f2d-6756-442c-8f41-52f8069b5943", "indicator--4c6e31f8-79b4-440d-9d68-4c052d9c36d5", "indicator--c748c035-48e4-4c13-8eaa-866312cfb75f", "indicator--537c7f71-61b4-40d8-9784-5033a20317e9", "indicator--243f8352-e76e-4fd7-bad8-41d3eb2ab7bd", "indicator--b8260f62-1e70-45e7-837b-a5092e0247b1", "indicator--e0d8a6df-5be1-4e03-ba14-2f1de8ee2652", "indicator--a04a8598-3ac7-4550-bd64-99657d5fe09f", "indicator--6a65b599-a785-431c-988f-742280e6606b", "indicator--035cd731-c71f-4d1a-820b-d7c41ae4b118", "indicator--cf34826a-5514-4be1-9fce-51cff61fd7f7", "indicator--895081ec-5f22-4562-9246-dd4483763c9b", "indicator--9d4294bf-0e82-4ca3-ba58-4b7ed8cc9783", "indicator--769fa130-2751-40b5-a8d0-a39a8c6cdeb0", "indicator--a73d4c65-166a-417e-b617-f179f9667c4a", "indicator--8f565da7-b270-4ccf-a054-5211f38f0c68", "indicator--2115f424-0462-4f56-a528-c901224e94d7", "indicator--f3a33c2b-d6c7-4f0a-9442-5ed687ed8cf9", "indicator--76edffe0-8e78-4264-91e6-6fb94aa3e935", "indicator--c72d7716-2cdf-4c76-8087-3a0b31f15e44", "indicator--66ad4cc5-1282-45d3-ad04-a89f106fc4a5", "indicator--46b8dc94-333b-4ae8-90f2-5e0976277d80", "indicator--883af3ab-7631-44e4-abf2-6540b16a271b", "indicator--507b699c-363b-40e6-b8bc-9eb947544862", "indicator--b50257ad-3949-44c1-9cb0-abe43f348e27", "indicator--3bafb9a4-912c-4622-a5a5-07ebdd014330", "indicator--5f47a2a1-5f48-427d-b4bf-0f2c0838464c", "indicator--d01f8d4f-c04d-41d2-ad11-60580ce75a6d", "indicator--596f7434-941a-48f3-b040-3eb377f14e25", "indicator--6ed67a39-0741-43c3-8cc1-cbf745f359dd", "indicator--19535d82-0242-416f-b5ff-c97cf7ed8b0e", "indicator--2846c195-cf7c-4203-97d2-fd7186eb821a", "indicator--033aae8f-2e0f-4eca-8617-a97be03bc7ea", "indicator--851db56c-eb3c-4f20-ba92-0ea09c5144f8", "indicator--23bfce54-c8eb-4e2b-8a1a-1de08fcd6fe3", "indicator--a4c707c7-7aa2-49c3-9148-616eb8c27d50", "indicator--f892da00-423a-40df-a8ec-a73f93137837", "indicator--224098e0-8741-4575-9b32-0c2ebcc96a79", "indicator--21f14ba4-0c0b-4ab4-a59c-88bbdbf40e86", "indicator--d17001c9-6ad4-45ea-84be-23f88c59acc0", "indicator--7804a70a-57d2-4d8c-a3e6-a66d2139aebe", "indicator--6278cc69-9f0c-4222-ac28-de3252be1265", "indicator--c02ca1c1-8107-4db4-9081-dee231ff1526", "indicator--3e9d12a8-427c-40ce-8a86-e16bee311a25", "indicator--a098dbf8-e8d1-428b-816c-74910ff1aefb", "indicator--107543a8-d1d9-4b75-85e3-478edada666c", "indicator--74fba084-b508-4070-b671-e5ef51520367", "indicator--6b4b438a-2eab-4dd9-a6bf-1ad4392f4298", "indicator--6866bfb1-d82b-436c-baea-7a270d725f6c", "indicator--cffcf6eb-83ed-4424-ae15-0b4031968ede", "indicator--cb167f97-ff05-497d-9d7c-2a1966e01cc6", "indicator--35151728-fb9c-4068-9335-b7325104f834", "indicator--3d854c43-8099-4b2e-ae79-b61ecea4f364", "indicator--6cfc9b18-7b2b-4174-b657-8c2027cfecd2", "indicator--06db7a7e-3d03-45ec-9ff1-b6b829c0ea2c", "indicator--f2f53dd3-e58e-4055-a8e1-09502c294966", "indicator--5b05703c-dcc5-47e9-936b-d11c8e9bcf85", "indicator--ca3dbc45-7936-4bbe-bcaf-b0504c052407", "indicator--c2d47eed-bd2c-414d-a99e-5c4af537fdd7", "indicator--b12a14f6-f0cc-48d9-a67a-34703e0f77a6", "indicator--9e7c1682-252d-446e-b46d-0c70f0b20856", "indicator--5a4926bf-7cc8-40e1-945b-e27c3f1605e9", "indicator--f82b0347-1478-4763-ae9a-010ef143f23c", "indicator--368fb969-01ef-4db6-9d9e-a1a68d1f8ed0", "indicator--0e290bd4-7d38-43de-a45c-850fa5b535d4", "indicator--4acad0a0-f51a-41c8-867a-d0169f52bbdb", "indicator--48de57e2-2610-49bf-8df4-59a16570e0c1", "indicator--1f2bd483-6918-4732-afd0-f8408ad42fe5", "indicator--46332803-52fe-4462-95d4-b697c88ceb62", "indicator--2b798db4-b722-4aaf-8858-51960491a52a", "indicator--c814808f-0217-48ba-933c-ecf071a1b873", "indicator--3d502fbc-018f-44b7-a6db-f404593177ee", "indicator--57d6f3cf-0376-40fc-8688-399d6ea97381", "indicator--2ffaca34-71ca-404c-b995-ae60d958c13a", "indicator--cc6c7d43-c436-4c4e-ad4d-138817baffd6", "indicator--4dd3a28a-43d9-4378-9faa-7295acbe08c5", "indicator--014c1141-62d3-44ae-ab43-04ef4caaa1f5", "indicator--e4beff35-4e85-4165-93bc-a8990c072052", "indicator--2ced8ce6-439a-40cc-8c6f-b5c4b03343e0", "indicator--521883fb-c5f5-4118-87ff-1a4640c0c3f4", "indicator--803c9e98-3f9f-45f6-8093-fcbb377b5d8a", "indicator--5e63bbc4-b166-4f42-8663-1b0d13d6a5f1", "indicator--c7dd70ad-1069-4614-ab22-eec0c05a73ed", "indicator--a5f73b06-a841-4392-b7bc-8d423ada9bb3", "indicator--5a8c5c1e-0086-497e-9bb3-1df4537871c5", "indicator--3750993b-3054-4697-a3ed-208712e8de84", "indicator--730bc91b-cfb1-4ba8-9a9f-0501d3e19fd7", "indicator--9c8bf1a9-8e90-4a88-afa0-79d6ddcdafdc", "indicator--dd69a7d8-f442-4400-8c6d-b94c7f4afbf6", "indicator--04a17bd1-777c-45be-b84e-7a91e18e6f08", "relationship--2a27da0b-7ec2-49d8-a430-a4a0bd23369e", "indicator--b6341df8-d612-4705-bb22-495fddd5d2c2", "indicator--2a14e23b-92fe-4279-bcfd-e8bb6604722a", "indicator--7ef991f8-80bd-43a5-a04c-1499223b3e36", "indicator--6c296b1d-c5bb-4ef4-b775-489e43105e8c", "indicator--6caf3a9c-2e1b-4547-807a-be5a243706fd", "indicator--f609737e-e027-477c-a622-2287251df3b5", "indicator--6d9a3340-3f85-4a45-b4df-fcac3bd1fb9a", "indicator--3ba6666f-4f8f-42a7-bf8c-b247f28cf8a7", "indicator--e152ee48-b882-43bb-a3d3-75bf01a9da9e", "indicator--3a3b1756-a4ec-410e-bf24-735c586bdd5d", "indicator--e6589402-570c-4372-a013-6fbe1ff946ca", "indicator--868c266a-659c-422e-a340-98c5fc37e35f", "indicator--4bdba5e7-ee8b-4fdd-b28c-927f226f252e", "indicator--a988dcfd-c2ed-458c-a3b8-444f4fc82815", "indicator--54d63812-262d-4137-b5bd-d544fe36bda4", "indicator--39cbc3df-a25b-44f9-a714-b261c3e8cb74", "indicator--a4c32112-e4c0-49c8-8b5f-b5e668e7a48f", "indicator--c0c6b756-06b5-4a4d-b261-2a17cabbdefc", "indicator--54657a30-89f1-4f8f-bc6f-06716c2118ed", "indicator--5ab4bd4a-bee1-46a3-bd66-fcb3defca66b", "indicator--1fb802b4-fdf0-47f7-8be8-3fe383952b19", "indicator--8c80dbc2-923d-418a-bd4c-dcc80b499efd", "indicator--52c8410a-5fdf-4cad-a941-5427dc6e0ba8", "indicator--be5b72d1-19b8-4dc8-b958-2946f4fec874", "indicator--c44cb218-75b3-42e7-8ef2-27f45c69fcb5", "indicator--19386b6c-47e8-4df4-a887-9d51eb0a288b", "indicator--733e73ac-68e1-4850-aed4-96d56c0c64f1", "indicator--e102b1e4-3c65-4a0a-93ce-ba464584e181", "indicator--96d4cb6d-0ece-42ba-a1b6-04a2b2196ce0", "indicator--ae15b4f3-32ef-4e5d-9dee-23842f636b2e", "indicator--49a48a48-9bdd-4bbd-a145-f6b3139067a8", "indicator--88042c5a-61c8-4a6e-9264-b1b19e1b932f", "indicator--786436d6-86a2-42b9-ab04-b46ac3a2032d", "indicator--ad77d9a6-a2d6-461b-b5bc-04d0190a3ff6", "indicator--75051c6a-2586-44b3-aa40-d32d63df08a9", "indicator--dd6c6f1a-824b-42bb-980d-9c9190d20199", "indicator--c9ca5b2c-8807-4172-b907-af2385c9aa36", "indicator--751c87e9-f533-47af-b3b5-58d308ef86e2", "indicator--2d2db520-0e80-4653-85bc-f6e7049abdbf", "indicator--a4eb4c98-1812-4520-b97c-c6ecf7e32aae", "indicator--2b36c56d-c964-4e3b-a12f-50ad65c479f7", "indicator--16625def-26b2-4987-bd14-3dc23b8063bd", "indicator--a1061cad-58a2-403d-9ebb-ba3a6c1dc156", "indicator--2ea480e3-a479-41ab-bdec-0d977b13aea3", "indicator--e194cb74-9f16-40aa-81f7-73c76fbd035f", "indicator--15080a3a-2591-4c12-88dc-9576cd8ce2a7", "indicator--1fa0ef96-9634-4f0e-9bdd-f3e16efbe7cc", "indicator--0dfa76e1-7716-4180-b292-69a89117ecc6", "indicator--0f8b451d-8908-486d-ab5a-21490d69fc8f", "indicator--61b90f8f-32f3-40b5-8934-fd415a65a577", "indicator--3de77e64-37c8-4b02-a581-aefb87a2e4a9", "indicator--dba2513f-257a-4233-b74b-cddaf2f77f3c", "indicator--f0b65fab-af3c-4602-a14c-e91a5f43ef33", "indicator--37f722e5-74c9-4f97-9241-14bc879ad2f7", "indicator--42895850-0aa9-4dbc-ad24-5e0577cfd59a", "indicator--fc3d56be-82b3-438e-b812-b30087c9bfee", "indicator--0e2ade49-1af3-4ed9-8ef1-e9e6404e480b", "indicator--43a725f7-a5ba-423c-9f7a-ace9a6de7761", "indicator--920e864a-29ff-479e-879c-6bdca3233847", "indicator--35249323-0633-4237-ab28-204d8988ee4b", "indicator--50ea6a00-80d5-42aa-b926-2db851215b7e", "indicator--397b7f87-6deb-4314-9fee-69ec79a41904", "indicator--808fa9df-f630-4db2-811b-65f1ff2a9628", "indicator--a50101d5-f78f-47b8-b936-6c79190dfe43", "indicator--6b96db7a-6ca9-4d7d-a859-2b577978d2f5", "indicator--a3f130e7-24ab-42a3-88de-dee3c09f719f", "indicator--5667e082-65fd-4a64-9a4a-9b47abbe06c1", "indicator--183d2f19-3eec-4eb8-91dc-410ebc2bafbf", "indicator--d1944867-4834-4e35-b333-7865d846b88a", "indicator--34ca3271-4f78-4a78-bacc-ce31dd807d72", "indicator--c7b22600-6bd9-4749-8f5f-225ffb948002", "indicator--6ab6edee-6739-4f81-96e3-37ba322aba22", "indicator--5c458539-2f09-476b-aed7-e306fb01148f", "indicator--88240bab-baa9-4867-a6ac-30b7d81b1465", "indicator--ced4ed18-f708-451e-82b7-b4ea05e8f09f", "indicator--387f1962-ad39-4647-9dae-1036a3c404a8", "indicator--a2e264f0-3608-4895-afae-25965b3a1633", "indicator--0b0fca4d-179b-4abc-9f10-55a8fcb9e0fd", "indicator--d9c1b1e3-ce43-4f0b-b769-bcaa51d6eab1", "indicator--f9b0d5e3-d5a6-4e2a-a33d-6bfdc025dc30", "indicator--752fc558-3c9b-47be-9640-a552766029b6", "indicator--36657fa0-0f65-47e3-8ee9-41f91aa6dcb2", "indicator--432e1559-a507-4f62-8534-daa9b6accfad", "indicator--1341d918-ff74-43bf-b581-2a699d6b7f40", "indicator--8f0524de-8463-4c8f-bc76-390229fe0a2c", "indicator--2d1eb47b-0875-408b-bde0-7d9e22f2f6bd", "indicator--7a28b3be-1f67-4963-9496-e686318921e4", "indicator--a8956da3-3c4f-45b7-a10d-f2e0390d8116", "indicator--df3870e7-f845-43be-8763-470800cfe529", "indicator--3a750cf8-61c5-4e88-a7fe-7ac4ad02df86", "indicator--a899de81-5c1c-48c3-afda-857e206f4fb5", "indicator--e967de34-f2cc-49da-8c1e-426d0d81c621", "indicator--3d33551c-eb54-4278-8754-3fb12fb4e3f9", "indicator--408ef3b9-248b-4ba0-b1c8-54b380278d02", "indicator--802d3d4e-c60c-43ca-adeb-be13e677fbc4", "indicator--f8c0a9da-62dd-4cc5-96cd-a704be1a4af8", "indicator--3e275e58-603d-400d-bd4c-c594766dd731", "indicator--99c26e61-c4cb-4661-9e94-fad09dde5360", "indicator--b8e578d5-6c28-4b1e-8555-9961216e50aa", "indicator--d1239c49-cd3a-4665-8a7a-7e2e63a0b09e", "indicator--a13f7179-9738-486f-969e-0c13fad09231", "indicator--f6a45373-bea2-47c0-a7cd-1cc0d3d7626f", "indicator--ffdadc35-3ba7-4550-a08d-7c3ea148ae7b", "indicator--95213b07-5962-4676-9033-e2a3c284b25b", "indicator--b29d4325-ae4b-42f2-b600-a103171afd92", "indicator--9a50cc6d-8426-4612-aeb7-38afded4c114", "indicator--110a42f4-9c73-4fda-896d-1ac88231a167", "indicator--cdf1fdb1-2673-41dc-808a-63d70e97a4f2", "indicator--572ff05d-9b89-4b15-9f63-aa80c87a1e58", "indicator--dd476197-09d0-4134-a43c-49d2ffdf80cf", "indicator--35d972c2-8d5e-4f85-80f2-f2f47733f624", "indicator--fbe45a71-f0d6-4096-afb9-e6286f32c26d", "indicator--d761712f-3f34-4209-ae5b-b9c214b5cff8", "indicator--00b74baf-9941-4796-a047-76f0284439fe", "indicator--bea70d89-5ccc-4210-9526-524117fd96eb", "indicator--52073f57-a8f9-4a26-87aa-e539928dd6cd", "indicator--b58cfe21-8348-47af-9846-c502de6d25f8", "indicator--aa3778a0-8138-4d14-b4a4-ee7f94e56ecb", "indicator--09df3303-6857-4e42-8bec-a620289e70fb", "indicator--7197b1b3-ef35-4ffc-b0fd-11782990fb96", "indicator--eb0ee93d-2fe2-4cfb-a561-9a73df8be478", "indicator--da9398df-d695-438b-aa75-7650e41475d0", "indicator--3fe7f601-ccca-4dfb-948a-da9dbfaa14c6", "indicator--dba52d2f-ebfe-47bd-8193-febd50fc3fc1", "indicator--42bfb355-acb2-4830-92fa-c9179686fb33", "indicator--bd5919b1-8ddf-4fe6-9b05-ad38b6c28ce8", "indicator--6bf10b5e-0392-44e4-9582-441d30b74e19", "indicator--f7f0a0eb-31ee-45b5-8b3d-e62bc290dc40", "indicator--c44419d9-70df-459b-a773-a458743ba425", "indicator--ff89192a-d707-4880-99ef-d68085653538", "indicator--4192f26a-a089-4009-9066-7cc38ddcc028", "indicator--6e4e8c8a-918b-4c7e-91e2-4a060503b26c", "indicator--ea8530e0-a539-4eb0-9885-941adb85f7d7", "indicator--d8d998aa-8ca5-4280-9394-973f57905b8f", "indicator--28636c26-909d-45ed-977c-408b5b57b6ba", "indicator--6c60d4d8-deab-443a-b959-6be138cd7596", "indicator--ef4e60ce-a6eb-40d9-be9b-54cf534cd880", "indicator--335f712b-6534-4976-b5cf-9b660e3e715e", "indicator--c51b6d66-39ca-4ccd-b7ea-aab296dddfa6", "indicator--6f3ac662-5e9a-4439-a5bc-bd798adf920d", "indicator--6ceb4c42-a89f-49ab-9e3a-75080bbf3a2e", "indicator--36db337e-375a-44e5-9b91-f34db6d40cd0", "indicator--f80800f2-9288-4790-87e0-2f83a34cce62", "indicator--50d91ce1-47a2-435a-9a07-4675bbe250c9", "indicator--34b9f95a-109a-4dcd-afd9-fbcd89b510fd", "indicator--edd20b87-f804-4105-aade-deae27da6126", "indicator--ce8e809c-b7e8-4ca5-8927-195372470f77", "indicator--baf0074c-336a-42b0-b64f-391d0846e5a4", "indicator--d363554c-2df8-4e8d-8d77-ff1adc93fc0b", "indicator--5ce10087-50db-44db-bcc1-2c834ba99636", "indicator--557a06a1-b223-4ebb-8a42-34ed289089c8", "indicator--e1daa002-b854-4131-b04d-192678cf7a64", "indicator--e6148a02-4d18-4bf1-9643-ee34f8785f2a", "indicator--34099d9a-aca0-46f5-b06b-700071324417", "indicator--7f0f985e-723e-4281-bff6-572c494d1838", "indicator--8334886f-7881-4815-a34d-af4ba5e0e85d", "indicator--cdb9e700-0780-4f1d-9587-da1e6cf8eaac", "indicator--fd787588-c7db-41a0-ae1d-925876d71e3b", "indicator--e5341b1f-07bf-4e7b-80a1-3f95e9925ebd", "indicator--e65c40d3-d3af-49e3-a969-e6ba6780b828", "indicator--c7e30118-d716-4bef-a16a-8baa3632a2a6", "indicator--7055e487-28c2-4233-8394-cd2fdac3bd00", "indicator--d4eda4cf-8700-47f4-80ca-05485c45316f", "indicator--bf22003c-a678-4638-8a7f-f83bc9ee375e", "indicator--1dfb6ab7-d9c9-4b49-b38d-b8896794d5dd", "indicator--e7f031ad-fe02-482c-b1bc-d45015074927", "indicator--5c582b61-bcd8-43ec-9c3a-89d318acc763", "indicator--1a56e5e7-0ff4-46cc-acab-8b749750b1be", "indicator--1eeb0a6a-1f71-4e89-a8be-8bd9854c75d0", "indicator--3015cc19-dd7d-447f-a15d-8d82e82c4da3", "indicator--163a80b8-d048-4154-81b4-615fbdd3d3f0", "indicator--a44e2d9f-13c7-4d48-8cdb-3d8bae5dcf97", "indicator--64d1ba09-8579-4c74-acaa-ec978b5286eb", "indicator--17bfab63-baf0-46a3-ae41-d2b1dfce9924", "indicator--9e5cf638-eaa6-4f99-8a9b-a2a0b62bd478", "indicator--650c02c3-9a05-4cd3-a1d7-5c428a1030ba", "indicator--97516759-cd3b-4e36-b5f9-911e44ff3a00", "indicator--b5b24f81-b32a-4d4f-b0f5-886a0a16a9da", "indicator--9db5e79f-87d4-4481-b0d3-2431c71a17ec", "indicator--7aa597e6-e504-48cc-b92f-128d4d093a0f", "indicator--5f1f473a-e1a2-40e7-b59c-93820a2691a8", "indicator--acd25767-d5e9-400f-969c-e8e11cf6d570", "indicator--46e61047-9a51-4bc4-b08f-18cc4c521394", "indicator--099bf13f-908c-4dbd-9932-db3bbffff59b", "indicator--13523dce-8c49-4eef-954c-e3af1f21332c", "indicator--cb9bc144-9870-42b2-8195-0a0e5e5d7908", "indicator--e7a234a6-5c35-40ce-b958-5d4b1bd00d9b", "indicator--2a520caa-ae95-498d-9528-d985179d1c05", "indicator--c74595b1-df24-4e86-8342-c695ae6b0a21", "indicator--272faba4-fd89-4c5f-9cc9-cafe1057f9cd", "indicator--509ed927-f4a9-44d8-9a0b-f46159c7a299", "indicator--0c6fec37-9ff6-469c-981d-f99bc71d91ee", "indicator--3da1defd-604b-4c31-bdc6-c600ad894235", "indicator--cf09ff59-5c57-4001-94b5-3be06f528345", "indicator--e2e1db33-76e4-47f9-9577-3f68a150650f", "indicator--d9568404-07c2-4f5e-9501-2d7b0a8e192f", "indicator--c1ee90cc-0976-421c-839e-069b32170811", "indicator--0724b425-3307-43db-93ff-1ff8767a782c", "indicator--92b48e24-0f59-4f18-a6ac-df1ac9af4e2a", "indicator--2a47b6c0-9d97-4dcb-974c-5c41bf2f1a49", "indicator--00b40f03-372f-49ca-a325-6d21ac441439", "indicator--672986a4-f837-4dcc-a3df-592e14190f49", "indicator--ee858e40-9d29-4311-90eb-e26789ad17ad", "indicator--2a3cc602-00bb-48ad-af17-160d70854f91", "indicator--133a8927-b531-425e-8c0d-5503f9e055d1", "indicator--71326abe-0f2d-4b91-be80-6dd794ae4003", "indicator--9a6064dc-4284-4a78-9516-aed134bb58e0", "indicator--946bd3cb-e5f2-4d82-a36d-9c0a7f0c3640", "indicator--db84c93b-7ee1-46e5-8d0f-f8d275d0a2d0", "indicator--7f41d9c9-838a-48db-9dff-b3a4e346a120", "indicator--ae7eec20-dc6f-4f5a-a15b-bbdeef25fdc5", "indicator--4b3ea81f-8adc-4181-a6ac-4b952cc4d7a9", "indicator--b1f64851-0602-4db8-8e26-48882dcbea0b", "indicator--a37fc7a0-ea48-4835-aeee-a979eab7a939", "indicator--80fe6685-691a-4e0a-b580-ffa9484b2f0e", "indicator--94311b0e-e98c-4d9d-af1f-d920628300ab", "indicator--ec1b0332-09d8-4090-a247-1dda392e0121", "indicator--1d7d5b81-2091-4fa0-8f20-4cc8b034005e", "indicator--c7bfc705-cfdf-4853-b03d-8eb05bfa9d6b", "indicator--6f127708-a62c-475e-b2f7-fabdb41c33e4", "indicator--91f32836-38ba-49b7-b35f-073408a46557", "indicator--965d73c9-bdda-4855-b449-c06aa2796e2c", "indicator--da6fef11-e16d-4682-9955-ffc57a8e83aa", "indicator--5fcae807-b29c-4a37-9a44-d0954495d112", "indicator--508aed0c-7852-4f87-9f2f-5facbe08d2d0", "indicator--2bd30538-9b6f-444b-a69a-b2a87ff97b24", "indicator--65c08657-c1ce-4ee1-bd87-39b848d2145a", "indicator--1a7fb7b4-cc45-4176-be5f-17b9050fd414", "indicator--142abe9d-db67-405a-ba1d-45df925716e9", "indicator--4b789d99-56b8-43b1-8ab1-93c96fe035ef", "indicator--b901530e-f3df-40b7-9db0-2a8671d3a462", "indicator--36c996da-f1a6-483b-92ef-402b90b58cfc", "indicator--52ab78d8-31cf-4546-8b74-746b80b2e1a2", "indicator--d68cff25-99a3-467d-b25e-834e3347c924", "indicator--25283619-f913-4cbc-b089-c9c0546d67bb", "indicator--87042834-8e5c-490b-b1d7-122e2f46e53d", "indicator--f690a57d-a11f-4fc0-91ec-04ddcc48bf4a", "indicator--3645747c-382b-4513-b1d3-cc65e8ade14d", "indicator--3b561492-0784-45fd-b2e1-9e98aad8da9b", "indicator--6d44677d-bb88-4454-96eb-099864e3d1e9", "indicator--1b32c5aa-a761-4909-a4e8-59d445024e95", "indicator--29329fca-804f-4176-8365-a1be2c078914", "indicator--67a26b4c-6034-4794-a02e-ecb88bb42d07", "indicator--0f2fa1cf-9f2d-4657-9f4d-837bb6e4c7b3", "indicator--a6639173-686b-4849-b18a-f0adee1b4f9a", "indicator--9254e276-77cd-4139-a907-aa616571c516", "indicator--26e1b93e-0102-4637-979b-46cfcdbad135", "indicator--1c493ffd-ae34-4c0e-aed9-7312cac606b9", "indicator--e0f3307a-bb41-4b0d-93e3-ea8adc334bfb", "indicator--d6a23aff-3c08-4804-b201-448d2a2342f2", "indicator--244422de-21d3-4508-a53d-16b5e79feffd", "indicator--06785703-c9b4-4183-819d-cae49f2b1e10", "indicator--ee7239b0-d114-40a2-a6bc-04bc752aead9", "indicator--f2beab76-1b3d-4a72-9439-c465254a45c5", "indicator--183b221d-f38a-4cce-b110-4970643304c9", "indicator--ecf4e3db-017f-436b-b0f3-4634785562fd", "indicator--60857d42-b12c-488f-97b9-d738ef16480d", "indicator--1054628c-cd3b-4b87-a85a-a818570ac426", "indicator--23e4faf7-34a1-43b4-8816-3d2874da1b9c", "indicator--916511ea-f82e-42ec-a2dc-f3fef977f050", "indicator--06f49f4b-5e52-4a57-9b14-1ba7804a15e1", "indicator--d8081cf5-2abf-49a9-83d7-338962cfa88f", "indicator--fdaba6f0-de52-412f-9392-e3829543eb20", "indicator--3fa214de-f384-4bd6-88a9-4e48b6af1190", "indicator--0e06e6c5-366a-4d71-b27d-e6240a42fd33", "indicator--7d952733-de28-4d23-ba0a-6d2cd2b12f09", "indicator--f12309c8-342f-4724-ab33-e48b0ff1e03b", "indicator--2b850854-5718-490d-9968-b75cbfc369dd", "indicator--627e4abd-73a0-41f8-811b-7d49628a9852", "indicator--39ec7510-787e-4b15-8331-965498cb45d9", "indicator--d9fa2ca3-b587-40bf-8397-a068783bbff7", "indicator--d7f3da54-8fa0-4a37-ae59-97bca6277627", "indicator--238d0283-aa68-4245-9014-a0d43d429018", "indicator--b7cc7fa4-f3ca-49a0-ad0a-600d7b6244a6", "indicator--ef011688-544c-4c81-ae14-594891018e9c", "indicator--9661ce3f-b8b0-429f-a263-89068d8491d0", "indicator--6b1c7cfa-f99f-4ece-87ec-29c3100f546f", "indicator--25075324-3eba-42cc-acc1-2091deb3fde0", "indicator--2a013b89-29ea-477f-a299-02fbfe55a111", "indicator--f9a41fed-e8c0-4932-846e-24650af01c58", "indicator--a5214d61-2097-42d0-915f-1e1aab10bb4e", "indicator--7783cac6-4362-4821-a0e4-bad643a9430d", "indicator--49956216-d8f7-46d3-ab8e-8f311bd7df44", "indicator--4e3ad258-8885-4c2d-841c-cf532062b543", "indicator--694f330c-7960-4b2a-9693-e84a96f420c2", "indicator--a6a166dc-001d-4e76-bb41-f881b5bea851", "indicator--1643ae18-b3c0-4f78-996b-f3411bf17cb2", "indicator--1ec6b234-5917-4658-9e1b-51e08230f4f1", "indicator--91444d35-f4aa-402e-aa74-14d3d95fc129", "indicator--e8c58c3b-2cc0-4f3c-afee-8fb291e800df", "indicator--04d3d41e-b654-4a2f-b1ec-0d15c47ed1fc", "indicator--1086464a-1e07-4535-8a6d-7ac22bd0ee2a", "indicator--147de3ec-fc66-45c3-88b0-2349da593588", "indicator--4b75fbfa-d82b-4daf-a2a0-ca1107324cae", "indicator--3590c3b3-7a6b-47f2-b6b2-b622c53c228d", "indicator--048a3688-1ae1-4c80-80af-cff1331ad4df", "indicator--f2911f73-62c8-4162-8843-6d3a97215852", "indicator--bd69c799-2bae-4dcf-b5ce-004851940efb", "indicator--2f58c1b0-d39e-4a68-a76a-d9f20bd22e31", "indicator--8fd48778-4241-4cd1-9708-a4cede617e53", "indicator--253cdceb-c519-4600-aa2b-02f57e1b6be8", "indicator--5eef5c65-842e-4cc1-9b60-091fb1d7400b", "indicator--afd2f1fe-f553-42e5-9f8f-3d47192ed584", "indicator--051f0b7e-9b73-4757-bd32-5a92b6068d81", "indicator--c672cf9b-a8f4-4fb5-a75f-80ef5178479f", "indicator--85f47b6b-7c55-4b79-9247-ffd88ed940ec", "indicator--ac0d6fbb-969a-4f81-89a5-01713cf22409", "indicator--8e954ac9-b720-4eaa-aed3-5eea7d40c95a", "indicator--68b2e02d-c4f1-4974-8b2c-21320111d89a", "indicator--76bd0018-3aff-4587-84c7-7ed55cf19b46", "indicator--1646566c-c5c4-4edf-8910-d2f0735eb064", "indicator--fe64dde0-0a7e-4310-b65e-3e22d26589ce", "indicator--6c63d813-6857-4482-9c03-95438d7bcbce", "indicator--bcc502df-ddab-44bb-8e96-ba3bbb3cbbb8", "indicator--f79e10e4-ee1c-4769-b5af-fa8135afc46e", "indicator--ea4fc658-133d-4732-94c2-9360b0b06f0f", "indicator--65c382b1-6460-4fea-a81f-54c35d88870e", "indicator--4e68bfd4-a892-4a00-ada0-186204781cb9", "indicator--4f9f44ae-fed5-40d8-8cef-9382149f9e86", "indicator--d07b852b-7ba8-4116-aa9e-5adb2105ef37", "indicator--0b4f1ccd-e425-49a1-9b09-7310b9a9c3b9", "indicator--29ea7762-95b6-4317-b5d2-6eb7f2583b05", "indicator--bdd77851-01af-4d70-8716-cc8ccca73e23", "indicator--223535e2-09e6-4617-91b6-dcec9fc2cf69", "indicator--28e192c7-bd7e-42c0-8e5d-e6d3466f4cdf", "indicator--26a458b1-a09a-4fe8-8927-7000d5954422", "indicator--c668e9a1-1a77-419e-ad84-46ba87b45d06", "indicator--b48d356d-a10e-4e78-80af-80b8d8df0838", "indicator--dc5406c3-bd4b-40de-a60a-133244fb1089", "indicator--f5a4b079-7095-4c09-8481-565fb09e01ac", "indicator--d4001e5b-5481-4cf4-9d25-db3c84baa274", "indicator--8d8c2037-dada-479a-9dd9-bea2f766515c", "indicator--ef52d4ca-2281-4ac5-a769-11a0d3bda93b", "indicator--50576f05-8c5e-4767-9e34-6c1680c6ffa2", "indicator--40706065-43e8-4111-bd05-5db297ad5f8d", "indicator--94da7264-8ba6-4707-967e-7b8a8e7f2ddd", "indicator--593ecb2b-1dbd-40f8-ad34-fbbf87846ca5", "indicator--08a29e21-32c1-4f9a-8153-b0c2a21cd1dd", "indicator--fe9c1526-74a7-431e-90ab-f1e0070b0e0b", "indicator--0bedf68e-ffaf-43a2-85a2-ae596db900b5", "indicator--5c39ccb5-d738-4e69-95c1-a5a49784962f", "indicator--ff68c584-74e0-4048-9571-e61e7c698ebe", "indicator--337a24a7-8f94-4853-a64d-ff5c32cd4f63", "indicator--3d99bc3f-7c12-4315-8c8d-58623696fafa", "indicator--f8ecd21c-79ea-4b5c-ae53-d1c949ea3dca", "indicator--a38e7f34-30de-4560-b974-66dcf3f04b40", "indicator--996d6508-e980-44d9-8d0d-cdb45dfcec10", "indicator--0557b780-ca4c-4338-bb06-690cea1b4fe3", "indicator--4f9dfeac-6d97-45d0-a3c8-51935a0b69fc", "indicator--1a56ae0e-dc7d-4442-b512-c3a20553b627", "indicator--21705370-6d70-41f2-ba7f-5458c76b9e52", "indicator--f593cb82-eb6a-4e4d-aee9-df21ccfc8970", "indicator--92ae13ab-de56-4a6d-ab3a-a5d53dfa2a53", "indicator--4b3cd582-2939-45d9-a5ad-6794336c7728", "indicator--f7d65b0a-9529-4ab4-b50e-260abfccad90", "indicator--28b5f401-7067-436e-8b79-b85ebe76b645", "indicator--b7eb27d5-6dd9-40f1-aff3-594896da3bab", "indicator--dfc4ba67-c50f-41d7-a102-9610be78abbf", "indicator--8a15c54f-28b1-4cd5-bfb8-b6f37a09e075", "indicator--c14ace0b-e67a-4f2a-ad54-69bd1a54e31d", "indicator--efad835a-6c6a-4993-a2d4-244df76118ba", "indicator--8d76de0a-25c4-41a6-b11a-3370e2d8f653", "indicator--858648ee-81c2-4158-a626-59b6088465e4", "indicator--d7f2915d-17a7-4f3c-bfc5-cbafe4e8d5e8", "indicator--e0c7943d-7452-4f4e-8fda-da37f469a984", "indicator--86177532-686d-4aed-a85b-5a8023ed9faf", "indicator--b34cbde9-4410-41e3-a18b-f149e14cbc40", "indicator--a715dd8d-1b6f-43dd-8e83-c8b5537c9671", "indicator--eb12fb1b-9651-4646-84bd-6e000a5ac09e", "indicator--40122db4-4a69-43b1-ac5f-251c748b7c4b", "indicator--1ad76f6b-6edf-4882-ad08-183b1cb53716", "indicator--8bf72015-568d-40c0-9a3a-f6aaae386947", "indicator--39bcfbe4-2fe7-4a2a-9c61-307ea797c308", "indicator--3c57fc54-acd1-4b86-8a69-1a6190e52545", "indicator--533d1dd2-6dac-48f6-b164-55d45fef193f", "indicator--268a012b-b718-4da3-b1b4-037c9fc7cd66", "indicator--99362844-4e16-4103-9fc4-0bd4949415ea", "indicator--b800334d-6011-40bb-b2a7-24df3c5a3248", "indicator--0895f0f1-6acd-49fc-b347-8c1841bcd1b0", "indicator--8984b5dc-afc2-4df6-8c81-fb9acb909af4", "indicator--1d31757b-6c38-410b-8796-fe0b6cfe78fe", "indicator--f5c05315-71da-477e-8ee8-dd2845484f78", "indicator--56e6d513-834a-434b-8f4a-f086e3ebe554", "indicator--d8b9cf13-7ade-49de-9054-9c60f4ce27bc", "indicator--6574e53b-0a01-4b9d-9abb-d20196f8a310", "indicator--00060c49-d514-4a50-841a-a531f94eb605", "indicator--6b8e5398-56ce-4272-8c94-b0ddd7e81190", "indicator--27f31012-3202-4742-883d-744b4adb1979", "indicator--25d90138-aea2-4be9-b10a-81f7f7d29ea3", "indicator--7531533f-efbb-4370-9095-b8e3736d5dcb", "indicator--4ff305cf-584f-4073-9993-0be2ee21c3e7", "indicator--e446ccf1-b2a6-49d7-9dfb-41edde5cbb22", "indicator--7e946f62-0d71-446f-ae3a-d9e17211a762", "indicator--d9bc9f5b-93b8-42be-87ca-bf412dfa03ec", "indicator--18bece71-b4d7-45fb-a88b-5d3d86f7aa46", "indicator--30d4d850-9655-410e-8e86-a04f643fe7f5", "indicator--07ffcc9e-38e6-4ccf-b327-1185348e7de2", "indicator--9e44d557-e87d-4762-aaf2-f4bfb150bb88", "indicator--e077b450-05d7-426e-a2ac-148b243f508d", "indicator--53a1a6b1-4f21-4d45-98ff-18db55eab09a", "indicator--3d77fe96-b15a-46ba-9818-bb4e8c98ab6f", "indicator--bd837583-bdf2-4076-b7ef-1bbcc8354892", "indicator--bcfc03b6-916c-4469-9e45-ea3ea1cc1576", "indicator--4786f7e4-a785-4fe3-a0fa-ddb8c054358e", "indicator--28260f0a-5e54-4817-9264-534014cfa0ee", "indicator--5305ebb5-ffa0-475d-b3fc-4cc5df261f1c", "indicator--b5d59987-ad80-4169-b077-115b601dbfdf", "indicator--d32a65f6-eb85-4474-9a5d-4565e764c7c2", "indicator--f93f4927-05db-48b8-8d15-16990693cdad", "indicator--1a78743b-b81e-4a2c-a670-f62693ff9455", "indicator--fa257a28-5fc7-4552-9556-27f167a5c2d0", "indicator--aaabfc0c-ba69-4b84-8912-48572a8a2671", "indicator--cf20cd90-512a-4f7b-91a4-d5d773d6ac3f", "indicator--79a77e21-4987-457d-ab18-766c5a07446b", "indicator--944da20f-ea7c-410d-9910-0a051cdb5c32", "indicator--91d32c7f-0fc7-40f3-b24d-1a9aa243a818", "indicator--5352f860-9335-489d-a936-48bfd4938a15", "indicator--32c58256-ead6-4813-9ac0-0bea9b7b057e", "indicator--19ca7020-1e4b-4591-87b7-323f90b3ddc9", "indicator--ed869123-6ab2-404e-9d9f-e53372927f83", "indicator--45bc35f6-6c1f-4871-9f67-c174ba2ae76d", "indicator--eb73d6ef-ae0a-4aff-8889-90ad613e4607", "indicator--1bdd308b-817e-409f-84ce-cb351a141ad3", "indicator--67fdabd8-37d8-438d-a0de-c0a4893e0be6", "indicator--5a72e1d1-ce30-4425-87fc-71d749366077", "indicator--d3aa4d73-dc47-4c42-aa29-16a6046ecd9f", "indicator--57e8c210-f9ac-4073-bb75-5c34c71749a6", "indicator--54c5078c-1b5a-4724-98a1-5d66923ccfeb", "indicator--5493c4f3-c4b9-4223-86b4-8e6ea9ea9ae8", "indicator--7cbdb2fb-4862-46b0-a530-7e576b837dd9", "indicator--8cf0b461-a422-43dc-8015-ad3de1054b59", "indicator--5d3adae1-d784-4d05-93c2-76c906bf3d1a", "indicator--8e433377-3ebc-4aaa-9c04-8011ea011c9d", "indicator--f0d010c4-e5c7-49e7-abb5-68c6f28993d0", "indicator--b1b7caf2-4b99-4558-b715-abde6f0b0697", "indicator--eb3547de-1141-44fa-a9ca-a7bb87a4b786", "indicator--e4ba55a1-08ff-43fb-aa68-22f7e39c44d5", "indicator--cd19cde2-787f-4094-8ba5-df757da2e380", "indicator--474f7127-3cf4-4a3d-bfd1-716e304b7428", "indicator--a7ddf468-4145-417e-ab88-6b035b9148cc", "indicator--882b2151-a699-48d0-aa83-87ea740ff32c", "indicator--1acdded3-4e7f-4d54-ae26-8f60e3eeb7b5", "indicator--94d15200-10df-4d1d-99c5-65e6d9389706", "indicator--6b33cac8-0ed1-421e-9810-ae0602678485", "indicator--22546d35-befb-4f12-a53b-de3ca3dca21b", "indicator--f470ce7b-47b2-48b7-8f9a-14d67b34043a", "indicator--dcd1dda5-fa1b-439f-beea-da6ebaed5838", "indicator--a974056e-b3f7-4f31-96bb-fe600f87332b", "indicator--50019530-1aa2-41f4-86bc-819f4a71fa75", "indicator--b56c168f-a3fb-4b08-b56c-6a17cd0aaad7", "indicator--02ac5aa9-dd18-4d07-9e99-74331ed3fe4c", "indicator--2075d50d-6702-4771-902d-2227dc4fb676", "indicator--dd6f9ed6-3e4a-4277-9690-846b4e854f43", "indicator--64e87afd-a453-4926-a031-fd29998453f2", "indicator--08876b23-f8d7-43eb-a108-2044c8a3d2fc", "indicator--30058d36-f527-4fd9-9e0a-9cb54376a3d9", "indicator--0fb458bd-a033-4dc8-ae4c-08d968e0281d", "indicator--15aabad4-3edf-4d0c-ad00-cbe3fd0aaeb7", "indicator--85114a1a-291f-44ed-9e18-20aacf3197ee", "indicator--180f3ddd-4644-49d9-9a22-e9903437a666", "indicator--c75ba35a-c976-4815-8e1b-591645368181", "indicator--0680dd0a-2026-4176-9449-4cd75d14be37", "indicator--11b868f7-bc1c-43bf-851b-2ad6fd2c9b1f", "indicator--94050ffb-525f-49eb-b136-a91ac0595001", "indicator--9fd8fcef-aabe-4c20-a9a1-e783e260389b", "indicator--594bd2cd-de34-424b-9f37-f72459def372", "indicator--eaa1a26b-e16a-413e-9f97-6641b61fc198", "indicator--5c30716d-6021-4ebf-9a90-9000e2584782", "indicator--09466300-7cf4-49b0-8d45-79df4b265a56", "indicator--07c5499c-83ed-4090-96ac-7937b6562c40", "indicator--8050388c-2335-4652-92b8-6cd0aa4001f9", "indicator--ba448cfb-c143-4120-b6b8-94fc70fb261c", "indicator--97c45d21-0274-4dd5-bfbc-9128fd1723ad", "indicator--06d16203-2e76-4db3-b8d2-bdb444129947", "indicator--52f26c07-25fa-445d-9983-7e6dc40d9f1d", "indicator--e6cff2a5-0a14-45ce-9a53-639eade697a7", "indicator--31fa1f2e-2140-4270-a9f4-6b81c2f8a7dc", "indicator--49e41e06-6e41-4aff-ba8c-d6a24944e7b5", "indicator--4b8e8109-f74a-488f-903f-b14f6bf4c689", "indicator--3777bce9-0227-4701-a2ce-ed80a5eab7f4", "indicator--dd02c37b-be71-4f1d-8407-62ffae2f0c5f", "indicator--1bc2d5b8-25f9-4eec-a49c-c06ab014fd3d", "indicator--18a776c7-fbc5-4c2b-a34b-51db89fd83d7", "indicator--ab9ab292-1c25-4fda-bdaa-9db8564d389c", "indicator--1ff76b83-93b2-4a4b-826a-49b0dc328d32", "indicator--8dd1a327-7362-495f-9813-da73675bfa30", "indicator--3659e4df-205a-4efa-8892-c8ee8dd6e107", "indicator--b81f8c8e-5c77-4adf-b929-0c9afb4b9656", "indicator--534fe173-23e5-4bd6-9d35-2464c88df35f", "indicator--85dceee9-35db-4246-bcc9-ed61a176284a", "indicator--340112f4-5f37-464e-af5f-908919396f32", "indicator--163149bb-a25b-4a4a-9e06-99aa4fc60aa3", "indicator--a269817f-8a5a-4e13-9c50-08f896d6c9f1", "indicator--47722395-0e4c-4f80-aca4-171e44e7b8ca", "indicator--8f80ebc1-d4e4-4fda-a6be-1e48032b421f", "indicator--1341ec7e-f26d-4768-92bf-bcdb0ffcdfd3", "indicator--b55f0d61-d500-48ca-8662-ff5d0d154a7b", "indicator--f0f839ec-f013-4883-ae86-b30086eb4410", "indicator--44f41adb-5fcd-4330-8923-317bd2d71c3e", "indicator--4a14a21a-296d-48c4-988d-38c8e0fa83dc", "indicator--f1c91e77-3227-40ba-b903-20b379255871", "indicator--7a7a18b3-c25e-4262-9984-2dd1d7a201b4", "indicator--7afe196f-f89e-4250-ad12-4180ad60a4fc", "indicator--f06ab502-119a-4426-a5c2-975f565a00c1", "indicator--3b88193c-f3e6-471e-a5de-c518df7eb6ea", "indicator--516bb287-2c0d-4143-a79a-ac0065ff96cb", "indicator--3856af39-a380-4e40-b572-cc0ff27e784b", "indicator--de400372-ebd7-40ef-ae82-c84fbc8b77d2", "indicator--fc4b6417-a503-4dc5-90e3-487f8bb4542f", "indicator--84871ea4-d393-4c22-8f56-cb2e50de17c3", "indicator--7dce375c-6b3f-439c-800b-759ccc5b5fe1", "indicator--88e0eaf3-b68d-49e5-b4a8-d217c1cd8b33", "indicator--855cc534-b9eb-44f6-8ac7-78b48cb695f2", "indicator--9dce1de2-e468-4fcd-a4e7-bfca3a1dd41b", "indicator--a70b2068-2cfe-404f-a803-f2e16add82a2", "indicator--350e105c-fb24-428b-b58d-3c91fb637b16", "indicator--bedf0b5d-b62e-4668-9ca7-fe6ad1be363f", "indicator--2639ddc7-f873-499a-b27a-00d35206b433", "indicator--f99b254d-1fb7-4545-86e9-fddb61a3abea", "indicator--a6dcb7ef-cfc7-4d6a-8aef-06205e8cdf65", "indicator--23ae98c1-14aa-41e2-9152-fb9592f4d3a8", "indicator--856ab5ee-d2ba-45f5-97df-70f51f2f610a", "indicator--e4e3b0e7-d68e-49d2-96a5-82981e532680", "indicator--5a28227c-6455-4970-a56d-77be62cbe10b", "indicator--7a47ea70-10ce-4db2-907e-82c974536b10", "indicator--0811dd15-61d2-4ea8-b050-22fa1e04a8ee", "indicator--547b2a87-5781-42ba-a7ca-a77cbca69a99", "indicator--8ee896a7-13c1-4988-87cb-bb3c699b7f14", "indicator--9fa6c6d6-828e-4a63-9b28-3a5c008e9e6c", "indicator--c6918579-deab-4faf-bb0e-fffb7f3ed2f1", "indicator--90cd404e-8d53-4cc0-9a55-b897f9468edd", "indicator--e2fa6bf2-8075-4558-84ce-bff4fea80046", "indicator--40844b1f-0e8f-4dbf-ae24-127b0e98c107", "indicator--ccd3f77b-a205-42db-ab67-cc36afbca600", "indicator--ff233016-dfe3-40d8-80fd-ba0df2780f03", "indicator--f8971c61-4dd2-49f3-a92c-a4bdf6e83e2d", "indicator--d5c23a70-5910-4044-8af6-064897b755be", "indicator--17838c43-9f36-467d-b154-c5b477f17ae5", "indicator--c4da37f4-0f73-4057-8da6-f776b60f471d", "indicator--01c34b1f-fd50-41ea-88fd-02b7f4b402f7", "indicator--2f642c94-700c-43f4-9d72-cbfe3bad75a6", "indicator--3f6c12cb-cd9d-4a80-b7b9-655150355e72", "indicator--f0fda99a-b45f-4387-8b54-d4ef38a95cc9", "indicator--c2d9eb1a-d235-41f6-bc80-5fddc782954e", "indicator--878f02e2-d81e-469c-a661-4f4918d9c39e", "indicator--0cfe161d-e516-482e-8209-9bc06353c8f6", "indicator--f0b6ecd2-9c7e-4a7e-a144-e46a6f155e7d", "indicator--ab135367-db21-487c-bccc-2a66d255fb50", "indicator--d2957bc6-75cf-42b8-8975-5b9644503db1", "indicator--630f7095-2424-42c4-830c-b5cf94d93466", "indicator--0b0cb574-d681-4a28-8c87-8e79ef73f1fc", "indicator--98850d3b-c7ed-4a9f-b585-d14638003426", "indicator--47b99493-707b-4ddb-80eb-74c11d29c7df", "indicator--d2757c8a-968a-44ea-9369-35f231a20b4a", "indicator--74352dae-17e0-4eb2-9e04-e725dc52ff79", "indicator--e86ec83e-df9e-489c-a4f6-cefdd9faa0b3", "indicator--680d8b25-894a-4955-a3e2-bba989f3c530", "indicator--40fbefe9-7faf-419c-b140-89de734202b1", "indicator--76848ebb-2a7a-45bf-8f0b-6f3ba08f9eac", "indicator--4710542c-e264-48cc-89fb-68e4d6a542ca", "indicator--8d4f5d06-5504-4f0c-9517-f066df425eff", "indicator--d4fbab1d-37de-49e8-a3ff-d3754e980ee5", "indicator--3a4e8bb7-f78e-4736-8b67-b1091a705f0e", "indicator--9cd62c8f-ebf4-46c9-ae38-5d917acb144b", "indicator--44932e8d-fdfd-4409-9fd8-7b8d915221e6", "indicator--7d71d365-5161-47e0-96f8-e63ca23a17ea", "indicator--b7616c1a-c0e6-41ae-a2c1-1c2f60e10c03", "indicator--eee6331d-48bb-4acb-bf83-803c9ba4fd0e", "indicator--f88ab8e4-7e76-488f-9297-9477c02f0c45", "indicator--dbf25cf0-adeb-4394-9489-3214df1de6cf", "indicator--bb222606-f361-4115-91f3-7ef56b215f61", "indicator--44d8f221-9568-4374-aef3-a8f6f6af5dc5", "indicator--bd5208bf-27da-40e0-b95a-34dfd633c076", "indicator--fa6dcf62-7d2f-4a3e-a6ab-9540621b963f", "indicator--17076f3b-e224-40d7-b29c-ad28d81b4279", "indicator--0dc2b1ce-7b53-4ab7-a687-267076a316a3", "indicator--3b9e3529-8b76-4475-b8cb-a5d5eb05f2af", "indicator--b8a7f17f-c074-4e16-a511-74e32063c0b6", "indicator--300c2b8b-2660-4a37-8b0c-86105f132738", "indicator--8dbcf9f6-008b-4569-99ab-9259a9fc937c", "indicator--55e3adb8-87fe-4416-a659-7d3f84599acd", "indicator--f08bffb2-b3a9-4baf-93f0-b5e5549edd75", "indicator--4719367a-1272-43bd-9513-ae79f75f92fd", "indicator--4b2fb556-05f2-45fd-80ee-b5a469c3bee8", "indicator--47676c0f-c72f-41d8-a578-e6ba3a6f08b5", "indicator--9f8a6eff-25fc-4d6e-91cd-1dad459bafcf", "indicator--4c83287f-307f-4917-992d-0452873c662f", "indicator--07d14c1d-4aa7-47de-a6b7-e4793a9a606c", "indicator--7c45bd3f-36d1-4b0c-9171-fafbeff225f0", "indicator--51a2c83f-665e-4a06-bc3c-83f991efad64", "indicator--7ba26ae2-eddd-4c6c-8eaa-7e92c395b0d8", "indicator--f7b96b81-3bbb-43a9-bbaa-fbbde3073222", "indicator--24ef57ab-e0a2-4b4f-b204-1adb59e92f23", "indicator--bbf89cd0-dd87-45ee-bd0c-1dffd657dc47", "indicator--f165950a-d49c-423e-995d-a287fd664975", "indicator--3110fffc-ec43-4c6a-ade3-2d141346c720", "indicator--b2970e1a-1dd9-47de-9826-8e7f7ef08085", "indicator--99b5d4b3-7444-45be-baf3-c94aaa063d71", "indicator--fecd433d-dc9d-4124-b226-bbb488e1d77e", "indicator--66286be4-1e89-48d6-87ac-f13092f9f963", "indicator--4428a268-f8de-44f8-89f7-00336f7f1d1e", "indicator--311c3746-6ce3-42d4-8fd9-61d888302027", "indicator--8fd3a886-385f-4dd9-9e60-f4c404d61729", "indicator--2d6096cd-8b51-43ea-947e-ebbe30a8b5f6", "indicator--a5134ab6-3fe1-4bdf-b580-51927200eb5f", "indicator--1036d389-61cd-4189-b8d5-0153ae7b5dc1", "indicator--03c7ec29-b316-4c69-b213-321e76451786", "indicator--80ed5d2d-70a6-4bda-b373-acdd25888e00", "indicator--8e55b9a1-7ed4-48dc-83ca-2ff97f32aa52", "indicator--061534f1-aa4b-4347-9362-489a142315ef", "indicator--f5e48579-dbd9-4c3c-bb5a-d9d747e113f7", "indicator--e470133c-aa47-4410-9c5d-2ff0e41e53eb", "indicator--1c58ce97-81b6-432c-a503-6982ee5d7006", "indicator--fb408e7d-0d7f-443a-b753-120f1af90d3c", "indicator--f65860fb-9bec-4052-8254-4a9ffc40ac0a", "indicator--795e6ea0-046c-46da-b862-f93449722ea6", "indicator--5b6171ef-47c6-4597-b6e6-6108443afa0b", "indicator--81f5320c-88e1-4603-a587-739339c9b8e9", "indicator--c8049fa8-9f82-4d72-bede-26dc5ace883c", "indicator--d075a46f-4cfd-4a46-ab96-8bcce1d8c91e", "indicator--5d4b0fa1-eb44-416c-8090-6c0f7f1d21b2", "indicator--f80f3ca9-8af0-49de-a178-f8382a9903e1", "indicator--545ddf11-f1ba-4fdb-83e2-2ef6b5a59ea5", "indicator--b7c78c00-3957-4571-bd60-fb826b2748a2", "indicator--ef10f1ff-0220-42ef-83f8-c589bcba28ce", "indicator--588734ce-0507-455e-9bd6-aca6d3ec73a1", "indicator--81db130a-ecf3-4dba-9383-33fe633bd6c2", "indicator--b9dbc9f3-154a-4423-9c7f-fba082525337", "indicator--13f838a3-58ac-496d-892c-7d74fe3a60c4", "indicator--f0f998bb-1dc2-482f-998a-a18ea6f89598", "indicator--d581631c-cbd1-40be-8a3a-a055819b3af7", "indicator--e07ee02f-d295-43aa-bf9a-0d132ce5bda6", "indicator--c563e8ca-367f-4f68-9421-c75156997399", "indicator--55dcd8ce-037e-46ec-8204-16d808f46f96", "indicator--c14fa075-af26-4298-8948-9ce59bcf5997", "indicator--78985848-ac72-4d00-96e1-75d75928a5b4", "indicator--8226763b-8f0b-47d2-8436-46e5f246dec5", "indicator--bf066ab7-7007-4136-bb35-807a39a1dbf8", "indicator--bf132169-5b6a-41e5-b015-d3183fd71134", "indicator--24ada8f6-7dae-466c-9131-ae31e9d08fbe", "indicator--42a7c04f-bd55-43f9-ab85-234731a84358", "indicator--6a620953-92c9-4734-b129-06b2c48a7532", "indicator--4405a5ea-0f27-4820-a66e-a52096069795", "indicator--a52a9a29-b3a9-49f4-a8aa-6d1ba9e3344d", "indicator--cd5d769f-7a4e-4ae5-889e-5ccac4b08a32", "indicator--cf9feabf-7975-46dc-a8e0-de91d77a1417", "indicator--e6eba44e-fc73-472d-ac55-f2e80bf4e2cf", "indicator--080e675e-f951-4f9f-b812-0178f37c3818", "indicator--adf61c53-3437-41a0-b8d7-cbbac222ddb8", "indicator--6a4add65-a5c5-41cf-8389-20d086af001e", "indicator--3cfa999f-34cb-457e-a2d5-9fe7955edba3", "indicator--604f252f-b671-43ad-b9d4-97779b862bb1", "indicator--589baf0f-8d98-4f1b-8d6b-8a0318cc2898", "indicator--a42c450e-00a7-45e5-a3a0-bb4dffa24410", "indicator--2087738e-5efa-4d23-aaf5-669061d8ebfa", "indicator--913c9e21-7a42-49c4-b134-9816c088078a", "indicator--7db1c594-02cd-4600-a63b-eb3965ce9baf", "indicator--ba13ee41-3725-412a-94ff-461fa71a8160", "indicator--079cb4d6-c535-4ae5-b88d-141cc250a1cb", "indicator--4c5dd53a-2092-408d-82ce-bedd3427756f", "indicator--e945768a-3f25-412c-aeae-c7ab514e126c", "indicator--2d37386d-34e9-450c-9c24-ac5f0344d86a", "indicator--d4acf21d-1623-4e9c-8691-6793f42f0e05", "indicator--8312ad87-bc50-4890-a94a-1fec0297f038", "indicator--96602d1f-7e48-4547-ace0-0c884f2be821", "indicator--a1c25c5e-4fbc-42b7-b43b-c55b68752b11", "indicator--6058f67f-d59b-4c5c-b768-7d56da04dfc5", "indicator--f469dbdb-2097-4a61-a0cd-8f9dd698e48d", "indicator--6c964e58-f638-46d4-98ee-3f7ce2a5dbce", "indicator--b84ff19b-ee93-4716-95d4-810e49745a1e", "indicator--736ec95d-40b3-4237-974f-f375e6f7b945", "indicator--cd39fb25-d2d2-4077-ba5c-983865f0b2d4", "indicator--63a85175-d01e-4bd6-b08e-b6fe4c7decc1", "indicator--7c2dde80-38e8-4622-b8b5-b1b565071a97", "indicator--41c77743-fda7-45f2-a11f-f2d98f8ee1a6", "indicator--f7d855da-6d3c-4175-a57e-0adc95adcc0d", "indicator--4d655e92-7d65-47ec-b261-0846b4699038", "indicator--aeed394b-8755-427a-8159-bc66ccd04fbe", "indicator--fb80f207-fcaf-40b6-abf7-fd01ceb2e0c6", "indicator--b8408318-349a-489c-901f-8e536e32d311", "indicator--ef30d927-aa75-45c6-b398-21c1dde7ffa2", "indicator--693d9b62-a721-4d8e-ab79-6f9e06a377c7", "indicator--6e7f9ab0-f587-4966-96c8-22cf5c74e3cc", "indicator--5eb52355-8b88-4116-9619-dc1b500fa563", "indicator--b67b907e-d7ac-4b80-b1cb-6302eca15abe", "indicator--d8c35363-de77-42fe-83a4-6af956771c37", "indicator--b8bd2d3c-d625-4e15-960b-06bff9a0b550", "indicator--f5484042-f245-40dd-97e6-cc806266adc1", "indicator--ec90c37e-ce82-4744-ba9c-aa5636198da1", "indicator--7e764bc3-e884-42ef-b09b-ecd80f11dfde", "indicator--41fe564f-36ff-4976-80ab-fe970da54cb2", "indicator--fe122e6a-f4fb-47b1-889d-d0db00d6fc16", "indicator--f803eb32-51a9-43b1-b9e6-abca26b3c390", "indicator--22db5cd8-d5e1-449b-8ec9-eaed10ea798b", "indicator--81a626bb-ca1d-4e6d-ade7-c37d53b1f0be", "indicator--67355daa-1af9-4a2c-9255-8f41956b9484", "indicator--9ccc9557-f54e-41f2-acaa-08bf3ff51ffe", "indicator--8ad1a092-af9e-402e-9f2b-c51599745db2", "indicator--b66b6c48-6849-487c-ac0e-7e6eaa1b6a2a", "indicator--3b4ab91e-9c2f-4214-9a11-abee39ceab8d", "indicator--2ddd33ae-53ba-42f4-8b9c-a060400bc19f", "indicator--72e1d73a-4d89-47fe-b297-e12fd25fab46", "indicator--eb07d65d-ff2b-48bd-99ee-88630d8f8f84", "indicator--c058b993-b4b2-4e98-b387-aa96737fbd19", "indicator--2a2f6c1d-e78b-4dc3-b84b-58be9703a42a", "indicator--8fb995f2-aabc-456c-9809-4dc5a6944eaa", "indicator--5d8e0068-e9af-47a4-83b2-8c55075d2a65", "indicator--3d35268c-5e83-4432-a288-2ed12651fd4a", "indicator--774a3569-e745-4447-a913-e33dcb4b271a", "indicator--963951d1-8e50-40e0-b6cd-c455a1323016", "indicator--6ad3b4d1-ed74-4551-86cc-c0d35a8eed67", "indicator--545e0b86-782c-4a90-a20e-13a1ea95ef69", "indicator--215bfef1-d0d8-42cd-befc-05d9859fd9b1", "indicator--487fd32d-d269-4642-91bf-9f527ce2ec1f", "indicator--942d2a79-1927-44e2-a15a-27a1d8114023", "indicator--6f489aa6-25ae-462b-ab94-b16216d2ab35", "indicator--f5ba7409-2946-4c36-8681-677e9dc4830c", "indicator--2c0c21c9-1698-4d1d-9401-f8d72a823557", "indicator--c0a511be-16b5-4d54-a0d4-9ecfba96944a", "indicator--c4d6147a-fcf1-4c90-a564-c380166c0e43", "indicator--fcedb9b2-cf23-4e66-b590-0af880e16415", "indicator--47a7e4c2-9d72-4141-a175-9cbc83b9c176", "indicator--6d896489-7293-408a-922d-c957edb1ba0c", "indicator--a0a53841-5f4a-4a60-bed1-8f72e8aa1ff0", "indicator--d787a33f-e4b6-4b67-a08b-ee78c624beef", "indicator--4051e124-fe46-4118-b2d9-2e292ecf3296", "indicator--5b59a52c-3b46-4ca9-a8d7-6729ae7300c1", "indicator--511d1ec4-32c2-4c66-ae11-10678c03b2ab", "indicator--265ebdd7-ef97-4e49-947f-00a8a569ba5f", "indicator--fdcf9c02-5536-43d1-bbca-0692fdaccaa6", "indicator--fc4d16dc-51b8-4c4c-971a-40bbfb791085", "indicator--d26262cc-45d6-4e96-aec6-74eec223d8b3", "indicator--44c400b6-6fa2-4206-8f1c-74578f204912", "indicator--a6257bd7-b7bd-47a2-9ffe-81192d359165", "indicator--e21e2fe2-7d7e-4361-bc87-2e1e7b9300bc", "indicator--40993e06-134a-4fc1-971c-7ce9495623c4", "indicator--4cb109c1-7674-40d0-9d83-7e6f489cd02a", "indicator--1254fcb1-5533-4fcf-b4ce-17027e507ff3", "indicator--aa7b4fd2-f6cf-4dad-8f83-5f3b494df354", "indicator--09054836-ed7f-4143-8583-e772c9794893", "indicator--b7c22ff1-9979-4616-96ad-0e4399b1e841", "indicator--d14e72ff-1f36-48ba-a702-ce58c206762a", "indicator--12c302cb-ec37-4e20-b354-b848d809eeb1", "indicator--0560ce2a-3439-48e0-b654-86e1aed0ad26", "indicator--952ea046-e050-4047-a260-34f55b2d2893", "indicator--f6929212-0bf3-4f3d-837b-518b4492835d", "indicator--c9a184ca-6ae3-4ddd-8cdf-39a81d9eda7e", "indicator--83210c5e-11df-4d83-ac2b-1492dfb7a1bc", "indicator--d7e973a9-db58-481c-8287-339eb8f35fb6", "indicator--b33d4554-7a46-4c6e-a096-873bdc5924a1", "indicator--7a106401-2cb9-43ad-849b-448cae96575a", "indicator--f8eb1f8a-7496-4293-bbed-d2dfff7891f1", "indicator--0977e491-7ebc-427f-80dc-8fac66e41bc8", "indicator--4bb3efcd-bba5-45e4-919e-c535fd3e4422", "indicator--78fb5fa3-dc9b-48e4-98ba-cc4589621501", "indicator--5b0b3b4c-522e-45d4-929b-f56ad60528ae", "indicator--29ba6fcc-49b3-4430-8ff6-4e413b59237a", "indicator--2679a4c7-4e92-4e71-8e87-c6ca4a218329", "indicator--4196d6be-739b-4f76-ba80-70ccb197b8b9", "indicator--2e0f2cb7-3f1d-4ef4-aa58-6e2e28db8eaa", "indicator--421017e8-7111-458e-831c-c48356091d64", "indicator--e84414c0-5724-4228-b03b-c4e683a69c48", "indicator--87c75b8a-cd7f-4532-b045-d821bb55099e", "indicator--fc738cb3-5997-4e00-b087-888594cc6d9b", "indicator--0410f7d9-ed7f-415f-aaf5-3e87dc8fdbce", "indicator--ded0ee24-50bd-4dce-b630-b4a18518c5b8", "indicator--0d7384fe-648d-4fb8-90e0-88920704ec69", "indicator--de9c6711-76a1-4598-b986-6180827335ee", "indicator--502a05a9-6f44-4993-925c-d30b46c7f649", "indicator--ba651d3c-4706-4db9-b621-bacc8363b251", "indicator--245660b2-fe10-4b26-990d-8133fcd0c20c", "indicator--22af6eb3-192f-4b0d-9cae-53f0be530e90", "indicator--aea8d6b3-dfd4-47ab-95a8-395e7a8c5a54", "indicator--0b62274c-e862-4f20-a972-a1997f9d63bd", "indicator--690c9572-ce98-48ee-b3f3-a66d336a4938", "indicator--07a35dc3-dd3e-48d8-b3d0-ee99b82dc394", "indicator--bee6dbda-017c-4429-9967-be99b58589bd", "indicator--b18c8351-519a-4656-9964-591a1fbf7d3d", "indicator--e94b44f0-31b0-4cf6-800e-3fb9e7e51da4", "indicator--283bfe64-79a0-4894-9f04-6fc67f911e0c", "indicator--92a81db5-947c-4e55-8ebe-2723145111eb", "indicator--46ba5f3b-d331-40fa-b14d-8bb5de593e80", "indicator--6c0478aa-77f6-467d-9c53-8187326a1c9d", "indicator--fa8e813a-7d35-4508-854e-e878016357b1", "indicator--2b201b12-24a3-4238-ad9a-87b9e430f5bd", "indicator--4a23e05d-5d9b-4acb-a69c-eacacce3166d", "indicator--62c43558-c528-45b6-b181-ccc35a55da6b", "indicator--dce9af7b-5cec-4894-81e8-9d8683334cfb", "indicator--d65b2a34-124e-4162-96ce-8bc56ac45a0a", "indicator--1605b628-3e80-4c67-a922-93de3127eb51", "indicator--8f9d5514-0df4-4261-83bf-03fb232ef361", "indicator--25597d06-76d9-4ccd-8ecb-9a89e7bb0cd0", "indicator--79db21ef-24c6-4fcc-ac64-51528ae31697", "indicator--6d214eb3-83df-4025-ae70-a7795a968dc6", "indicator--4c24d62e-ff54-4fc6-8ce8-aefbc8434b63", "indicator--d736c63b-0b23-4986-bc6a-91da2529dfaa", "indicator--e15cb4ba-46a7-466e-bf04-881c7e5d3e7b", "indicator--6ecbe773-a992-476c-8c0f-f28c6480db5c", "indicator--cf24182e-3a38-4322-be9e-0a224425b09d", "indicator--cca5fdfa-f51d-4687-9dbb-5e096fb931b7", "indicator--969e9142-5c1b-49cc-bc51-ae65b8884768", "indicator--a5525ace-72dc-47e7-893c-d08c7b8834c2", "indicator--bb716a31-dba6-4b24-89af-00a60452a13d", "indicator--7a13a8cf-e569-48d7-9425-5c4d45cad272", "indicator--4af970b2-3661-4997-af97-12c66a6cb6cb", "indicator--8497b981-4ae7-433c-b291-2af12d9a505e", "indicator--1134de7b-5900-4038-8006-d41e1f44b8cb", "indicator--0dc73200-4119-4ea4-9823-c537a0d9abf6", "indicator--5686fb4d-dc52-434b-b6b4-89a12ee7a25a", "indicator--da8b18d4-7450-4080-b1c3-97817f50bea4", "indicator--c0c6e6ff-b77d-42fd-8f37-af1efb23c833", "indicator--189db552-fffc-42b5-92d1-31c9554dfe2e", "indicator--b00e9a3a-73a1-4bf8-833a-a187831b97ad", "indicator--7fee5f1f-c8e9-412e-92ae-c5ad411d58fd", "indicator--8e74d4e2-0dc6-4573-973b-1e8bced249bd", "indicator--69dda2d2-af02-4a3b-8f20-bc1e779e2936", "indicator--e9f81228-4101-4ef2-bee7-a5110fa801f6", "indicator--4bad9173-fffc-49ca-a421-867c6aef3e32", "indicator--792d8f81-da1b-436a-8c3d-2b6e001f59d9", "indicator--3384993a-3bac-4320-9a4e-b3e6eb8acb5d", "indicator--c5bd781f-3ef2-4d29-8d0e-cb23bd767c05", "indicator--5756e0c9-6d54-426e-aec3-7717c94be94f", "indicator--e34019f2-8ce7-450b-a5ac-9b0429e88884", "indicator--51e97fd6-2a43-4b70-a6f3-93833cb4d620", "indicator--f40bb5e7-95d3-4211-abce-0ee3269c9a2c", "indicator--299439e4-90fb-4af7-ba71-1ddb2d087181", "indicator--b86dc349-093c-4efd-8f16-1e72c592211f", "indicator--17690c90-0ec1-44fc-9f52-9a2a034dabf7", "indicator--438e3bb6-c258-4aef-be22-4df126d3ebda", "indicator--c803eea8-e364-42ff-bf8e-9090707717da", "indicator--972fa0e0-cab9-486f-99e5-6f58245d2cda", "indicator--77803758-f884-4e9c-9849-fb8b758830b4", "indicator--eed65e81-4fa5-4452-901c-e50649c1e8f9", "indicator--64d939d7-17a1-44b5-9336-64675b364b37", "indicator--b3b02223-36bc-4d14-b127-a91635035718", "indicator--9b9709d8-a8b9-48d8-8b6c-c894cb4f84a7", "indicator--1cc3ea83-1219-4083-bc0e-9f1fce104e07", "relationship--a2c82f53-4a92-470f-a848-0ac29a9b6f67", "relationship--8b834787-4d9b-4ad2-b1c4-3fd87abc15bf", "indicator--1f9d2a7b-f75b-46e9-96e0-5533d6faf401", "indicator--0713663a-40da-4d18-b59d-eccac818b232", "indicator--e5901df0-0256-4c55-a7e9-6e728a5ba3ca", "indicator--5a390589-35cc-4a1d-932e-0a7c455ffceb", "indicator--31b1766b-26cd-4c4e-a77c-c52f32d9578d", "indicator--ef3acfd1-718a-44bf-8f69-b268d39ea1d8", "indicator--c3faa60d-a8c1-444e-9c6a-2d513932de0a", "indicator--4a5eaee0-b892-4d57-89bd-3a7d83d13194", "indicator--20866f89-f27d-4677-bdae-f61636222ac9", "indicator--69ac1a91-20fe-4ec2-a876-3eac15b75907", "indicator--8a589be4-c986-41f8-abb6-e1f4d1b52598", "indicator--adae16ec-6de2-429b-83b5-8ebabcb62a5f", "indicator--187faa3b-6947-48e4-88e2-3ed79d2f7cc6", "indicator--b9cea321-3124-4695-98fd-0451de2ebf49", "indicator--ab4b18b3-4b67-4e56-882e-d9b505d84efb", "indicator--3caf7c10-a696-4811-8d7b-c23ecc8a47e5", "indicator--2dad67e3-d235-4707-85b5-2aaac53e66b8", "indicator--2e0c5abf-086a-490e-b959-16b91b5d8601", "indicator--086f03ca-aaa6-4d20-b4af-3e4bfc393282", "indicator--9b67eb59-43f7-46ab-8cca-d5ce8228709d", "indicator--d2be8d50-0b04-432e-a6e5-f9813c343e7e", "indicator--edebd7d1-19f6-4fd2-b1ea-fadce07a4ec6", "indicator--0fa24804-4de7-4976-88aa-1280eafad13e", "indicator--dedce3f9-32de-49d2-9d82-6b176f878e2f", "indicator--52625be9-80cc-4fa1-9431-d0e236b7df69", "indicator--85150f38-3885-4b8c-a3d1-7c9646cb05a5", "indicator--505aec14-1825-42cb-9bcb-555e967c6282", "indicator--cac2e826-a757-4d77-bc52-bfe726916f08", "indicator--37cd694a-f0df-4a9d-b783-3183d43ff7f7", "indicator--0e834d95-22de-4477-a12e-824557ff8e35", "indicator--9d763328-8235-4131-a985-3afc56e132cc", "indicator--93dfe422-0f26-4b71-82fe-b08421b9463b", "indicator--4e5543e0-473d-4144-8c85-602cf3445d30", "indicator--17fdbbb7-e555-486a-91f4-ac834ea3b129", "indicator--63fc5a55-1257-433c-890c-63891f35d481", "indicator--2ea8eb4e-8a84-4669-977a-9dc9c5652a33", "indicator--5e5321f6-a6fb-459f-aef8-0f218b58eb2d", "indicator--9a792c74-af85-473f-9f44-07630f92a5e7", "indicator--65b2e2a9-728b-4f01-b1ea-b25390e2421a", "indicator--85f67930-219c-4ecc-905f-ae09567653bf", "indicator--6c3b0258-6e57-4890-8739-1297501bafd3", "indicator--d8116aae-ea1d-48a3-b86a-022e44ec482a", "indicator--39a92321-4d0a-4218-b912-37c314e2f05b", "indicator--052f496b-bc88-42f1-bf6a-e20bdfc04986", "indicator--1c14f0a4-4667-42d7-b20b-e0005773a76d", "indicator--1aaab4be-b68a-4a5c-9b51-5cee57b2e531", "indicator--5d4fbfab-4e53-4d71-93fb-e46b86277c6f", "indicator--01a2b9fc-4095-4429-9290-5f50998aeadc", "indicator--cb32ccd4-c607-496c-86d8-bef04a26ec00", "indicator--711defb3-4a57-46e6-82d2-c0f993a0fc14", "indicator--2a7448ce-9065-40ed-a7c2-db874b635d08", "indicator--b134b550-97e3-4813-9fe2-1d0f41aa45a4", "indicator--616b1f4f-90e5-41a8-9e7b-c919b62d5f2b", "indicator--0b4dd19e-8d29-4e1e-b1e3-a61d2c8bd6a9", "indicator--39c26f54-412a-4d46-b84b-d80efe668e29", "indicator--7ddceab2-474d-421d-bb3a-390603b3efd9", "indicator--fbbfd727-75b0-48af-bd4a-b04a0389fa19", "indicator--45e932fb-3e05-425f-8fa4-931a51fe798c", "indicator--34c772b5-ef12-484b-9295-875424607785", "indicator--0d3dfb68-63d2-4a65-b41f-a6a384df001f", "indicator--6f7636d2-fdba-4a84-b1c5-85d652642015", "indicator--813d51be-248c-4f8b-85e6-19b913b882d5", "indicator--604fd02c-1999-4b6d-946e-a1c980535c03", "indicator--473c3bc7-f7b3-4fc1-92ee-f4ecab4d98a7", "indicator--f01be780-d9c6-4e59-908f-f262a6b9e1a6", "indicator--c93cdc22-b485-4aa4-bef9-55a33b90000c", "indicator--0ca6ecc8-98d1-4ea4-a6b2-091d57adabe1", "indicator--3f5c69b6-850a-417b-8161-66228dd8517f", "indicator--e68a8d5c-9436-4e93-be3b-a379712804fb", "indicator--d9948d77-3290-4114-8d10-e10049a0620b", "indicator--1f8470fd-71af-442d-97eb-7b2619c75ced", "indicator--790f22f2-2097-4b03-8dbe-561baa21ed0a", "indicator--dea09a5c-c081-4280-b324-8a32c4538c13", "indicator--a7d80531-efe8-4f56-8061-4f7ba261ac58", "indicator--add5b87a-21d3-433c-b88f-a71bf0ee5305", "indicator--34bf89ea-5157-41fc-b95f-0a10b2d31747", "indicator--b25f0a29-0c00-41a1-b4c2-0d872d68ec04", "indicator--69fc1354-7ed2-478b-88d3-6e86c8a32eea", "indicator--25b9401f-dead-40e3-b2d1-6bcbdcdc3f61", "indicator--df7fb63b-3355-4bb3-8d6c-b5ab230be302", "indicator--611a9e06-75ab-4406-97ed-e158bb0beeac", "indicator--014a5c6f-703b-43ad-8e28-5116d4dd334c", "indicator--f5586ef4-5e31-4f56-a663-bc17b9c42207", "indicator--57d9ded9-a570-46f4-b5b0-c4c6d3aafc93", "indicator--5ad99f1c-a713-4a2a-94be-98b393743d38", "indicator--c8c14330-b3fe-4d4a-93b5-65c9df76817e", "indicator--d6d896ea-236e-4e1f-bd3b-00fa8a4710ec", "indicator--50a9bf61-4769-4ffb-989f-24051d72457f", "indicator--1b7eae51-22d5-4e51-be71-cbdeb99bbc20", "indicator--686941b6-acbb-461d-9598-4cfcdda620b7", "indicator--e2024976-9ee0-45d9-9b3d-176262d30556", "indicator--5a3bcec6-67f9-4e3a-acfa-f5aefdb38d96", "indicator--48317e97-0b39-4586-9e1a-e22a1461fef0", "indicator--0239709b-f4b3-4771-b0cd-f7888d5c5629", "indicator--b9eee2ee-7e9d-4394-9d47-195745c5a73a", "indicator--14360b99-7494-47fb-a475-c15e23a99afa", "indicator--ab3cea99-a333-4411-8be5-c3db0b364ec2", "indicator--d297e717-20d1-42da-8dd5-a254dfbeefd1", "indicator--d9ce3dca-4f15-440a-b9e9-c2a0393dfdb5", "indicator--46fa7484-45cc-4f35-8289-ee8fd44e443e", "indicator--0af6276d-51f2-4f81-bfe7-71ff13f52a21", "indicator--9f66f10b-b5b3-4855-b74e-5bacf546e23a", "indicator--00b7360a-410d-42f4-ace8-aa7fd667c61a", "indicator--455c346d-7697-4f81-ba2e-9e121cb3d29d", "indicator--50fa60bf-c0a6-4d15-ad4a-c1995ee73b26", "indicator--3ff1a7bd-b26e-4a61-a0fa-86ad0a6fb3e1", "indicator--db8611a3-311a-407d-adea-f9759dd08c02", "indicator--99a4e454-73ab-41e5-8c4b-1da34253474a", "indicator--623a3a79-2696-4d23-89ca-7126a600ddcd", "indicator--d3fa7a72-76bb-4f0a-9970-eca154fa191b", "indicator--e5e30539-8ffc-4a70-9e2a-ac8d2a9732f7", "indicator--03027e8d-3bc6-406c-8b31-bce28a55c2c3", "indicator--e0d4f9c3-b2a2-4e37-9bd7-2578506ee0c0", "indicator--6f078549-aead-4f76-bf6d-95c745599eef", "indicator--4e1b8105-32f0-4d96-a098-762aa85093fc", "indicator--d9bcea94-5cd7-496c-b9b3-3b82af5e1ce7", "indicator--fc03201f-46c5-46e0-8183-cf99d7af4d89", "indicator--83d755ec-b09a-4dd9-8a40-99cba81a590c", "indicator--9b043dad-5acb-4f55-8074-5a6cbae9673a", "indicator--99dd5a7e-0fa7-4fec-ae6e-9d236c3ef84c", "indicator--ae74ae0b-ce6e-47df-85e9-80383b84ef5b", "indicator--8c0427a3-7fa9-40e5-bce8-85b5713d9500", "indicator--ca5edb2d-abfb-4670-8dfd-5a14c2098e68", "indicator--772e06e0-423f-4c16-a2ad-19b2c98767a2", "indicator--73d529ba-cb81-4b0a-9f71-b0feefa179d1", "indicator--85ae83b7-0cb3-4d25-80a8-082809be2b13", "indicator--46e92e2b-8ea4-4347-aeff-b7f0f6e76f36", "indicator--b9fcc137-2f1b-4557-882c-7222294ff5ed", "indicator--466f6c50-a04a-4167-afb2-eb7e580d61c1", "indicator--7a501658-84b1-48de-a08c-8b3a822bb8de", "indicator--2038023d-8de1-4e9b-830d-f20cc460cbfc", "indicator--edbc9ffa-5602-408d-9298-854135809496", "indicator--1f964c9f-57e0-49dc-bf7c-bf70efe69203", "indicator--1479c62f-a37f-483c-8359-df45bdf00162", "indicator--5ef53699-938a-41cf-8aaa-28c8f681cca6", "indicator--190a7cb6-136f-4c97-b2c8-135287164f11", "indicator--e9c6dfb6-ce46-47f1-9be9-5ea4e784dacc", "indicator--d4291c37-704f-42b4-9700-930cce6ec585", "indicator--e9a4ffb2-f0d1-4a03-887e-497f84a40366", "indicator--642c67d2-b48a-46df-bb3c-363fa61d5763", "indicator--aa7c2ffd-9b39-431c-bebc-505a043b4546", "indicator--3089dd6d-9fb0-4bea-8db2-90017828c933", "indicator--e75b86cb-55b1-4b0d-b09d-7e039edc5a74", "indicator--7635bb75-a9ae-418e-9eec-0c3444154a15", "indicator--d963cf8e-76d7-49f6-ba0f-d407427e65f3", "indicator--9c8149c3-3eec-407b-bd2f-2bf7017ced98", "indicator--dd32cf4b-f439-4cd7-bc60-2e23223007c8", "indicator--a00416fd-3db0-4e5c-9459-8a4c2ecd1c12", "indicator--4e87b969-9332-4d14-a178-f134b8ec0869", "indicator--abc13635-d580-49ff-ada0-795cdab03467", "indicator--edbb2370-e9ed-448e-b7d8-ecfeafde52ed", "indicator--49407007-83da-426c-bc64-5784497b846c", "indicator--cdea645b-1c47-4004-98dd-d6c6f92b4c8e", "indicator--3251e084-9405-44c0-bf70-565b8c30bfc3", "indicator--8de9cdc0-cffd-401c-8dd2-4655968ca268", "indicator--164af2d1-0fb1-4d0d-a9df-de54ddee7eaf", "indicator--7acb8378-5fe3-4752-baec-1eb792d15d75", "indicator--869b47eb-28fa-4ab8-8087-7f18271542e0", "indicator--a8264f28-48f2-4c94-b190-27b6255ed2b7", "indicator--17e11063-159b-4cf8-9dbc-20879ea6c58c", "indicator--b985b5bb-5e17-4196-afd7-80eb75786d46", "indicator--4d30f8ce-5e05-4166-9a31-63e3320b0a4d", "indicator--bcdb8c85-aee0-4a81-9137-0a77a02e457c", "indicator--97f8e0cb-59d7-40e9-964d-447b0d0ada99", "indicator--1c4451e7-14ec-4425-b9c1-250a0e8db6ad", "indicator--a154a057-a134-44a0-8b81-2f5a244443a1", "indicator--f494aae5-1a45-456d-b3ad-44b4e8eab9b8", "indicator--4e9feb3f-32f9-498a-a22b-fa608e742f46", "indicator--f88b3d97-95a5-456d-847d-9de011210154", "indicator--8a142d2b-dd47-4e83-bf4d-e1ef15e8a3d2", "indicator--e58ea59a-c9ff-4f09-946c-46ddb376c7ea", "indicator--d83b93f4-d63d-4a21-901b-af308ae0749b", "indicator--5d061d22-c3ed-4d86-8fc8-9b2c0b4ce68d", "indicator--8b1d0762-256f-4d03-8fc8-d17be63d4c8e", "indicator--f3aeff90-1109-4411-a973-b0af643e087f", "indicator--76611325-32ea-4bdc-8ab4-2fe555990e1e", "indicator--c6790d46-efc4-4249-9c51-04a833e1fecf", "indicator--9712dfa3-9cf7-494a-84bd-9f47cdcb91f6", "indicator--2c84f2b9-15ea-4c11-9855-1627881a5310", "indicator--24426209-b7f8-4c81-8660-aaddbc9c2082", "indicator--2dcdc1ed-b780-4b14-aa62-7956b8959228", "indicator--677ffa43-bc1c-4b49-b1b0-4c91b9315506", "indicator--f67e25fa-a76a-4854-aef4-ed63749baf18", "indicator--4274857f-f0ae-45b6-a172-089b971d6d70", "indicator--0b5a640e-cb06-4f22-b1f3-e48c4aa0591e", "indicator--5f21784c-0ad8-41c8-871d-ac5eaacc1820", "indicator--7b218931-143f-4eb8-acc2-d6b711551592", "indicator--391d95ad-dcb1-4d57-ab74-e1ca9d9786d4", "indicator--03b23204-09f9-409e-93d5-87d676432335", "indicator--34437fe0-1d07-4489-b182-f0000c02d120", "indicator--6af7c7b7-96d4-43a9-9390-299caca93329", "indicator--eb21a33e-3268-4ecf-b498-f21b32b6d78d", "indicator--2f7a0f39-8146-4fe4-9c65-dc6905cdf355", "indicator--718b5053-2692-4b25-bd3c-10439724e49b", "indicator--a08fa628-8236-4ac7-b92e-9d4c36812e65", "indicator--59f188e7-25a6-4877-ae76-69b176952f93", "indicator--99867ac2-3057-4e81-beb0-7a7d8eaa765e", "indicator--0192e06b-922f-4223-83ae-06b69043c9d0", "indicator--9e2cb2f4-6857-4cb7-8ed7-76ef26ae31e9", "indicator--9da6b802-b15f-462a-bb53-f3e5acef253f", "indicator--3b3af449-99a2-4c3e-942c-93d968390316", "indicator--a423b228-872d-4185-96f2-eb6b9b563378", "indicator--6c013951-4ab3-4d29-9d4f-33eaa8611684", "indicator--84734d78-a872-4e24-a338-70d1bf04204a", "indicator--fd4c05ea-1b9c-42b1-99d2-826157830f0d", "indicator--7de3272a-c525-41af-813b-d92f2a28fb6d", "indicator--5fd5bd11-98e5-4c5b-9c68-f9161cf1cad5", "indicator--4c52d6e2-b1bf-4d9d-9214-ca6db422d7b6", "indicator--38f8a341-4e30-4a3c-a2a1-914d3846716e", "indicator--133e1498-a23e-4b75-a8b4-169230fbe37f", "indicator--57941f8d-0a9c-4b7f-b2df-2d58bce8b517", "indicator--6147d9b2-4ff4-43d2-a8e5-a9b73a6997e7", "indicator--4a55873f-acb2-48dd-94ed-9858c11d663a", "indicator--75c25be5-a834-4ef6-8f69-4961b3da48d7", "indicator--8ca8bb31-3772-4533-b195-6ebd79421384", "indicator--60609131-b99a-4f7d-8254-e9e448b89099", "indicator--ee2c18cf-5f5c-4fd1-a733-525e57cd08ee", "indicator--0a592fdd-75d2-4054-a7ec-0e7f969e748a", "indicator--ade115da-6ccb-4e8a-bd3f-c8c219c2ea17", "indicator--bd4cf98a-f285-4218-82c1-726839b6735b", "indicator--0073d47c-a0eb-4863-9a59-c32aef1b53cb", "indicator--5e0b30e3-84e6-499b-bf9a-1a49e04ad0c6", "indicator--6da08f0a-5f42-484e-b7c1-200be5658f79", "indicator--64f92cc2-08e8-4011-9cad-2a86f200ec54", "indicator--6659af48-d172-4992-a637-2505fd790945", "indicator--4fbd0a1f-c017-4980-8846-1d12979dfa22", "indicator--a59dac2a-5590-4c27-aa99-a2f93d581b10", "indicator--ecc5828a-7718-4470-8979-8bbde9e40a15", "indicator--c81808a2-5aa5-4416-8c06-8ef533f3c1da", "indicator--0d281417-304b-44db-b7bf-f6c031dd56a9", "indicator--17c862e6-5469-422a-b53a-d92622c48472", "indicator--ff386db4-6061-48c8-aa0c-0ed937d4159f", "indicator--fa783f38-f79d-4fbd-a660-51bcc7c22689", "indicator--d001e27f-5b0c-4f09-afbb-65519400bc93", "indicator--31e31f1f-d704-4b63-a325-deb5d1dbd749", "indicator--b21b0591-86ec-4cbe-8465-9fbc63fc286b", "indicator--945a0afb-989d-481e-8730-6bbffeb9b246", "indicator--3f55567d-0231-4c45-a411-2eacc23d71d3", "indicator--4da73b94-1f68-4c7e-802c-9285ce5f5841", "indicator--9cecb039-521f-4eb7-acff-2447ca43329b", "indicator--93ee4c6d-c8e3-4eb4-b36d-62bf256f3c8b", "indicator--a5f8cb1e-a89d-40c0-be9b-e2355d030afd", "indicator--e96b3266-8e06-4f53-88ac-fe9e1cf44afd", "indicator--1ebefcc5-b1fa-4301-a641-09455839dae2", "indicator--b390e853-ae14-40b2-9e0d-55968d856d14", "indicator--b6a37795-5f77-480f-bade-3aa658bd4eff", "indicator--5d4b3012-f304-4d11-8a36-42e7ff9b87e7", "indicator--71efdeea-f159-464d-87d1-fa75c5f2da45", "indicator--823090b5-5aab-4a18-91fe-05f4b8f417af", "indicator--328fb780-11b9-4695-bcf2-b779781ac5b0", "indicator--28c29418-2307-4dfd-bd14-24e69213e304", "indicator--421b56a6-77c5-4ed5-bee2-e6f5f6124fb0", "indicator--e8737e95-1714-44c8-8553-794070cfb897", "indicator--a84a5a5c-93e8-4a4d-b7f1-763381b1a002", "indicator--20b90949-6a20-4da9-990e-73df5a3407e5", "indicator--3521f9a3-2617-4eeb-b2b3-060dcb58aa6c", "indicator--bea9ac91-385f-4e12-b01f-0fd25da4e590", "indicator--553ba862-de24-4fb7-9448-b52410d450a7", "indicator--dd8e6e0f-17ab-4eeb-9e5c-5742d89f5cfa", "indicator--a6201c77-92c4-4610-8552-d9f0b0fc6e36", "indicator--cf8656db-958c-4ec7-b118-c2ff56ba79d2", "indicator--9991a692-b012-442e-8534-bc821ff5bf76", "indicator--ec9fda0d-4bd1-431f-9f35-d7954038b4f9", "indicator--1469f619-a7a3-47af-b679-5cc55486acf0", "indicator--4ae4bd5a-9076-442e-a52a-0316a7214995", "indicator--539e9e16-83a9-4570-b089-d6cf17e6fc5e", "indicator--a542f012-c025-4e35-bac7-75c80b21b084", "indicator--4f211626-fb2f-4a0b-99be-4611cbd2a238", "indicator--abf4f111-1451-400f-bdb1-6e8c6bad0519", "indicator--0963ef74-988d-4a9a-b295-6d2cf5a1bf7a", "indicator--fb40b11f-077e-46b7-938f-199a3a736162", "indicator--6338617d-5a27-4ca9-a704-1c47f874566a", "indicator--17f44e01-1c85-41ff-af55-83355afe18a4", "indicator--cb13bf32-daf0-4e4f-9262-a7fd64f4f517", "indicator--79d85e37-4a58-4f70-bb0a-bc862c63452d", "indicator--23c1b5ab-5926-453c-b768-2d795c672212", "indicator--6d767bec-61db-4565-a187-e8123bfcf5ec", "indicator--764f12f8-74ce-4083-81ac-cccf3944f4a0", "indicator--0c1cfd77-5142-4aaa-afcf-07c1ced3e4ac", "indicator--0d12b743-34d8-47b5-b590-d25af4ea44d1", "indicator--791bad32-3e28-4357-9d98-a9d12db0513d", "indicator--0fd78fe3-3549-46b2-89f0-09c0eff0f5b6", "indicator--53414d0e-e786-470b-8f2b-3d07248fcb0c", "indicator--55991586-b04e-4887-b04e-4ee481579659", "indicator--b1e93158-c382-4393-b2b3-c174cf950c9d", "indicator--13db6c14-162f-4c87-8f4d-3e29aadf2017", "indicator--8ff72aa1-1d1c-4c54-869b-3a0f39e49dc3", "indicator--b6844a91-ded3-4fbf-8942-fe818513e217", "indicator--51369254-6052-4930-be06-ee9a150b6f06", "indicator--4bf27382-824f-4bd1-956d-25cbcaf79e06", "indicator--b259635d-f7e5-404f-b104-63113098d588", "indicator--c298c075-6945-4189-a5b5-575a7fa4fff9", "indicator--8316fed1-3f74-4500-9c4e-9a2d4f00a152", "indicator--2d179c69-e02f-4f01-9437-e28671edb5b3", "indicator--72c03199-fada-4c0f-9069-57f8250e0d9c", "indicator--a8e2578b-c93f-4718-abd2-305068273f80", "indicator--34db08b7-ac38-49e0-b6a0-ba6231a71ed9", "indicator--8f5603b6-38d3-4553-92bb-73dfa57a20af", "indicator--802fa0b3-283a-4973-91e4-9412a7615154", "indicator--e9e899d5-d462-4f9d-85c2-84cac154a755", "indicator--bf7f008c-61db-4bbb-989c-cb61d80c22ca", "indicator--8c8bbd8a-0ae7-4fc2-b831-98e352e428cf", "indicator--8325da1a-502b-4d84-b872-83802c67772c", "indicator--242e86df-0569-4dff-a24b-fd3ae9fb9ecb", "indicator--91143128-ff7d-463d-b063-4a59d5424076", "indicator--05a848e3-277d-4248-828a-a6c071f225bc", "indicator--dc4b820a-4fb4-43d8-9f6d-d700d67dbaae", "indicator--26e56ff5-fe51-4a9a-aefa-efdc1a904c98", "indicator--357cf6bd-50b4-4d36-8fa7-f3f9e7a53530", "indicator--c1a41d41-e0aa-4e31-a0b9-760cb60cae76", "indicator--e8770449-782f-4bc7-b637-87c746e73d78", "indicator--af5f65b2-f782-4a58-a9ec-94140f07e80d", "indicator--77b3b209-58bf-4ae7-af92-753348cef191", "indicator--117b7f4d-7cb1-4d5d-bd69-b0300eb61f6b", "indicator--9b4b99de-dc85-4ee7-99b4-5371a85d91fe", "indicator--9f213928-3921-4719-beed-e83ffda5d59b", "indicator--bc2147c5-6821-4533-9e0f-4b52c261e366", "indicator--8a62666e-52e8-4b5a-bc29-048757efcb13", "indicator--f1f3d872-be06-48e3-836a-8557539df75f", "indicator--0d384d14-8584-412e-a189-1d1821265fbe", "indicator--1ea94d00-5fbe-4d0e-ac67-ed67af92ddb5", "indicator--53f4a722-6c57-48c2-b60e-79b63fdd92a5", "indicator--d6af0183-6903-48a2-b96b-a6eb11cce7b8", "indicator--e551c6d1-5fbb-4867-b71a-d0b86048b8e2", "indicator--efc3b2f7-543d-4afd-af05-18fdd45fc102", "indicator--69d51311-405f-4cbc-a99f-d89fe4138c29", "indicator--0d2444b6-a6da-46ec-a2dc-7199e56d4558", "indicator--50bee4ca-b5d9-4ee9-b1aa-e89a9e5c67ff", "indicator--96f4af01-688a-4a94-b0ac-d4be75758e02", "indicator--ad5bead2-eb40-4473-838c-7e34b158effa", "indicator--1d0264ee-15e9-4a4e-bdb8-bd681b6504c3", "indicator--355d6833-fb13-4572-867b-f040758c74d9", "indicator--be305629-a00e-424a-91b0-c672b8373f1f", "indicator--2a169bf1-edcd-457a-b304-ebbed9418141", "indicator--b29ecf14-30d0-4d55-869b-fc9bef348fb9", "indicator--b699bc0f-314e-43dc-8a9b-d12fd5caaed0", "indicator--e07dd997-6bb9-4754-b5e8-1c0cdbfb3838", "indicator--41829d8f-02bc-4daf-8a9f-11d5ced96087", "indicator--384e9356-8be8-4255-b236-ae655e91b15c", "indicator--f092b644-a276-4aff-b58c-2c1ba8c8c8ce", "indicator--ad4a31ff-dea3-4af7-a51e-196fd9d0c04c", "indicator--b40db2e7-56bf-4e45-b99a-683ac2456c9d", "indicator--ad09d785-0fa4-40db-90ab-fd35565414bf", "indicator--9620b1ca-2bfe-494e-9fa4-9f07a89ba376", "indicator--d83e9d4f-b4c3-4fd3-b646-6199e4aaf80b", "indicator--521b3cfd-2f5f-4f7c-b7a2-3db827478297", "indicator--5f78aba8-d1e8-4158-864a-37b5e1ebb836", "indicator--c772b76a-dca6-436b-b64e-69001795ae30", "indicator--b5ebb103-4d8c-47ac-9639-d4af0951eea6", "indicator--414e0fc3-f95d-4951-a352-ec0262f2820c", "indicator--eb590ffd-d17b-438d-bf14-2f047308101f", "indicator--416d079d-ea0a-4a4d-9c59-b4ceacb0effe", "indicator--f04f6c3d-b7fd-4cda-9e0f-edecdab6d199", "indicator--ca4250f3-8070-4a09-b9f9-ae3223eb12b2", "indicator--576e954e-1ada-408b-a385-927c663a7938", "indicator--aef3d133-9d46-47e7-9846-18b77bb5b774", "indicator--fa37150c-af97-413b-8865-a319954f2261", "indicator--29e01686-2e6b-4f65-b5de-ad5df799c6e0", "indicator--8ad96865-180b-4d20-804a-424056576148", "indicator--3254ddbc-d72f-4fcd-a1e0-66e1faf7ddab", "indicator--0c943284-3077-4dd1-8110-016ba45c1069", "indicator--b22b5c8e-53f3-4e53-a4c5-cebe27bad0c4", "indicator--aba9cd2f-7b6c-4c59-9138-91a9f2aeba24", "indicator--33505c2b-9fe7-41b3-9184-bfb430544da1", "indicator--240a958f-7b42-4913-a916-55d7a3f2146a", "indicator--f8645b42-e920-4557-b6b2-a70f58af70cb", "indicator--77adb569-f9fb-4d55-93a4-b267376f8d2a", "indicator--53f17234-78ce-4730-ae5b-04fde10c2663", "indicator--458f308a-6e50-439d-85db-45f08dde8137", "indicator--b3c1c158-1a1a-4151-bd52-49aecce7bd3e", "indicator--910760fe-9e77-4345-9686-1f78ba00108b", "indicator--3c1d350d-ecf5-492b-98e8-25c2c2ae5449", "indicator--68b555a1-6459-462f-8856-01a116ece873", "indicator--1d1a336a-2f72-43df-8106-a9c60841be7f", "indicator--d94fd6c9-757b-494f-a6e9-bcd5bc9cbefb", "indicator--d0cefb29-facb-46af-b93c-b20b51cd52bd", "indicator--76f926ff-fb83-438c-bbf7-5ae8ee129f47", "indicator--73689580-d984-452e-adb1-5490067db43b", "indicator--6806d635-2d3b-47f1-b9e6-964d4bb62203", "indicator--aa17d302-a855-411b-b8b2-c35dcd240fde", "indicator--c004b562-f76d-483f-8b84-a223e5dec5ea", "indicator--a34f8e07-b679-49ba-a322-6996e0bea13d", "indicator--2c443667-6840-43d0-8a7b-17784a6e645b", "indicator--a55fed76-357b-4267-bb12-562e38a7f0b9", "indicator--9c4a1fcf-5f67-4db8-807d-d6f02f909f6a", "indicator--ff8fbbde-31d1-4997-862f-47375a3be13c", "indicator--2138d3c0-2ee4-4337-8cf1-ab69452ad35c", "indicator--10461c35-aac1-426b-8d67-47149659a6c6", "indicator--ceca06ec-56da-4aa5-b4ff-33c4bfa4b9f0", "indicator--8f957c63-2a9a-4ba3-8ffb-b0f12a875dfd", "indicator--4d435ec6-cb0b-4da3-ac8f-9e2c165cd938", "indicator--e9338e41-f685-4598-aead-402e5245019f", "indicator--d7328d58-c82d-4083-a8d9-e34a90ec673b", "indicator--f0a6bd93-f192-4ab6-8d6f-6264df434028", "indicator--a13e2168-186b-4e6c-a3d7-4b9c37e826bd", "indicator--4f02807d-48e2-4689-be45-09e93487ec6e", "indicator--3657f825-35c0-45d0-bba3-5cafead026b0", "indicator--e33d49fb-d3bf-4a6d-ba72-a87d599e625f", "indicator--3d2a1bdd-c7be-4654-8c74-40cf10b1fa87", "indicator--1febba40-500b-45e9-a1b5-56d023d0a19b", "indicator--d99b4a0c-9f13-4738-b7d4-0c3407c6c246", "indicator--8c66301f-480e-407f-8574-a836232b4df3", "indicator--3a3905f1-f527-4c16-9959-0e3c33fda1b4", "indicator--c6f4f7ad-32dd-4029-af6f-93d51b1c1384", "indicator--6d8f9c24-4c88-42e9-9dda-93feef92ed4c", "indicator--31a9bc93-1ec9-4b1b-ba12-58e84a25fa1d", "indicator--62a37c8e-addc-4400-bd73-90f23e7172cd", "indicator--07e45f26-71dc-4078-842a-90fa9d08e746", "indicator--3cf7a473-6734-4c00-b189-e076d6344e70", "indicator--744149fd-45a3-4c5b-a24c-d246fb3caefe", "indicator--666ce5f5-8f91-4537-b7c0-960db1ff1601", "indicator--36a4219b-06b0-4739-9e46-57e77e3dc983", "indicator--87440ba1-0005-4c14-ae60-5cb00b6b96be", "indicator--f98836fa-ac22-43e7-b8ee-9f7e72a2b17a", "indicator--a09dc3d6-4b15-4e4d-a4b6-f94dabc4eb1b", "indicator--8f56038e-446e-433b-842a-100070473fdf", "indicator--697de3af-80f8-4928-a55d-94dfd26346c4", "indicator--9066963f-2eb5-4d7d-9ebd-a85a8a8400f0", "indicator--267444b8-afaa-4f89-8779-8a8699b0878b", "indicator--f384a65d-9f1b-43df-9cb5-7b1537bf8224", "indicator--78c441c0-dd90-44a1-8592-f51d5a7a341b", "indicator--4212cebb-5e43-4724-bbda-7c9365be37f6", "indicator--c9494325-2a8b-47dc-95be-e98b94effcde", "indicator--e60b9dd7-9f83-4d29-b0ef-cc565ffa6928", "indicator--801cb08a-02b3-4a76-99ea-f372e1c1e620", "indicator--d723b4a1-38aa-4441-86c8-50baec50e9c0", "indicator--7f670cdf-ed42-4a1a-9e03-90a18f64a35e", "indicator--cd3f7b6e-37ae-41af-ae2d-2137292766ea", "indicator--09a31db6-5056-453a-8977-235f5ad2b293", "indicator--5b4be0bc-fb0d-4b38-9e39-78a3836d4446", "indicator--324b1aea-40d1-46dc-b144-731ff52abb48", "indicator--69a42711-4565-4b63-8b64-cc488ae91ca6", "indicator--c9f483bc-be97-4cbf-a0c4-c9100c0da0e1", "indicator--d2a0bcfa-cf44-4ea5-b92d-0264e47053ec", "indicator--cd323617-87ee-413b-b39f-b1cde4231b04", "indicator--d48f04fd-ef40-445b-bbdf-12c4c4073cf6", "indicator--f9862389-97b6-4298-a1e7-b84cadc4752a", "indicator--27aa2c6e-7e2d-44f1-9eba-403f578dc97c", "indicator--69bfab8a-6eeb-4d81-b7fe-9fbd25d197b7", "indicator--35433a9d-bebf-4931-a263-f71ddd61a085", "indicator--de1bcbd2-3e6d-4956-9661-3bfc8a7865a6", "indicator--8b732b6e-13ae-4e57-b5d3-d48095c91d0f", "indicator--a2abdfc0-979e-4a53-b05c-0f4c7f9553bb", "indicator--1eb36d70-d40e-43a8-996e-6e5e3dae2ecc", "indicator--b598b0a5-40bd-486c-902c-19edd508de64", "indicator--c99f6161-8a42-40e3-adb2-ef41299d0309", "indicator--eda22a82-abb5-4c78-8049-cd2b1ea922a8", "indicator--8ac885b6-3055-45cf-930e-a8fdb4056397", "indicator--df3ce6d5-3e96-4db1-a88f-6aafe688020d", "indicator--4e103371-3d47-43fe-b1a5-ab4e57f40299", "indicator--0e0669d3-1705-4784-bfd1-c50c1456c80e", "indicator--f11c1000-d669-4a16-98e3-faf1c7389516", "indicator--fdd36aeb-0ca3-4c64-a894-b9e5ea574466", "indicator--15260cd7-1930-4b3f-b36c-dfb1e67144f6", "indicator--a78afabc-b965-488d-9977-7f08024d75ea", "indicator--96a238b0-e5ac-4309-a0fd-20c7ab2186f7", "indicator--590478dc-376d-4370-ad22-bec0ffbbdfbf", "indicator--3c85a492-a8ac-4e1d-b70c-fbf43bdc38f2", "indicator--d223dbf5-b1f2-4ab0-b049-be56a5d10cfe", "indicator--341d125c-ed96-4bb3-9057-03c53622e98a", "indicator--d7896370-84a3-4b1d-a314-ca652b8cfd64", "indicator--b18fdb6b-6b66-4c81-94ce-cd6df7fc80db", "indicator--397d8415-cd22-42e3-8364-1e88e30b4494", "indicator--9523398c-b050-41b2-a4b9-34181cafa9f5", "indicator--ca6f0efa-4a9a-4f1a-8f8c-26eabf7ea7e8", "indicator--6491880d-e5ec-4265-9b40-d954c2059221", "indicator--1b5ab18c-e0cf-4031-bec7-dce06daac1bf", "indicator--491b6570-0c35-4d46-9f80-9bf631443f71", "indicator--7fdf26b0-3322-4b7e-924a-2524697b6c40", "indicator--4ad2dbc6-bd33-4a01-abb3-ed607753df53", "indicator--9aa41c76-2f85-4f05-a276-863b4479364a", "indicator--da346cfb-14e0-4a18-846e-4685912f05f3", "indicator--d1a95385-1ce0-4203-9cfa-fb885f8c9269", "indicator--82ba9ba6-aced-4c03-9891-363e0dbb5218", "indicator--6c8085a2-7fd9-4246-82c8-6f6543d49a29", "indicator--01d05300-c010-4cf9-be75-e5771b7bb48c", "indicator--a4a1ca11-bd74-417d-9267-5ca01b95b1cc", "indicator--6dab6ec8-a73e-45c7-8e7f-75814a61b386", "indicator--e0711572-58df-4d67-b717-79b4f32a6240", "indicator--64be8ecd-1884-436b-804b-1fdd754a7987", "indicator--425e0711-e130-4091-a141-369551eaa8fd", "indicator--f2ea1448-269b-42f7-bfd0-d7ac1beba324", "indicator--6021d2ee-10b4-47e4-8712-789b9b2d028e", "indicator--86db3d95-b080-43ad-ac45-0a529caf8597", "indicator--24d4c28b-56c4-45b5-8395-68438dc68c94", "indicator--37a0c33a-4328-40d8-90b4-77711a37ee55", "indicator--226eaca0-dcca-459a-b54d-ef5a4806b953", "indicator--c3423f41-1ca5-4cce-9f5f-b0e7c22f80f3", "indicator--3587b796-6724-4f79-ab4e-d020b282b4a3", "indicator--61b3ff2d-a4eb-4651-b91d-575b9271a2d4", "indicator--2af98123-f9e4-4dad-925f-6f1442be3a96", "indicator--09826c90-5cda-4a4e-992d-c0f6b92efaca", "indicator--3dc7390e-a93c-4eaf-95b1-442634ee170f", "indicator--ae61c757-7a58-4e67-bf7c-7c3a46cb13cd", "indicator--1a9425e5-35e5-441e-8e95-cb4fe8d7080c", "indicator--b5d1db40-556a-4515-9e2d-9cd4e96e6536", "indicator--d2633e6c-77c5-477c-b79f-9176109ad247", "indicator--57751f55-358d-4a4e-99e2-c9c7b5368400", "indicator--01063629-a950-4b74-a721-1e30d3a15782", "indicator--69050783-a2cc-4880-be62-e410d3dfd156", "indicator--4fae31ea-f69f-420d-9e18-239eb66d66c5", "indicator--950ba4d3-0022-4444-9d24-0f1dc2ad4636", "indicator--d7aa9374-a691-4558-b71e-5fe2da1ef0be", "indicator--691d705d-16f8-43fd-b536-5ffb8d8c153e", "indicator--358166c8-39e2-4be5-acb3-a7eeb47a2e03", "indicator--c6b21110-ff23-4a8f-b118-97a290d5af54", "indicator--33024420-8e97-4813-9709-88c0db019081", "indicator--8bd2f1b6-29db-48cd-966d-076a28348d55", "indicator--b4dbc1d0-3d7b-4465-b4ad-b1287a1c3112", "indicator--b1303376-aa0e-439b-9de3-c8ba0bdad685", "indicator--7389900a-1fc5-48f9-9b52-7483ed7d85fe", "indicator--ffbcc70c-126f-40d4-83e6-06569ff8ee57", "indicator--d50d26a0-dbb5-4d49-b134-f4adfd5f61e0", "indicator--18859306-5805-4e0e-bf06-b2717cedffe4", "indicator--ec1357ae-2b74-4803-ace6-277d87f3ef8c", "indicator--8b7bb9be-a138-4eeb-a0a9-7d65a9d9898d", "indicator--05bbb2e2-3fbb-4434-a2c4-3587ec95a249", "indicator--a2adc81b-5296-43a5-a555-81ecd04a042a", "indicator--d888cbc0-8a3a-4f92-b4da-bbbf1c3ad39b", "indicator--040885e7-0eca-4790-91b2-dfb7c622157c", "indicator--f31b9c86-bb7d-46cc-8814-6d667ec49274", "indicator--d15ae98a-70b8-42d0-8572-568d97cd1472", "indicator--3c2bce40-8a92-4f18-8d22-3eafd7f27047", "indicator--0b5f80db-53c9-4ad0-a578-857a0725c1f2", "indicator--66744c78-51b1-4182-a07f-f2c3ee6354b2", "indicator--24de57f7-1e18-42a3-9377-5d1b3d8873a8", "indicator--8538fab3-99fd-4a10-a8f6-9e626f2673ad", "indicator--da6f91a1-9988-4ed9-b353-acd171c9b1ce", "indicator--baacb0ea-1bc6-4e73-9c28-d252bbbc263b", "indicator--e5307bbd-6008-4caf-9e10-64d1fdbd41e8", "indicator--7dedc153-1915-4c5c-b6c3-d7325dcc8f37", "indicator--cd292d33-608f-4462-9749-f902694ca9c9", "indicator--dff7c93e-6c08-4fa3-9442-12fa9b0dde13", "indicator--084fe078-8c10-4670-a673-64f637774caa", "indicator--06c7a643-781c-440d-88e5-2b90bf404f58", "indicator--84340e12-1881-43b7-b226-4f21fd50474e", "indicator--02821cf6-c82f-4c69-ad41-e9425471ed2d", "indicator--dcf79244-08f7-42cc-99c8-835705df68fc", "indicator--f9db7eb6-948a-4705-8e30-b772469827a7", "indicator--a6777b6a-44ef-4ad4-b2e2-c6631edcf2ce", "indicator--3fe35ab7-c1e6-466d-9dec-8fd63c846536", "indicator--cb372e13-fd6d-49ea-88a3-a634bc32af15", "indicator--7899060e-ee6f-491e-9e18-c0c174dabd73", "indicator--8ab235b3-4989-42cd-8226-a7794f482301", "indicator--5946c699-26c0-4597-8141-97737c9ecd0a", "indicator--dc534ddf-4514-4f0a-9064-ddca286a00bc", "indicator--7f177f2d-9699-4131-94f3-bd6f8eaa80d9", "indicator--9d74a866-7e56-4a91-9fd2-d0191ff3aa06", "indicator--19dc0d35-413b-46d5-bc2e-ceac371305d1", "indicator--761160da-5dc7-431e-93d5-ba51cb0af7e0", "indicator--48ccf56c-3de3-4c43-a47a-0b0a710a9d85", "indicator--80d08285-d630-43ec-92aa-c7ea859f150d", "indicator--561a6bc3-2f2d-4e14-9d47-529b6f740ba7", "indicator--35b7bf1d-eb9a-4d92-999a-1922c486a46f", "indicator--7f37cd34-151a-4182-8413-a2d4385d351b", "indicator--c7551251-5176-49f0-a05e-f1cc520360fa", "indicator--d98235a9-6471-49f5-b1b1-716df5df513b", "indicator--222f14aa-efa6-44c7-8eb6-215f2c3303a1", "indicator--454249b1-7509-4f20-b45a-b73b472600b3", "indicator--03f89d1f-477c-4bbd-b7ef-d2b1a71945f9", "indicator--ba521ae4-215a-4ee3-96af-cf91ac786a4b", "indicator--770d633d-51ce-465d-a6ae-97946e881b40", "indicator--0a4448ee-724c-4bef-be12-eeced57372ad", "indicator--f2a700ac-aa41-4f1e-976f-c4f8e389ada3", "indicator--fa08f964-3c13-4652-abd5-47c7284f8284", "indicator--c5924874-c356-41f3-8020-336e5a048721", "indicator--cb1ea002-ac99-494b-8e99-11275573f48f", "indicator--596dfa1c-c859-4338-9045-feb81568490a", "indicator--fe7fe2e5-14d8-4504-8fae-d1f33f992fec", "indicator--9c0c584d-fee3-4f78-bd31-0f9f8866a37d", "indicator--18067c54-f3f1-4a1e-886f-4024f0f32502", "indicator--8da1837e-4351-4a32-8f52-e0e35eaf9221", "indicator--9b474ca2-796c-48ef-a881-45a219ddeabb", "indicator--eaf77641-30d3-4f51-9de1-de0b49bc225c", "indicator--ede05421-d3fe-4a2f-a479-0246cd55e0de", "indicator--37021722-267b-4045-995e-34372f034a3a", "indicator--6be479ac-c65c-48f9-863e-247821ba92a2", "indicator--fec4cefb-e3f7-437e-8793-e8bd19c2664c", "indicator--4b87d584-1922-4e5a-8a0f-24b7e6420140", "indicator--e46f348a-7f4a-4317-b9fd-8c3289237947", "indicator--56ed92f8-7b30-4d36-943f-12a32f5da4d9", "indicator--22d64e27-6c8b-480d-8662-2b83154ba4b2", "indicator--bb712cbf-c4af-4e55-a13b-8905eb68f2ee", "indicator--81a139ac-be3e-4fba-a32d-2c914da113bf", "indicator--ca410952-7ed7-4721-b50f-9d9f70dd73da", "indicator--9cc18feb-1fc7-4ddf-afcf-db5ed64fe341", "indicator--1fd33fa4-cf1b-4003-9585-bd97eadbafb6", "indicator--9eb03170-0cd5-4026-8033-d45f5778c714", "indicator--0cecbba9-7e4a-46f8-90db-b6e1212c24ae", "indicator--375aa802-bea3-423c-9cf6-6f1568fa3d03", "indicator--1a68c641-1f69-49c2-baf5-2dda18bc3c21", "indicator--3de13aa6-67c5-4c77-8596-f882c4518271", "indicator--026c35a0-4e57-4f52-958f-1c02014ddcf8", "indicator--0da2b727-dbfa-4935-8153-800499aa379e", "indicator--4b76ddb8-5fb0-44b2-afd0-f976851723f5", "indicator--02510e66-5698-4688-ad3a-2c68064f8aec", "indicator--9bbfb5b8-ef87-4c86-a8ec-41ed8ab79dc6", "indicator--9095aefb-3c6c-41c1-b8a6-52038ffbf6e1", "indicator--46de057a-561a-42a8-abe1-1a1795078efb", "indicator--dd98e201-556c-4d53-9bbc-0c848a4dba15", "indicator--7d6f01e8-3c0d-46a1-8390-e1b7b74d8cfa", "indicator--2f768066-9111-43aa-8204-3f630537d49f", "indicator--2f0f4317-755f-4419-8d73-605dd383b21c", "indicator--679c49ea-96b9-4d44-a664-7d46faeca573", "indicator--97081127-724f-4530-84fc-0b6b04adf923", "indicator--3a2f205f-4213-4a39-948d-5525a8e9611b", "indicator--687b775d-450b-451c-ad55-9aff9eb7cc61", "indicator--d3da905f-6fa0-4191-b5bb-ed21cb17bc0d", "indicator--37f9b3bf-931e-4374-b9f0-464d5c68b893", "indicator--70d76b8b-c92b-449c-af7a-9eba7e817dac", "indicator--245b6505-eaaf-4a57-b65c-5ee4cab74dc6", "indicator--61c5d39d-b3a6-4a1a-8f09-1f0116ac703b", "indicator--dbbf01f9-cc94-43b6-9dfe-154ae017297b", "indicator--a44fbfa1-00ff-4fdb-93fb-db71e249f6cb", "indicator--03096ed9-0344-420b-86e2-e33b70192162", "indicator--79d5c973-3c37-413a-aeb6-4cebf70aae96", "indicator--677d3f08-b8cc-4e95-b370-c70440384b18", "indicator--99507975-1f49-4aa2-a1a5-015a329e11b9", "indicator--71f6660b-9b50-4a07-99b6-e0ac4da7c2a6", "indicator--668e0447-1026-4957-b416-ca889eaad7df", "indicator--c8f22d6c-4deb-4c64-9502-8d40df4b98e8", "indicator--ab0651e2-409d-4b0c-9d0a-e1dbbdbbb92a", "indicator--2fc7a598-9d22-4b1d-aafd-b02113ebc2cd", "indicator--1dde8e41-f0e1-4f53-9393-7c5e95e5ef70", "indicator--94bc81d5-5bab-45a5-aa8c-6913f6a1be0a", "indicator--62539910-e3e9-48ae-8885-4d73f5c91f4f", "indicator--eff6310a-3600-4f62-aca1-d359dd95b9e5", "indicator--a4b83844-cc08-49c3-bcd0-1fa2767682f5", "indicator--2efd2d2e-e2bc-4fce-a67d-188e4bbe0da6", "indicator--93acaffa-4119-4b23-93e4-35e618a47ace", "indicator--f89e54de-5eaf-41e4-963e-39356ad324f3", "indicator--aa1830a3-98d0-4e36-a25b-7224c4e5b401", "indicator--e8acf84a-a54f-4efb-8a2b-546b600af179", "indicator--f645d96c-ab49-4fe1-a4ae-b31e3f9619aa", "indicator--40b54abb-ea6f-455b-b53d-8fd676d94bc8", "indicator--8f60ce58-758d-4a06-8b41-3b437baa67cc", "indicator--2b5a612e-85f9-41f9-87f3-0a2a28ff7659", "indicator--8db986e1-e90f-4112-a3cf-da9c4b5f166f", "indicator--a4259f2c-28f6-4d27-af71-cfa645ff106b", "indicator--0cd59615-b87c-4b97-a23d-1217486fe879", "indicator--629850cb-2b44-40af-8b00-9225d240c21e", "indicator--fd9ed553-d480-4000-9af2-f1be6fde3d29", "indicator--f8ac5d63-6f28-4f76-a45d-e38dff29aa7a", "indicator--42124fb3-37c2-4d96-b20e-d17f1760904f", "indicator--f96985a4-5ff9-49fd-9490-fb042a95ba56", "indicator--c818fc3f-57db-4b32-80c8-2424079975f9", "indicator--57c21adb-e9d5-4772-9436-7ca941614041", "indicator--d1d0a15a-3fd3-4d5e-a489-9ae7df2f99d9", "indicator--7a21ed39-15f4-4f4b-bef4-47b5761ef0c5", "indicator--8f34242f-fc31-4558-a82a-7652ef5ca082", "indicator--9a19fa10-1325-475b-934b-a02cfd6efc70", "indicator--2d6363e2-3b84-487d-8802-83861e3708c4", "indicator--2454982f-b9ef-4539-b97f-b511cd7e0c97", "indicator--711d4a71-e03a-4e54-b0d4-fb36b491994e", "indicator--1fb725d2-d7da-40b8-9aa3-128a6baf81ae", "indicator--4642aa1b-fe7f-4935-85cb-cef8cd0a7058", "indicator--fed9fcbd-6ddb-4226-b869-e40228338b90", "indicator--a47b7e3e-c283-492f-8562-7ae6a679d8f2", "indicator--07a7d4ab-56a1-49cc-bd63-bb817596e2e7", "indicator--e59d1f7a-f33a-4710-ab59-742240a400bb", "indicator--1d1c95bc-f983-41d3-8a28-1b4edda36d30", "indicator--e7b975b0-4857-424a-bbb4-c777bf1f7c5a", "indicator--ee0050ce-4418-47ab-80e0-d87bc1b32403", "indicator--3f28ba83-2a39-420b-9ce7-9d3325100191", "indicator--ad996d32-ebbf-45b7-ba3e-cb01afae9c34", "indicator--345e9f1f-0705-4a08-bbe2-7e0125011c95", "indicator--db580ba0-bcac-4399-925e-20ae45725b90", "indicator--2ff4216c-27d0-4f06-89eb-fd7475107280", "indicator--f210ded9-f707-479c-ac8b-c6a4f1c0e3fc", "indicator--6b3f5243-bd73-4d1c-a042-fd70fc22bfbd", "indicator--019255d4-d57f-49a9-91e6-990a3c8c978d", "indicator--22b2ba41-5ad4-477f-83d1-a17f4667c3e7", "indicator--b8349b59-1856-4211-881e-53107398f4d9", "indicator--6119da6d-4dba-49e9-975a-d08e104bc66d", "indicator--10099feb-a821-4c99-b9ea-c6dfd7890424", "indicator--eaac7081-2f87-42b2-9e6b-5f77be8242c5", "indicator--501033a0-ebae-4fb7-9109-85bc153187eb", "indicator--ca716313-7f36-490d-a306-4c68da77ec81", "indicator--6ece259f-9195-4ce6-90bc-05f80b46d69c", "indicator--9ec98932-2a61-4f6d-8866-8bafa98c21d0", "indicator--cd5186fe-8838-4682-9a15-5cb78c62e60d", "indicator--573952ea-0b13-4ae7-9ff3-97bdc8bf8c72", "indicator--8de91caa-5f7e-40f8-bfb2-6c2465e5c06f", "indicator--d303f406-a829-477c-a1ac-47e8e0518683", "indicator--2d62d7d0-b9be-4026-8fef-f1a1eece7c27", "indicator--4a0061df-1ec3-4957-9d09-f3f5c77db7f4", "indicator--b18a137e-861d-4ddc-9774-41bd5b8fd3bd", "indicator--3e668d0f-f040-448b-a1db-b2ccdd6b1138", "indicator--1e40fade-2f68-4208-a1d5-1766ed85014b", "indicator--2b123a6e-c41b-48e3-bbb7-cbb1771f585e", "indicator--3e7160a5-bfd5-420d-9020-8ac59389210c", "indicator--cf914a3a-19fc-4ca0-9cae-e03f6479346c", "indicator--89e4739e-d277-400b-85cc-85137987db2a", "indicator--a0e8bb73-771d-4bb6-83ab-b8991224c1dc", "indicator--b7b9d36b-1b8a-4f44-b760-eb74372d9fc0", "indicator--f190f7ab-e088-42df-9a31-64ed42d9cc60", "indicator--1921e44c-2c2f-442c-96d2-9c4297895469", "indicator--d6b0a7e3-98b2-4c74-9018-ec88c50178bd", "indicator--401933ec-e89e-4bf5-8015-91eb63207c33", "indicator--2cd59ab9-843e-42a6-b3e7-7d46ca051fe7", "indicator--a5723dcb-3cef-4b66-8c3e-f7c1f7be630c", "indicator--c22ea168-f76c-4d34-a177-ef3c4e3bc63e", "indicator--70f3f94d-4524-4f2b-92b7-52fb9f02e4ba", "indicator--1f831e28-115d-4bf2-9f23-9fc7739bcfca", "indicator--db2031fb-811b-435d-88f6-805d180eac9d", "indicator--cf23532a-9f74-4bf0-8e11-85f521cb55c5", "indicator--c7f73b2c-970a-4f21-a1a0-8f626ab5f821", "indicator--2fec2b1a-5516-4e17-9c5f-e9096fd4cbb3", "indicator--d90fe722-15b9-4cbf-bd03-263822646c4b", "indicator--6be0b23d-5c61-4555-9e5b-56a43988c09a", "indicator--c375e9a5-cb0c-4ef7-802a-cdf9f8c9e5ce", "indicator--d8a99952-9b84-4d27-bb29-3e14da158546", "indicator--ebb5b083-dfe0-43c0-bfa3-c17b7b4a17b9", "indicator--450da03f-c459-471f-b19e-2dd74344253d", "indicator--88d3194a-ebf9-4da1-b0c9-70e297a45f5c", "indicator--c8449063-4a44-40d0-bc60-70fd416f4220", "indicator--c7f56630-8b5b-4452-9ca4-c35c358bf522", "indicator--10095c9b-7a14-4f66-9447-6f5fd090b4fe", "indicator--80e2ae1e-5380-4437-aeb2-c80d839d01cd", "indicator--4c6fe148-fb61-4e67-b176-fe5ca6d85c08", "indicator--a3f1a1b5-6b6d-42f9-98db-70148cbcfa89", "indicator--1146a0c6-16ed-4804-9570-6b5443dfe67d", "indicator--aa91ba57-49c8-4912-b053-b24ba0853be9", "indicator--757bf77c-3c73-4a50-9490-ab6eda218f2b", "indicator--d81f149e-29aa-4cc8-8ea7-826873e54c69", "indicator--bb8e4afd-8465-4a06-bced-524629ff7cf3", "indicator--d59e5619-a02a-4bc7-a06c-1df98a66e565", "indicator--c1dcf433-4722-426b-a69e-c01a83938735", "indicator--17974040-2cda-4572-9088-90865f740a25", "indicator--9599cd80-146e-4746-b3c5-7c2dea53bc6c", "indicator--ab9fffbe-590a-4130-b2ec-3365ecc3afe4", "indicator--c9f25d2f-e360-480c-974a-746fa5c51e55", "indicator--eb7dee4e-2104-4344-9764-d73fcc6d2ee4", "indicator--8686cd72-fa7e-4077-b1f7-75859d32dac9", "indicator--308cfbb0-396d-4a50-80dc-f3810381c240", "indicator--0c2ca4b5-e87f-42eb-8298-3422871852f9", "indicator--5a36a4e1-7ed2-4807-8766-9aac89e51169", "indicator--5f14d5c4-03e2-46f4-a4a1-92f865127cca", "indicator--e5572d90-5530-46ce-94ec-c2d17f936d8f", "indicator--627370a0-39da-41bd-a09f-784fa9910a94", "indicator--88e1fb93-99b0-47df-9883-5bc966cb3c45", "indicator--0f370352-948e-4735-901c-be4a9c39b462", "indicator--80d41f93-5ec6-45d8-a7cb-ea96e8dcbc20", "indicator--6e58c7a2-3f53-4c62-9857-f974e2386e78", "indicator--607a2809-a1de-43eb-957a-ca4e5f05ed94", "indicator--9e33b28d-7f7f-4439-a459-254ca18dfb26", "indicator--51a3b7d5-b698-48ce-ba6d-e4ab27a92b53", "indicator--484d554d-b564-499e-b921-7ec7d24a5972", "indicator--b2f0aaff-3d93-4a3a-8f58-8c58dba1271a", "indicator--370e7d7a-c224-443b-b4a8-eedbd05d8eb4", "indicator--6ba171be-76f2-462d-8f13-043de728580d", "indicator--49367c6f-bec7-43fe-b7fe-245840ef1ddf", "indicator--c5454ba0-dc8e-4929-9d76-812562a6d7ee", "indicator--bcff88f8-0dfb-49f9-b0d5-83ddc03c5726", "indicator--364f96e3-f0e1-4e98-b25e-12f2bcbad204", "indicator--cbf5bb5b-f303-4e8e-85b1-14c4b1eb2733", "indicator--b5e1ac35-ccb3-4967-9a86-39407f011b5c", "indicator--d8574d1f-3e8b-494e-8047-8bf183daea83", "indicator--c1204510-3f52-41c7-8a99-124024ffb393", "indicator--07d9c8e1-03cb-42fe-9f92-176caca7d88e", "indicator--e942ef6a-5d35-47e5-87db-3784c976a48e", "indicator--ad2fba7b-19fb-43b7-bdd6-620447feb69a", "indicator--a4e6c5ff-8399-497e-b400-e1f641027275", "indicator--80522e63-da3e-4482-b4e9-be1c2f83fe90", "indicator--9c97cacf-4062-4c38-9bc8-2930b102bd04", "indicator--ef9f8276-cd3e-4b30-8daa-d5dd1f40a9bb", "indicator--da87db39-8cf1-4d98-b24b-cc9c0140162a", "indicator--7a57f8a9-3758-4476-b7ea-abe2ee60a289", "indicator--10e25937-7bca-4349-8db7-d84bcf76b5c6", "indicator--3cc52216-5d9d-4b79-b985-09ca8a9ed152", "indicator--5077282a-e595-4348-b89f-62b502c826d1", "indicator--6c7177a8-cf6e-4844-9edf-ff77c1267427", "indicator--def57ec5-8912-46d6-87ce-fb059a3aa35a", "indicator--6a1f8b38-701b-417a-9687-92ba1f2537f4", "indicator--f5d41800-0dd0-43aa-86bb-9a5a66616651", "indicator--5acaf12c-b600-4116-9dba-e1c660c7e755", "indicator--79a22022-2af0-4e3c-a587-7897eca3ecee", "indicator--b235ebe6-f649-45e2-9f08-82eb0f27b648", "indicator--97654d7c-ebce-4de9-94ca-6f76a578a082", "indicator--4c6258dd-d5f5-4165-b503-d42e008fc7e7", "indicator--b8876594-8fbc-4bcd-9eb3-91db5ae77ec7", "indicator--96199f40-a05d-4123-b02d-6a3caf355de6", "indicator--2ca7ccf2-37aa-4022-a2ac-501fb949512c", "indicator--25030934-58bf-45ac-a17c-dca48336aed0", "indicator--20e52b3e-9d1c-41c2-b151-2d10cc5f2f94", "indicator--c54a55fd-2a45-40c1-9f3c-896ac04ab4de", "indicator--95e0e9f9-70a4-4068-af56-daa2b6aee0d4", "indicator--2efc6f57-fef5-4672-800e-52c6a1930e59", "indicator--1fb96218-7f6b-4021-9460-cb1f720cbd38", "indicator--5d77ace6-1768-4544-b494-b273cd4e8225", "indicator--9f04903a-1bfd-45fd-8b54-2f839696219a", "indicator--0c93f4c7-a0b2-4738-8ec0-def8f99c629c", "indicator--f09f07bc-a4cc-407b-b947-4111b8cc1493", "indicator--dcabdcec-9b89-4bf2-9bd7-d73387dcf38a", "indicator--2b22da19-1a97-4767-b1d0-8436dd303e22", "indicator--4a1388f2-9661-442d-aa53-46770a2fe5c1", "indicator--8f96a8f7-2bb0-4b67-bfcf-a3b5a1ef1fb3", "indicator--f8267014-a90d-4150-a81b-621218a58620", "indicator--50368b61-2299-4092-871d-bbfeaa48b93b", "indicator--e639f023-731c-4552-8634-a27f2cd80098", "indicator--79a7be44-f61d-4d4e-bfe6-0ab98b58cf1f", "indicator--9adaaf56-2e94-417b-a416-18917c9c6a44", "indicator--7ca2d123-a848-42fa-805d-08bde4d8e1d0", "indicator--e69363a8-8ea1-4abf-a4db-96b9a24db10e", "indicator--9f0dd1fa-4c5a-426a-98a1-abb3aa1028c6", "indicator--71da62da-b9df-47be-bbd6-c51c9622dff0", "indicator--9aa6e578-905f-4745-8dc7-65acc4d334e3", "indicator--47cc89c8-607c-4d4d-884d-13d4cb6a3e56", "indicator--ee898851-dd7f-4158-b8eb-38b77ffd686d", "indicator--430c95c6-aa3a-4d18-bf57-4e848867a193", "indicator--417e5097-96a3-4013-9b84-36a4bbf82ef4", "indicator--4d4272d0-8791-4b7f-9b13-66d746aef3e1", "indicator--2162ce3f-878d-4194-bafb-9baed1ae191c", "indicator--9d487954-d336-4283-a636-f11474934307", "indicator--788abc9e-72d0-48a9-b0e8-9af596a36f62", "indicator--48771ec1-06a0-48e8-a650-13acd8dfcb46", "indicator--ade1d4fe-8978-4ee1-8901-34044a3a10e1", "indicator--48ca7077-b114-4cec-a915-a39253ee4a39", "indicator--c04f053c-0b5f-46a9-87ae-48138d5f7262", "indicator--fad9de56-5f09-4286-a691-417369c1b539", "indicator--dcf6166d-e19f-4d07-b6c1-64f03d305b1b", "indicator--8b59815d-d233-4fad-8abf-728f885beef5", "indicator--2211439b-1235-49b7-802b-e05e6d2771b9", "indicator--729f4e4d-722b-4daa-a9f5-0676fc5ce130", "indicator--ecc36207-1456-4df3-983e-2f31eb91d2db", "indicator--714f7e60-4356-4aeb-9cc2-531e23024a44", "indicator--0087be82-6167-4be3-ac24-07bc152f484a", "indicator--983e44c1-0476-44d4-9a49-ff557c2af21c", "indicator--77ce82c6-0813-44e7-9153-31d7415c6a81", "indicator--56d41971-98e5-4d9b-b2fc-2d6beebdc933", "indicator--3af4dbc2-0112-464a-a700-ad5c550a8e22", "indicator--01303aae-3861-46f7-861c-b19ea07273db", "indicator--f201a360-f659-45d4-8171-a2bc2a04cc20", "indicator--3af87560-5c6d-4dab-be20-e0b5822e8f39", "indicator--0320a99a-ac91-424d-8c4b-6e6d4a98ad6e", "indicator--23f7f615-cb53-41c6-b34e-de47cc632c7a", "indicator--4ef06bcd-b6d3-4934-a89b-f6e3aac62f76", "indicator--275b06e2-ba17-421f-a09a-32357c9831fc", "indicator--f25dd8ed-6908-4714-a00c-49d9ee67e11f", "indicator--14201e72-55b7-45f3-8af4-63e30b5c3626", "indicator--1c406633-b6ea-4ee8-a669-0eb5d16cc908", "indicator--9c918907-c343-452e-8249-0fb0f2991f3e", "indicator--e5bb5d47-029b-4e3c-9d0b-19fe8046a3b7", "indicator--0e45af65-32fd-4c59-ae15-fe13ca460d0f", "indicator--0dc5a24f-6e02-48f7-8371-37cd98b55879", "indicator--26fd5338-5fd4-48a7-9f28-5c986e4b14b5", "indicator--fbe26e7a-1138-4a0b-aeb3-0372cff40212", "indicator--87e854d3-a981-43bf-bccf-f04bbb062209", "indicator--ea4cb1de-c8df-41db-a62d-0dd0372833a1", "indicator--5e8dd941-7ff5-4f4a-83e5-afc92d80a8e5", "indicator--1c08e69f-930e-4a9f-971c-1602c38979f0", "indicator--5cd2250d-709b-4b93-ae9f-d3910fd0556c", "indicator--a3f939a7-fd7c-4a14-9d05-4adc50d10d17", "indicator--37a83493-1c54-4a16-8292-a7dd48f9a625", "indicator--b9f13b35-6de5-49a3-aaeb-58a3498c67bd", "indicator--c2474d64-81ee-498c-8e65-a8a6d4292d3d", "indicator--401ef317-1007-4a10-a76f-d1d84275aa5c", "indicator--3d8db28e-896c-4053-a96d-f8baa557cf7e", "indicator--8f6ed70e-ec80-426e-8a76-e568ee3a5b88", "indicator--5247ab31-1259-4b32-85af-2ee3150db3df", "indicator--0104336d-8627-448b-80cb-4a12e4394c55", "indicator--d100c23e-7dcd-43cd-9b8d-ba0d9432d86f", "indicator--40452792-0672-4337-bbc4-70199b72a9ce", "indicator--ae1adc4d-fe56-42a3-bd73-8c2146fc16c6", "indicator--c32c8b79-d6e4-47c3-82d0-5556950ac93d", "indicator--3c2c2018-1dec-4546-9408-f2eabb018032", "indicator--8b4d8056-532d-4be6-a555-90c8178f86e7", "indicator--ba958b84-feae-4005-b973-87a0e7ce8772", "indicator--5eef7500-534b-4ebc-85fc-399c7d0797f3", "indicator--23906d15-645c-44d0-9d14-4433ce7a5461", "indicator--8dab048d-768e-4d4e-b26e-46e864b5891c", "indicator--ee55c0e5-391d-403e-bb1b-213632a90024", "indicator--45f991c3-60ab-45a5-891a-92c84e99638b", "indicator--cc1e2205-6e2a-46a2-981e-4d1230994138", "indicator--932143e5-51ae-46a0-b938-ce77d679d747", "indicator--544485da-605f-473d-9cbe-b05bcf8b01c4", "indicator--5886b334-eb20-473e-b93a-99885ef4a82f", "indicator--5a23f5e0-265d-4b27-bd37-ea6a53fa5e1c", "indicator--f02165d5-9694-4ec8-ba48-092a68475d11", "indicator--289947f9-5b86-47a5-ad10-d859db478348", "indicator--159d3981-5ed5-48ec-a8ae-959e3efd87a0", "indicator--52ac8136-a7d5-4257-ae1b-7438fae5f351", "indicator--1558f7d5-8bc4-43b5-aad4-ab4784bf80bd", "indicator--644ff65f-76c7-4c82-8743-008acf1de38a", "indicator--fbe290e1-86b0-41ce-9155-cbf681478638", "indicator--09f47533-6f72-417d-ae9d-3e879b15c28c", "indicator--be0f3e00-ae17-4cd8-863c-6833ddd397b1", "indicator--353e8d56-9c91-4743-a456-9c8aeee33043", "indicator--81939c9d-df70-4fcc-838d-fdd46dcd3446", "indicator--60053f05-67ba-464d-96a6-b8f1dc2941e0", "indicator--3db46b95-f12d-4948-8bdc-6db463901f91", "indicator--5b021497-6bb4-4338-adc9-ed1a0f43fa12", "indicator--f0509a0e-3bfe-4f8e-821a-c9c1ccae85de", "indicator--c2b7959a-24db-406a-8c64-b8a6986cd162", "indicator--35b75d98-76b6-434e-957a-2a9d98a49963", "indicator--14e1012a-e84f-4026-9922-a9a53497269e", "indicator--cdbb2975-f423-47b1-b80c-55cc94b7fa6c", "indicator--fa37c945-1b9c-4e54-8b55-37a085e466e0", "indicator--27f3eeec-ca45-4985-b650-03ff1e51dab4", "indicator--ea3e5dc0-b1a3-49ed-83cb-5599b33470af", "indicator--3c919b56-7d24-4edd-8e67-c32e85faec6a", "indicator--26689fd7-cfc8-4633-97ff-cb10b65d6c72", "indicator--fa53a4d3-5272-4665-a701-bacb34482879", "indicator--ff3447dc-ffb3-4fc6-9339-e862843c8bc6", "indicator--16a47de2-e3ab-4830-8598-66e38c77b67c", "indicator--4da403a3-5398-4273-ab23-cd3e81cfbfcf", "indicator--7f239f08-00c0-4620-984a-81c2a77048e7", "indicator--12fce7f2-c388-400e-be4c-d495afad7bb7", "indicator--2f70281a-dd8e-48c6-91b0-b21a307ee076", "indicator--42906343-15e9-4ed8-b309-8beb127ed1b6", "indicator--f3195d07-2826-4362-bd35-36d95e35a28e", "indicator--63753562-f6c1-4f52-8779-d46cf8c60130", "indicator--6c67ba6b-60cd-4828-91e3-84791434e81e", "indicator--6a2d81c6-6972-47ad-877d-34cf6849d63f", "indicator--7bbf1345-d254-4a86-b2f3-528aaa00b7e8", "indicator--ac49257d-7b23-48d1-9b72-e9b525345451", "indicator--e0ad9183-b02d-4f55-8a1c-7d56881558dd", "indicator--3f54fd80-ed88-4314-b08d-f8a9a18a31be", "indicator--f0b539e6-40bf-4125-8388-f77f9cb1b835", "indicator--6723a331-093e-49d4-91a6-11ddae77b898", "indicator--76c7f10f-8703-4460-815e-3486e2205ada", "indicator--82a074bd-ac0d-4294-92cf-8305e7f8ff89", "indicator--43ce281c-bbb7-430f-910f-d19d192504f2", "indicator--5bae8b0d-3c29-4976-b07e-61c5229e607a", "indicator--29b8f8ea-253d-4892-8d4f-5d06e68105ec", "indicator--12f22a47-b684-4001-a7f8-84a52dbba8f1", "indicator--b74a16d2-a5d2-4787-babf-a2c9bacd3dfd", "indicator--13133b06-d317-4346-9a3e-8b6120c8a2d3", "indicator--7cd4e451-e57c-4b92-9d86-1044c52cc94d", "indicator--e7f51e65-9d3f-4b52-8d73-c5e91fe4e734", "indicator--30cdcf09-614a-475c-b824-a7e668a8ecd2", "indicator--bc19e153-34cc-46db-a6c0-5298a6141565", "indicator--e0a03964-2df4-4c62-85d5-14bc5b26e5d0", "indicator--d349636a-d368-4a5d-b7d7-9f9cdec44aec", "indicator--81b1dcc5-c243-4bb3-bc2a-83d4543f45aa", "indicator--abb2b4d9-0457-4f78-b1f5-aca78b89892e", "indicator--a570247b-f028-4c8e-8e08-ce64b92071c9", "indicator--436cdc14-cac0-4c66-8fa2-dbc80918d3a0", "indicator--319833f6-f0b1-4869-8c2a-6bb228d9c62f", "indicator--e632195a-a745-4df2-98d9-6d8e6db1e7b8", "indicator--d012e290-34f9-4dc2-889e-39b519495e71", "indicator--729550e0-9537-4188-b246-92d6d5910780", "indicator--b0e32b9a-d963-495b-8517-17b9c85cfdfd", "indicator--68a14719-ab8f-4262-889b-57f057cf67c1", "indicator--46a20894-e914-477c-bccc-b3ac7c79b027", "indicator--62530a95-5072-4503-bc7c-5aaf54e8c321", "indicator--74e2c7c4-cdc7-475c-8c32-6cd27f9cc404", "indicator--5b278bf8-c632-40dd-b37f-f0286e765081", "indicator--f923ff62-d07d-48d5-8522-ef06ac4fd5b8", "indicator--404b4b7a-ea65-4c42-940e-0310bb4aa6eb", "indicator--92c0d42e-3692-4c4e-84da-1114f9a9a24d", "indicator--ad266b6f-17c1-4a9c-adfb-0fadd22806fc", "indicator--5e461df3-3f2c-4327-bd05-c0acbe76aad8", "indicator--8fe7da9d-95ee-4bb4-87bb-980fcbc17a64", "indicator--83916a02-696b-413c-9296-4adb6850412e", "indicator--ec5d4be0-4840-42af-8ba8-477e8711619b", "indicator--93cb514c-fee2-4c9d-92d1-23c86cd41c70", "indicator--d115c70f-3d65-484e-a662-c0776a069672", "indicator--824f2602-e849-41ae-a983-b257070dc712", "indicator--a42a3fbe-feed-4ed3-8474-13d01e2a3e80", "indicator--52c4414c-79c8-47b1-b44d-bed3e9462108", "indicator--70766df1-be82-46d6-8033-0fc9a43bd3e3", "indicator--71fd52d4-ef2a-498d-b5c9-666753211434", "indicator--53b1d3b4-5ead-4807-822f-e6104067e70f", "indicator--80fe34b7-4631-4205-ba03-2cef4e4aac95", "indicator--57841475-fb01-41e1-861f-fcff5b325c0c", "indicator--81a34ec0-9cdd-4ae7-9e1e-bf80b66c6cda", "indicator--c123de48-0fc2-46fd-bf42-4a825e11cff7", "indicator--fa8e21ba-4fba-4b2e-a723-c6b50953d6e0", "indicator--6f247362-4274-441e-a0a0-7ecd206547d8", "indicator--5dc3bce3-60a7-4293-b20e-915964640541", "indicator--cadc445d-ebbc-48a5-ac8a-62a4e8a9fa2a", "indicator--20ab5a4b-ecd4-47c1-90a0-f0279a1208a7", "indicator--62f757b3-3c3b-42ca-8fc1-5bb97816d72e", "indicator--2a865a3f-61c3-4754-b8a6-765cfaa2a1e3", "indicator--1072a2a0-845b-4f92-b5e2-b1841888336e", "indicator--f6ff451f-276a-4070-9b6c-2e56145dad56", "indicator--2683ec25-f9cb-4c45-b6d2-ba9f513bf3ae", "indicator--ff91e558-0e9c-4a22-aa18-74673bdcf605", "indicator--581935ed-d95c-4d81-ad70-1fea5bdf8c82", "indicator--e511201f-e520-4bbd-baf2-c5f33a515ed0", "indicator--4c0fa3f8-6a97-45dc-8ced-91167673abf5", "indicator--92540127-f052-4479-9bba-5cd30d497a35", "indicator--4f4fb3e2-b498-4e68-8a50-d1285ce8d6d6", "indicator--dd67602d-be13-4a8f-8a6a-3cc0f24aa08d", "indicator--da816432-5c99-4704-84f6-9a88ce0d1777", "indicator--be2259d3-bbf2-41d7-b4d1-d3f06cac1cf9", "indicator--fb9553bf-a486-4b10-b906-b1aabfd13c45", "indicator--fea459f3-115f-4c9c-952c-e4c1f088ad7f", "indicator--21930742-799e-4856-83e0-3e9f2d0bb502", "indicator--87bea29d-6354-4bf0-bd4b-3d229477aa9d", "indicator--73838b3a-4508-49b6-bace-bbaf0dc54586", "indicator--e627ab16-bcbf-4dec-9521-e16659475a9a", "indicator--f45acfcc-751d-4c02-bb0c-542b94575f05", "indicator--1781add1-5229-4328-a67b-fd7bcfbdc9ec", "indicator--ed789cf4-ad32-4f55-bdbb-a69bd01bd629", "indicator--c049c522-e000-46c2-9414-945c6d8c2f01", "indicator--839ebc6d-964e-471b-9529-734da218536c", "indicator--2a7ccd3f-bc7b-4a47-bcf0-80ddd89d41e8", "indicator--7873a8bb-f4e0-46cd-8d3f-668833e1f7da", "indicator--69e653d5-76f1-490d-beca-418beefec4e0", "indicator--7f412581-c455-44ad-9fb2-5badb92e0b9e", "indicator--135c8a35-3a57-4b7f-b437-c07c4b4bef7d", "indicator--b2fe7b24-526c-4edf-bf44-6b4b6a1bc8ec", "indicator--6cfb88db-0c81-4473-944c-d045291ed184", "indicator--5e3f5c33-6fe7-40ed-9d3f-e7a2d0ae8566", "indicator--31fa83a7-3043-43b9-8b07-8fd914f49af5", "indicator--c568bd6b-ba80-4c94-9824-d7c0a898a431", "indicator--8b7550b6-1e2c-4a2e-a3b6-5e09751d6678", "indicator--6300338c-23ac-435d-b45d-ed01f134f4a3", "indicator--fd2f52af-907f-4ff9-9f7f-14dfbf26d45f", "indicator--8dd97d19-b91d-448d-a6bb-39eea51f4d9e", "indicator--c279d7c6-6137-4c2d-beb0-80513893dc15", "indicator--e388898e-0fde-4ab8-a0d5-56abe5adb760", "indicator--0cae9193-a712-40eb-a3b1-8cc8f0fc71b5", "indicator--ad760a86-bea2-4d09-b3e8-199fa0305913", "indicator--25bc01c9-cbd2-4e58-aa1f-8d5ed5181d66", "indicator--08b86047-1bfd-4a12-b27c-eddbfda585cf", "indicator--77754e8e-7ecd-47d2-a342-53a2a5f9f494", "indicator--1a49d579-e6b8-4eab-b033-99ba239c5d04", "indicator--8aa91101-5779-448e-996f-a7ed28efd325", "indicator--f66d00b4-2500-4baf-9229-9d68ca07dff6", "indicator--9eaad1da-ca46-4924-8ef9-74e5351d947e", "indicator--259dbf62-3fbd-4576-9e50-248863c7557c", "indicator--3e94192f-0325-42d2-9570-2913aec437e3", "indicator--d731b954-24a0-4fac-9249-a588e1c2fd50", "indicator--0e19baf0-642b-40c1-a79a-d8bbd2c1d7d5", "indicator--6f8a0092-4067-4d00-b1c3-8b6ce55a8d5a", "indicator--052206e9-d7f0-4f31-a0e7-f530b373db79", "indicator--bb07cdd2-087b-4c64-9778-3caa58687755", "indicator--fccf7946-6110-471e-936f-8bba80825afb", "indicator--a4194b68-899e-4ca3-9d36-c2a5c448e4ec", "indicator--810205d3-862e-47e1-aabb-9bd01ca752a8", "indicator--6778d4ab-9f8b-4e21-be00-cbada45fbd99", "indicator--78338f4a-7538-4e45-bd55-e5ab7399c0ae", "indicator--4f80376c-1d65-42c8-be1a-13ff67d010dd", "indicator--2c236edf-4198-4aec-be85-4e59360accba", "indicator--b33a875d-9670-4fe3-a51f-5e035a4169b8", "indicator--2e2656b1-9406-4899-81c5-411bbc4ebbf6", "indicator--eccbe9dd-1aa6-4ca1-b9f6-dbcf21378eaa", "indicator--a9986b1d-14ed-47d9-9ed4-14530575cc03", "indicator--63214148-5abb-4cfe-82dd-aecb86aefd32", "indicator--3f56a444-04d0-4919-b9db-168b546595f6", "indicator--6cab424b-da22-4550-be8a-b4ad81d1d321", "indicator--5bb769f5-4b56-476f-9196-633613274095", "indicator--a7128548-3b3d-40cb-a2b9-cbd7510e5c67", "indicator--ecc49362-ab1c-4519-926e-ae6b94266db5", "indicator--22a33b49-91c6-45e5-989d-bdf07465fb01", "indicator--00045083-6576-4aca-92d0-fe7155b87dce", "indicator--f28d3268-41ee-4310-a644-7116202a667e", "indicator--f340500b-b68c-4abe-9fc0-888643c6617d", "indicator--300c889d-9c38-4abf-a487-564db53d08f3", "indicator--083bbbc3-3b55-4a2c-a650-bb227479fe5d", "indicator--42833a72-206c-4801-b3c3-c8efd04ac943", "indicator--cf7d4cf7-39c0-402d-8152-28759bcd0c12", "indicator--69ceaadd-923b-4303-b4df-63e40fc358a6", "indicator--e8ca3d15-e21c-436f-ba92-20543807b8c8", "indicator--5bf7b59c-9122-433e-88a4-a34d1ff0857d", "indicator--7fa59841-e0bc-45e6-a10c-4fad5c9ebca3", "indicator--90d3f329-e57c-4503-b9a6-cba128c4ad4e", "indicator--df9f6aa8-5e62-40e1-9d0b-b3b1313fc804", "indicator--d25a1648-b883-4fff-a839-39a8fc723221", "indicator--b3795c28-50a7-4c7a-a265-a229b299bffd", "indicator--24d094bb-763e-4a82-87ce-3aeca7937d54", "indicator--eb37e5fd-5674-468b-bac4-1dc8447e8a41", "indicator--16a4ac41-c0ba-4109-8461-2148ce26774a", "indicator--4febb6d7-c0e3-498d-83e9-72c10dd489b6", "indicator--b9aef03c-542e-4510-af7d-87d2e4b3ee9f", "indicator--f71be61b-cbc5-4319-b9f7-46517c39ed2b", "indicator--f358a2f5-b448-484a-bfd5-553a554f7fb3", "indicator--37ad6e3f-3d1b-47ed-ae0c-25f66f21302f", "indicator--e096b779-ed0c-463a-8da2-422e0181b54b", "indicator--1d08913b-5c3e-4313-a076-a4618bc90868", "indicator--807b3060-aa25-4c39-a513-7c67974f3a65", "indicator--c4c9f8ec-9f12-4a51-a0f3-a8ffa2886dba", "indicator--47595069-6db6-425b-8b3a-10f6e7405ee2", "indicator--b2b335cb-4e84-4d4a-abf1-5fc18c9a716b", "indicator--f3a84330-fbb5-41f1-a2dc-be755d158a1d", "indicator--ae8477d9-f9d3-482c-9187-472a4dc2b084", "indicator--26b42210-baad-43d9-be49-aac36efe8fb2", "indicator--9156742e-9198-49e0-beea-10ae3de9e0b1", "indicator--076dc089-5021-413c-90c8-354c0bec9606", "indicator--5f5c832a-62de-42bb-8896-39f71bca70e7", "indicator--afbdbaf6-f630-4aa6-8135-17720607a869", "indicator--36d47ff8-fbe0-4353-9d9d-5e503660f16b", "indicator--c82f7384-6cd0-4a7a-b105-645e802a96bb", "indicator--ca777df3-3859-4b24-ba89-d38dcb30f497", "indicator--768f4c62-f736-4759-bf05-b3264b58d444", "indicator--60a66edc-8902-4317-914f-b3f203036d9e", "indicator--cc74c914-0d60-48e7-9af0-b1935b249ada", "indicator--0c275054-2fa0-4196-a57a-10b29039eb21", "indicator--661f0585-a141-4517-9116-d669ce12fbda", "indicator--8ecdadbd-4120-49d1-a607-b0441834fb92", "indicator--861054c2-8827-4a44-aca9-d13495ac7bcd", "indicator--d6f58a5f-10b8-4c88-9f51-56e565e068ed", "indicator--3842c7f7-95d8-470b-af02-2f7cc31c67b8", "indicator--b76a8579-f53b-4a05-ad42-227949d827ef", "indicator--c407e6a4-617a-4f64-9869-fbe10a81daeb", "indicator--994bc037-2a4a-4188-9028-a28e9d628615", "indicator--7062e4f6-88d2-4c2b-aaef-f3a56ec40ba0", "indicator--74b080e5-7c30-4ac1-9225-5dfc6875c6ce", "indicator--86d1e466-eb0c-4e0a-b6ad-6e974a7490b2", "indicator--9b31e34f-c583-4334-8915-c36951cd85a9", "indicator--72874249-e389-411c-b7f6-d9e796aa2a30", "indicator--29f1c50a-f3f2-4b85-bb06-56a039830189", "indicator--f5759449-bb64-4993-9514-3d6bd292fd93", "indicator--06d92cfb-a092-4e83-adb4-ee6c5e173c78", "indicator--d70baaa3-303c-4a40-8243-43fe487d4069", "indicator--48b9278b-6a28-4c44-9b47-77e08e116230", "indicator--4ff6a647-9d0a-4da9-9d92-cb85b455eae3", "indicator--9ad74ce8-8431-43ae-a1ab-561891476de9", "indicator--d0a80fcd-6765-4119-972c-9b3d4b724e0b", "indicator--1f3f2a19-0fd5-434f-827c-dcf75db2c93a", "indicator--a0076220-4ab2-4050-ab84-87703e610680", "indicator--8cae2920-cff6-415f-88c1-f05446af43a3", "indicator--b3424005-0a03-4561-a29a-cf65d2671b1e", "indicator--f73d47df-b2dd-4083-823f-3d8227dcd62c", "indicator--132c9155-d227-4413-b1c3-53e17b3249bd", "indicator--eb84fac4-b3fb-4861-bfbf-6050e9ff1b09", "indicator--6da1d558-5908-435b-b550-3bb0ac25b10c", "indicator--a9f77d03-a30b-45f2-9560-bcde78aaa268", "indicator--59cb030d-2a84-447a-ae0e-fcae45c5f81f", "indicator--fb2fcd9c-8c84-441d-be75-200c867f2b21", "indicator--5e95e056-bc33-48d9-aa7f-9272bd388d65", "indicator--67ec1df2-8f36-4021-b69b-0d331b7122dd", "indicator--e6af537b-258a-46b6-8da1-039624f751db", "indicator--dfd0561b-2189-4f06-889a-1b1d6b22bafd", "indicator--37c0c0a2-8e78-493f-9c73-861af7cd8031", "indicator--b637044c-a1bb-467f-acef-422e48d6503a", "indicator--c419dbc0-6f53-45d3-84d6-ed0e618e02b1", "indicator--44e55faf-b0be-4e36-9e59-8cee9a974cf2", "indicator--835f364c-3e61-4fcc-9c59-ab1324d5f995", "indicator--2b7b3b25-b0e3-4b2e-8037-d9618cd5aca2", "indicator--eba2092a-bfc3-49d0-94da-41f41152f06d", "indicator--d1b052fd-1c3e-4b97-8cef-784c1d0ba4f7", "indicator--6e1e50b0-5130-4b51-8aac-1df596e20a10", "indicator--f14c53b5-6149-4ab1-beff-b1fb080322b0", "indicator--8ff2e586-0465-4220-8691-704a2c080df3", "indicator--036e88b6-b515-4ac5-ac89-b1b14d708ad8", "indicator--9c792deb-0f04-4a0d-9ee7-a983b228af7b", "indicator--d678207b-d2bd-4314-a60b-01953a584902", "indicator--12b69bd6-cc88-4087-b5c7-af7f70008675", "indicator--29451fb0-fab8-46ca-9909-70e1f8c16014", "indicator--f8d8b873-fcd4-4651-a31e-1889b4321c08", "indicator--920958d9-20d8-4f29-89cb-76939e9342ab", "indicator--aaaac6dc-6d30-4b96-a698-202f2cb54140", "indicator--079bc513-0def-42cd-84a2-3d5567d8647e", "indicator--bc117c9b-a5d7-4fef-a721-98b265da4e26", "indicator--00fab018-00d9-477d-89ae-5655655cd6aa", "indicator--4f3b8ef8-fe3a-4ff0-9484-eaa5359f2f7e", "indicator--deaf09fd-831f-4730-85df-7f35c93c5410", "indicator--40a80829-060d-4cc5-be40-90f4b4e050b2", "indicator--841af67c-f4b2-44a6-a416-685e6ef93334", "indicator--b623f451-e42d-4e96-ba7f-da1075aed0b6", "indicator--ce12af97-3429-45e9-ab6a-e48930db88c2", "indicator--b9f08688-2d76-4e8a-b597-da5d958d734b", "indicator--e0242bed-404c-4fb0-be1b-672b43292bfb", "indicator--13f08684-a86d-4a6e-9ba5-26ce56543b38", "indicator--b0bf0f89-532c-4b05-8c9d-74cb55c853cc", "indicator--0eae4486-3637-4010-afdd-5521f805314c", "indicator--fc3476f3-ecd3-4ef5-ae63-7bcd23c834e9", "indicator--9684cef0-d1d5-4472-9264-8bf502b07e7e", "indicator--9cc7d383-109f-4d49-a84a-2afb3353ed20", "indicator--fab45dc4-b7b1-4c44-b205-e107ad2a177f", "indicator--59ee3333-6e98-4fdd-b7a6-98420bd525f2", "indicator--8e829fec-ee7c-4291-b662-4dc7ffe38cbe", "indicator--47b1cbb7-3f4e-45ad-b0cc-73b81440b6d7", "indicator--4104e804-91fc-41d3-9e95-294ddde17b55", "indicator--3715f3e0-a7e2-434b-bd84-eb208e9632a8", "indicator--e655dd31-1909-41ba-ac98-aed02d950a34", "indicator--1f66edb5-f20d-4a75-9fab-a008b485c076", "indicator--2087edec-3d97-42d0-82c8-e50e3cda9144", "indicator--c7b581ce-ac5b-4662-b862-88eba02e69d8", "indicator--57f7cd36-bce4-42c2-b6de-38ab65c0c2f6", "indicator--73b55e92-39fd-4b12-8824-b2af55fba5c9", "indicator--e9d06ae5-3a9e-4e18-a926-5f49c7425ed9", "indicator--2a0ea6ff-98d9-4c01-8f40-55ed8443ed30", "indicator--2be63b36-92db-4c79-b29b-78b8dd3989be", "indicator--67fb66c4-cfe7-40d4-b02f-3cc448f33bab", "indicator--e789b111-7c84-4bfc-9c5a-703d3f25e74b", "indicator--05fff243-21e5-4aa0-84ba-be01573f8e12", "indicator--6c587274-a831-4cfc-aa64-75db932e915a", "indicator--db7fc7b4-b49d-43d4-95e2-da49e79cb149", "indicator--245453d2-f28e-4eda-8b68-ec89717f7fc9", "indicator--230031ec-c3f0-482c-8770-f520851948e3", "indicator--c60a9ecf-1b1a-418f-947d-133e58bf75ca", "indicator--1b2bacfc-ed01-4a14-b7bd-d8043be2520a", "indicator--03db20af-6ffc-4236-b5aa-7f2ad4b69b96", "indicator--14238dc5-a760-446a-8979-2f6a49b61616", "indicator--f3223a0d-8b38-4503-a6c1-a002c2c06ee3", "indicator--9dab9da3-067f-41ea-82ac-ea6a0e0ae0e9", "indicator--8349df80-5264-45c2-9166-318dd99b0911", "indicator--489fe14c-c9af-445f-95ed-f408d3574451", "indicator--f68eb1e8-23ab-49c7-90d8-c48bbbfc1d09", "indicator--dcd5b3f5-f818-4e7c-8877-4bcd70e56bbe", "indicator--1f92c007-999d-4663-9f94-f931ade79702", "indicator--82439278-e5e9-41c4-b7df-b1e840c9274c", "indicator--87d10d4d-28b7-45b7-973b-708d1eec39ed", "indicator--7c85b35f-d4b2-4166-aaca-58c6c4019c4c", "indicator--8846d93b-4e43-4baa-9d1a-a4abb78949d8", "indicator--2d1c5563-a6ab-41a0-8a8f-fc0e0b6c6686", "indicator--ed31b77b-2818-4cf7-95d5-3fbb38fd36d1", "indicator--61b5a9a4-7902-487b-ab61-49a5d0211d1f", "indicator--88bd3a65-7c0a-4f55-a67f-84f370d6a88d", "indicator--100a9443-1a19-455d-8716-eb4b20ff308b", "indicator--3af8a0c0-ae41-44ae-a393-9fd0eae405c0", "indicator--b5caf897-6742-410c-bb70-175c76940a9b", "indicator--5e1ce976-bf36-4d23-8847-bb1abbcca42a", "indicator--7b98e694-f679-45ca-8579-32cb7a9ef8f3", "indicator--25ddfcf4-b3b2-4e86-951a-a343e8dbb269", "indicator--3ab2db66-befa-4c78-ad93-83c5e3785f92", "indicator--9cabea11-73d5-420d-bbaf-02b6ca9f5816", "indicator--d3ff5c59-24d7-4da1-a84b-da1171603b33", "indicator--44ec684b-f5b1-46ca-8aae-5f104e30d942", "indicator--5d2381ac-3f54-445f-a903-8d64956bd2a2", "indicator--4c20eda8-d0d5-4e04-91ab-91bc07fbf385", "indicator--e55610ea-e461-4a17-9db3-32474c7b405a", "indicator--4c1cbf7a-ffac-4787-af8a-b3df8f6732c4", "indicator--a24ec1cb-e47b-412a-8c2b-c52b650e6e51", "indicator--18ee30ee-7dac-487a-b0cc-385469b48694", "indicator--575dcf27-ad1f-4644-8870-f1d5b685d299", "indicator--8daad11d-cb8b-44fc-9277-5da8e75483b6", "indicator--a40dbf80-5e31-4021-a5fe-f3bfdf166857", "indicator--cd4d36cb-314f-47cc-a68a-ec0b14dfc33d", "indicator--98118964-e8f8-4b77-a815-5b0d84c0e74b", "indicator--bc063142-28f0-4093-a671-eadaa7da69e2", "indicator--024e9a09-8b08-49c9-a685-c2559d7566d7", "indicator--5abe48f2-2934-4609-b99a-0b97d1bcdbbb", "indicator--9692d9b5-591d-412b-94e1-f8e9d349b809", "indicator--336ca166-7474-47dc-afac-58fb97e01c3d", "indicator--21a5b7df-63d2-47a5-b873-b7e5666f3d3b", "indicator--a4db87e8-8c95-4580-8af7-33e3a49c5ed2", "indicator--d3232c6e-b038-4483-bb7a-11665796a3dc", "indicator--70d565c3-2b55-462f-bf0c-7a5bfde79223", "indicator--cdbf45c6-6494-4ffa-a09c-ec1be8915844", "indicator--2a92607e-6301-45e6-803b-db94f165999d", "indicator--cab9b81a-f10a-4a29-b15a-90b44d648827", "indicator--14216e2d-bfc4-495a-ae0c-187d94a02e44", "indicator--3506efd5-e85c-4208-bd57-022df8ba325b", "indicator--56029b33-b96b-4f27-850b-d6dbd6430654", "indicator--d7b33ede-5789-4cc7-8322-2b2da6ae5b30", "indicator--26123dc6-0861-4e16-a1e2-459ecb94020a", "indicator--835ea696-2acf-4de8-a5bb-e77477907dd4", "indicator--9d65c5ba-7520-4da3-a606-13f6761c637a", "indicator--5d18590e-481d-4713-b3d3-0c76f6bc3bc6", "indicator--4e070028-ad15-4a33-adaa-504a40229862", "indicator--33dc4efe-9d1c-4b99-acbe-e6da775bfb22", "indicator--4a3e9907-e781-491c-8a5a-7a02ec8a4478", "indicator--f1b83f39-a1eb-4e4b-b3d4-e8d99a4c676d", "indicator--b446ff3f-3ede-48a5-8b36-92c4e92c863f", "indicator--26237416-859b-42ef-9a03-106b99f53880", "indicator--4ef463e0-0ef9-452a-ad09-bb9489b70198", "indicator--19489f2e-0799-405a-805e-3133395802d9", "indicator--ab23adc1-ad1f-4cc1-b829-0a5097cdd0ff", "indicator--a62245bf-ab72-4c19-ac29-c86844ed8f84", "relationship--a2974643-afcf-420a-8ee5-513945f7907c", "relationship--ffd86a0a-e7c3-43b2-879a-445ccee31bbf", "relationship--ec38b1ba-0ce3-41e3-9ea9-793eabaa86f6", "indicator--5309213e-6363-4077-ab96-c6f90242da20", "indicator--41bbaab0-bb83-418f-94aa-c2ee67789d65", "indicator--8797c971-13d3-4b4a-badb-ed83ea9a0224", "indicator--5890a442-f325-48f6-a8a1-74174066507a", "indicator--0d407a60-be0a-442c-8bf5-db0aafc738d1", "indicator--4437c27d-414c-4dde-8506-7aff5f79d5b8", "indicator--40af976f-2c31-479f-bd87-58132f69b06f", "indicator--2ad0542f-09e8-4a16-a479-1ecd0a5ceef1", "indicator--35dcf77d-b6a6-4c8c-852d-4ca16d506aa6", "indicator--7a48eff2-521a-4e3b-bc34-29dec3670c74", "indicator--7491b4cc-cf8e-441a-a4e2-92c3d2ab810c", "indicator--c0e0dbbc-41a2-4c6d-b073-7d0481c6401a", "indicator--4a88d26c-8bc4-42d6-b973-6507607deeab", "indicator--fa4e2061-66f2-4183-97f4-20a019a22337", "indicator--d420bd5b-b2c1-4532-ac4b-abeff11862ac", "relationship--eacd0d2c-81c0-4917-b3c3-6ef60282d978", "relationship--f4bff967-6713-4665-b5cf-13780ab47898", "indicator--f6f55bf7-d597-4df4-ae74-3cb0336f28ec", "indicator--2c03106d-513f-42a0-9167-75b46412838a", "indicator--41257c0d-f4b0-4946-ac75-517b23797cf6", "indicator--cb650252-a480-49a4-ad57-9d0214ddb6de", "indicator--8cdd9b5f-0c0d-4202-9a9e-c22ac09202fd", "indicator--40bba588-8536-434d-9cc2-aa35b4a0230f", "indicator--9b00f195-b5be-4306-a93a-9c9c6e04b3c2", "indicator--5e4328b6-5717-4ddb-ad4b-06522958574d", "indicator--95b1ed61-9b23-41ac-9bb5-fd527444a526", "indicator--21fd1845-0bb5-4bee-84a0-4cf99e4b991b", "indicator--4f02d60d-34f7-43a3-8100-5894211b4a8c", "indicator--f1d5c97f-37f8-4641-a160-c84ebfe108b4", "indicator--3a31f45d-81a8-4d1d-8312-19dba02c5b55", "indicator--5741a8cc-dfa6-49b3-909d-d6c10d9c74c2", "indicator--367df0be-efd0-43ec-b9f2-0fc8015bd41c", "indicator--1550b13f-01f2-4199-bd81-b6205d8047d6", "indicator--456e8204-d544-4a29-b5fd-742e43233ada", "indicator--448dec9d-d30c-41a7-a41d-1d1757e1273e", "indicator--735b9cd7-86ed-4f68-bbd3-25c6bc5486f2", "indicator--df01891d-f08a-4e25-9f7c-9e035378066e", "indicator--a23989ea-4107-4732-8354-644096b83b54", "indicator--d68f8319-19c3-403a-89c6-6e90d58f3523", "indicator--40db4201-d122-49ba-8bcb-1d0f3c8abaf4", "indicator--8d10a519-addb-46df-9484-1bcafdc8ed11", "indicator--54b1ac81-aab6-4343-b61b-7097f4b8f5ca", "indicator--4dacfc2c-63ea-4f65-9b3f-8860be0147e9", "indicator--0aae9193-d3f6-4ab2-a47b-a4e5b9a8a6ad", "indicator--5833caf6-cf7a-4121-88c1-37fdbb344d73", "indicator--9a1753c3-d28c-4b1b-836f-02f3250cb72d", "indicator--79bd505f-3fcf-4427-b66a-2f69752b7eb8", "indicator--81f3fccd-9f1a-45dc-b239-685a6f7bfefb", "indicator--9e2882ba-d115-49a9-9661-8510723fc317", "indicator--b5d21190-e599-47d4-8803-dd3b00ea85f2", "indicator--9c933fce-33ea-4354-90b5-ae9d55c8880d", "indicator--5a181263-04ec-4f18-85a1-d44df96c27d6", "indicator--53ec6bf6-a9f8-4213-8cfb-c33d6e3d515d", "indicator--17391e32-9065-4495-a582-5caac59d1bf8", "indicator--5d3a0260-2f54-4847-9873-6bc332f9d7f3", "indicator--56d203c2-50cc-45eb-b27b-51f7821df3ea", "indicator--1edd38cd-bac3-4da7-a56f-ea52ae3cc8cf", "indicator--50902295-f108-480a-bbc1-9620f3bdbfec", "indicator--3c5a48a2-d22d-4d87-ba67-9fb24d219bd5", "indicator--3d473b50-4863-442c-9b29-a6c2e9b7f40f", "indicator--c5ca5293-ef8f-4068-aa34-17f99130af61", "indicator--b9e05855-ceba-473c-9d45-4b5bd87e50ba", "indicator--cd62bcc0-f7c3-4abf-8052-28129f81d979", "indicator--5729980a-2c5e-4353-a83b-02feb12e09c9", "indicator--9dce0e4a-c8ab-4701-9fc9-e46fa3d9da0d", "indicator--fda84528-c5b0-4fc0-9093-ef08c1952cf4", "indicator--492f809f-7d89-4704-b3de-e083afa058d9", "indicator--6f458889-18bf-4cde-9d3a-d9be9ae0e15d", "indicator--9d73f93c-2ec6-4289-9365-b6414d29e187", "indicator--ab7655df-4ab8-4c76-a484-bc535593e94f", "indicator--24185e3a-a510-4c87-a070-060210f179cf", "indicator--288d776a-be26-4105-b600-f79c7a025d03", "indicator--727b0a61-b87e-49cd-8a52-46a679eec2f0", "indicator--6a61f729-7fda-4cf8-a7b2-16b6cdfae28e", "indicator--8c7e8c59-5c2b-4e31-95e3-0d9bf27e62a6", "indicator--ad1a5d11-fc6c-4903-9c4b-4de72669054b", "indicator--17586239-1d5b-4500-9d37-cc9843dfcded", "indicator--e282633d-65e9-451e-8017-e3a625da0ded", "indicator--cd04a822-115f-4b03-9c8e-bfb089631a96", "indicator--5d2dbcb6-a7e8-4155-9a2c-11de77fcd448", "indicator--7d058d23-f0cd-4c45-a8d3-d8e0645adcba", "indicator--38d7fbfb-6c8b-4821-9cba-3758619ab4ec", "indicator--4c2e085a-7b5f-47d4-b2e6-3def504e2ab3", "indicator--512d3ac1-007c-4708-b4cb-b5f2b713426f", "indicator--d91f634c-a97b-477a-ae4f-de19a6e24370", "indicator--d1d92462-09d5-4576-93c4-68850969e471", "indicator--e45e51e5-7cb1-4bae-999b-3a4a556b74c6", "indicator--8bc3dad6-a30d-4127-a663-5412e5464867", "indicator--ba089256-a691-4fa4-af42-e895127c2e4b", "indicator--025ae5a6-047b-4214-bd31-ba7086099236", "indicator--1ff17adc-8d6d-4cbd-934b-488406e72fb8", "indicator--4fc7c60c-78d0-44ea-be0d-c0ec20ae05e4", "indicator--15beca54-cbeb-43f5-9c62-737e0cd4865c", "indicator--23248271-b227-42b4-9d73-0b16a518906f", "indicator--76aa8214-80f3-4363-b5e4-0766944b6b8f", "indicator--1658e72f-71e8-49c7-95d2-47c42cadca9c", "indicator--3147ea1b-5858-4973-aef3-a014538497cf", "indicator--0d024d15-4b80-44a7-88b3-6ca9dc88e32c", "indicator--1705fc38-a6f1-4d4b-a691-4aa68f9fd252", "indicator--6c381e8e-6432-4e48-a14a-b4f31def6aea", "indicator--516a0302-3e9a-4bc0-b0d6-2806fc4cc4b7", "indicator--5ad99b77-41c4-4fe8-966a-d9c63aa67c94", "indicator--048e9c10-58b6-4e82-995a-135ed1e80af3", "indicator--21df3b9a-af97-420e-8a8e-9753d956eee4", "indicator--2743e577-dba2-42e8-bd0f-9f1f7c48e313", "indicator--046b48a5-e4f2-4221-a8f3-5f41cf081fd3", "indicator--fa369d1f-f10a-471f-ab9d-ba7a4065e2e9", "indicator--a4c79d5d-a46b-41d1-abfb-e6f5602c9e01", "indicator--359daef6-a98d-4652-b93f-18366d5b38a8", "indicator--b634c70d-ff13-42d7-a24d-29a54dd95cce", "indicator--4606a551-5948-4c0a-b2b5-edbe3fbe76c1", "indicator--26873df5-899f-4d12-8c6b-93010b3c1386", "indicator--3e2f0603-4777-4ea1-8bc9-2102832487ad", "indicator--5e8d93a6-842a-4a5c-9d15-60e29982468d", "indicator--187f6971-0f0f-4ca0-bce6-0fe365ed7fc3", "indicator--44a0368b-47c0-4998-aad6-eb25d9f4fcd4", "indicator--28ad0efb-f89f-42bc-a322-6913595cabcb", "indicator--976ca1b2-7066-44f5-a4a1-29ec42a2d1ac", "indicator--14e266b5-5975-41e3-8417-fd18676ad7a7", "indicator--6abf9c45-39d9-4ecd-b909-5a5e8f1436ab", "indicator--06aada45-ede2-41a9-bd87-4d956c91d1c1", "indicator--c7d41c82-ad03-4396-a064-df2395080722", "indicator--d16163c8-ba88-4a88-a4ab-e0a2f080f0a3", "indicator--70c0080c-28da-4643-95cf-154e4cba02eb", "indicator--2c09a2de-0e61-4831-8585-de4ef4ee74e0", "indicator--5a2bd1bc-5e76-4d4f-9fb3-c7e08a9a05c8", "indicator--ef5822dc-52b6-4b4e-a7f6-c1188db92df6", "indicator--c60718cb-aa45-4300-b241-4d0cf975580a", "indicator--6c57f39f-abb5-4f8e-9e93-45e4e13c2f72", "indicator--b9d48e4c-4ce1-446b-83dc-d43beb1407b4", "indicator--5e1777fd-dac8-4f88-9d7a-b26e3a91aaca", "indicator--cfd776a2-2707-4ee2-92be-751f858ef36f", "indicator--386c6764-f244-40ec-8c56-eacc0f4cbc5a", "indicator--ae063135-c7e8-4d75-9ad5-1e972ffdfc44", "indicator--99f88fd1-5a0b-49ae-a3af-f2cad8965175", "indicator--1449be45-91ab-4f52-94ec-d6f4df290157", "indicator--ab3b2044-de70-4ae2-8f21-3c63096d12f4", "indicator--1cd388bd-d6a5-488f-a4ff-d2eff92eca2a", "indicator--4a5b8d7a-5b13-43d7-b427-febeac51935a", "indicator--d14c9791-8493-4d27-8397-3a3f0d00702e", "indicator--45b64602-b6dc-40c4-968d-aa729ffc571d", "indicator--e27c3a20-d6b3-40b0-bb58-6b8d4c72a962", "indicator--def9b4d6-3031-4804-b528-d44d98659771", "indicator--72414383-338a-43ad-a416-07f87f6cd5d0", "indicator--9f805136-da86-4ad7-871a-9869efda7641", "indicator--32895072-8499-44f9-a003-30fe0bb7e6d6", "indicator--601710ed-346b-4d32-b028-a670d1ed4dea", "indicator--81fefbb0-b764-42c1-8c9f-1b948663e212", "indicator--bacf4f1e-ea70-4db9-8773-ef58b60f50a3", "indicator--eb90d2fd-b01d-4aac-92b9-a33dd2912268", "indicator--1d7d1cde-0087-4448-b59c-8e1cd4277c0a", "indicator--8ebf6dbb-ab16-4f2d-920f-3ecd63e7415a", "indicator--67021f6d-a372-4784-9d17-f24e6292eb64", "indicator--62c6871b-5097-4abe-9546-a35cee634381", "indicator--ee64aec0-19b5-4db4-995b-48c069905812", "indicator--8ecb9bd1-cc11-4347-b4b5-57e757cdd631", "indicator--96d74854-2c35-4293-a217-a6c6636bdf88", "indicator--988d21de-21cc-4f2d-9a3d-27ab8c57f44a", "indicator--2cbe1244-ec24-4441-a97e-6218a66acd2c", "indicator--20a50b78-4e3e-45eb-86c7-9d7ec6173db4", "indicator--744ad364-a0d9-4469-a33d-c42a1d1498d0", "indicator--1e47ddaa-ca15-42b6-96c6-8a23c06a76ab", "indicator--1cd7ddc5-3d19-40cb-b89c-47160deae553", "indicator--30f36e2d-88d2-4ae9-8b3f-7590b3fad889", "indicator--3e397aab-5123-41c9-9182-d71610c6deba", "indicator--d6e28bcc-7f80-45de-8f5c-8dfa8bd21b12", "indicator--dd25bed1-a07c-4463-bbe4-8215413dd7e5", "indicator--526fc252-7b22-4405-a326-2d4be6810dfc", "indicator--f3fa006c-b361-4afd-97a7-3ee2bf6f5193", "indicator--474d75cb-8304-4c5c-90d2-5f72ca258d49", "indicator--ef61cbfd-7cae-4789-b7c7-99f1f3969c2a", "indicator--0260446f-fe1b-4971-8d21-305a64ba549f", "indicator--51114bff-8330-434b-9b87-753bc92db403", "indicator--c219a4ba-4b97-45db-a4cc-4c4520f9c534", "indicator--1b1a1702-8719-4841-b9af-3aa36d7ac6f1", "indicator--d345c0a6-1578-4b72-87a5-b2538e0ea411", "indicator--2c3b3c84-ae51-4773-bde2-97ac86b0115a", "indicator--ff61bfbd-c7f5-47b9-bf86-02f289eb9ef1", "indicator--55f9d7a5-0329-420d-bd01-90da74b1a388", "indicator--424afbda-e75d-41f8-8ad2-88f643148a68", "indicator--bf9061bd-0751-4f06-9aa5-3335ca7a1d2b", "indicator--fae948b2-eeb3-4c77-aaaf-339ba45fa5e1", "indicator--2e33e27d-0c85-4186-bccb-9f2557bd83cd", "indicator--dba9ba7f-0285-4ac2-8e7f-408ad6929e74", "indicator--2b5b3d08-8d3d-449e-91fc-00f275f584eb", "indicator--b4cda079-69ff-483a-82ea-3d841cd36512", "indicator--ce145df4-9d5e-4c7b-b80a-df64e5192a0d", "indicator--a353aab4-df68-4b12-ac1c-dfe28c6549b4", "indicator--b53c922a-b304-417b-8cd6-3df9bd414aa1", "indicator--7676f463-abe6-4e94-9837-bea7ebdba0f4", "indicator--769c5d8a-494b-469b-a1e7-3b747ed52ba0", "indicator--55ed122d-3510-4eb5-ab18-f1198604b5d8", "indicator--a0705512-b9e7-4e4d-9d4e-7ca45ee3f3f6", "indicator--0e438a94-6fcc-4707-a87b-f1ba38967771", "indicator--b48b47ac-5607-45b4-896a-4f2feed62433", "indicator--78b13002-a8c1-4c11-a0da-6f988fbc14ed", "indicator--dd2e9638-9a65-4f7d-a323-5c1ac27f38ad", "indicator--79468184-8129-4372-859f-67358617e89a", "indicator--4ac9bbf8-0a95-4b1c-b35e-91edc1d67ed4", "indicator--cf3dd514-339a-4d32-9ad5-5bb9ce387645", "indicator--0ea50f59-c12a-4a4c-aa8b-36daabec4fc8", "indicator--5b95b59d-50f7-4007-93d9-507a98ce317b", "indicator--9d3660f5-fcc8-4024-b5f6-52031753c1a8", "indicator--082fa824-0c04-45f2-81db-921ae05a2676", "indicator--cdf32b36-a3c3-490e-920a-5eecbd0dcbd3", "indicator--eb93b0e3-54bd-44e6-9341-b8e2ef7f95ef", "indicator--e388d6b9-f1b2-4320-93e3-fb8af79c34aa", "indicator--6f5f5286-91cf-4b9d-aa0f-40d7ddd98e1e", "indicator--356aa82c-62f4-4b59-bd05-aba2775bbdaf", "indicator--47b39831-118f-43a6-b92c-eaf912580c35", "indicator--578f1c71-502c-414f-8b01-0a037a5b10c8", "indicator--d984dd97-7abe-45b2-a8a4-a69cdd46ce79", "indicator--53621b6f-3687-46a7-b213-bd8f33ab9bed", "indicator--63421a83-5bb9-4367-9ad2-e086ef75794c", "indicator--d553dac2-286a-43c4-b1ad-fc4eba028cab", "indicator--ce944102-40be-4255-90bd-3893e652cdfe", "indicator--c276625c-430a-4ca6-8ed2-18b22d91a3d6", "indicator--9de378f6-a506-4cd4-baba-c55d0c5cde68", "indicator--95c6ad0e-e780-4627-9ade-b4d85e4ec039", "indicator--2f44e97b-db02-459f-b079-4ed77c1f0cde", "indicator--853640c5-b412-4e04-b99a-1357e32232bb", "indicator--37895657-58ea-4493-a9be-b7686292fcff", "indicator--a25d33cc-aef1-4401-9b0e-f48f7d8b0f7f", "indicator--0f1d985a-8c4c-4df4-9b3c-76047a6b3815", "indicator--4904496e-f287-4d53-87ed-003a1e2a5900", "indicator--e68bd526-6741-4e02-bb25-54d3b9d33be5", "indicator--6da1e201-0550-441f-a836-44a71dc31e7f", "indicator--72ee157c-4f79-4101-b5fd-c3c720d65cc6", "indicator--b944d709-106c-4cd4-a2c4-5b8795ded818", "indicator--e0ecc316-7dd7-4b71-9de9-1692446d140a", "indicator--af4d29e0-9308-4117-a11b-0e684058b82d", "indicator--357e2f77-7af5-42a7-a341-9cf11aeae80e", "indicator--79ad030d-3ed8-4d76-8d33-73609bf41ca7", "indicator--feced753-9b55-4008-8df5-9d371d8c378c", "indicator--dee95d83-5bad-4e29-aeb1-efd92ff87a8e", "indicator--053684d5-4897-4f2d-910a-66436d70b8e5", "indicator--fadc9810-1351-4658-be80-5a270674c9fb", "indicator--ff1412e5-c585-4f7d-b9ca-136fc433e3b2", "indicator--43918d39-5b60-46b9-bb6e-66c8445d185e", "indicator--77b32cdc-2ef7-4160-9eb0-ad1ce09bc972", "indicator--f640f5b9-ddc6-4e5a-9a33-29d085e4725c", "indicator--dc544960-493e-4b19-a807-38539fed6614", "indicator--3275cf58-7579-4f2b-96ff-15516b0b737b", "indicator--55d138da-fa62-493d-9ff0-e0e256e73340", "indicator--6d0c3d40-72a1-47b1-b07c-43ae4773648b", "indicator--7494e144-830b-4e0d-b1ce-16e01dcbe558", "indicator--eaa938e9-9622-47a0-a6c7-133d14bebe5c", "indicator--c408a6d4-dc12-471e-80cf-08373587891e", "indicator--345dabe0-b7d4-4ae3-9269-4eacc2dc1cce", "indicator--b5796341-99a5-4932-8037-4c5cf79e1d81", "indicator--b62217c3-8e3d-4a2b-b661-3c64262bdabd", "indicator--89166e94-b79e-478d-b206-8067df3254e9", "indicator--cc8ff3fe-f17b-45f2-b67f-e5ffa7da5b85", "indicator--ba9ee068-45a4-4d81-aefb-cc54bd0367d6", "indicator--f7330b70-c281-4025-aa7f-a38d60142afc", "indicator--5b29e492-1ad0-4832-92b9-b1ce986ff736", "indicator--d01cd921-4542-469e-a2a7-7bcdb4e4d2dc", "indicator--203193ef-5557-484a-baf0-97614c60e4c5", "indicator--52bd298f-4327-4e35-9d40-8b846ba0e05b", "indicator--c0ebdb76-4854-4aa9-a43a-2e5b30b263f9", "indicator--9ae0b282-de54-495f-a975-7832de29fb26", "indicator--abc23e41-16c9-4ba0-8158-a8866dcedb2f", "indicator--eb4e87f0-f1e3-47d2-8faa-b06106ed1757", "indicator--a8feecc0-666e-4722-bf5d-f02a78e8a129", "indicator--a66b545c-5113-4691-a764-e1088956ef0c", "indicator--c66149ba-2da6-4c9c-b458-6c6152c8a913", "indicator--ebbfd275-2817-4c6b-9974-069bfe0465d4", "indicator--baef749b-6ea8-4d8b-8488-728469206d88", "indicator--7222d645-0c24-4c9e-be18-43410516b04d", "indicator--b5fb4ca9-f7df-41ee-8647-423d8259e0f6", "indicator--480b30cc-6312-4e5a-ad05-00e3a60ed7aa", "indicator--3edd3407-543d-4c67-8b63-037cc5212049", "indicator--9435a6f8-a9d0-48b3-a531-a9847af8c674", "indicator--d09efb4e-5d51-425e-9806-fc9e3df2955c", "indicator--f5c21551-7da4-4d2a-b50a-1ac43410dfda", "indicator--22deaa34-6c55-4144-ab49-9a7fd6c4f6da", "indicator--41215ba8-1f0a-4127-8cfe-6edfbdbd842d", "indicator--9bff7a63-f7c1-4ee0-9c6f-5a032a945362", "indicator--3a7ee039-adbf-4503-9880-54ebf65f7f79", "indicator--a7d3ce77-9c5f-4c80-9255-625410031cc4", "indicator--1b2fecac-fc71-479e-80fb-b57c894a18f4", "indicator--03bf9aa4-8ac1-4ee9-af6d-1e43015e8608", "indicator--b798f4c2-ced6-439d-bcaa-f5d7bc81b49c", "indicator--65daaf34-8cca-403b-a70d-8bb51d2b8bf7", "indicator--a0e3a8eb-eed0-49f1-8f46-c0c38761bad3", "indicator--3d454517-5fd0-4530-bb60-62dc943716fa", "indicator--580a4299-0f9e-406e-9abf-e8c5f15d13d3", "indicator--2eda4ec5-8cd7-41f6-92cb-9ae903e210f1", "indicator--380b74a0-da20-425e-8f3b-2d7bdcfc6527", "indicator--d9be5d35-37c0-43cd-a8c2-cf241ce67ec6", "indicator--3a7026fa-ee11-4ad4-90c2-0740559b3967", "indicator--db4c6753-415a-4248-98aa-6771442e4765", "indicator--b2900f5b-3724-4587-8591-5ca1d5d76070", "indicator--ee1d81ff-479a-44af-a949-1d17cd21c936", "indicator--91f584cb-18f1-43d6-908f-14f5063b76eb", "indicator--8f84b9bf-b194-477a-addd-d09300f02007", "indicator--49fe5923-c1ba-47b1-b432-67100412220a", "indicator--f19cc5aa-d157-4460-aae4-d11196f0102a", "indicator--05f96d28-1271-434e-857f-ea4063e1601f", "indicator--e61e6a6d-9fc6-4ae6-97bb-38b3aea89198", "indicator--8844da88-af28-4d3c-9a4d-934a814f7a88", "indicator--06282023-8bf4-475b-996e-c27867fc4e20", "indicator--0caf9938-406f-42a8-9a31-1bffe6f27277", "indicator--9266c96e-5ef3-425f-b94a-50e4df90973b", "indicator--00c3d0b1-d206-4c22-b7ec-262c47669e24", "indicator--30eff0b3-2b48-48b7-aa80-5d3f9c00adcc", "indicator--6ffa936e-1d26-4290-bad7-d968afe5ed53", "indicator--0acf0d6e-6654-4fed-97ca-a19f1f796dff", "indicator--072004cb-d7a4-40e5-a363-477675212a63", "indicator--aad636e0-730c-4a4c-a3cd-bf7166f9fe96", "indicator--f75e3822-80e9-408f-a082-c033188cfdbd", "indicator--86249024-fe37-4308-b142-6a52a416a590", "indicator--c18f2d82-b6e3-4d19-97f1-c6b1294208c5", "indicator--2299ccee-ec7b-43ae-b1d9-492632aec4a4", "indicator--5039a80d-b1ff-41af-92f0-85c7a1c5ffb4", "indicator--9c693540-5c68-4b1c-af6a-de928801d6c9", "indicator--450cb8b1-7f19-430a-935a-04eaecafdaf2", "indicator--c61f479f-1625-40c2-a966-a0f9d3117618", "indicator--cd3566cd-a798-46a1-9c57-6494993abf7f", "indicator--8754a501-2cf5-4498-8ed5-d57ec3eb1621", "indicator--bd6039c1-b51b-4628-8c70-32d23453081b", "indicator--7dcba76c-c48f-4510-8107-ddd51c0072e1", "indicator--d17ccc59-c268-4d34-b412-08ab06816f05", "indicator--22ec49d5-2647-42ee-a4ba-a885a19c8a7a", "indicator--b83a4845-066f-4670-957b-8e3db92cc8ed", "indicator--9fabc0ed-9de5-4769-93f4-27bb3c96dd26", "indicator--057fd850-d376-44e4-8927-bd163cd14de0", "indicator--f3ba70ff-8cb6-4667-a63b-74fa13699beb", "indicator--c948335f-fb47-4de7-88f0-7f2c65e8aaaf", "indicator--dbcf9231-e5a0-4889-aab3-4bdb4129c7c0", "indicator--15ef91a9-24ab-4e51-9b78-f2a22dbc9f14", "indicator--76baae52-4824-4f13-807d-a7b84f764b2f", "indicator--8d363902-0990-4a33-857b-41d68bf27973", "indicator--f8f11241-3ee5-4fe5-831a-259acf590393", "indicator--16ef3b9f-4d2a-4c06-9440-cbfd81f389fe", "indicator--13cf284d-094e-49bb-911c-b877811f5362", "indicator--9152ac4b-5876-4a7c-8122-9e4609f984b4", "indicator--98181e17-a7a8-4b27-8633-4cc39ceda88d", "indicator--1b0379bd-bac6-4bd8-981b-569e605e76fa", "indicator--1be0f4c7-d6eb-454b-8742-e8e1dc250238", "indicator--2e867a4f-0cb3-40f7-af51-6553979e55d7", "indicator--41e31161-25b1-4d63-a00b-2cf2a903af6c", "indicator--a23c020e-82d5-4a09-9459-87bcffdec74b", "indicator--143de3a7-bcf5-4a37-97b4-4031f911c01e", "indicator--bf5d5c4d-adba-4cae-881f-d1f93655e294", "indicator--4c0076da-1691-40f7-80c4-f9a0db441196", "indicator--845ee3fc-12e0-46ff-9cbc-4adfb75d32f2", "indicator--c92d2858-f3af-4636-8a6e-fb54958967a1", "indicator--964cad8c-02fe-4dac-b896-5e3a02790dbe", "indicator--5eb00e2b-087d-4bc5-acbe-182a028d1c74", "indicator--3508d1b6-a6e0-4aa1-8465-2ad1033fce57", "indicator--18906eff-eb10-474c-b623-945df13674aa", "indicator--efe1f29f-555d-42f5-8487-ee31893b07c0", "indicator--e01a9636-3c95-4be0-9e77-ddb7d0d58e26", "indicator--0a6bd87d-faec-4bbc-820e-fb63fb9bf9bb", "indicator--3c3f8509-115b-442f-9a45-17c48a68fbb7", "indicator--eb66a01c-8bef-4aa1-83a5-0177ab4e2cfa", "indicator--3f70423b-d6e9-48a8-b3cc-88a2916e5150", "indicator--916eff1f-ef22-4748-9b99-55e421bc4ef0", "indicator--42993eaa-c647-4e92-a865-96051877f5aa", "indicator--6f137c3f-264b-42a8-aab3-2662e183f109", "indicator--a4c3b2b1-950b-49cd-b19d-ffcde17fba03", "indicator--84fd3389-08ee-40d4-b7fe-ad01238df411", "indicator--dc6c7ec9-07dd-4d78-9b4f-9b2dcddc0c9f", "indicator--6e8ffabb-334f-4e4d-a5f5-f55cc707f4a2", "indicator--3c5cc9d8-f6b8-4128-8385-0a009491641b", "indicator--6feb51b7-64c9-47f1-afdb-61d06cd2af69", "indicator--5cdf12fd-dc37-449d-afe5-3b6245e5c6f0", "indicator--e22abb5b-6467-4969-923e-e9ade2843e4d", "indicator--e76f60fc-58be-44c3-9437-84375af5324c", "indicator--2945ddfc-9b77-4824-800e-0fdca3fdc362", "indicator--8358b0e0-7b8f-40bf-9f6c-e8654048a259", "indicator--f8272618-4beb-45fa-93f2-9404c0d73fda", "indicator--bfd8abe1-2e51-4dc1-825b-cd0179303af5", "indicator--13c4e010-f225-445c-89a2-fdbb54b938f8", "indicator--d1525b29-fa41-4a0b-8baa-b9128e8fc1ad", "indicator--6165c673-6a1e-4e3b-9a34-b290278d6bea", "indicator--14fcbbee-bd7a-472d-bd65-41870c5e19c7", "indicator--b0370f1a-c200-4e26-9b6a-f4e2597822fa", "indicator--58d6a739-8d81-402c-aece-2aa615bab411", "indicator--519a2103-3c93-494e-bbc2-8dd8c5384f58", "indicator--9422a0f3-c36e-40b8-9f39-650ff9f8a0c9", "indicator--932934c1-b568-43a2-810c-545274d92ae7", "indicator--32f56e65-ce1f-47ae-bcd7-cc148f50f982", "indicator--8fc68380-2b58-4293-a7d6-3ff4a6eb51b5", "indicator--2f3139bf-9192-4a8f-b101-920ed34c26a7", "indicator--d4f71390-741f-47ef-8aab-e28e865bfd73", "indicator--9da171ff-859f-47b3-989b-1cf369347d0e", "indicator--6c5888a0-1a9a-433e-bd63-1d16bd78b952", "indicator--2fbc5c79-eadf-44a6-a61a-2d17c07df98d", "indicator--8deaa41d-89af-41c4-9636-27e87013a487", "indicator--f1416fa4-6c27-4fba-835a-3610891ed430", "indicator--b34dd32c-d416-448b-9412-9bbe6faeacd9", "indicator--ab3bf393-ce03-46ee-831d-568b725cd3bb", "indicator--21547935-c922-4bf8-ac02-ae1f199ca852", "indicator--bd9f10ae-9ac4-441c-a867-a82b51a8bee9", "indicator--142a9619-eeeb-4809-a9f7-33f423d4e94e", "indicator--26e6e935-1040-4268-85e4-e2988344fe2f", "indicator--53a48520-4c47-4ddf-89fb-1564a784b108", "indicator--51983fe7-57e6-4916-bf1c-86a424b58b48", "indicator--60e9816e-3608-41e7-9218-9514ccc45a72", "indicator--1b572823-16d4-4f19-b871-71e0e17a9a42", "indicator--93d83dc6-556f-4daa-b390-c8e97da2341a", "indicator--0b9a2f24-8046-4cf2-bf08-8113a78286f8", "indicator--6bab2768-4825-43f0-860e-be743b0a9a90", "indicator--61bb3d96-5201-4590-b1c1-c869134edd21", "indicator--643265f1-463e-49e7-9804-ed1302092f45", "indicator--06411ffd-90b5-4f47-b690-f07aa7feb255", "indicator--628dcdc0-1ca3-4136-8ceb-feb73b0150b5", "indicator--4d19a461-0dd0-4eb2-808b-426841e3e890", "indicator--3439844c-2ceb-40e8-b6b9-ea6c1f5e7a07", "indicator--a653215e-991b-453e-9c9f-f202417a1a53", "indicator--3e56842d-b0bc-4219-a772-7cc5bbe44ebd", "indicator--9a56bc1a-cf7d-4423-b395-25699eddf3b2", "indicator--d09a13d6-1ab7-4a3d-9566-94a8a21417ed", "indicator--8810478f-2af7-40f4-ab58-dd1feb95a432", "indicator--7d957866-3bd5-461c-9ccd-949d031dc801", "indicator--eb79ed27-8ea9-4e9d-ad4c-7ef5ece04dd7", "indicator--d36e7994-7732-4d59-91fd-024aa7fd3b3c", "indicator--7caf856e-b121-47aa-9c61-d8a2ebc0e8a6", "indicator--d2bffcd3-1bfc-474c-85e0-54e29bd6b7d4", "indicator--aeee52ba-8122-48af-a402-fa11f88ddd8c", "indicator--f8751905-509b-4fd5-a032-508650ada49e", "indicator--b99763c1-ea0c-4e3b-9e5d-da7ccb19e22d", "indicator--12ac7de2-56a8-4576-98a8-e9b88f66b941", "indicator--179a5271-d1d4-4e04-860a-8ab5002b0680", "indicator--bf3b6983-d650-474d-be59-b106700b4d23", "indicator--ead3d0e9-a05e-42b5-be69-fb4836c78fc8", "indicator--e11a8085-7f46-4d41-8223-b40afcf0778a", "indicator--73a226ab-1b8e-4646-bd6c-471e8f4d6799", "indicator--e9c0160c-17f1-4d5b-b87f-4ac4ea16eae2", "indicator--c4ae01d0-ac89-4d9d-b291-24bc7988660f", "indicator--7289b4d8-87a1-4e20-8802-a937e9a337e3", "indicator--4148abf7-2e0a-482f-864e-0167c7f031d3", "indicator--1cf16698-383c-4b31-a831-5d7065f51fca", "indicator--9bc58c9e-b96f-41cf-be05-8aa71409abe0", "indicator--74de50e6-2f98-47d4-86c9-cf259a3f78fa", "indicator--a895774e-631b-4b11-a4bd-ba6878a4d02e", "indicator--79b089f5-290a-4a19-aff2-2d7fc8004bab", "indicator--3fd5db9e-201c-4997-935a-a0f69fd68847", "indicator--ffdb153b-b4e5-4d05-84dc-4b303afd613d", "indicator--26db50f8-e740-4e77-a453-ccf2694bec6d", "indicator--bc90d947-e784-425e-ba53-f36c183676dd", "indicator--b553b47f-9a11-4ca5-bb07-ab53373fe7ab", "indicator--6f6c8b5f-d5a3-4af9-bf37-ddaf3f285bda", "indicator--dcb20691-0f1a-4779-94bb-51f136d1ca02", "indicator--218dae48-4da8-4a0f-8bab-104a4fd18439", "indicator--b5299189-227c-4969-a002-27b4cc3be408", "indicator--929ee1dc-709d-4eb5-a456-c0716d9d7516", "indicator--1c0fecf2-a62a-4e97-9be8-b3c5d16dbeb1", "indicator--5e25658d-af2a-4b41-88ce-e77aa5d97e8d", "indicator--e656ea86-2e2f-4bc1-80b2-0b90fa4f9571", "indicator--15cf4ac4-cc44-4961-a099-239ec89db495", "indicator--66501790-0b30-4495-a217-51fd34832e7a", "indicator--d65d69eb-7fe7-4955-b0d8-26c9bb5bb1cf", "indicator--847b6446-c37f-42b7-8af7-8c950a71c3ea", "indicator--c1952c8e-3266-4156-a8b8-0d4405b66e70", "indicator--8e61f4e1-4e48-4fb2-8419-fd06bce41e10", "indicator--66863277-95bd-4290-b9b1-983004bb94eb", "indicator--d95867f4-2af0-4d56-aceb-8e019322ccc5", "indicator--804099c9-a58e-4a38-8968-0afc570131ab", "indicator--97986cef-44b4-47a1-be91-1a63eaed4edf", "indicator--97bfaf58-5541-44d0-aa4e-dec0ac0a9e7c", "indicator--462b64a1-5354-474e-b05c-9a9733794403", "indicator--028bd06b-4c2a-4ef5-8ed5-32d1ded846de", "indicator--ae373bbd-5e03-40e1-8469-940c9ed36ae9", "indicator--69748efd-b21f-4f95-84a5-ad51c670f366", "indicator--b55859fa-801e-47cf-89b6-c0e64b303757", "indicator--c55159dd-f15b-43e6-b1bd-6a321eb25dbb", "indicator--7f5e5f20-4e8e-4a9c-b2e5-2ce1e2c8e137", "indicator--b1c81d3f-8d28-4f2e-8279-d355e8065d6a", "indicator--36c74dc3-27d0-40e2-b100-874c202fbc3a", "indicator--555cc910-1a64-472b-b4e4-b2bb962fac03", "indicator--52fc361c-cc3c-443c-9641-46b6448be03a", "indicator--073f0da0-0bce-4912-b844-7834109ab8d5", "indicator--2cbcdbde-bf66-401a-9502-0eae0907198b", "indicator--9e380efa-fd1a-4343-a545-9656d365ff28", "indicator--b7d5f94a-ebd4-414a-bcbd-2dfcc740c0bc", "indicator--58d6a9e0-5141-4605-b4f6-f569dd4bbe5b", "indicator--d43b0d41-0f27-4afc-9dfb-8347da4042af", "indicator--aa267167-b205-4144-8979-468d178a2885", "indicator--ff01b5a9-fd6d-4d47-b05b-5a9c296fe11e", "indicator--f5c62c42-50f1-447a-8615-8d6822726598", "indicator--e4ea0a24-d23e-43f4-95b3-cf49d89a53bc", "indicator--ce642fe1-6755-43d8-96c2-e5dde88606f3", "indicator--9df0abff-a891-4212-83af-1d7f47eedffc", "indicator--f2ca9655-9508-47dc-9792-9b7e48033993", "indicator--42bb90db-4ae6-44e0-9965-c0be40dc0e46", "indicator--32d2b6df-9f57-4bae-9685-ddf11ee52845", "indicator--2765d715-c312-44c9-a8be-6030b63b92ae", "indicator--00b0751b-07e6-4fbb-879f-dd367ce38625", "indicator--4b209e3c-a8e4-4542-9ce3-2dcc8f7b6a68", "indicator--adc0f115-7d69-4512-a24a-a820b9f7cf4b", "indicator--62098f4c-f58e-4bcf-9ac9-1ec55e4623ef", "indicator--0266a71c-e071-4a71-85a0-50f915102559", "indicator--8fc4fd13-d6a6-443d-942b-64cc2d0b09b7", "indicator--326a8cd1-2b0f-4c2f-b50a-9b070f063f7c", "indicator--aea058b9-d2bf-4fdb-a083-92810fe7586a", "indicator--3fdb7b74-fcb2-4089-bd80-1d51305b9401", "indicator--0c288223-2129-46fb-ac93-34045be75866", "indicator--462edbae-9446-4fa0-a6f9-42f7da9f18e3", "indicator--680234a2-f91c-4232-973f-fa2c0cc2ddb2", "indicator--92a5e741-40ec-49f9-8114-f45fffb351f8", "indicator--ae5b7543-7c18-445b-be3c-fe1edf57fb6e", "indicator--a6e1972c-0e37-49a2-9c6a-9bd34a919ea9", "indicator--29bb30ff-ccf5-41c7-adfd-f98dabd3e6ba", "indicator--afbd9d5a-d196-41d5-8c4b-ca4da623015e", "indicator--64aa680f-7183-4905-aa1d-4a175cdc1303", "indicator--605062c3-5449-43eb-a96a-833f273b2577", "indicator--ed95db8e-b6af-48be-91ea-a13639863b18", "indicator--d2660561-6434-4124-bb97-902de9333da4", "indicator--10677d4a-041d-459a-91a2-8faca61dd3a0", "indicator--a04e9a8c-4913-4dbb-81f2-a268d720d4dc", "indicator--57b2044d-a957-449f-8943-432d3eae1bf3", "indicator--2d1890db-7446-4a74-83ed-435e8f3aa853", "indicator--dd7eebfb-1e7f-473b-8370-6374c1a70fe6", "indicator--80f38931-03b4-4e12-9918-42516010a837", "indicator--db310c18-ff43-4daf-a61b-348fed5a5003", "indicator--69f301dd-c34c-420b-ac19-79e9d971e5ad", "indicator--dabd9034-f1ae-42bb-b82f-9e9d28ba34e2", "indicator--f0d481ad-c86f-4c6f-bce1-c964b5796b7f", "indicator--a68c974f-2997-4f6d-b9b9-5cc1a2a78240", "indicator--3bba8da0-6aa6-464d-8cf2-2457cb9dd3fb", "indicator--69181dc4-f47f-4a02-960f-003a0581dfe3", "indicator--a5dc37df-cd36-4d2d-af2e-f27d3a4074fc", "indicator--8c31e66e-bfff-4eaf-b918-215efa27708a", "indicator--a6ec0f9f-3ebf-457b-964d-3109a694ea56", "indicator--4e961df1-0416-4329-8e57-3d9c8a346837", "indicator--b8686ec6-ad0b-47c6-bc38-c01514db6d9e", "indicator--016736ec-a650-4962-beea-c052fe6cf593", "indicator--49a307bd-246f-4018-a711-00a0dd33a956", "indicator--be91217d-0b38-43f9-9ba6-f475dc658581", "indicator--e67795d8-8a54-44ad-8317-87ca32719003", "indicator--2173e61f-4179-4bd1-a154-a0eee1080cc5", "indicator--e70124d6-659c-4843-8854-787546ebe2d5", "indicator--6e3d6a71-c895-4204-b660-f6233c8395a0", "indicator--9ca502e5-7422-4c45-81c7-3a43aec2bb9e", "indicator--fa7dab69-3221-4ec8-84a2-d7e45113f86f", "indicator--d8346f54-95f2-4f37-93a9-9cc1ac2c607e", "indicator--39bb1392-222c-46b0-a7a2-6d2a97d8c959", "indicator--a79b5a83-1104-410f-ba5d-211568679c0f", "indicator--fa65329a-a239-44cf-99d2-bd19d3e22407", "indicator--2ecc6fe5-1ed0-447d-a33f-87df45b41f55", "indicator--38fe799e-bc67-49c6-8e1e-0e9b729e9f75", "indicator--038ad175-4bb5-4d18-bbc3-e014b81401d4", "indicator--4b7bb92c-e122-4b55-84ef-a28dbbbf4138", "indicator--dc24c164-f48a-4eaf-89b5-e576be71421d", "indicator--dc7298a4-0f99-452c-aaf1-6b4dae3b8219", "indicator--9d72ef01-0f16-4ce4-bd7b-d6ed50e981d0", "indicator--abed8a93-1380-4309-91d3-95635955b764", "indicator--73d6b149-de0b-4ff6-b630-51ba5dc78fff", "indicator--31e6a11a-f0f5-4723-bef0-48318dede447", "indicator--95994874-a741-4dab-97d0-52891d1df538", "indicator--5d94bba2-0d1b-466e-bd83-0da824e5b446", "indicator--94afc281-7e69-486f-8cb8-8a638fca068c", "indicator--2d4e4f80-e454-4156-bdfc-c13f540d4e74", "indicator--f4867f85-d0a3-4c2c-a6ea-2fe7aaca6162", "indicator--c2ee3e4a-de2d-42ea-ac2d-fd401ec28f4b", "indicator--9626e877-22b8-4e45-9f97-11ebf016f565", "indicator--9822ba27-8da2-4e87-a287-a1427fe83b54", "indicator--ddd19339-43a9-417f-b564-d7c20e86f88f", "indicator--e911202b-3ec9-477f-92ac-415de693e397", "indicator--e81b458b-c70e-4692-a1f7-34b9d866589a", "indicator--78b76f7f-800a-49e3-9dc8-d8307606612d", "indicator--657fb6c0-0fe1-4873-b985-7d586f23e78e", "indicator--a80c90cf-3c19-4c7a-b5dd-fa8b48d8523f", "indicator--7e9fb149-1c8d-4c26-9f80-e5adc5bb0a81", "indicator--fc7cab0b-6955-45bd-b769-6f9782480cb4", "indicator--9a339dde-768e-43b6-9e28-aa701f879d15", "indicator--8d0ebfc1-7119-4976-adbe-5933c0f963dc", "indicator--a00a8464-0f34-4317-b6be-6637f55923d8", "indicator--3b965390-81af-48ab-99f7-8f6de22806ac", "indicator--d6cd1e0d-7ab5-44c4-b408-d6af718c5452", "indicator--94719179-3a9d-41db-96b6-ed9802d27b5f", "indicator--70a0b25c-768a-4f93-9ae6-daa84e30c5cd", "indicator--6fefcb49-c010-4d1c-b0ee-d5fec4d33462", "indicator--239b46bd-948b-421f-a78a-746b1c2050a2", "indicator--314eb002-69ce-4921-b507-bd390d032e95", "indicator--936741f2-ede9-4855-b3ce-cfbdb1dd2158", "indicator--c6216820-0329-4d73-a531-1d7d3ef12ac7", "indicator--049d6f4c-9065-452e-9406-5cccd5744f5d", "indicator--15afc060-f728-4e09-8bb9-3a5cb7603dbc", "indicator--85b51f8e-4a0a-46e0-a18b-765f00048fa7", "indicator--4ae15d32-cd06-432a-bc52-be4721b1721a", "indicator--6574763a-50ac-414e-babf-b264eed4ffe5", "indicator--d38243cc-1a7b-4a5a-af30-a5c71d250ec5", "indicator--7815e53b-48a8-4685-bd0d-20bb00293596", "indicator--6680a021-e3b8-476d-8eed-b079421ec77b", "indicator--6601e67b-175b-4094-a8d3-878b0e1eaf7b", "indicator--61965327-68da-4700-90df-0c4d8a87eccd", "indicator--4db68013-dc39-4166-8dce-e9d8c4399d92", "indicator--24e90a30-06c4-4c6f-bec9-5324170ae7e2", "indicator--df429439-5c3a-491d-a337-5086656fd208", "indicator--43394c3b-c6b2-4611-a04e-7010a75d7ef1", "indicator--6aef10b9-292c-447f-9af1-85e8a3c6cf5c", "indicator--17f514f8-c5d7-47df-bfc0-1983f6cc7caf", "indicator--8f4b7f20-839c-4433-915b-f16048a61547", "indicator--a14885f7-e51b-4694-9077-e86b77d75a57", "indicator--b0152e3e-53b5-4aef-8416-1442bd4b4edd", "indicator--3fca908e-e1f3-4355-813f-fb6c4bda48a8", "indicator--b32332c6-93f7-44b9-8483-d57c32dcd0cf", "indicator--1b848f83-a107-4b20-b6bc-35dc10f1c64f", "indicator--47f53af4-b322-40ac-8029-6dd1a6dd16fb", "indicator--4909f29c-c4d3-48d1-a43d-d561ce0979a6", "indicator--771d8745-b734-484a-90be-f169d3c78057", "indicator--a1c435bd-3b4f-4de8-b433-4162afe10aba", "indicator--5d9d3c09-ac56-4d9c-bfd7-2144bdbda578", "indicator--bb2b87d2-e0f9-4270-9234-b8a77f9273de", "indicator--0c505d4d-4170-471d-92a7-f321f2c3d0d5", "indicator--f08ac8cd-4033-42a7-9a21-f17b31c1b52b", "indicator--61f45515-b3e9-4d7d-ad14-9d6d9f5224f5", "indicator--2c18cbe5-d6bd-41fe-a9cb-99712f5cdca1", "indicator--b2c86a02-7d02-4107-9565-fd6d83c90fef", "indicator--cab97672-2808-48a9-be81-8d03d7817c28", "indicator--a0eb166c-acaf-42d7-ad71-c8c217d43459", "indicator--74d38082-93ed-421f-87ef-eaa00a210b7d", "indicator--c058a119-67a6-417e-b3bd-b6d14dacddbd", "indicator--e67b1291-6621-41ea-9d6a-2721cc9a96d2", "indicator--a3de0a23-0683-4b5d-99c6-3cd2d6de0beb", "indicator--dbb6a328-94fe-4d6d-a1de-1d5f9dbaf22d", "indicator--1f975380-78b8-4aa3-9eff-58f1bd24a2fe", "indicator--f10c0b38-2a5b-4445-9faf-71ad5d838551", "indicator--e6b29c4e-f14d-40f3-9bc9-cf4b671114c8", "indicator--e24b70db-92b0-4425-97de-9d7d69f9d1b9", "indicator--297a2faf-1318-4fbc-aac2-e92b5f71b882", "indicator--4c1adbc4-226d-4e58-8ad9-b4bc976ab7eb", "indicator--876091d7-48a2-4d1c-8c74-093da9978487", "indicator--de49b476-004d-4690-adeb-fae3b0288aa8", "indicator--006f15cd-b74f-440f-b23c-54ebf93aa2f3", "indicator--dd4da796-0d61-479b-8356-440cfa20a870", "indicator--ae84f752-b6bc-407b-8bfc-b7ecfb23fafc", "indicator--66310356-aa67-425b-ae7a-f54cf559c7c3", "relationship--9c360099-0b06-44b3-be3d-e79550e2bcf4", "indicator--500ffd8a-0a31-4b0a-b2a7-1179368e93a6", "indicator--7a1593db-fe48-4b16-9818-347a3acb7c8c", "indicator--40825302-ed98-41c6-88b7-b2ea0426d4ec", "indicator--7c43c740-17e9-446a-86cf-e2e4f2a6964e", "indicator--2847ca2c-db6c-492b-8dbb-6780e162cfce", "indicator--ed587856-6c17-4763-9df6-39f20808b374", "indicator--8c25083b-c907-4176-bd0a-9efb658de218", "indicator--3cd29274-627c-4ad6-accc-50a8109e3c24", "indicator--7c0d99ee-253e-40fa-ab15-08ae2435c54e", "indicator--f65f9dbe-f752-499c-a669-f686a2ecda7a", "indicator--281743be-04d8-4f40-aea7-78ce7ca54318", "indicator--b7c579be-e0d6-4e2c-99c6-249194a13c0a", "indicator--731babd0-af90-43f2-8dcb-97d5a6a0bb0e", "indicator--b682e2d0-0c12-4591-a379-37bf3ff43fce", "indicator--7b989f41-049c-4ed2-bf59-e1e55b10db67", "indicator--ca16a94a-d3a2-4c4b-9dbb-679652a522b7", "indicator--b304c410-3e4d-4e68-9d62-3f518cf6c0a9", "indicator--b7264108-ec75-46af-8ca7-7c0e73f0f8fe", "indicator--5a7ddb2b-e7b6-4c6d-8e0e-ad472982a198", "indicator--2977731a-5a6c-4996-a1dc-50f1adb73abf", "indicator--dc83578b-d812-4e96-ab4f-d4b8cc19cfea", "indicator--c14e36c3-e611-4731-a702-af8a9b23f13f", "indicator--931472cd-440b-409c-a880-814adefb9247", "indicator--57bbad93-db08-4042-b3b5-0aabc983f227", "indicator--d5ba3b21-1679-4b2f-b467-ae05febc0591", "indicator--9d959b7f-d2d7-4c88-904d-1842b1b2749d", "indicator--c73f3b4b-4b64-4452-a20a-c45e0ac9dd87", "indicator--8991ffec-7c2d-4bb2-b26c-897941d25e46", "indicator--7080e6e1-1d9b-446b-9eaa-21e790f91e3f", "indicator--6795435a-7c8d-4f84-b85a-bd8c66b0585c", "indicator--446d09d4-8a50-47bd-8b5e-241a57bed5d3", "indicator--62b7d5c7-e6db-411b-af23-4e24f51031d0", "indicator--1b693992-7e05-4b47-81bb-d4a0c8426146", "indicator--6cf33598-3d3e-413c-ba27-39d7e5a684e3", "indicator--6d1ebad0-a893-4c70-b704-8a809952a13d", "indicator--cbe62ae9-9c34-41d8-a330-d208bb8e1e1e", "indicator--5e219731-88b8-430f-9181-f34b10c1afc6", "indicator--9e14ca19-2081-41be-847f-039f74d10bb7", "indicator--457b376e-f813-47da-a373-83274312c9b2", "indicator--51fc8e6d-0c8c-41e5-be28-1a501c9b2824", "indicator--36b07b8a-30ee-4553-ab63-00ef8dad0c24", "indicator--c77a49dc-c143-41a1-8d09-2a0e725e9556", "indicator--32b3abc6-8776-4f39-a1b0-ade7eaaedd30", "indicator--edc7cb00-084e-48b9-834b-a75392811864", "indicator--63fd1c7c-9367-4445-8ab2-d7d88999fffa", "indicator--54ee7acb-a239-41ef-87d4-24de7ba3c0a7", "indicator--391a92f3-20dc-4abf-b739-fd5391beb005", "indicator--ebee1a7e-6486-42c9-bf1d-9a3f63f93942", "indicator--0ed486e4-4bed-41f0-9734-9c0241b8411e", "indicator--eab0fd3b-2e14-434b-87ac-d655cc128113", "indicator--09cbc706-2cba-43c1-9b9a-fe2db74f1c47", "indicator--92ad5fc9-30db-4706-977f-665ace0fe7f8", "indicator--70c64525-f594-49e3-b9ba-bf01381a0ab8", "indicator--99b43fc7-d6e5-463b-bf73-2e9c724c5698", "indicator--23245b08-e4d9-4236-acfb-599ece491bbb", "indicator--dc5c87f0-da18-4056-b141-0b82a30656aa", "indicator--16e13496-2c58-45e2-a61f-c0988fc6edd4", "indicator--53f95f11-a409-4a4c-acca-5844368ee5fb", "indicator--5bb440f3-4ac5-45ff-a474-fa6f03925c6d", "indicator--cb0184c3-c18e-4412-b55b-777956d66793", "indicator--228364d0-0bda-45ca-9ebc-3af02c734a4b", "indicator--eff52cb8-3d9e-411a-9a44-24cad4fa2777", "indicator--a7b3550b-6cab-48c1-aaf5-216477f3b4ca", "indicator--0aa2962f-396f-4a52-9671-13690b51bc73", "indicator--26cd80b4-5fbf-4e68-bae6-d3b66b45be68", "indicator--9e67289d-a88f-4f82-a988-715341872929", "indicator--d2f28963-504e-4a48-954b-ea941ae9ba29", "indicator--2c8dc0b4-82cf-4bed-8dd2-f6fdf8f61f84", "indicator--0234db90-75ec-4015-8a92-72f249af9ad3", "indicator--dc1edc9f-d839-4c72-813f-30fccb578386", "indicator--14078246-209a-4262-af9d-3b916390823e", "indicator--303ebca5-4a0c-49ed-a0fb-65549439c2b4", "indicator--91ead1d8-f2b9-411a-834b-bff21ca3ad37", "indicator--071fe026-3699-4644-8184-b136f601e580", "indicator--bf10f6fa-9207-4d30-b566-42a1f2240b02", "indicator--bf1d744d-04fb-480a-8199-a1df0184f367", "indicator--e3bc11c0-34d4-4dae-a8fd-2a69f7355577", "indicator--4c945601-5423-469b-b9e1-a13d3c4c9607", "indicator--b89ddbe9-128f-470a-ae75-459270e6d473", "indicator--50f7ea95-ebd0-4961-8aed-937657e49c0b", "indicator--4181c266-2944-46f6-a7aa-8b98aab6f113", "indicator--875667c2-0e4d-4936-b6e3-d143f6b71c9d", "indicator--07652ffa-a20a-42f4-a079-f9bfb634e3e3", "indicator--aa31cff6-2a95-4afd-8c94-89cc4101f853", "indicator--daeae8d2-a3ab-445f-92bf-3ba9fdc192f8", "indicator--ad436c4a-aa77-46e6-9885-f2676e4e35a5", "indicator--ee86f398-e889-4727-91e3-b44040faa912", "indicator--f31bdcfe-1b6f-47c8-964d-6b465dd6f21e", "indicator--484b5253-f93e-4a35-a785-c6792c9507e7", "indicator--a988aa12-3166-48db-9594-31acb0ff1325", "indicator--e53f84de-aed1-4939-af9c-0071cc83750a", "indicator--ad49ba5f-ec6c-47c1-80c7-420978c9e6d5", "indicator--1e54cc27-6f14-4c9e-96d1-654730ef79c9", "indicator--9aba29a3-392e-4e47-944c-4ce1b59d6bda", "indicator--9f8931c5-092d-4c49-b84c-7e594393ac6d", "indicator--1ec35ad9-eb11-49c0-bf23-0365c0ea61f8", "indicator--6a9b3ee5-a1dd-48c0-92da-00fb42ac443e", "indicator--43b44691-0105-4592-a4d0-d1f4df0d826a", "indicator--cfb89830-8c8c-42a2-879e-a2c12f797fdd", "indicator--49622423-b2e4-4554-8079-f66fa585bd36", "indicator--a440d0aa-0b09-48a4-896d-26e1e1918a45", "indicator--4bcc249c-f1d2-41ea-a3fe-4a847ce99cd7", "indicator--bc25b48e-ba10-4dbf-bd2d-2e5e06cc63ca", "indicator--29303a9b-c6bd-4bcf-8e1f-fb1da5e94477", "indicator--9d7038b8-2d3b-41c5-ba5c-029a98f786d8", "indicator--946fe0fa-a356-4eab-8d4e-e1c6fdf4ae31", "indicator--accc1579-b175-475e-bf24-a60574b86600", "indicator--702283dc-98bb-42a8-91fa-7193b27d855d", "indicator--7f08513d-7662-4988-a089-ca42f90811e0", "indicator--96416f68-f55d-4ffb-9b53-191ea107f23d", "indicator--d686f394-6f90-4f71-afd5-f07db7d7dd18", "indicator--7a8d7050-8acc-4ab6-8729-8a46d99aa385", "indicator--536f0df5-1cea-4986-9d5d-4db0f60d9c8f", "indicator--b06cea25-d3a8-4d00-9f63-943eab4ab46d", "indicator--5bb2b9e0-1814-4c30-8a2e-06f5c4455193", "indicator--e404976f-e669-4650-b4c9-e5630b828006", "indicator--fbc3782c-9ec0-462c-83e2-35ed6e303733", "indicator--7211882e-651a-45cc-b066-f566df29c9f3", "indicator--5813dcde-87f7-455a-9516-520a6ce66917", "indicator--95c82085-dc53-464a-b983-93f5af924902", "indicator--1a8615ed-3a30-44c8-b412-4bdc413ec586", "indicator--86d4801d-e1d4-4b1d-aaf2-2c4a307dcdda", "indicator--854758f9-641b-4ce8-aa4f-10a1dbb7b9e2", "indicator--40815123-a6b2-4de3-b53a-f37aa8b43a2c", "indicator--ff48b2cd-593f-4887-84a3-b8cfb60b626f", "indicator--e6ed21f5-0a9a-4b8c-8cc4-2a7437379a20", "indicator--d85f2fcf-85be-43a7-ae36-ccc9d49237a0", "indicator--4634a8de-c8b3-4614-8ca2-52ade4906e81", "indicator--f22cb5eb-444a-4f96-92a6-0057ddba0f89", "indicator--75a5d02c-555f-4e19-a34f-164e9da47515", "indicator--4e60d9f1-23aa-471d-a1db-9ead7b886a98", "indicator--42ba5990-4272-49b0-a60c-f2013716cdfc", "indicator--b9667c81-2640-4737-897b-790e089f9490", "indicator--50f16f6e-1103-43ff-b9e6-edbc119c5065", "indicator--c5be8005-3e5c-4947-944a-ba08d880d3cb", "indicator--a83caf4a-d0fa-4bce-b960-b72a7c84ac11", "indicator--682df294-5382-4b9e-a091-a09b04a9972f", "indicator--161e5f87-227c-48e6-ae81-0cc535e74fef", "indicator--cf18b02a-34e5-4033-83b3-0cb10544c5ed", "indicator--4c2f28cd-3b0c-4bd9-8d53-fd6627d38bd5", "indicator--15841ffd-f7d1-4bc2-ba4f-84110e595db9", "indicator--043bef64-5187-483f-9d47-e8bb68347349", "indicator--7c0bee70-b2da-4018-bd4f-8c362d500e04", "indicator--50088535-43b1-4d9b-81a6-8e25962d582d", "indicator--ea4bc88c-ecea-4f47-ade3-e8fdcc035e48", "indicator--ec48c2bb-4add-4d6b-8221-09e1a27f4baa", "indicator--7caaca9b-3bcb-45d4-885a-2376880e61be", "indicator--760d8e0a-7249-4655-aaf4-0dda6c4748dd", "indicator--fd882b28-dc57-4b3d-93eb-8cd19cf7afed", "indicator--c8f537f7-a687-4f4a-81ed-af46b53c68fb", "indicator--2136d757-1b98-4c26-b40c-699279181092", "indicator--5ddc4d86-65a7-4545-8823-d52860da6fab", "indicator--5d581f34-dfa3-4d68-8b0b-653aa405dfdb", "indicator--e185bad6-b587-4cd6-aa5a-000daa71d1bd", "indicator--e2292530-02c4-455f-9896-a65789fc5cd2", "indicator--0c725d22-7248-41f2-9ac6-d4c70cd15d41", "indicator--a865db93-2125-4fee-9629-5871d857a8a5", "indicator--3b574ba1-fb9e-4b9b-a09e-32689be58271", "indicator--dd021409-f158-414d-beec-65cc816d2620", "indicator--6b356d5f-2af4-4a16-b16a-e91ecc23ac21", "indicator--5e7a7a72-459c-42fd-9816-a9c36d0c471b", "indicator--f9a87fca-0763-4e7b-b382-2b585b9aadf8", "indicator--58275377-2e02-4e90-be49-968ac3de71fd", "indicator--6fa85acc-2a8b-4785-b415-33a9be903237", "indicator--c45955d6-bf78-4f6d-8f6a-04f2e49b1b93", "indicator--c5962a10-3609-45ce-a370-45b5cb5f7a58", "indicator--1aa32c8a-a9e3-4e13-ad94-3287be3fc661", "indicator--2df88089-64ad-4b58-9b26-2dcf6d155a4a", "indicator--ac56bb99-f72e-44f9-aea1-c399b8cc7d24", "indicator--f90c47a3-f9da-4b61-a05d-b62bc31a1a1a", "indicator--57553a12-c295-473e-9fd7-9d3e9b73355f", "indicator--5fe13371-955b-440a-b402-01108864375e", "indicator--a2648373-6ab0-43c1-bb27-8e8e1a7f9e62", "indicator--6eecfb69-ca24-4281-8cc0-6f77382c7b7a", "indicator--ce63c82c-392b-4bc0-9175-c56298be7954", "indicator--59a7a587-9341-494f-95d9-e2c0ad3114ba", "indicator--03dcc6c6-fec8-4f25-a93b-ed292df6856b", "indicator--e9171bae-7ca6-4d51-a3ec-eee2d18c7d26", "indicator--f4c881f2-12c2-467c-96b5-d35a480018bf", "indicator--b7e03177-412b-4863-8efd-44f1bd710984", "indicator--3370f805-824c-456f-9699-1ab36a8b0994", "indicator--33359ded-6a47-4ca2-982a-ae7c9752e80f", "indicator--4217216e-02af-411b-8be0-caf4bf2f3ef2", "indicator--2e100124-ac1e-419e-af6c-f88f514494f7", "indicator--0a5ede58-3743-43f1-bd01-ec80ee92fa20", "indicator--1b8249e7-70af-4f79-8213-c6108c05dcda", "indicator--a8b09c76-9454-4c3a-aaa5-332e113061d8", "indicator--e1671b6b-80a9-40c8-a425-d0f4e6f9707d", "indicator--9ecbd196-1ad1-45d7-8c81-23f3bfb0ca37", "indicator--52c34f36-5403-4b2b-9b19-87e375f35305", "indicator--ebe5036d-33bc-4bb6-9244-612f5468497f", "indicator--e45e1a85-5805-4fe0-8283-6f9167a60183", "indicator--c782ea3d-1ccd-4e4e-b1e9-14c6a0dbea41", "indicator--b3d08e2f-3957-407a-a55e-da5f58642ee2", "indicator--464fde81-c759-4267-bad1-2e90536c309f", "indicator--d5560d5f-8d8b-4b89-9f19-6c228fed9ad4", "indicator--c57b3141-e488-4997-871a-e2807f490a19", "indicator--78750089-b41b-4d6f-91c7-209347d93e30", "indicator--03a88021-dd2e-4678-bf9b-9bccd61a4ce9", "indicator--969210cc-3931-4b96-9dc0-621916e9303d", "indicator--e4742baa-e397-4682-b854-a87be12a3f4f", "indicator--b2aea619-ba07-4621-b887-069739de6f65", "indicator--61368bba-11a0-4658-8b8c-c91d2e0b957e", "indicator--a20f4063-a862-4310-9146-cf97638f79a9", "indicator--c4633387-e398-4463-985c-5a1d1ead2b99", "indicator--4054e152-5133-42a1-85a0-6097fd9b7ada", "indicator--33edd033-67e8-4dbb-a13e-02b6cea1af7e", "indicator--1fa1403d-3960-4688-bc55-aaba3b6f7b3e", "indicator--aec0b39c-1868-4ae8-887b-8578c5d8f2a2", "indicator--a3f296ea-5b61-4308-916c-ed90c2580bf8", "indicator--823bf231-c2cf-49f2-9e3d-0fe32d6bef3b", "indicator--3f1a4562-fa68-442f-b1db-533bda609466", "indicator--fb4fbb03-4335-42b8-b456-a9d61cd93e91", "indicator--cee2fd91-41ce-4000-bd26-37751a19510a", "indicator--99218657-efe5-4732-97f6-1c4a7287c2ce", "indicator--6de8ec05-71bb-40c0-a5c3-67609b05da8b", "indicator--7a5c4f2b-cb2c-4fc3-a8a8-3c082e58c989", "indicator--777b1beb-a144-43d1-9d0e-85cb951464d3", "indicator--04a995f6-c079-465b-87ed-75aabcbe835e", "indicator--1914ee02-e340-40cb-bff0-c1c7b6081618", "indicator--63e6f844-6e03-4b3d-aac8-ac593499d47a", "indicator--70c27af6-42dc-4363-b905-7e03c115f470", "indicator--e6132bfd-08af-4df0-b1d4-58a8bd37f070", "indicator--ff089d55-56b4-4eef-85a4-ff9d2f8473ac", "indicator--8c0869da-7283-4857-9f08-607cefa1899d", "indicator--ee1e0b79-c140-4434-b2b7-b0f74b5a7b30", "indicator--4dbe9391-b85b-4bc7-b0d5-7e78e80bf13e", "indicator--22bd506f-be6d-4d15-989e-e9d7a9e5e56b", "indicator--9934a5c8-17a4-484d-9c84-3708eceaa83f", "indicator--84cb59d0-f2ad-426f-a84a-3c1efdc6a1b9", "indicator--de6bdbd5-3568-4f1c-b6e1-c6981bcdb96d", "indicator--458f38ab-6df2-4ce9-a940-81e19b1f7667", "indicator--f04d7d0d-e4c8-4200-8475-5a0f4a35dd81", "indicator--eb96d072-13df-4ad6-9e6d-73a3a82cbccd", "indicator--91562078-1519-4848-978f-947757a17ab0", "indicator--c25b1603-ac35-443f-bdd9-9bf7fdbb201c", "indicator--08dd0855-0d97-4917-8fc0-12d03d80756d", "indicator--54e58968-ef2c-452d-97f3-69bf0f346fc4", "indicator--a0a5fb6f-ae00-464e-b508-976909d6d283", "indicator--bf180c86-8fef-45bd-94a9-79c1c49d1225", "indicator--ab22e8ac-983c-441a-8b2e-c1ce87f42f04", "indicator--dfea7847-09f2-4ebb-8f75-cb4370d65a4e", "indicator--214ae30b-1bbb-460e-809e-88fb747ab3b4", "indicator--dc270dc3-d937-4e57-84f5-aa3c415c0cc5", "indicator--c5024445-f14a-4bce-a11c-69c2da39169a", "indicator--02fe4bd0-50a6-4504-aa43-b1917f187825", "indicator--23ff1e8f-1c7d-4a62-bd31-f605bb759f9c", "indicator--740db7c4-3ac1-4ac6-8be1-65a1bff0cf5b", "indicator--fbeeefa0-18d9-4540-ab0b-c94154b412f7", "indicator--31fd3699-6c34-4e11-a2c0-365b77a56be1", "indicator--6d8a4969-0646-4be8-8394-82df2eae2ec6", "indicator--5871a5d0-45a6-4597-81de-c4daec7f7b86", "indicator--ae2bfd64-2236-4ae4-aa8f-a6bb7d319504", "indicator--aea776d3-02e7-401a-b591-18737d0a8be2", "indicator--a2e1bc2f-e30c-417b-8d63-22c0d7b39b40", "indicator--0ee53907-fd1c-488b-aeef-6416ab6d0668", "indicator--d9e9a19e-ddd3-4073-b83e-45c222782dbd", "indicator--daaf7589-92e7-4b31-803a-9c8a333cef6f", "indicator--4bf129a0-5b7c-4148-b7ba-43afb4db006b", "indicator--2c3f42f2-8a50-47b8-818c-61d4c79e790c", "indicator--a80e5397-9d0f-4e66-a022-5c952764eada", "indicator--4986e800-4174-4fa8-9667-cdc768636554", "indicator--0ce716f0-6bc9-47f6-8123-72917d5a0f1d", "indicator--12ac5ebf-391f-4038-9995-16868279087d", "indicator--11e9c957-e200-43b2-922f-2d04d46a9a82", "indicator--6e6bb482-de90-4088-88eb-b0a1c62c9ef0", "indicator--74a5e9fb-552c-4e98-838a-120aec982941", "indicator--419a1466-dccd-47d3-86b3-0c2f34c27a04", "indicator--6d9c990a-d6cf-47b9-87e3-4488c66b1140", "indicator--4714f288-7536-483c-b265-6b35128f8888", "indicator--e44c9312-b0ee-492d-bd38-099bba9b0c46", "indicator--929e2050-65b2-4ae3-b5ff-6438ed4f8c3c", "indicator--68936171-62aa-4c86-8ca5-146771b0fee1", "indicator--7d468d77-cdb5-4a41-9660-d5accf922a1e", "indicator--2494e97b-6a47-4eef-86ca-3d3d9884946d", "indicator--f9d79163-6c3b-43e1-900e-120da55b0ad7", "indicator--02110022-00bc-4a89-b9b9-08452e86b607", "indicator--d8e2b551-89dd-4932-95a1-627deeabc144", "indicator--5d5e9a01-f6f6-45bb-ac98-d8b680138d3e", "indicator--c383728e-d126-41af-908d-65adda432773", "indicator--0896db27-eda9-4cf8-8ca3-ef88a960d20d", "indicator--9f1280ad-333a-428f-904e-e226cbf6c0f8", "indicator--d171f393-721f-48cc-87ff-a33a0feb27d6", "indicator--356a25a6-4c9b-4756-b1cf-eff6b30a673a", "indicator--14bdbe8f-7b39-4a0c-acc3-6f8e7001aff3", "indicator--3462b25d-b9ea-46e5-a90e-cf209ed24a67", "indicator--95a216fa-8188-4198-8a29-10449f561acd", "indicator--9600ed88-e09d-4a7a-84f1-b3ce88ad6f6d", "indicator--e759a630-c74d-42d6-8101-0614ecfbe8b5", "indicator--d35498f1-99a7-46cf-9991-48c7ddedcf72", "indicator--573d604f-1817-44c6-9cce-27e87add6b09", "indicator--2b0756c6-aa01-483f-8219-1651e490e3de", "indicator--fe8204eb-5400-4f50-8dd6-99eb88d0970e", "indicator--0a9853ca-5c00-41e8-ac24-a4b68858e946", "indicator--60d83619-a0a6-4888-9387-6eeb24c90521", "indicator--d4504a1a-a602-42d6-bf17-72d185746b79", "indicator--172c52fd-5361-4e74-8e85-8ea95412509e", "indicator--baa2f1d5-32af-4750-9b5d-0a0a6520ae4a", "indicator--7b8344b1-36b8-42d4-91dd-bf31ce7b413a", "indicator--938f3751-18bc-46f4-b33e-604bdb4cb8d6", "indicator--02d84221-bdb6-44f6-bf3e-a1b557cac76e", "indicator--e1f812a3-6f8d-4408-9f37-e99f67f7929f", "indicator--d4356aeb-16a6-48dc-aa42-dae4a6e298e8", "indicator--702befb0-b66a-40ea-a1e6-9d2ce53ce9b4", "indicator--7b09fc9d-93aa-43b6-a108-1006349c67be", "indicator--17c3cee3-133f-49ee-8b2e-b6ce3fa0ed82", "indicator--a636be24-1fba-44ba-b71e-3ab60fbdb791", "indicator--2536f212-d6f2-4937-af90-e0d9301e84dc", "indicator--349cf5b8-23bf-4812-b556-fc3a507c66fd", "indicator--14ce4b1e-2620-4b86-bb40-e9093f18dc43", "indicator--c09f9e15-6528-47db-adb9-ec829633373f", "indicator--3835f27a-4ea2-4c5c-ad5a-11acd09073b1", "indicator--782a95ef-c193-4ae9-b9b4-0d6299b8bd08", "indicator--bea8ada3-d355-4efe-8afb-55ab7543985d", "indicator--517c7ee3-4d66-4b57-9542-128a98ef059f", "indicator--13491dc4-6163-42b8-86b1-644fb51c5e17", "indicator--61edc5a0-ecd1-48e9-9ad2-769079e87eb9", "indicator--282eca95-11cc-432f-aa7d-1ff5a75509e6", "indicator--9600f499-005e-4e91-8dcf-ba8c08892342", "indicator--234d4bc2-149f-4cd5-be31-10b258e15569", "indicator--1b4c4a28-da79-4783-93c1-14a87e8326b8", "indicator--8e3c077b-1299-4c64-8908-f14ba1768d1f", "indicator--188b4b97-e57f-4fa6-928c-0fa3c4c3ea12", "indicator--ea8bed24-3e3c-4908-8ae7-831f3422dbfa", "indicator--4a7e0dbc-106c-4e28-9344-162a8af4cf11", "indicator--8c0ddc00-8694-4605-85de-58c6a9e39ae7", "indicator--452bed57-5480-4029-8458-916633d58a29", "indicator--8ae07479-69c5-4e2b-af8f-9da4c9f4bf49", "indicator--6eb52490-a932-4c09-9a01-0c8c2c6e8c0a", "indicator--1984a3a1-3758-4754-ac40-afab2e48adf4", "indicator--798555fd-b0f9-4f59-96c7-87d56a0a0def", "indicator--8a1b8d12-3e0b-4950-adb8-41ea7e5b5a19", "indicator--fce3060e-a7fa-492a-b638-76d2071cc6c7", "indicator--7701b326-86d0-4ce2-ab87-23f1f30c5971", "indicator--d2ab690d-9c7b-43ce-959c-b48a0430bfaf", "indicator--7d8f16f1-0da1-424a-875b-5e70f6a4dc13", "indicator--ab5e414d-c509-4279-b819-42a2f4116db4", "indicator--ebf0029e-e1e3-4a38-91cd-7840e2f54999", "indicator--5ce2445d-4ac2-4d94-874d-89e70b2ec1e7", "indicator--2773471d-dfa2-42ea-97a5-5b033b641614", "indicator--38912897-d516-4754-a86e-63a87f6a6558", "indicator--04f7ba53-bd49-4bf9-83fc-540094f79625", "indicator--bca1b7bb-ce20-4e2c-9288-f7fce878a92e", "indicator--46336025-fa39-41e0-b91e-3cbdebb48556", "indicator--851f9c18-bcb7-48f1-ad56-a1a1dafc3e49", "indicator--2af13bb1-af86-4adf-aa29-39c1a511c421", "indicator--8f94b917-3c43-47e8-948d-ac4faa273125", "indicator--57a2001a-39e4-4888-bec9-4360ff41c74b", "indicator--b1174cc3-66cd-479e-953a-8e33c5550f11", "indicator--332e2ab6-32d7-4f22-8b77-ab09987a9add", "indicator--161c2756-ff62-436d-b288-d631bdd9c0fc", "indicator--c3c4397f-6892-4f3b-a528-4a66d1474827", "indicator--4f3f8f73-2715-44b8-8b4b-92d5ca18616f", "indicator--737467b5-5913-49d4-ad2f-d16fa0c197fa", "indicator--98a793d3-b577-4917-af3b-fc055a8a8919", "indicator--2890adbd-53d3-470d-bbf9-b05f5ecad59f", "indicator--944c1b80-bd33-4f07-85b0-288b87122683", "indicator--25824553-f57d-41fb-8f91-439d537e1b0c", "relationship--d028b6bf-6c06-465d-8aae-93742588bca7", "relationship--a9e6e9d2-6c9b-43a2-a04a-db7de61dde38", "indicator--f3f6dca0-6076-4fcb-9c15-a54032ecb7a5", "indicator--ff900aea-c6b7-4ba9-8e20-6e1ab0c3d5ba", "indicator--97751d45-a3cd-4ec1-b8a9-bf7082eb7bec", "indicator--8c0f5a3d-0942-4098-938b-68aacd40b4f0", "indicator--3ec66c88-0206-4b88-acac-b2e64bbd461a", "indicator--2ccca880-cdc2-4b19-bd81-b6456e26df46", "indicator--1766bc3c-8426-4fb5-82df-0d2f4fe244d9", "indicator--204ae90d-3f7d-431a-9a3e-77cd003ba56d", "indicator--9d7cbd16-fd90-4e0a-820d-1b2b65c12ed6", "indicator--9b7eab11-bff2-4be5-a18f-bdb06f144922", "indicator--16296f26-d3ac-4605-9658-f92467a14fc0", "indicator--a1bea3f1-e2b3-4a64-ba34-71a8eabec289", "indicator--c2f91d7d-0360-49ef-bb79-1241e4f06a1e", "indicator--0b7dfb3f-cf67-4a07-b9ef-81686d6a80f9", "indicator--942fdc24-7aac-412c-872c-7ec5c646f6b0", "indicator--7264e838-8529-4933-a465-5488ddffbce4", "indicator--3daa752a-3e84-4f1d-8ae8-5b3898d83a3d", "indicator--8ae0814e-3842-4eec-85dc-f8ac319d8e3d", "indicator--4da3391a-66b8-486f-a9f6-26e668c317c1", "indicator--8009d261-0da2-4f20-a49f-2746f0bf8afd", "indicator--fe450789-5456-48ff-bdfe-ba947b7bdbd1", "indicator--d0a8f194-064c-4eca-930a-d9f5ca6a02bf", "indicator--ba0609ee-e4d0-46f4-b69f-14e47fde6a51", "indicator--70c78e73-2d8e-4367-945a-c2d90860d00c", "indicator--b579d3fe-d3bf-462d-ba78-165067c1ce73", "indicator--f548afe2-928c-45a5-bc46-074eb485bd31", "indicator--64aad384-606a-4ec7-979c-ef3553d32399", "indicator--58989815-0bf3-410e-b571-cacbc5f5503b", "indicator--cb72f06d-7718-4d92-8b89-851017d97059", "indicator--f253dccb-a723-4d6e-bf70-96853fd99262", "indicator--09bc60a2-6213-456a-80ef-a1eb1d15d6f0", "indicator--aaf8f77b-060f-4e15-b1ed-f08bcc7f3a16", "indicator--8d719a70-8455-4cad-a558-b539c85a309d", "indicator--c07a7e18-6885-472e-99d9-2830e97e6fa9", "indicator--d5c83d93-85b4-4dd7-a5a4-7f352d81e6c8", "indicator--615ac49f-abdb-40bb-9859-35269be587bd", "indicator--388bf83f-0e34-42b8-b78d-5e18f92e7c46", "indicator--383382a2-82d1-4675-a493-cb0b4b3c857c", "indicator--47ef8837-1cbf-47e9-8b94-12e6c87fb63e", "indicator--80aaf4d8-59fd-40d0-ac1d-9e5ea3529e0f", "indicator--cb31f176-1f94-4e56-9346-99877df29830", "indicator--e89948f9-a102-4bb0-a85e-ae62d7239d7d", "indicator--f0f1929b-67ec-4b22-8259-20ab80dae0e1", "indicator--674e0efd-1c06-4962-a225-e8afe8d9c3d1", "indicator--7610b8e2-71cb-4a70-b5c8-3c25e37516e2", "indicator--d98e1f87-83f7-4277-b614-e3e3eb7e3122", "indicator--ba9a1a21-1803-49ba-8bb7-3b92f266fc69", "indicator--6fc69a7a-a977-4a3b-a07d-23869a409dc0", "indicator--dbf559f5-ebf1-4d9c-a257-1f06bb7e1506", "indicator--79cfc994-647f-42cd-91ff-77ac062535bd", "indicator--2c936b20-ec28-43b9-bf83-8929b1255811", "indicator--54e18e00-e675-4462-80dc-d059994183c6", "indicator--00d64604-8757-49a4-b29a-e36efdf88f74", "indicator--2cf83e35-f621-4c00-819a-963efdc3b6ec", "indicator--ef85829d-d430-4ca8-a8c8-e28b2d3ce139", "indicator--42e9951f-941f-4179-9c0c-97bf60c5fa71", "indicator--bb70177a-ff22-4cd3-9f42-8080c9cfde00", "indicator--c1155f6b-8d16-4be1-9384-dcae65e90ccf", "indicator--0a9da836-e729-4cdf-9f85-8ea79aa980a9", "indicator--dadcc0b4-5dcf-4aaf-a40c-b61e1b78f5f4", "indicator--5dcff580-62c4-4938-8959-db2c3e67d289", "indicator--128790a0-494e-4977-b2df-c989ca00c1f5", "indicator--934e1fb1-e68f-4d8d-ac9a-72ff853d68df", "indicator--9073d809-ff94-41e3-84a8-8436a91332a7", "indicator--669cd4e3-1459-4e4d-9f7d-ccca07754ad7", "indicator--1f661f92-6b1e-4db7-b572-f8ffb00ac596", "indicator--e510c0ad-7344-42d1-933d-67dc75469b20", "indicator--de783b7e-932a-41bf-a9db-25a8ea0dd15b", "indicator--d08ac7aa-67b6-4a60-b245-fda9feecb685", "indicator--8e2260bc-2df6-443d-a972-f3495cfc9550", "indicator--ff474465-76c7-4674-8f8c-3734f41bcad8", "indicator--3c72c3f0-b854-4824-bf43-1a0f438635de", "indicator--e64ee75d-e5b5-429b-b5ba-4b8e5e1e45ad", "indicator--1880896c-d200-4108-90a8-99d74332f6d3", "indicator--b2203b6c-b96e-456b-a14b-f99ff5338723", "indicator--f8aa5c95-390d-4dc3-98f4-214d264df88b", "indicator--3230336c-d0fc-41cb-ba8e-be2bed980f12", "indicator--f86b2562-d9b1-4819-8633-9792446b0680", "indicator--a78e106e-9688-4198-a627-061f91cb2704", "indicator--98d53ad4-ae53-4cba-9446-9a895bf2ec80", "indicator--9737fa0b-f254-43ef-b840-13eafdf833d5", "indicator--db1b2ae0-e07b-4bf5-a326-3097af17d014", "indicator--80b4b7f7-83a3-43c6-892c-d8f4e8877622", "indicator--34718ecf-5f4c-4b6e-ba53-305549924803", "indicator--475c2851-461f-4481-9d4a-d5542762dc1b", "indicator--110a2f44-6724-406b-b8dc-75143e1ef725", "indicator--f76da35d-ec2b-46d8-a0c5-15344429d512", "indicator--478eb47a-b817-4dbc-81cd-aa60a5f4711c", "indicator--d99624d4-15df-4a9e-9f1e-6c3ea4fc1c53", "indicator--f27365a4-edbb-4867-8eb7-0b0d140f83b4", "indicator--efa3a4c4-766b-4784-8203-6b7bd78ae844", "indicator--6d6d97c1-e4d5-49a4-8082-0aa4c2c4c2f2", "indicator--804918c5-5d0c-4ec5-9a46-55a25d93e65c", "indicator--6034f1c6-e93e-4403-bc74-68843cc2b8f0", "indicator--025b65ed-2cbf-4d46-a5ae-3d67998f8295", "indicator--d582df0b-0881-40e4-bbad-85a409372bcc", "indicator--bb31a5f8-fedb-400a-b2c7-81127eeabb18", "indicator--3c1301ab-988f-46bb-b971-c92c60cf477d", "indicator--e81801f7-c6cf-4846-ae74-9600472ea533", "indicator--8c72bc9a-ff09-4ad8-9dfa-66e4945d00bf", "indicator--3276bf34-f0b4-41b9-9802-6e02dc623b6e", "indicator--5c86b807-7666-49a6-b816-636bbb2da5a8", "indicator--c9c732fb-d4f1-4cf3-8ca3-24bacd749971", "indicator--8f28c54f-ffc9-4741-b462-0eb094d27fcc", "indicator--48a6142c-c200-4545-ab14-29fd60074c97", "indicator--332f7e11-651c-4c8c-b0e2-3b2baa535aea", "indicator--7252075b-ab3e-40a8-8531-baa43de911fb", "indicator--06348b3a-861c-4f48-bff4-7a94194628a8", "indicator--f1f566fb-6253-449e-9728-8bd76df9aae1", "indicator--8ce79908-cb97-4ad1-aa04-2fab228409f1", "indicator--b36b74c9-9966-4147-bce0-da6ddeb24fae", "indicator--06a1574a-ede4-4f06-b45d-970d1aac9ba4", "indicator--232a3e76-0995-4674-b57c-d4fa896ffd69", "indicator--5fe401c5-75ef-4918-adb2-9d67f718da3d", "indicator--0aa0b7f9-18e9-4a11-9903-9fed582499aa", "indicator--7294c7bb-79a4-4e49-98c4-bf6e1abc3894", "indicator--db1c133d-1a40-4a95-a3fb-2f82ab52699e", "indicator--89bdf1a2-3a94-4530-8962-ff87d54df3e6", "indicator--f65ef0f3-e808-485c-ab24-901517477b22", "indicator--89530366-bce9-4115-a627-7a0b472b6017", "indicator--d261c847-e906-485a-aab5-a1bff5442535", "indicator--b31e9577-fa87-423e-8ccf-a99092bcd731", "indicator--6c638ad8-2d11-496a-8a65-e8fddf2eb673", "indicator--e3ffc45a-36f3-44f9-a89a-8fd90c1fa1cd", "indicator--a086b67f-2b21-4d99-b5fe-7e226492ce04", "indicator--d53d39c4-58c9-40d1-b1ca-944c360b054f", "indicator--1304fa42-6194-4121-9259-9307eebbd65f", "indicator--1101f45c-b904-4a55-95d6-aa7987ef53ad", "indicator--fb2ba997-5560-407c-90ee-c5f65b7b50d9", "indicator--71809225-c8ff-4b31-8aac-c7a0ce8f1688", "indicator--5d6f3c99-e39b-46c6-82ca-adf467f54a3c", "indicator--119a2b1a-aac0-4e93-91ea-ecdd7b078544", "indicator--02837850-b16a-499a-b53f-ae910e1d9c45", "indicator--2386e69a-57c4-4d72-86a6-766becdf5ff9", "indicator--677d3b3f-5a73-44cc-9ae1-6197bd45bc9b", "indicator--971c3e4c-6375-48cd-ac8b-8ae808794c25", "indicator--97ce2045-6120-47a7-bfb0-cc3e8bde2727", "indicator--51244378-6d4a-4290-a9ed-198e63f28d91", "indicator--9e32987a-88b5-408c-b996-9865e3dbd0ef", "indicator--21841118-0981-4db8-bbc4-5ebff1dcdeb9", "indicator--13ef26d0-5d71-451d-b76a-86e2609e57d9", "indicator--f6e505b3-71e7-4006-abb8-cb747d5045a0", "indicator--89ba1f2d-9a60-4cfe-9b76-c579f2bb059d", "indicator--31176f40-a970-45f7-bf89-898d678d6c61", "indicator--8523f2ca-8a1d-44d4-8129-045086e47d6a", "indicator--8e53cc95-eefe-4bd6-8311-9501790685d3", "indicator--e62218be-f237-4487-9969-c72862d24f77", "indicator--bbdfde62-9fec-4b46-9a27-e852aa91dbcc", "indicator--a66a4f07-874c-4914-a31b-0884a0769ff3", "indicator--23e0aa20-a774-42e9-b9aa-6886c99b3512", "indicator--6973f6bb-84c6-4193-8d44-a18da92e37ca", "indicator--93e29562-e784-4316-ad56-79a5632556c0", "indicator--af649d9f-9277-4ea8-8122-0bd03606b5f0", "indicator--78bb9d58-74b6-4866-adef-d405d372e54e", "indicator--26dd2fe9-5be9-476d-86ad-c0632f9eebc6", "indicator--b16d7985-ccba-4d90-a2d4-42b3ad6a1dc0", "indicator--f870b948-3bcb-490b-b4d8-c64fe86c4a5d", "indicator--0d5d71b7-ad80-485c-9f74-f5570ccf4e68", "indicator--aecdf5a3-387b-462a-8999-f05a0be6ad74", "indicator--118190e1-4b55-40cf-af9c-3b766d19b201", "indicator--c936f64a-c941-40cc-a0b1-3ff9ff422a42", "indicator--64c8214d-7b4b-41da-8ac9-5150d351914d", "indicator--d225d05a-be28-4a1f-9e4d-8deab2b53212", "indicator--05619a32-a39c-4066-a95f-6e979f26fbc0", "indicator--ad07ce53-b0ab-4bb5-8926-d9140fe85d0e", "indicator--2308b8a7-b73d-4814-ae76-02b0ae65886a", "indicator--4e51af15-dedd-4e94-be72-728d813e7f6e", "indicator--423fe730-1cf4-458f-808a-6a83f1dab435", "indicator--2303ad2c-5d3c-4c99-9b40-8468bd604326", "indicator--514c85f7-5032-4743-83d1-d4d493b29be4", "indicator--b6d156bd-1990-4f2e-a061-18af38d439a0", "indicator--9a63661b-7ab0-4aad-8cb4-560488c97008", "indicator--f1f010af-2c93-4bdb-9543-d528e988ac15", "indicator--38d30d8a-50f7-4ba7-b72a-f1d4dedb0064", "indicator--b4bfd593-71c3-4d85-ae84-bf3b17542e35", "indicator--bf27bd63-b328-494f-abb1-f0223253a351", "indicator--18c454dc-82de-46e5-b45a-417b7a83207b", "indicator--7d5694a9-5e18-4822-b8d4-9a1485625be1", "indicator--c092eac7-96b5-4efe-84e2-19e94f7b40ca", "indicator--758fa2b7-dd1c-4417-88c4-c7dd97473722", "indicator--9f500034-e14f-4805-b73c-0affa5d7019a", "indicator--68e765bb-5aeb-43f8-bd74-5237534f0730", "indicator--9ce63e57-333d-4bda-81ba-0d5afea9b5bf", "indicator--6df50e9a-4c31-40ef-a5b5-51054d1b06d8", "indicator--4d74f870-508e-454b-90c2-f0e64b1403b0", "indicator--9ac62dba-2764-48c4-a3af-1421e7ffd17a", "indicator--ce7ee4bd-039c-4150-9e86-bf74ecfb6ce9", "indicator--e9faa793-dbc1-48b5-b205-a23c82ba677b", "indicator--3d2d93dc-92fc-4e01-81c9-7d8a1bb337d3", "indicator--4e04dae9-0755-4056-80fb-3f8c9af210a8", "indicator--1b45a39d-e6b8-46e5-8d9a-2d8d4a9cbf77", "indicator--0657aed1-df25-4eda-8275-fbf0c081339e", "indicator--3fff383e-0261-4003-89dd-40acb2b0d7aa", "indicator--e75b39b2-c0b0-45ec-ac59-ec38cf3c529f", "indicator--ea0bd32a-ddbf-40f0-a3d4-fded0e66d1c6", "indicator--e1fce0ed-190f-4ef5-9e63-76cf1add3b23", "indicator--f1d59822-0fe3-4b9c-bea6-481243d5897b", "indicator--6d06345c-b02a-4d8b-b589-10e32b008ed1", "indicator--a7899c4e-a15e-4460-9bc5-a42672390476", "indicator--318644ef-3040-4266-bca2-e5e6ee0e5dd6", "indicator--a120c7e2-597f-4073-b7e7-d32c17296eaa", "indicator--29bf642a-9364-4f4b-a169-bb1c51274079", "indicator--9381c7d6-ae88-462f-9ea7-8e5cf6cfe6f3", "indicator--2d8959af-6764-4149-85e4-b023d245b361", "indicator--429776b1-5602-4bab-bc53-d162f7d9eacc", "indicator--1e3b54c7-1a3d-4cd2-a67d-c6f103c2de6c", "indicator--f52b7418-5ecb-4ca6-a05e-93e3c0ab85b3", "indicator--643036f5-6769-44c5-b548-31628370f0b8", "indicator--909e0e47-0256-447d-90be-56d84f401bcf", "indicator--f6339874-1758-423d-9b5e-ddf0e5eb9f1b", "indicator--9c4ffb1f-48dd-4678-9d4f-d2534978a0b0", "indicator--b893ab3d-46bc-47f7-85ab-90db310cb868", "indicator--7b8c5ed9-da86-450a-a81a-f883b0801e37", "indicator--08833887-7d4e-4f2f-97d0-cd42d92b61ea", "indicator--4df64024-9752-4249-9a18-16e0b69c3115", "indicator--6103b0c0-b0e4-4bef-a8f5-382e5486acae", "indicator--bd0ff2e7-1bc1-4a81-9c34-35ab7024704a", "indicator--39490fb7-2aa1-45e2-9843-d3b5f8a4a56d", "indicator--ad612f12-9dd0-49e1-ac90-fe9204aadf2e", "indicator--9debe698-3567-4e93-bc49-e9ebbc299b56", "indicator--9c43cedd-ab53-4a93-a6d3-d80a06f40c40", "indicator--6a9295a9-489f-4cb1-849f-925c34e86de2", "indicator--3edb6ab2-dab0-4e8b-a0cc-58365ed55e46", "indicator--0160426b-bf4b-48de-9312-25f42604bb0d", "indicator--554a7c7a-0949-4c2e-86ad-b77e579e8095", "indicator--8a434392-c394-476f-9262-68afdf0d84fa", "indicator--0d65089a-3627-4daa-9a50-80c4390c9717", "indicator--5480506b-e97f-4b0e-8e91-c8734c14a49a", "indicator--1c3b704a-132c-40a1-baad-1f0907bfe5ff", "indicator--6981aa18-4018-41c9-9d0d-942c927f07d1", "indicator--596cc696-b338-486c-a0f7-95850fe0a7d0", "indicator--d3c5dce9-c196-4966-a09d-aa388f4a805e", "indicator--c1624578-cd77-43fe-a8b5-afc0e2b335ca", "indicator--dfc10e59-7085-4187-90c2-39a2db7f8cb1", "indicator--76521523-073d-4ee8-9233-601b329e3e98", "indicator--9fa84c8b-46c5-4c94-af17-0d48321230a9", "indicator--8ee8d999-7775-4231-aad8-dc591d3c2357", "indicator--4a46731a-cbe5-415f-9ec2-c2300126f73a", "indicator--c10463f1-b2e8-4990-987b-f8377d80f1ea", "indicator--2fca5a4a-a0d0-4847-9825-347afe49d4fc", "indicator--c6d2c0ca-d507-4767-9aa9-3b7329a76ed3", "indicator--55ae9d34-965a-4752-a8fa-a86eb78d4c53", "indicator--566c8ea7-1d55-4a71-bbed-346a762a1250", "indicator--4ef19de4-828a-45fe-bfa3-1f893b478203", "indicator--b6b5746a-f376-4576-bab7-517a34cc5692", "indicator--6da0eb46-23b9-4a54-8b3b-e9c2117218b9", "indicator--6046c4e1-f2ba-43cb-b301-8d19c7a71d8f", "indicator--b77bf20e-6954-428c-9a27-757706104a9c", "indicator--ac5923bb-d3a8-4097-be54-376c6f639142", "indicator--92d9e023-c6ca-4935-8613-2f685871fb70", "indicator--e4684d39-bbd4-4c5e-9038-c5c15f572f25", "indicator--10911ec3-c143-4a91-ad27-5698d0ddfba5", "indicator--27fc7662-7a9d-4d3c-9f6e-296376a59e8f", "indicator--b3adc969-baa4-440b-a2e9-ee928153b62f", "indicator--1f979a23-1ac3-4648-9ee3-e6ea4e225aaf", "indicator--102e1e96-d943-4318-9c56-e2610310ef26", "indicator--116be252-7841-45c5-82e8-36c0d7affe6c", "indicator--dfdbe9b4-e932-44cf-ad57-846c2c53e084", "indicator--7d3a4f8f-7825-4ec4-82db-17faf7691b65", "indicator--d96334a9-a0ee-470b-b16b-78bdace7a905", "indicator--7319eb30-c1d7-4d9b-abbc-b48ca789fc66", "indicator--ce94327c-3cf4-4347-b6c9-d0e543eecd9f", "indicator--88ede0f7-f528-4754-8793-ffe83da17574", "indicator--66753064-7d42-4c0b-a702-d77ac4c4c4ed", "indicator--63f61ee2-2a57-470e-ae37-3bfec98b32cb", "indicator--1e78ff06-01c0-4798-b208-0d14aff9e217", "indicator--e9214ab2-8a12-4fae-bc15-a72bf00190be", "indicator--f3ba9652-3257-43fa-9bf0-0afb54b29ab7", "indicator--2d573a43-5061-461c-8d85-0872425cc228", "indicator--fd8335fe-9b3c-47ec-a629-cfb32635dff6", "indicator--4206b254-8168-41d1-a853-9c0fdc4d6ead", "indicator--039b0814-9511-4781-8e9c-b337066eea2e", "indicator--2874a9c2-2926-4403-8d26-a95ccc660ddb", "indicator--09db1216-e1b8-4661-ae56-7f31a624722d", "indicator--210ba528-66b6-4bb4-9708-5aa3a601001b", "indicator--43d51844-e6f6-4ca2-a99c-e1b38523f1eb", "indicator--4ed5cba1-8c30-4c7d-bca8-0b1313709053", "indicator--7179dd9e-3d82-4cfc-bcf1-202a6eb936da", "indicator--ec1b38be-41e5-49ef-a32e-2ffc8e83b116", "indicator--0346770d-2c9b-469d-8ae3-1d8113b96ef7", "indicator--ec905f45-8f1d-4cb1-9be6-f4ba42254e24", "indicator--91998ef0-82ec-4dd8-ba9c-18cf3c1a25c9", "indicator--492d7380-11aa-4608-a516-aef0e85ff220", "indicator--813f9dad-27c9-4e53-8b03-fd505ba9b7e1", "indicator--0cdec12d-601c-44d4-86bb-70172c36ad03", "indicator--a8db4e87-efe6-4ad1-9bae-84eacfcfb389", "indicator--2141ec67-152b-4eda-8c78-3c63515b0e79", "indicator--f1603b7d-e35f-41fe-808c-5e569ef23aa8", "indicator--20dab0a5-89b9-4e00-9a02-e67d2cc0ea3a", "indicator--c5528b8a-1c61-4212-a935-5955de4300b3", "indicator--040fe8bd-e101-457d-a966-028a5637505a", "indicator--d5e1be1c-2787-430a-af10-4ae7a571b3ec", "indicator--cf36270e-787b-4fab-92fc-c93f3d6bc958", "indicator--52f50743-a831-479e-9f15-57e3f7e69970", "indicator--7538df34-212c-4cb2-9f85-e708834a118c", "indicator--568f4692-c498-400a-b088-faf8a9c62f10", "indicator--64ef4335-95ec-4efd-8f97-4736740fedd7", "indicator--ec7f2617-dd9c-41df-9f20-e10981b9592a", "indicator--dda25cfd-b9c5-4a59-b256-ab01d69e25bb", "indicator--2fe457c5-d54c-490e-af83-2f5e01d9147f", "indicator--6b0c8a12-a5a5-4b3c-bc73-a195e5b9d460", "indicator--b7891567-0bdb-471b-a380-f6e713103856", "indicator--51d50a88-560e-4419-8baf-d91493c4645a", "indicator--e009655f-859c-481e-92d0-421febc503c1", "indicator--2cf6d606-db2c-450b-b73d-ca44de8eb382", "indicator--75246c09-e01d-4e0f-84d6-c09d90fd7074", "indicator--f6f23921-e8fc-463c-8206-ce2c8ab336e2", "indicator--9b36c056-472d-4b63-89df-0b5fd3767398", "indicator--bf9786d3-67da-4d17-9cf2-334f6d57a210", "indicator--42578bd6-12e8-4216-a571-62aed591bd19", "indicator--98493750-025b-49ea-a0e3-326ef2a23e81", "indicator--a771543f-e58f-4534-a2fd-7acde6abd7e6", "indicator--110b6c00-3359-456b-b429-5211a798726b", "indicator--3eee4567-62bc-409a-b41d-674e177563de", "indicator--dbb1e3fd-b2dd-45a8-a6bd-ff1cb0472628", "indicator--5163d86a-c27a-4c1b-bb3e-69c793cb1dee", "indicator--eaa17506-a302-45b6-bbe9-4188cfc9d5e0", "indicator--a64ea2d7-2e45-4ac2-9fe6-c843034d718a", "indicator--5491b375-281c-4390-a322-201426754d27", "indicator--5111e2f6-5c7b-4ada-a13e-7050bd93889e", "indicator--630439dd-f95a-4d68-9acd-6f21c501aca0", "indicator--ca65302a-4ad4-4161-a4d0-f08c0e3d3cf6", "indicator--0d10dc0a-4a0d-4a71-8179-14f37ea3ffd2", "indicator--74b0a95d-57a6-4d0c-a571-777e3f9a17ca", "indicator--f04ff646-6d5b-4769-95b3-4827ef8d3a62", "indicator--a8e714d9-52e4-4bb7-b5a2-4081cbdc76a3", "indicator--abeb3a20-2f9c-48ad-bfdd-73401876ee74", "indicator--ba21ad3d-b028-4a1c-8edf-91637aec6aa4", "indicator--e7a5d2de-b337-47a9-aa64-33128717f008", "indicator--d5e9c9c4-d6cd-417a-aa40-c2891009e9eb", "indicator--824aaacc-6b3e-4a88-b29e-ed5500394394", "indicator--a05968f2-aae0-4030-8ee1-772574dfe97a", "indicator--dd173d67-db42-458f-964b-e783a496fcc6", "indicator--c47bc26e-860b-416f-a14d-4977d753102f", "indicator--2c2e58a8-2c91-4ac7-ac49-48e7dc81a5e2", "indicator--c23b39e0-7bcc-4667-a043-bad6775a8d19", "indicator--fe54de93-0f73-499b-bbf0-23e49ac87e5b", "indicator--d72d83e4-5096-4227-8c99-ab5478b5cbec", "indicator--a9415074-8dd5-440c-8a48-be203f3af813", "indicator--b24563e3-dc14-4613-a966-b9fbcae01bf4", "indicator--7ba722e5-ec6b-40da-a7b0-b1e8aeed4f86", "indicator--cec51c35-7f20-4abd-8754-9f808f35edd5", "indicator--0877cf56-5d2f-4764-9c55-479c5559e81c", "indicator--4b8b27d4-63bb-443e-a3bd-8578c0c0374f", "indicator--589f845c-bd90-45a8-bc50-55260f780bd5", "indicator--542d99fd-e87f-4603-8b71-7f03aba341f1", "indicator--019f6e76-0eb7-4ea0-9eca-a4e7b4902afd", "indicator--9a032567-87c8-4766-81a7-610f6ef6c3ab", "indicator--2d3e7a71-72ce-4e07-bbe3-bf578c7203cb", "indicator--fb294307-2cd9-4617-9d0f-ae2fb22c0852", "indicator--0ba6ad2c-101e-4c94-9d13-c95e2c75811b", "indicator--aaefa80e-cd1b-4ac3-b756-712d279b5488", "indicator--86bd6742-ddf0-4d8d-bde4-c1896be8e005", "indicator--eaa511e0-89bb-4135-963f-6291efb5f360", "indicator--a08eee63-1506-413b-b0a8-199d1a236b2d", "indicator--797b35ec-bdd3-454f-a57b-4192119d9c9a", "indicator--040d62f0-ff47-435b-b82f-8ad59cdb545e", "indicator--6059a67a-3965-4545-9279-f4d0b939a976", "indicator--9b76f747-b047-4654-b2c1-c3c8b9d36fbf", "indicator--e72441b3-6062-4fec-a4a9-84252f44ccdd", "indicator--3f7cdda8-3516-4dc2-93ac-e6879bdb67dd", "indicator--1c003677-1cb3-4041-975f-56822fff1f03", "indicator--017274c8-10ae-493b-8229-8373d0900201", "indicator--73c18c77-612c-45f0-9a9a-1822e688b94a", "indicator--cf8e6b73-055b-4a90-9ffe-c529d01e1224", "indicator--0262b0bb-fdf5-446d-81b6-ce045410994b", "indicator--f358505b-330a-4b3a-89fa-68e1bb8b1c8c", "indicator--4fcf52c0-480d-40eb-8b23-c29b2d1a6175", "indicator--9c4f0a5a-8a9e-453d-9daf-69b47362dbb0", "indicator--9a333c7c-5e08-4f0e-b42f-dd7454775ef5", "indicator--34c7783e-8ee6-40a5-b948-8c30de71afd8", "indicator--921c063f-4e34-4c3d-8410-8c1b7d98ad89", "indicator--7ed5c203-68e9-43c5-9558-c75b4ac1b59c", "indicator--7652f367-ea09-4b78-90e2-f4ad9d489036", "indicator--980f8823-aeba-4554-967c-bca389e55135", "indicator--a409b792-1174-4833-a560-4fdbc777ffd1", "indicator--da7ae25a-8ce9-43a5-b9ef-36c11a1c5614", "indicator--af69696b-e09e-4946-bfe5-22d790c41925", "indicator--5480fe50-700f-45b3-87d4-c60efac20c83", "indicator--685c5d4f-c4a0-48eb-bec7-b6647dbdca6f", "indicator--83294ff3-f8d2-4c8c-8deb-7892b07108f1", "indicator--c8e07b81-4d5a-4ef1-b96b-f217137efc4b", "indicator--ed25cb31-fd06-48dc-9d7c-5d59accf0957", "indicator--42c91c40-61d5-4df1-babe-f57ad686f487", "indicator--6d237186-64ef-4ee5-b642-4472baf7e5b2", "indicator--03fde639-58d6-4d63-b973-2eacb992ac25", "indicator--02fd18cc-0d4b-4d52-b235-6db0acd22711", "indicator--7f99b4cb-9585-4bda-8fc1-da39db2e9a60", "indicator--f10db8c1-afb8-474f-9f61-6fe55ab6be1a", "indicator--07502794-ffc0-4fc3-8590-6c2b35457bb2", "indicator--57cda0ec-3b39-42fa-9e44-fbe0e7d45591", "indicator--9fa385da-3e4a-4720-8bd1-69d4eadbdd84", "indicator--073dbb19-9929-48b6-8d72-d0db5a9cae78", "indicator--2942dd22-ed6f-4e54-9770-a6720e9d9339", "indicator--8a390d6b-d101-4b49-b89d-0f4305ac57ff", "indicator--84938446-4c50-432e-8898-fe0ea1be640d", "indicator--a60e0971-459c-4c59-bbbd-774f6f3e9712", "indicator--2d88d55e-895b-49a8-9ed3-d2f5038b1c2f", "indicator--21e77f77-f21a-45a0-8ba9-52bfd9c7e400", "indicator--b3af7023-440d-4cc7-b14a-b1f8e64c3523", "indicator--c9e88b5d-05ed-4dc5-8874-4c028e408d10", "indicator--03c45ebd-5b06-43fd-8691-98ab0bbaaee7", "indicator--7b3200c4-efcf-4be2-9bb4-5a777b56a0c3", "indicator--e053db22-4103-45f8-977e-52c43c5c30ab", "indicator--a4f8919a-3d46-479c-8f0b-ad3109daac75", "indicator--70a19a78-8eab-4ad8-a7d1-a79e2197cb4a", "indicator--ffcf1e65-bd15-488b-bfbf-9dc232cc9697", "indicator--c41a9ca2-2d0b-4cbb-9922-0673818a7d23", "indicator--b1312dab-fe86-49ca-93f2-481836de3307", "indicator--99b6e73e-8ff2-430a-8051-771474d4d8b9", "indicator--e71d865b-f952-4692-a5cb-16b047888bfa", "indicator--ca1adcf6-bce9-4ebe-8437-d47fd8a23448", "indicator--81ee740c-e89c-443f-8e7f-e9ca7f151000", "indicator--7962c98e-253d-4995-9809-a1be15e976fa", "indicator--f318e364-16b3-4458-8712-1a6d2021ae93", "indicator--3e8bf4c9-a41f-4f92-91ce-cbbde3d3d042", "indicator--cacc92f0-4c2e-4bad-8b1e-61e384c9a529", "indicator--25fbbf5a-1134-462a-9826-0043facae9c8", "indicator--78114a32-424e-4881-8001-c9028abfefeb", "indicator--fef50891-b416-440d-94c5-007398aa3df7", "indicator--db82540d-0572-455b-9b42-e6e99359c14d", "indicator--b04f33d5-eaf6-4d74-a396-1f602a6079ac", "indicator--172242ac-93a2-41b8-929c-06bdb8ab57f9", "indicator--e6216d00-464c-488f-addb-a8f6df1af7f2", "indicator--2679088f-e8bc-4455-878d-917fe05f5c6e", "indicator--3c0a9352-a02e-48a3-bc36-b686bbf316a0", "indicator--3ecf7894-21f1-42af-a79b-65b3bf9ae7b0", "indicator--eee66b52-22ab-4421-b772-e12070d6b62c", "indicator--337cdde2-940a-4782-9fd0-5af3d4068833", "indicator--92633c4b-f840-4ba3-8b38-a15512cee14c", "indicator--49a3abfd-b6f7-4f83-941d-674000e9e816", "indicator--f8f341c3-54c5-45e4-851d-e5241e944cb3", "indicator--2d7e7fc8-ccaa-4299-8c80-19f16368ecfd", "indicator--ead9a7aa-f469-40b9-965b-582df7d6b0ff", "indicator--9ccb6115-610a-4fc5-b646-1c4accd8804f", "indicator--8bc96d4a-dca1-4e04-b60f-f391eb9ef372", "indicator--2ea7f100-0a46-4caf-86fb-68c79f4e1f4d", "indicator--95da8b1d-b2bf-403d-85aa-83e5ec1c8b5b", "indicator--2c881331-2c4b-4e49-95f8-4e8aca4f42b6", "indicator--4ba6eef8-839b-4f9f-89f6-08aa550239a9", "indicator--027b97e6-d024-4d80-8ec4-e22cfc063466", "indicator--093f6c55-e2d9-40c6-b62f-bbb15bf69443", "indicator--6940fb1a-67a0-4bd6-80d9-a4767ffad51e", "indicator--83340360-1154-4361-bebb-38686402fc88", "indicator--26425d50-09f4-4c2b-a334-c533092a54bf", "indicator--c811c44d-4d19-4b99-90d5-dc4b827d5767", "indicator--a4fbf585-47c9-4766-9cd4-f9f94b3f2fe4", "indicator--5aa975bd-5e8e-40dd-9928-0ba8b34730e0", "indicator--7b6d5ea8-eaa5-4c2c-a71e-c580ebaa0a52", "indicator--ff01ef06-5ad6-47fa-8488-9dd702da0881", "indicator--1f6f02ba-7b1b-47d3-86d8-2080b988a06b", "indicator--39cff8de-ae8d-4131-a3be-b6f0094a9c09", "indicator--74dfd7ee-35ee-4a2b-af37-9fbf48ae5648", "indicator--c5a8c326-4073-4dfe-bf61-0abd802b95c0", "indicator--2eba9bc2-3b57-4e68-b341-1fb624e79330", "indicator--f16a6474-ddd9-4ed6-af18-622e784de4cc", "indicator--1dc9aaa7-9bc2-4db4-941b-1b81126a6fe9", "indicator--090917ef-4c47-42f0-b0e5-1d739f87fa03", "indicator--592a6ef0-5f2a-46ec-b151-d1c174ae5002", "indicator--60a15b17-fd4a-48a8-8dd1-b0b8e97b83a2", "indicator--73fb2bdf-e691-4a8b-8744-1454820fc7cf", "indicator--52b824f3-758c-4944-991d-b5fc8355200b", "indicator--b587fa22-2c23-4f60-81fc-b16c24561486", "indicator--ea1b6431-7f98-4d9f-983d-e2f286e8395c", "indicator--fa513f32-8e79-4c1e-b30f-a1f39b3b8050", "indicator--0c701f84-d58e-45f2-ae09-6ab6aa8d7e49", "indicator--f3a8233c-cd6f-4b28-a0f8-6e7c264dfb65", "indicator--6a392f3f-57e6-4549-94d5-af36370c27f2", "indicator--1c161b3c-6108-4de5-b2fa-395d5556d5cf", "indicator--47c3eddc-83f7-4186-b4f8-cbdba184bf14", "indicator--01ffa833-b932-42d3-9fca-fd31fa5e9d31", "indicator--10741040-9c85-4d8e-b45d-8dcedb8374e6", "indicator--1f5d7b7b-6dc8-48e6-91f1-4a3d3cc3e39d", "indicator--55a56332-11f6-4ad1-9c48-193e544fa5e4", "indicator--19f8dcc4-5e33-4acb-9078-1a8beeaabe21", "indicator--101c8188-1d4d-44af-92d3-186c914699b0", "indicator--660d2567-2208-4363-a85a-053bede9785d", "indicator--508422eb-b2ac-4900-98a3-eb10700e9ac5", "indicator--c5c236de-9464-4df2-8c89-8cf5cb9639cf", "indicator--b39012fb-d1e7-46c1-9fb2-45e7e206850c", "indicator--f046cef0-7383-4fb7-92f4-fe907440ce82", "indicator--3a013f6f-e8c3-4f75-a4a9-3316a2a9f749", "indicator--25577a30-a538-4fa2-a98d-93941b0aea65", "indicator--798c0423-afb4-48bb-80e0-5c4fc3f3361a", "indicator--5de25a03-0b62-42e9-89a7-00eefa14f3e5", "indicator--3ea92a13-8cda-4903-9619-9f75f291d8db", "indicator--5585144b-8181-4fa8-b066-780f6f478aaa", "indicator--8315092c-3f8d-45d2-b711-75140e595794", "indicator--051f786d-7016-493a-a97e-d36c5b2d9181", "indicator--0d7f18c5-ac57-4a14-9611-7c1290a54e6f", "indicator--9f2fcae0-ab9c-4299-b22c-462f7d784b52", "indicator--d0ab476b-a40a-4ca6-961c-b5c07cc348f6", "indicator--04594ecb-fd82-4747-a469-ef1ebbc16a77", "indicator--268e732a-c411-4cbe-b3cf-c6970154c344", "indicator--09e872df-57cc-4f02-af70-79b2f3ca1eb7", "indicator--f6f407f3-2c45-40fe-9691-fcb906bc4855", "indicator--c5bca17a-85b5-4efa-8102-b0d5eae275fe", "indicator--0894803b-25ef-4969-ace2-cc561dbb22bc", "indicator--45c04037-d1a7-466b-9b93-1ee269ff651c", "indicator--78139776-a952-4894-a3ad-65d39d11fe74", "indicator--36a8afea-0010-4ba0-8d61-800e5bf85a90", "indicator--061ad9a4-4788-4787-99cd-68c7dd119b84", "indicator--13f075e8-4065-4d7c-8c59-e5fb23626521", "indicator--048e63c0-4e80-4c0f-b520-1ac58d6ac32e", "indicator--b8e3b50d-e26d-4ca5-9343-d5ffd7123eab", "indicator--13375bc1-df43-4fa0-af85-2203b6b8e4eb", "indicator--4300eda9-80eb-4a88-865f-49ed56269b5d", "indicator--2491690a-d2b4-4f80-b91b-0b1dde8349b8", "indicator--1736abb8-ffeb-46ca-bd45-cd563ae7ec95", "indicator--c663bcb7-d322-4ec5-bc62-e03d78e1dc43", "indicator--f71f08a0-9aa8-4e96-9518-71a1e7fdbf67", "indicator--3b8d6d23-bae5-4172-b220-935a4859fcc1", "indicator--7e28c6c8-3771-4f0c-b9c1-3fe89abd81e3", "indicator--783cada7-6f8c-40f8-b3db-b09d00ee44ac", "indicator--fae7597d-0d0e-4d7e-b347-f95b70213550", "indicator--f60d418e-497e-4c9c-ad2d-dd1f8416066a", "indicator--260ffe0d-abab-4303-93da-072d80b1fdd1", "indicator--7da545c8-b8b3-43ae-a151-1a33bad6c723", "indicator--395a0a05-0433-4b56-9d1c-9c09e08d88f5", "indicator--6a9678f2-5905-43a9-b2a7-4f67c88c1e2b", "indicator--afbda1ae-c8ba-4f25-9da0-0e7e7ce07dd4", "indicator--0bdebc33-ca76-471d-af83-6d4bddc40505", "indicator--e4fa501a-21ad-4592-91b0-403f131626d1", "indicator--9b0bc4f0-3258-402c-8313-e800f263795e", "indicator--e7d53010-33fc-4728-8b78-8cd4e3b35725", "indicator--9f92ee2a-6ec0-46a7-a976-1050eba894fa", "indicator--356e6d79-95f3-457e-9a88-55431e148e51", "indicator--dee3c1be-88b2-4453-afcd-c483a8a8f60d", "indicator--c672e857-9b2e-4b64-84ec-c3f658472cc3", "indicator--db1aaf1b-0aff-4f96-9ed8-b288fb716cb5", "indicator--5b2efcee-e3d8-4e96-8de4-6e692be01408", "indicator--d5ca59e6-03ce-496d-b8a0-86648566a9a4", "indicator--353864e5-d36f-4d31-9c80-370fb37d522a", "indicator--0cf5e767-0838-468a-be1a-bd59350e4e59", "indicator--d6276415-0337-46be-940e-04016decfede", "indicator--a3e333f4-c1eb-450c-a850-6380e4fcb4ae", "indicator--db4247fd-1424-4bc3-abd8-9a85764aa71f", "indicator--b314dc50-3991-41f8-9da9-3d442523b88e", "indicator--57b4b411-81c0-4c7b-a34d-fb9bb355667a", "indicator--eaad4787-594a-41fb-9f0d-b3baec27ec63", "indicator--4609a59f-a84e-4d02-9a34-128ea974bee2", "indicator--5a170013-814d-43ce-be2e-292fa320e72b", "indicator--33ec65ae-b40a-499d-9fbd-50efde21856b", "indicator--a8737bff-98de-4aa9-8abe-751c22b88e62", "indicator--dc00581b-adb7-419a-b231-b527759aaa56", "indicator--f446af60-ace2-438f-a3f6-67c7459769c7", "indicator--d28251db-4d21-41af-85f8-fd1aad1fc846", "indicator--b1c4b7f3-83cb-40e7-8af9-e03cc67d10e6", "indicator--0f454cb6-fd73-4cd1-93b1-5d302639c3d0", "indicator--5314d2f0-8fea-49c1-8a8d-338408166648", "indicator--1cd10f8e-c94d-4816-a59b-467205555b6a", "indicator--1971a28f-571c-4108-b2a4-51fd297c2d34", "indicator--f3da047f-dcc0-4de1-bb47-d1df4ec6dcc4", "indicator--e7afa724-5b15-41de-9175-4221cab49d6c", "indicator--22efcc59-93c1-468d-9af0-3670941a7b47", "indicator--d637bb1c-95a3-4469-a58b-115bcc4484f9", "indicator--7fd1d8be-7112-4509-a2bb-990f645ac315", "indicator--d531dcca-d59f-4979-8b3c-1a87754969de", "indicator--3c9aec02-b631-4e3a-9eb1-2853abf40de2", "indicator--5b0786b0-e1b2-4a9c-a7d4-7bb6eda7d729", "indicator--e7a980f2-519a-4dd4-9c3e-fe68f1c9d568", "indicator--08d688a4-a8fe-420c-8083-d1a5d74fb29d", "indicator--8854dfa5-fcd7-47c7-aba7-0eeec1dc542a", "indicator--42f9fcf1-133d-4bff-ae8a-61ce707e26b3", "indicator--a143a49c-9af1-4b21-89ca-5809820ef52d", "indicator--abe80497-8902-4bf5-84a8-20d2cb412068", "indicator--c0613aff-fc6d-4aa2-982b-c8979b14c11a", "indicator--09b13e00-74b2-45e0-91d1-665e62b5c22d", "indicator--3381b2c2-40cf-43ef-af3b-6297e98db3d3", "indicator--707cf11d-ca8b-4a36-81e9-c3e6a7f09d7c", "indicator--05d2ca23-176d-4ff5-897e-b41de591fc7b", "indicator--b786ef27-496c-44d3-82b1-ac183cb0f484", "indicator--e068f73e-2ef1-4ae5-aad8-2c06ff4fbb66", "indicator--a7718ba9-651b-4382-bb8a-8a545f0f6e2f", "indicator--4fb38dce-727b-440b-90d3-90de306c2e28", "indicator--e13f0397-7fab-4251-b4f5-2bd9bf53136c", "indicator--85498df9-e4f2-4eea-b71c-7337ae3d6b5b", "indicator--b208f48d-9e9a-457b-8d69-43ff827f9b41", "indicator--5eb15d29-88a5-49fd-ba7d-c758529da613", "indicator--f947624c-7785-48b6-861d-1d529dc24d62", "indicator--cc2e204e-cf2e-4579-bad9-efbaf69bdd57", "indicator--8a58bf43-cb1c-4873-a25a-378c03de2d7b", "indicator--1d9b40cc-bfab-4f34-bd62-a1760844fe7e", "indicator--dfa85905-b253-4335-86d8-2fed48d94114", "indicator--151829bf-1eaf-49ac-b43a-fa75088a187d", "indicator--1d456335-ee6a-43be-a1a0-7d5378e8c49c", "indicator--b12b06ff-a62b-41ca-98e2-81dec78706ea", "indicator--7a69bf30-cd79-4aff-9206-164e976041be", "indicator--b631dfc8-ffe3-445e-a787-4333214a6c65", "indicator--37e866e5-43e8-405c-b096-08033aa47710", "indicator--2af27a83-0342-410f-a0d1-e271c3228efb", "indicator--d3d471b7-f8da-46c5-9b84-4d8eac7908ed", "indicator--21a0d19c-6e21-436c-907f-10a82dfd1dc1", "indicator--532f028d-f1f9-40d0-874b-0ea9ccc1b59d", "indicator--b7f56ac8-856b-4080-84e2-ba28013563ec", "indicator--58d50b5b-c0eb-409c-ad07-7826f1404519", "indicator--419cdee7-0704-4466-8f9b-f9f53017f084", "indicator--a9375e56-22df-45be-a8fc-38b96457dbef", "indicator--84edadee-ce73-487c-a761-395f7b9630bd", "indicator--3de9f837-e32f-4f00-b1df-5351389eb3bd", "indicator--d910d039-eb9f-4fd7-b08e-972a375a91fb", "indicator--c8e0cce4-2b53-464a-8617-ba8b3db92a21", "indicator--c84c8327-9e48-4144-9489-957532a3fd9f", "indicator--43fd15d7-21ba-4838-b77e-3b11bac43cdb", "indicator--71c97876-e398-499b-98d8-a32c6ab96788", "indicator--4e394f69-e2b4-446f-b3bc-dba21a8aa7d3", "indicator--987dcd5b-00e3-4ee2-a35f-3ded382b61c2", "indicator--f85af25e-3707-4f5c-b204-2837af8f3e7e", "indicator--02d951a5-b5b7-42b0-bbdb-816e8dba9156", "indicator--4202960a-a4cc-493d-8516-e6a4eac86515", "indicator--13f9856c-cab0-49bc-a955-95ddd6f8a10a", "indicator--85adfbe5-cf13-42d7-aa9b-28cdb4482c2c", "indicator--606a6115-d211-4818-afe8-337da26fe18c", "indicator--5e2934c4-ac57-48c3-8f7d-02fb307e2e4d", "indicator--c3169ae7-2092-46c5-86d1-3533b60a1fbc", "indicator--33a43436-563a-4019-821f-6aa586c30e08", "indicator--c1b9eca3-9992-4c73-9076-aae6471ee9d2", "indicator--4cddbf96-819c-4329-a0f6-dc57337e255e", "indicator--26638148-1029-4b48-8db5-6593fd03dae9", "indicator--2ed7ad5f-34a6-423b-b916-21f676f8dd3c", "indicator--f2bda746-81b8-4d49-bae6-cdc9d6694164", "indicator--78dc6851-ed5d-44ad-afd2-88a009a5d574", "indicator--6673bc6f-8a3e-4a0a-b25f-e305be40583e", "indicator--9c90cb0d-c5a5-4f14-90b3-a3928dbcea95", "indicator--3876132b-d769-4090-a073-ea88d7446f8b", "indicator--7432e73e-8d7e-4a33-b214-f757a66620f8", "indicator--ca1e9342-a121-4815-b0bd-aba18e7313a2", "indicator--82b111a7-f3bc-48e1-a9f8-b9cd9b8f2127", "indicator--2ef0d216-51a9-462b-aa38-335fc46969da", "indicator--5664a253-6de7-4a33-9de0-6cd854a94095", "indicator--f054601e-eb9a-495f-b649-741f650f32aa", "indicator--889951a7-3406-4215-8789-0c45e1b311f0", "indicator--71c6c02c-cc29-4f38-ad44-0a0726cb8cdb", "indicator--b7f97fec-5118-4c2d-9689-c19b34b7c73a", "indicator--b09e55bd-9bc3-402c-a462-49db60bde05d", "indicator--48c56a75-1745-4dac-b406-d837aff34e48", "indicator--0abe9b4e-495e-4419-9ea7-94b3ad37c170", "indicator--f4f54088-7858-463d-8a4b-73e97c066906", "indicator--329e901e-10a4-4771-9f31-d469d1e07631", "indicator--46dc0b14-2224-434f-8a38-9eba443194dd", "indicator--6d58a9db-3753-4bd3-9ae0-52e4f262e3bb", "indicator--2140e65f-7435-4d78-8122-fa717433d548", "indicator--ea09214c-c73a-40b4-b894-d8557d4d5d76", "indicator--aaac1845-2336-4cab-acbd-a77cf521915c", "indicator--b742f322-cfbe-4a14-903a-6567b209c7c0", "indicator--4b7341b9-6836-45f9-9a3f-e9890990eb1b", "indicator--68c59a24-5e42-4388-ac10-e56a9d4fc0c5", "indicator--431d9b9a-7ffb-43aa-b22d-6c21b1bdc3e8", "indicator--d33141a4-7866-4f35-98b1-83a1ee4bb2f4", "indicator--16602313-2688-4b17-a7a6-eae02ae6583c", "indicator--34d20611-362e-434f-b44c-34d685b7204e", "indicator--55b563ba-0662-43e3-b1fe-5aa34df641f4", "indicator--96bd7f75-5a1e-4a86-9075-5aefff9dd6c6", "indicator--51417f84-071c-44df-9fb8-644676e82970", "indicator--3793f09c-e84b-4c90-9990-f42e25547375", "indicator--5cdb592e-d908-4493-bd10-de105f158ba3", "indicator--0eba7e25-3d6e-427c-a03f-2a630baf4cce", "indicator--09b98b0f-6083-42e9-82f7-4c4d1049dd3c", "indicator--bd1aff8d-e9bd-4c65-a477-f4871bf39475", "indicator--73f38985-9d54-43ad-b121-95f4df091ff8", "indicator--e81186e2-6a0b-47a0-9207-358525e51d35", "indicator--a3dee470-9b82-41aa-9957-afb1b2591526", "indicator--0ab3ca78-70b6-4760-9c4a-81c849cc0d27", "indicator--7276c292-8e5f-4718-a706-ac96552a7edb", "indicator--56d8873d-c1f4-436f-8ff6-ad81a2af5f6e", "indicator--bfe12169-5c88-47f0-8ca9-3b635876967d", "indicator--a28028dc-fe2e-46b5-9183-63755138a244", "indicator--cd66f7c0-1190-44ba-816e-6e5713973892", "indicator--3c530f53-3dd4-46b2-9b2b-0c807df41b31", "indicator--5f5d2168-8d36-434e-ba2e-cc59b2339bfa", "indicator--3b0372d9-5037-4a5f-bc43-5eaf5ec55f0b", "indicator--66e6daa8-cbe0-45e8-aa3e-1162bb531105", "indicator--ed2c7b13-9ebc-461f-8850-ff9859607d73", "indicator--6ed87ef1-fc14-4880-8d21-6cad78f34f2d", "indicator--d08049e2-a321-4a65-96bf-80e44281f783", "indicator--c3c2e829-ea7c-40a4-825c-52d112218a99", "indicator--c6b243b4-0cff-439b-8fdd-a4229a4e6b39", "indicator--0a6bb70c-cc6e-4f66-b632-079421bb6919", "indicator--7bce6440-0190-4379-9863-82143732a62e", "indicator--58a5650a-baf4-4c31-9613-8f3317c02100", "indicator--1d225732-0c09-4123-8573-a7e25c0ce800", "indicator--91648bdb-2e25-49fe-91aa-9f3d4f5abf20", "indicator--a715c4b0-0be9-4814-940d-dce9f7c6f64d", "indicator--2917fd51-0398-4d36-ab77-a509c7697f57", "indicator--05e19a73-e899-4281-bcf3-b2e597563274", "indicator--5027cec6-c04f-4b2f-844e-50e93bd4f5bb", "indicator--2ec1cdb0-e2ee-4afb-9933-88cdfb99f28a", "indicator--5252886b-651b-4a9c-abee-3cf3c04be6d7", "indicator--8d095273-20af-4d47-9d4b-3752cd12e4af", "indicator--a2038666-b015-4aa0-a4d8-eda3e8db9ce6", "indicator--b3202621-346e-4e27-a364-d160dc173767", "indicator--6f74d058-534b-4d6d-a617-3cb54a75c96a", "indicator--63992de2-c156-495c-864c-6a30ca8e0120", "indicator--f9dfb19f-fde2-4c18-8b83-f449d0782600", "indicator--066c29ec-2443-4ee8-8001-5cd3d0b08dd2", "indicator--41ff55c1-efa3-4c8b-9832-43134d8843fd", "indicator--e6d4635a-e0bb-45c1-b3c6-f4ba48db5bc7", "indicator--e7291456-4b01-464d-91f8-5d4586ac0f6e", "indicator--377d500a-f8e6-4173-833b-ccccc3d2bc0b", "indicator--8d4976ad-3aed-45aa-a2d8-39de4287fddd", "indicator--2b5e874d-c483-4a56-8a2f-228c115753c4", "indicator--31560e80-9002-4aba-a296-1db558da3cdb", "indicator--47c94aba-2c4b-4b62-a37b-e962e54afc1a", "indicator--d054ec7b-2421-4c90-9721-c309b2cf372e", "indicator--e724c0cf-7d7e-4a6a-8875-ceda5f154175", "indicator--2d656a5f-25f2-4b72-9ecc-71e7924eba2e", "indicator--7e94fab0-db9a-46ef-84ec-c6aa736667c9", "indicator--7fa83cc9-5f2a-4479-84b8-4a5cc83302f5", "indicator--952466c9-6f0b-4e9a-82e2-308af120bbbe", "indicator--2cbfbc5d-4dec-4f06-b4be-a6031a4cbfb4", "indicator--5895cf5a-8770-41ad-a3f3-514e4fe7a8a0", "indicator--9582b5e3-dcaf-42cc-bb56-26e1bd285ffb", "indicator--4bd0db14-8b2f-48ee-b89f-40383f51ac5f", "indicator--b514038f-d5f5-41a4-acf1-025148a787fb", "indicator--e1e70f09-a9bf-49ee-a534-6133c8abbf98", "indicator--78d36f62-53fb-4dae-b62b-3417c794e5e5", "indicator--c4da3b62-b639-46a3-9535-5f09f418d461", "indicator--11730396-3c6d-4833-8c9d-9c17a0f14bbc", "indicator--8f31573a-ee3e-4989-8d9e-3863379cfa52", "indicator--c4bccfd5-9211-4d87-b901-939cec648f44", "indicator--6bf8da60-f5a1-471b-b9e9-d5d5f472af73", "indicator--751e53b7-b9a6-41aa-bf8b-af89be788493", "indicator--b09ef94e-1bdc-4cc5-9813-65f257878b1f", "indicator--02f324c8-6663-426e-86d3-03c8227c01d7", "indicator--ee1dfdc9-28c1-4995-9f5f-a4239be8696b", "indicator--a6aafc93-ce11-44c6-b362-39c6679e0fc0", "indicator--44ff9d25-7797-49ff-8056-8beaa5186a8c", "indicator--afed35f0-d704-442d-b87d-f1cdcce5482e", "indicator--178a0ec8-ecba-4396-b0a4-cf662a235fd3", "indicator--925d6043-97bc-4731-a028-f98bf0dce432", "indicator--548373bf-388c-4a9e-a521-b68197a29815", "indicator--24acf866-4a31-4dd9-ab23-d713ad3bbc3b", "indicator--14dfcd47-2ea4-43f1-b542-a4a4ed02141f", "indicator--38bdd1db-f077-40d9-8c4c-5ac3f1d0f0b8", "indicator--036f20a1-feee-41b6-9663-dc4b6f19bc45", "indicator--cecd7a36-49f3-48f9-b207-1771296910a8", "indicator--75b0d162-b426-4d3c-8426-ad81539ab790", "indicator--bd1b84a1-3ec0-49fb-92c6-19602eb86345", "indicator--07f0c72f-2fed-4377-b71b-06a2593207a8", "indicator--85695c57-073b-454f-9afd-4f26f4667ed1", "indicator--8735a2ae-4b1c-4e71-b06a-eecad01eae8a", "indicator--846d493a-3985-455e-af79-180d518beeef", "indicator--7c95f054-1b91-4cf3-ac84-f60b28b701b2", "indicator--b97f790b-9876-4194-b2da-53f8d9bb975b", "indicator--91023d01-bc9d-4143-9fe9-e52f99d1ea04", "indicator--dbbc3c7f-f555-4de9-8ec9-5ca077271217", "indicator--075be8c2-4dcd-470c-a1a9-30567275b8cd", "indicator--7a4e4dba-ad16-49cf-9b9f-6c28291f2768", "indicator--8e1cb3f8-5a93-4181-a4e2-1e6fa16ffebf", "indicator--ddc7d98e-ace6-4188-b744-4dc6d34294ce", "indicator--d02f30fe-5446-4cc9-b8e8-e163211d6605", "indicator--610408d2-6f2b-4652-8fa2-704db5cec865", "indicator--0cbcc789-0cce-4a1e-bc8c-61d506be3af5", "indicator--2b841be5-5e89-433b-b65e-0ed8e68f7303", "indicator--5e30f60c-393a-4b46-b81a-41b6da3b3fba", "indicator--3f70e8a7-fdf6-4478-ba49-177c224e4e0c", "indicator--8a2287f0-c9fd-44e4-b86f-e6f65d2b563d", "indicator--79cf88d2-f6fe-4c0f-a9b4-2855cf4c218d", "indicator--5a6ca2ac-23d3-4164-aefe-f824892038d3", "indicator--93261c18-638b-4520-97c2-7d9b157b9154", "indicator--cd92cdb8-d636-4840-b064-d9ac2a74e69d", "indicator--861da363-8f27-46ec-8c81-09a18848f581", "indicator--5237e550-4632-4afc-9715-6bf9bd8b53d0", "indicator--39be7eb0-e0c0-4a98-ab71-4e73f15387ec", "indicator--013e768c-f831-4a9c-8f63-ab156c1b65ad", "indicator--8d924442-b5fa-4bb7-874d-09a300d2533e", "indicator--893b49af-917d-455f-ba86-aa9ca15b273e", "indicator--617047e9-909e-4b42-b8e5-fec287ce7363", "indicator--dafe6da5-7d65-43fb-b02d-b564cae6a23d", "indicator--4c7ccbd8-7c32-4735-a10f-833e5ad3dee6", "indicator--148f9533-0ac6-4359-89f4-0d8de4a1394d", "indicator--32373c46-146f-46c5-8566-d78625de9805", "indicator--68052dde-40f3-4c79-b5a2-414c0eaec791", "indicator--7c75eb88-e005-417f-9037-0fdd4e7c68de", "indicator--7dbc3ce3-28d4-4b7a-858b-833c2df15e07", "indicator--6634335c-b9f1-4e73-a684-7262afe4c2f8", "indicator--93ac2cfe-90d6-41de-a120-45a556901301", "indicator--c3ed8d74-5cd3-4325-bbea-ce8dda72638c", "indicator--0b9eba56-e75b-41e3-ac6a-b196ddb23f89", "indicator--047c1902-520b-4d28-a3f2-778d7274fe51", "indicator--afc91013-01b6-457d-87da-0970d05c4041", "indicator--e12ce450-00dc-42a2-b040-b79ab6f25a16", "indicator--6afb8729-8335-49cf-9018-53b26fc1e6f5", "indicator--62352422-9a90-4ea8-a280-a12911c66539", "indicator--de06f444-bd5a-453a-8ff4-15304b3d2c01", "indicator--aa78ae81-b242-4fd3-bcd0-09d9e5666bad", "indicator--94a517c9-41e6-47ab-8104-961dfc5759ca", "indicator--140de175-4fd0-43f7-94ce-05371804abcc", "indicator--0cc87557-d0a0-40f7-8a28-ce7fba7ff5d8", "indicator--bd19ccfa-0975-4230-a026-74f31effe61e", "indicator--7184fda2-3ef6-415f-9ddc-0f70db23b936", "indicator--99ef5f31-7024-457a-a1e7-4067fe8e4731", "indicator--4363fd94-6301-4b52-a3c5-1d8f0db8d4eb", "indicator--0958c833-594a-43fd-8e38-ec0f2065763b", "indicator--d50cdd2b-cd04-4230-9cec-9f19ca66bcde", "indicator--4b7871ec-b24a-46c1-a5ca-58a9d5a0f596", "indicator--fdf86834-1961-439e-8685-134aa8af9433", "indicator--16fed9b4-5b94-4f50-bbce-d7f605e48d39", "indicator--502dbddd-b910-418c-9d0c-ea2fb61d4ddf", "indicator--102c4a64-663e-4b7d-b418-78e6ad0dda34", "indicator--bdcf69b0-5ec0-43e2-853f-3ce2786195bd", "indicator--6fa0cabb-9784-40fd-b99f-e55f66024d94", "indicator--d08b0139-acf0-49c4-a7d6-c72fe7317161", "indicator--1dfc2049-c3b8-4a69-9f61-d317f5d1c4a0", "indicator--5b4bd563-c114-485a-a80d-94c36de13981", "indicator--690d9c95-de4f-446d-b659-2f4049c5b14d", "indicator--c7ea7502-6dd3-49d2-9565-edb917d11f94", "indicator--d4b09aa0-a894-4dcb-a3da-4c57b990fb69", "indicator--cd5784b1-63d0-4671-8198-938a71987242", "indicator--007722dd-996c-46d0-8054-8eff3c701a39", "indicator--223c29f5-5918-41ef-8aa4-7e320278a3f9", "indicator--d9d8e543-b702-4efe-852a-68c0ffe0501b", "indicator--e27ba505-a2f4-428a-8c6f-2ad67e133b94", "indicator--d32aef1e-08db-43bf-bb73-1b73a131721a", "indicator--1edd5b49-fa78-4dce-b233-5a39899a2dcf", "indicator--ad98b665-716c-412d-b4ed-9f44993cba84", "indicator--df92f4d2-c28f-410c-bdf6-41cdabb510aa", "indicator--58018d1f-3302-479f-9378-79758de37c00", "indicator--8a445657-cf9d-47cf-9801-56a41f1ec1fe", "indicator--247f905d-86af-4a39-a829-ddba387d8b85", "indicator--07869780-a36d-4a16-b6a5-40c539125d51", "indicator--da80b024-f4a4-478b-8eca-661696cc2653", "indicator--6a35071f-b7dc-4ea3-a92f-58d2a1c31022", "indicator--15b65fe4-e61e-4fed-8e0a-a151f4a0e334", "indicator--f0c0717f-de0f-4e02-849d-49e2a74772f5", "indicator--b858e5d1-ef95-4029-8dc9-33595421cfe9", "indicator--7304cd7e-af64-4b19-987f-4f4e14b5573f", "indicator--aff62c24-6339-47ef-8b9e-e9725d2688aa", "indicator--18ce0bd4-067e-441e-8d87-ecaf915b8f80", "indicator--67d2d668-b64e-4714-a907-e68da9273140", "indicator--8e958eb8-71f3-4c06-91c0-e0d55a39cd30", "indicator--742c51a7-cd6b-4749-b57b-a058fcb71377", "indicator--4528528a-b3fa-4547-962b-c8934d0ee633", "indicator--870a91d3-290f-4dd7-b18d-74adb8987b38", "indicator--38778d5d-1b37-494d-bb0c-cc0a90688230", "indicator--e51ceb69-ab55-4005-8759-330580b823a6", "indicator--02262d24-9502-47ba-8eb0-68cfc236bb12", "indicator--f97d7696-a8d0-43c8-8091-056a83b68f96", "indicator--4ee67614-3a30-46b1-b019-a66035a7f818", "indicator--b52817a4-48b5-47bd-a80f-ee6102094936", "indicator--1e94973f-6db9-45f5-b982-ec5b35e750a0", "indicator--5e4ab036-8077-4e83-9ef8-4e9d25baa73e", "indicator--69065673-2f26-4624-9001-d188ad080afe", "indicator--f84d1aad-8a01-475c-bdf5-f64a0e7a10e9", "indicator--f2136b8c-48e8-49a6-97e4-273403967dc3", "indicator--ad43ead3-b122-4533-95f0-7b2262eab2bf", "indicator--ef278c02-9197-48d7-a38e-f1ecf9cac86f", "indicator--c0d527c9-87ef-489f-9e55-58df6d5c9867", "indicator--7103cf22-633b-43ae-9bf1-7b90d7871fab", "indicator--d9a8d575-e12b-4e45-9256-44690a3ff8dd", "indicator--eb48dd51-fafc-4be4-82b9-773d2d02944d", "indicator--7a587458-63d6-4f6c-ae4c-de0272852ee1", "indicator--f1150ca7-6bd7-42ec-a433-1ef9120708f4", "indicator--79ffc2db-b2d4-4c1c-82b7-aca0b27938a2", "indicator--7d3f0866-7875-41d6-9c51-6ae388353cfb", "indicator--8c7a38ae-6968-4e22-8bae-ab06c356f219", "indicator--9cc725dd-706c-4afa-bd09-48aa725dd642", "indicator--cb651fdf-a863-4616-b4fe-c6e9facb7153", "indicator--bbd7cc9d-f233-4aef-8eb6-6ae8b43041f2", "indicator--817b5875-eb19-4598-9d39-b0b1a7d96472", "indicator--f6900efc-eaf5-439c-9d4f-3ebca60e10f8", "indicator--3740c4cc-6339-40b4-9d36-2f4a3d11d62d", "indicator--485d677c-4298-41fb-96a7-9c8bf9a834b5", "indicator--eb5b8112-eeff-466b-bf8b-d2418f6bf85d", "indicator--9a2ea879-418c-4fd0-b505-47cda06cc6a1", "indicator--e60d93ac-bd0f-48e7-ab72-092c0f51dcb9", "indicator--ad933310-627f-4b1d-83b8-0f29a6d1f20f", "indicator--a655c9a1-1d02-45b2-a22a-f2b8e3d51e7f", "indicator--7dbb48f6-c403-4f48-b584-1fe4a8042dcb", "indicator--dc312523-3f6f-4440-8811-9e5edb9bfb43", "indicator--5aa34bca-7f2b-4937-81fd-f68ef8e94f1e", "indicator--7533a4e9-325b-4352-857f-e2485374c67c", "indicator--84e84118-894a-4c76-ba29-c0b794a07a86", "indicator--29436fe0-43dc-4e69-b68f-c71690219c54", "indicator--b5a02d1d-6f36-4834-b340-a224d2a990e4", "indicator--32f35cbd-7a8a-4d94-b355-4822bcd15559", "indicator--742a5bf8-dba4-4618-8145-0f4fee0f8245", "indicator--5cbebec3-a8f7-4245-a5a1-0fd3782d03ed", "indicator--09327aa1-3bd4-47b0-b194-a77b47375578", "indicator--17e1b676-c3fc-4cd9-ba4a-3428978e0e30", "indicator--16618c56-4265-484d-8646-2094d86ccaad", "indicator--11ac384e-dacd-4909-bf88-2a2d9887c2ff", "indicator--1650c38f-afcd-4d22-844b-daacbac8d57c", "indicator--4177bfd2-e941-4687-b0f0-1126077d2a10", "indicator--8bf29c1e-3d74-4503-89e0-b66db37dc8a7", "indicator--0015be08-b950-463a-a44a-1230223ac867", "indicator--806bcb5d-5da7-4341-bec4-e3744d2a7612", "indicator--02752a22-b3f2-4b83-961e-643ae8473377", "indicator--4991e7f5-6299-45dc-9855-adac6657a371", "indicator--8f1938cd-5f3a-4881-a8f9-464aa8c5df0a", "indicator--f95d892f-65bd-4208-8bec-da099a612fb1", "indicator--a97f787a-05ae-4d17-bc83-3a3e3159a0e2", "indicator--f0696dbf-f842-4921-9ff2-2b0113d01de8", "indicator--bd8b0413-cdfe-4de8-b56d-63124b0f96f1", "indicator--9229727c-a6a2-4b91-b8c5-82d28479a54a", "indicator--ca49edfa-6914-4c4f-b6cd-8869ce99d28b", "indicator--a8761585-f0c9-448d-94b2-61335c28675c", "indicator--da1dd815-d8f0-4bf3-9cb5-afb1b9fdec38", "indicator--5965e1ce-8410-46ef-8d86-3620ec7fce8d", "indicator--69db3e44-832e-4414-8db4-bfbeac90d5b9", "indicator--909578bf-c057-4bc6-b185-35af5191ce2e", "indicator--3d0e409d-738b-4c61-8de8-1853eb6b84b1", "indicator--69333a9b-316c-43cf-8901-e5f760f0b7a9", "indicator--de9f8a7c-63e3-42b7-bd73-3d1564991599", "indicator--1efa3f02-4d2d-4fe3-9cc7-112906a328f9", "indicator--7ccecada-bff1-46e6-b5e4-3b2afeded98d", "indicator--995e48b1-f59e-4002-a17d-9cbede589362", "indicator--51a119f8-2c23-476d-962a-40a74171ee57", "indicator--c1499011-e3fd-441f-b5aa-c4e501652e86", "indicator--94bb4497-d62d-4aaa-a3bf-8b16db1c6a0a", "indicator--f4cc4b45-66b9-48a1-b89b-e5e63d07efd0", "indicator--893784c8-6a3f-4d9b-b5bc-6c17cb70c949", "indicator--26110323-4925-4f48-a665-5595d1d425a2", "indicator--801b65c1-1855-4c12-89f2-8726440303da", "indicator--3f657a45-0d2b-47b9-84a6-c0aa7490004e", "indicator--f062c6cd-8a3d-4279-9a1e-d07ba70eee91", "indicator--955ebe17-e6d9-4461-b209-8735e17fdadf", "indicator--e5aab1b2-2ebe-4db0-b1fc-5873ef8d240d", "indicator--c4c4c466-dd3d-4b30-8c17-b149a49cf73d", "indicator--30ac8333-b98e-4508-9c2b-9757848ec58b", "indicator--c512ffef-1c3d-4b3d-afdb-1e7cc6b549a2", "indicator--136d68a8-1945-417a-abbe-4f8ca1397a0c", "indicator--0e570710-f861-415e-903a-98221c9bc2f3", "indicator--72e6bb1e-a9a3-4700-af53-cc7fc42cd389", "indicator--74f5af3d-9c58-42d4-8b70-97c89e6ed4c4", "indicator--528de03b-d5c4-431a-99cc-979350285f32", "indicator--08ebfec6-105d-4560-9281-cc0a80f51e5c", "indicator--482be4ed-4f6a-4f1e-8cb0-238ec245a2e5", "indicator--03b5028b-7b78-4303-837b-62b3437d62b9", "indicator--20ecb98e-f0ab-4a89-a6b7-cfd93b12a199", "indicator--4d81b72a-ca7b-47d7-89c6-7ec493d09e10", "indicator--81742f85-d131-47a6-befd-710a09c31ff3", "indicator--bbfbf15f-80c7-4b37-9665-294e24da4c38", "indicator--dc409e28-217c-460b-95c8-6a1d8ffd6751", "indicator--b29354c6-2ddf-4d54-8b3f-deda50fa231a", "indicator--9d69c7fe-89fa-425e-b170-248d80dd4990", "indicator--e263807c-f18d-48cd-9b69-1a6e2eb8ab91", "indicator--f6f81ec6-85fa-4f1e-b6db-6143518ced8e", "indicator--91ef5674-df89-4d4c-a528-034fd0529c08", "indicator--6459b14e-253f-409f-a433-3b8e3c47f20b", "indicator--d0308df9-930c-482b-bd49-d7a015f6f2bb", "indicator--6cbe17f7-cb99-492e-82e6-4fcccc95d8dc", "indicator--5273cee9-133e-4777-b889-345cf949b429", "indicator--25e5eeb1-3bf2-41b4-9a16-5b51855812de", "indicator--15e46e0c-f38c-4e04-898c-1aae841ae74d", "indicator--24d15c28-410a-496a-b371-adc4239554fe", "indicator--67bf83fa-7722-4c2f-9825-f89e0f3476ed", "indicator--cd1579d0-54f9-4998-a820-614d6efd3642", "indicator--56e9337d-e308-455e-9703-d7246dbcc1b6", "indicator--7477f065-d52a-4f93-8f95-817b1ce4b0b4", "indicator--08ff9d95-010b-489f-afc3-f0e6b5574d78", "indicator--e340f88c-5b97-4406-b482-0b77819cb9d3", "indicator--bb55f7bb-d4aa-45a5-b2e9-aadc1bb05c60", "indicator--78e6a36d-2004-4b36-948d-6c11ca165f83", "indicator--69cc9601-0f9e-4ab3-a952-a0c082bbad76", "indicator--9c515cb7-7b44-4240-9091-603395c3aa65", "indicator--631e5ec6-2fd7-477d-aa6b-8f6e8ceed229", "indicator--96d10bca-432e-4540-8a1b-024174d4d503", "indicator--f46a022c-cc36-40ae-b8b7-23cafe74b16f", "indicator--92afe7b6-99a9-4ab6-aacb-3021dde61726", "indicator--deadf5c6-e1ee-4725-ab60-7cc21ee68273", "indicator--aee166ae-9c1d-452f-9851-3bf05aff940b", "indicator--0cd5e5c9-7ce2-466a-af22-b2d716faf4d0", "indicator--e8e2f5c9-94e9-4143-a09e-255ad444233f", "indicator--a53c2c72-6c9e-46a3-9658-2f1e08d0a56a", "indicator--f11ffa06-f01c-40f3-86e8-0184577acdd1", "indicator--175a4acc-cf60-451f-83be-7fba1cd1061c", "indicator--2d1e0256-9e12-4d53-8da6-376e8447285c", "indicator--9d772412-534f-4885-b0ed-c04c0d4d6e6d", "indicator--21287ba9-d6c6-4412-b312-883b5e87919e", "indicator--41ca0c11-2d76-4e95-b688-98893d682027", "indicator--ceda674d-4110-4a69-a80c-12d71082c5e7", "indicator--104d9f98-0b69-4e07-95d2-72e050bf5250", "indicator--7d814f79-a6ea-4d5c-9c0a-09b7155e83de", "indicator--838bf10b-4ae0-4694-b62e-a9c064de0557", "indicator--d4ab4e7a-814c-49a1-b89d-852d997fa445", "indicator--d41f0303-6f31-4f0c-b834-765340fd226b", "indicator--0a1f9130-3efb-4961-a3e4-eb6c38bac3e1", "indicator--dda833af-3468-4ae1-a7b9-23c4685ca25b", "indicator--a99fadf6-2c06-46d5-b148-d60fd4f20793", "indicator--afe9685c-9450-468c-9276-a66b54637ebb", "indicator--7658c5bf-e08c-49d4-b89e-c07907a62a82", "indicator--46b7159d-37b3-4239-ba93-69c0a158280d", "indicator--ba03d82a-3d9f-4d50-8a52-347b0483ae65", "indicator--e0780128-21f3-4296-8410-2cc359d4e861", "indicator--d50919b7-9ca6-44e3-b31b-aac866aab723", "indicator--c2e114ba-83d4-4dc4-9ce1-e9bdb1ec1ff4", "indicator--21184450-136b-4ad1-84c7-4a2cbf5a4790", "indicator--ade8a4d1-1d48-454d-92d1-2bc382acf587", "indicator--e457a32e-7988-4631-b175-45108baca012", "indicator--aa0927ab-f8c6-4fb7-97a8-2e87bf750ca1", "indicator--97ced617-5c90-48b6-a963-349a0b0d94b8", "indicator--9998349d-090f-46a0-9a34-bf87088b6cb2", "indicator--e4659d18-dc72-413a-9c03-c5f9fe490430", "indicator--c7b8a884-0800-4724-b89c-d7231093108f", "indicator--7f5b0dcd-2208-49d1-9d96-3bab21f2063f", "indicator--7bab2952-ab2c-4a3a-94af-7fcc6b116fbd", "indicator--e6853d69-447f-4643-a1f3-b8bdc2b35a38", "indicator--7e66fb3b-134a-4589-8bcc-9270a9048549", "indicator--770ef089-92a2-46f5-acf4-11fa41be4dec", "indicator--e200ee70-7ed4-4a1e-98f6-773585326c56", "indicator--3c25ff61-3a83-46d4-9ef1-bf57cc7bc455", "indicator--053e8d45-4062-4c9b-9b8c-a791d5f06642", "indicator--9fd547ca-612f-4ecf-9989-4b536feaaa73", "indicator--ff55dd49-92f2-4cc8-addc-c07715cc0baf", "indicator--be2664e9-34e4-41b3-9a8d-4e695956e9d1", "indicator--c57427d4-c56d-4b70-9605-8966654f029f", "indicator--e6e833ad-cad3-4ab0-be21-e2ec9461c408", "indicator--89dbbf46-1e5f-4b4c-abad-2c373beb033e", "indicator--1207bfec-c687-4a7f-b86b-91b27943f8e2", "indicator--95a111f2-ba83-4900-ac53-262a689e9ff9", "indicator--a3eb73f2-9c18-4a10-9ed1-831bcfc9c4a4", "indicator--50b047f1-db85-451f-8959-8c3dfece8f7c", "indicator--f8a21f3b-b037-4e3e-9989-551897dc82f6", "indicator--2fa5ff2d-8fdb-44b5-a6eb-dc196f25e5bb", "indicator--ef8b24b5-2aa1-492a-b7a4-f1a87b89b932", "indicator--6f81025f-ec28-4f3f-b85b-e378f6dc2f92", "indicator--968f9fb5-9019-4c75-bee6-e21d2d292736", "indicator--2aecce44-e341-4463-a22f-d0ca0417e315", "indicator--4feb89a6-6bed-40ac-b8ad-b1d427162ebb", "indicator--a2080df7-cd05-4a54-a43d-dc448d35da81", "indicator--c316abcb-075a-4b62-a4e3-45a4abfc55ef", "indicator--357d0523-dad5-4387-9242-4a75fb54a408", "indicator--5ed56a16-3598-414d-a031-686d575cf887", "indicator--5dfa44f3-bc54-4464-8af6-e1b488e8bb5f", "indicator--78c4cae6-cd6e-439c-9a61-38c906fa6e42", "indicator--dd9153da-3d8b-44ba-b049-a272c398dd5c", "indicator--d9950b70-6459-49ec-a6c3-234ba4f6985f", "indicator--51f70a06-d804-4ae7-bf36-96e91f2b2a1e", "indicator--0aeb8241-52fb-4a0a-be87-45921f8b85cb", "indicator--390417ac-2626-4a59-a082-5866814ea851", "indicator--5037151b-4338-4958-a500-28b6bbfb2333", "indicator--a039b7a0-ea09-4d64-bfed-ce15f836ca2b", "indicator--0a2acb5d-dd82-405f-85ec-c811883fe31e", "indicator--e451b8a1-0938-4fd7-b5ed-a2aad8a37084", "indicator--af84010f-6cb7-480c-9ae2-d03f118bfc3c", "indicator--791e8559-a337-44f0-a126-c96f8b178531", "indicator--ee130e85-1975-4854-911f-2df3ad32a0d2", "indicator--8b646677-1f2f-408a-8ed5-f0507fc23f11", "indicator--a2157a6a-ccac-4243-8c42-5f37e7aab1aa", "indicator--90edde88-6a47-47e8-859b-6d24ac4419e0", "indicator--a123add5-faab-4139-817c-d2c3459b1af5", "indicator--b613d24c-ba9f-4141-a3fe-008cffaca415", "indicator--de2be333-8a7b-41b2-91f0-11bca9977054", "indicator--32119bcb-7b42-4d67-8084-1e82e3a21b7b", "indicator--aa18decd-9a52-4d92-93de-60d3d8fa7771", "indicator--d4cbefbe-4cde-4024-8e11-d7dc90967538", "indicator--a082e848-fe47-4e3f-a1ef-803037ede3b9", "indicator--d23eed8a-9af4-433f-bf33-80331e5c5a67", "indicator--2e932c34-8bfb-4b9e-b44f-3df46a65c302", "indicator--13f0768d-82a7-4c5f-8616-f5436c668553", "indicator--e6dfe66f-b2c1-4669-b489-55236857f9d6", "indicator--82cc464c-5e31-4fef-b13d-fa73e43c12f4", "indicator--90026d54-2556-4cf8-b584-04c1a3d4e29e", "indicator--ff14e562-7108-404f-bdd0-8c69d40e1c74", "indicator--0fc6646e-e727-4659-a1be-bcfa9cc5722f", "indicator--840bb265-27cb-49dd-abae-2c7de96cb697", "indicator--b97f4525-0663-444b-84ca-f140a26786c4", "indicator--47a670ea-a8d2-43fc-b3ea-1f40e1b6daa4", "indicator--e3eaf1a7-09e4-4829-a50d-5e65a85e7572", "indicator--a5695c86-4d4d-4ca4-8a76-f49fd79130fe", "indicator--1d80f809-30c0-471b-a7ef-1e08fee1b0ac", "indicator--4bed0528-d1ef-4fe1-a4b7-b8db7d302ad5", "indicator--fdc32f45-0556-4f88-a0b6-84cfeef6ac95", "indicator--29ae78a1-c4f7-4080-94fe-b7b9d5f987ca", "indicator--0bbae4ee-98e8-459d-ad65-4a739d2f9d3b", "indicator--e168afa0-42ae-4152-acfa-40410be4bb5d", "indicator--dc04091c-58e9-44eb-89d3-91105c6c944a", "indicator--ca157702-4faa-46da-87de-6c9cac444a02", "indicator--925492e3-8026-4731-a149-a40cc0c4e90c", "indicator--8eeaf88e-ed5a-4e0b-9a73-0567df70d45c", "indicator--14584e62-8c3d-4502-a148-cef2f770e1f6", "indicator--6056bdc3-1c38-4104-827f-28f06fbd5c99", "indicator--8322928d-7c73-420f-84a7-828009630cc2", "indicator--f4770ff6-899e-4106-9c67-35b76941ec82", "indicator--724d05f8-3e89-468c-9114-b37545086436", "indicator--f5ce3a8d-b6fd-4d60-a90f-648ad15c3071", "indicator--eb4cb679-810e-483f-93f2-da6f2fdf2226", "indicator--69ee8cee-c30e-484e-b07e-cfa82d2f9b89", "indicator--1f9802d5-c22e-43eb-987b-668e6cc701ed", "indicator--d3197181-f133-415e-97d3-8c28e3cca0a4", "indicator--b6cfa8fa-b20f-49eb-a2b6-9dcb3468233d", "indicator--34095fa1-360d-4ec6-bd03-248aff61fc43", "indicator--c7a3a807-1c96-4b57-9cdc-10b7b40e2f63", "indicator--aef49de0-6f92-4f24-9b98-10546f070efc", "indicator--a1d1afb8-8e2a-4a95-94b4-dc8fe6fe1d90", "indicator--c64e6d95-71d2-46f2-8446-e9983cbc4f8d", "indicator--f28fffcc-1056-4e7e-9787-cc299ad0b245", "indicator--e0b3edad-f69d-4447-a348-0219b4e86765", "indicator--d8d95247-bbb3-4a73-8bc3-b514a5f1afd0", "indicator--b7a2cfde-8322-4704-88cc-6c7f1eb5e608", "indicator--69547aef-2862-455a-b60c-42256cb9fb03", "indicator--765d9aa9-fe84-400e-98c0-58fa15354277", "indicator--413798a4-172d-4bb8-a62a-0117b96f14a3", "indicator--f19ab4e0-ff3b-4ac6-88a5-bbda127a62a1", "indicator--60c3c57d-abc1-4299-be69-b31aa3fb56d2", "indicator--03c049ce-a3c4-40b6-b225-95a384b664b9", "indicator--15e299f6-be3a-4478-84d4-07bd26e4c61a", "indicator--ba368a58-dfdd-415a-af9d-76b7295252bc", "indicator--eabbcb70-030c-48d6-8f61-bb82d34909fe", "indicator--69098195-62c1-4a2e-8e4d-a2fc683e25c1", "indicator--25293274-84ef-4b81-a2d6-40997b190061", "indicator--51db02b6-c820-4cd0-8542-064b5e8527c9", "indicator--75e6233d-0b31-4297-91cd-0c1ba346c169", "indicator--6828b6b7-2724-48f0-8ac8-6c155bf6ad77", "indicator--1f4cbc25-a87e-4996-8df3-76e0d0a9f710", "indicator--1a3f5ede-0276-4a38-8e7c-65799ed1d904", "indicator--19e3a44b-c5ef-4c91-b424-4f9885905cc5", "indicator--6c9696bc-dd5e-4eb8-bfdc-5f10c643686d", "indicator--e2646e43-4811-41a3-bc22-55aa1ac7cdcf", "indicator--c08fcab7-1169-45ff-9da3-870280690c10", "indicator--e937f3f8-7afb-4376-a335-2402dddb99a9", "indicator--b94cfda1-c075-4eb5-964c-b4c8672cabea", "indicator--4b29daa5-db00-45c9-a7b0-d5613ddb5b03", "indicator--6bd4f20c-ee2e-4cbb-9801-6283d149e669", "indicator--b5aa072d-eab9-4105-b920-305185f9115a", "indicator--03490ffb-1332-4556-a6be-2e14f82888ef", "indicator--f1208097-304e-4b47-8ae6-5e06d74bb140", "indicator--b90274df-d128-411c-8603-8bad3b8f0b56", "indicator--421f3a9f-ee5e-4715-af67-de2b73817294", "indicator--af7a7acf-17b8-414e-b88b-e1dcded94af8", "indicator--b0c1207c-1089-4deb-bdb1-0c21072cc9c7", "indicator--410fa3b3-d5b3-49a5-afd8-2c4c2818e76e", "indicator--13053f89-bad7-43ad-9d06-5795535c58fa", "indicator--f6110049-63b2-4381-ab52-e90987a85e45", "indicator--2aca364c-43e8-412f-8b33-f0ed3937e42f", "indicator--5a324585-ea9e-4b30-8101-76d16dee60be", "indicator--84653be3-2b8d-42c9-91a7-833e6562b2fa", "indicator--657d393d-dcfe-4237-9012-4fc20b849347", "indicator--c662d7b8-b530-47aa-a924-d7776faac81f", "indicator--d9924f03-853f-4976-868b-a02ce53c7d16", "indicator--b5424448-5bc4-47bf-9eb0-9677ebe471b0", "indicator--99a3a095-396d-4fbb-b92c-07b421b15cd5", "indicator--da9b601c-395a-4d99-bd69-0085b94ab644", "indicator--55ac9808-ddea-4fd7-81fe-9e8200abe9d4", "indicator--fd19e771-fd78-4786-9a65-7793c8de127a", "indicator--6fe221ca-597d-424e-98f5-5bc210ec8970", "indicator--cff0e68f-1376-4f89-a540-bfc9c9dc1449", "indicator--cf0ce6b0-4c2d-4ac6-9f37-6bfaad82a049", "indicator--09b4bef5-27f9-42cf-b20e-c06cf10083d1", "indicator--e399a99b-0a4a-4856-a3df-5c0620529c55", "indicator--c59cddbd-22b4-4f74-96ed-4c19b5e4829d", "indicator--f71eeb5c-1e42-4c25-bc03-d56c6519ec1f", "indicator--241284cf-f17d-43cf-b199-491bc72d65ff", "indicator--edca6f79-de98-4a05-8b19-23793b0b39da", "indicator--6ca60ea0-d468-4b9d-b81a-fd8e99fbbdc2", "indicator--73bf6364-2f03-4af9-830b-8e9414062428", "indicator--af0a6e5b-93b8-44cd-942f-723fdf57b54e", "indicator--3e18b5ca-ea29-4c4e-9049-79e933edaa60", "indicator--f42726d0-fa9d-4e3c-bccb-82cb3c0e062a", "indicator--e7a10d6b-e6c8-4e2b-92d4-e5b9c461fd0b", "indicator--21b7e6d6-272c-40df-881b-e67f7590e7a4", "indicator--de6e79f1-e82d-46a2-aedd-8b4e2bb0e28f", "indicator--28968c20-c46d-43ab-8e2d-20be0fb3735e", "indicator--c372a6a4-1dc2-4d81-9603-f6683d01f524", "indicator--d0eee19a-ba23-4a45-821f-f0e08ffe8b3e", "indicator--13a37de2-e2e6-4516-9b83-5fe7b730b733", "indicator--a6218440-8f1f-4c37-a78b-4c6af4a9740b", "indicator--f55d48de-106b-44b9-900a-7e7fb272bf91", "indicator--e0015103-e947-4952-b947-fcc37eef0a9f", "indicator--7662ed4e-9cbd-4f23-a7ee-4a692c7d0110", "indicator--d068a175-3e30-484e-a772-7411e63cdef0", "indicator--35678406-98cd-4152-9c63-2b3ceae1966e", "indicator--76d4c6c0-628c-4591-97a0-4fe1777f7119", "indicator--ff11d494-9935-4428-b205-020cf96529da", "indicator--4d348698-85e5-4e99-b11a-636bdaea402f", "indicator--09057f1b-aa54-4d98-b523-1aa75e8792be", "indicator--bc953466-595a-4ed8-8d2e-fe7be855d745", "indicator--fa09cb85-d937-407a-8cc5-a61120e7f1f8", "indicator--177a2d97-1466-41c1-a5c4-efb70b1ff77e", "indicator--72bceb7c-4ddd-47b0-a81b-31021c9da5d3", "indicator--eb5fc794-0c1e-42dd-9433-ba408a758dc2", "indicator--a4cc2427-5400-4d4b-a539-3bb1d1a9cb27", "indicator--956aca13-ca85-41c7-b92d-6e3bb639ca59", "indicator--f7c41994-fe7d-4acc-8f16-dc5db1a43313", "indicator--387df524-c28d-4f6a-a479-11af7eb6bb26", "indicator--134605b0-5f18-45ec-a3a4-1b0eb8a5abbb", "indicator--3a1baa26-2ee3-4660-ae38-4b82c265107d", "indicator--cb9225d1-238a-4b71-aba0-8f234e1c460b", "indicator--d7085079-9d17-47a5-a98f-ede142867abd", "indicator--b2f169da-1d96-4866-aee3-b48ad8462154", "indicator--eed534b2-a5fb-45d3-85c2-aee83c9ff16e", "indicator--765f2af7-379e-46e6-b2fb-1fd9c8279a5b", "indicator--c2f2e212-a5e2-4723-81fa-222b51801222", "indicator--3a1597a1-8993-42db-bac3-5dc4c1f15a14", "indicator--e8be63f9-d91f-4f90-894f-127da8795638", "indicator--62c5aa84-b7e9-42fb-a9df-2e207e08c20d", "indicator--db3f2f2c-99a7-4bb7-a800-e33b4664bac6", "indicator--7cee98bd-a701-4c5b-ba54-1b01c87a237b", "indicator--fb3186db-3662-40bf-b1aa-5902c35ff0fc", "indicator--72f667d1-a2b8-4a69-ba73-49ce3d9c7a58", "indicator--22e162a0-16fb-4d7c-b8e6-0459b267b624", "indicator--54e0dcdb-a0a1-42f1-8828-462b4759102c", "indicator--3b6ba675-7a2b-4aca-aec7-e5762479effe", "indicator--2c3da610-53b6-49c9-8e24-73921df84866", "indicator--46048206-d1f9-4cf3-9d79-611108594a96", "indicator--1859a06e-071c-41ef-9173-956ac38c3443", "indicator--ea71ac04-e376-462c-b00c-a86e0023bfa9", "indicator--ac148832-3c9f-4dc5-a5f3-2a468444d260", "indicator--d84b0388-33c2-4a67-a6eb-6328096eda39", "indicator--36b2299a-7249-49b7-b6b0-227e463cc2ed", "indicator--e85b59d9-a4c3-4fd9-8861-9613ec5eee2f", "indicator--fb16e3c4-ffeb-42a0-92da-ec19243719fb", "indicator--16f6ed8a-f5c5-4b8a-8f0c-b49988fce4be", "indicator--823d7289-8f42-4970-ad30-0c0feef1b893", "indicator--72634f73-6300-445a-a80a-02ec20590d3b", "indicator--0d645658-ccd7-4a94-9b78-fbc7c3ab8388", "indicator--7b717fc7-2503-448c-a0a5-34d8f0110fb2", "indicator--e89774e7-c718-4ba5-8858-ea47b864697f", "indicator--eecc8233-dcbc-4888-81c8-785e28aa2691", "indicator--2059c5a0-5998-4b0e-a1c1-9999d4a594cf", "indicator--59cf225a-c98c-439c-a4bb-d5a8df8b0730", "indicator--6cda9681-8a12-4aec-8e9d-9e6e5864c0f3", "indicator--aa0838d3-d9a5-4018-ab53-1f4ee225b091", "indicator--a67a210f-4bd4-4bb3-8534-6ad7a79fc541", "indicator--7dc06f7d-f3ca-45c8-adcd-72b8f16d04d0", "indicator--3abe7543-059b-4e2f-868e-2b9ba97305f8", "indicator--5b8cf226-bb67-4e3b-9ad6-8410f4b870b3", "indicator--57c8d625-13eb-4ac1-9354-929732467c9e", "indicator--93ce9c61-7924-4147-83aa-bde0c879700b", "indicator--daba0f14-79cb-4d82-b47c-31123342ddd9", "indicator--c38fd45f-c58e-4c0a-94e1-772e092de15a", "indicator--19e79020-04e1-4d55-a224-da51f73ba180", "indicator--4abe8e99-2f44-43a9-bcf3-bbc6eec2b2f2", "indicator--6c972e0a-83f5-4db0-b6b7-ca085dd472e2", "indicator--978191ad-75ff-4728-bd89-ffed5cd5d1b8", "indicator--5d09ddb5-cb7f-4095-828e-b0456550aff6", "indicator--b7e70cdf-58eb-4d68-95ba-8ea6f5a612ae", "indicator--14762ea7-1f00-452a-8f9c-d881c74a0f03", "indicator--939516d1-1d73-4830-80db-5ec4ea10c5b1", "indicator--9703730e-8a47-481d-84ae-63b063487460", "indicator--9d362092-a358-4590-b18f-289b2e2d090b", "indicator--e653969c-e998-4079-9d11-ec4c790ea4ed", "indicator--caa9f6a5-edac-4e97-bdab-03a299dc8b6a", "indicator--62dbb1a6-dcfb-4511-80c6-27367a4641fa", "indicator--5983e416-05bb-468c-90cf-c320693d76c4", "indicator--78005709-a3c2-4140-96e5-4919dad0bbca", "indicator--c37051b0-3952-4d1f-a0c0-70f44cc981b6", "indicator--52beeee7-2a17-40a5-88e1-6cc5665c60f7", "indicator--29185d13-6f7b-4332-ac6a-e5eabe155598", "indicator--91519796-4428-49c7-9a33-a5078e56b602", "indicator--bd78e85e-6ccf-4bea-a3e5-9f360e44dbf9", "indicator--e58edbde-2c1f-4189-a16e-5bbc53cd0f1a", "indicator--73a5829b-8549-425f-9a8f-887f43e5acc4", "indicator--e787ff23-e6b8-4cc4-a193-200b6c1f6b54", "indicator--75cd9868-ba44-49b2-8229-62f11c597f54", "indicator--c12c2d38-f4ba-49ef-b307-1f4d3b902d32", "indicator--280de673-a6d8-4188-bba3-9b427fefc24a", "indicator--ea00a5a4-6626-49dd-ab7a-759d8e174529", "indicator--f9f58f77-808f-4d02-a71b-44e4c753a287", "indicator--a5b0cd76-770a-433b-8fa1-efc84908fd7d", "indicator--98b96439-8e22-4b67-82f7-b70773424e60", "indicator--727eb2ff-1480-4b31-9add-fc72e427434d", "indicator--20295c3d-2541-49d3-9c55-a1a937e89884", "indicator--1c18f938-a8f6-4500-8ef9-06d88754d09e", "indicator--16825658-fa17-42b7-b064-11a3097d2b62", "indicator--cb51d261-7570-4383-92e1-c6d8490b175f", "indicator--71158681-7cc0-4768-b483-3c20d7f2aa5c", "indicator--f3085a58-c2e1-45e1-8ee4-41baa9b05394", "indicator--787bc147-4688-477e-b96d-be20dcaaf164", "indicator--c5c0384d-49ef-40c5-904e-091657026d07", "indicator--c812af41-d1d3-4ec6-b0b3-c9312bfb0c27", "indicator--7a90706a-3e71-45dc-bf29-66e899166e84", "indicator--85934f7b-80b9-46b1-b3e0-72cc9db2624e", "indicator--ec1fbc9c-c443-487c-85a2-c570ab7d5982", "indicator--2bfdede1-30a8-4082-9241-a7384b014a52", "indicator--677e5a64-3b66-4cc5-9b2b-14cb4fad26e7", "indicator--134c1dea-13ac-4704-8eec-93153e93b63e", "indicator--700618bd-b770-4fd0-9778-563832a464b4", "indicator--c43372b2-9387-47dd-aaa6-7d04e1e1d4cb", "indicator--e8a677c4-6bd7-4e14-a82f-f3c1dbd302aa", "indicator--f4cb438e-4de7-498b-863b-0dd8b965ebaf", "indicator--1923831f-98eb-4270-8feb-621f1f5f7e65", "indicator--e968219b-8790-444e-9d35-3b6ca6fa7265", "indicator--02a5ceb8-399f-4387-a06b-037ed5a9b678", "indicator--d2dbb339-9fb4-4412-9fe9-d93839087b1f", "indicator--339415dc-5690-435e-8d8e-8ed1f640a7bb", "indicator--919ccea8-7d32-41eb-a02b-2841876662d6", "indicator--19959cf7-e4b0-493c-9bbf-abeb819515b8", "indicator--4dc6d8a7-5de1-4182-80b1-af0721020d2f", "indicator--de6d4dd6-865f-4b99-a6eb-a474ac11fe60", "indicator--ffb7c662-0397-43eb-8923-ba7400f23bfd", "indicator--9ab0e1ba-54ae-49e4-95d6-47573f4365b0", "indicator--924a5fd9-b458-4683-9504-d627555ded77", "indicator--c83a1422-922e-43b2-a401-a80bcfa09ad9", "indicator--ca52f82b-091e-48d1-a5fe-ac1df61d0190", "indicator--cbb3c74c-9455-4a29-b159-85dc3392b128", "indicator--1dc6bb7c-f214-46c9-abb7-b2244442665d", "indicator--fce7e39c-b1e6-45e1-8957-73b623ff3402", "indicator--318b223d-e611-4650-baf1-059baf7d8800", "indicator--04afb7cb-0057-4de0-9cd5-516de82ce5bb", "indicator--54bdd3c6-a566-4c45-9286-19d9bee65bba", "indicator--4c65288c-256c-4d41-adcd-6093652328ae", "indicator--fbb981af-9463-4908-9e1e-cf94aa8ac7f5", "indicator--7938ddb2-9920-459a-bb1b-934f318bdd9a", "indicator--528d3bb3-4f4a-41ce-9730-304346021bc7", "indicator--e4392eaf-a666-4af3-81a3-627adb00ad11", "indicator--716887e7-d86b-4406-9d5e-e85d4f784813", "indicator--ca82bb21-6505-4b12-85cb-2e6029805819", "indicator--8598b0dd-a21b-45f5-a92f-97b350c1d12a", "indicator--a92b6a21-e575-4eb3-85a5-855790430335", "indicator--fec3bee8-dd0b-4762-8a55-23332103c68d", "indicator--e2d500fb-ad2c-4e01-9a29-63898983c1ce", "indicator--923c65af-1e07-4f12-b110-7e1af53b9763", "indicator--f4d49c91-3a04-4222-98a8-24a58c3af49f", "indicator--2c89ea94-b088-4e55-984f-5cdca33473b1", "indicator--6eb8a459-0ea9-4b8a-9d2a-a00a2a1c89d7", "indicator--48731c1f-2262-49bf-a842-353c86d151a9", "indicator--9e9d988a-836b-4a63-a948-2e91bd017419", "indicator--840dea71-b9a3-48cb-8c09-72ffdf4ef418", "indicator--eb673bfe-66e9-46c7-93af-bd829ad693dd", "indicator--16afc989-34e6-46e2-bdad-9e86e48d0cfb", "indicator--dd34e822-13d1-4b64-8fcb-6d8e066746b2", "indicator--7d74ed97-568b-457f-bdd0-d8e4c9ef6cb2", "indicator--210bc117-76c6-4140-8b89-d452445ec0be", "indicator--8be3e1fb-c75a-4a7f-9b98-062daf23e523", "indicator--eaa68249-b16b-4b5c-a099-86c7e69afbef", "indicator--427a5626-6699-4f57-9e3f-a1885851957f", "indicator--4e94d663-3582-4206-b587-237e178a2639", "indicator--e5ca0686-c30e-43d4-b48e-3937c856641b", "indicator--99535817-68a7-4b6c-b638-fe945c306274", "indicator--fcb0ab75-5195-4cf2-be6c-91604a3b216f", "indicator--5a0bc346-99b5-42d3-b5ea-37610aa136bc", "indicator--065915e2-8a8d-4a64-9735-f500d9219850", "indicator--8ddb4127-5dde-4e89-b5e3-686e9be45395", "indicator--967c72f3-992a-4520-b1b4-65afa7f7b0f3", "indicator--2f566cba-cc86-4aca-9afa-7f1668edfb79", "indicator--27b9a743-7425-4a9e-9137-f98ea5e1ee31", "indicator--b2dbb30f-4316-4bdd-b48e-b7ff43c8aa27", "indicator--7f11e7ee-8132-4494-b28d-f9dbe6dc3f3e", "indicator--f87d214f-66a2-4fc4-a049-0f81413df893", "indicator--d622f65a-d72d-4d6b-bd5f-da48ce28492e", "indicator--d3efa309-bf3c-4277-967f-64e928a2880a", "indicator--0b498c90-d0b5-4028-b4c8-cbf0df1b76dc", "indicator--6b3e0bd2-b475-464a-be1b-d4b5a14ec668", "indicator--45b380eb-7549-4d8b-a289-d6212de32d3f", "indicator--4062ce82-9935-45b7-bc4a-7bd62a8258bf", "indicator--8d1a93e9-3436-4845-9ec4-2f940fdceda0", "indicator--e5c740be-e68b-4786-b44a-7674350d5816", "indicator--94303999-9f35-4e64-8e4c-e9e9366f3496", "indicator--09381907-6503-40e9-9d81-2e1e8bcd9048", "indicator--603bdfd3-2b46-4cc2-9650-16c5e11f9050", "indicator--6cfd2009-8966-426f-a0e7-91dc4dc101d2", "indicator--b790d824-f086-458a-89e2-ea34a480c741", "indicator--5201b082-f2cf-4045-ba80-5134e8c7709b", "indicator--aa5d8893-a881-46ff-812d-976619d3a09b", "indicator--e463d103-5e82-4366-a053-652bb0cd0049", "indicator--14a9fe4d-7ddc-4bc0-ad0f-17f988d10f2b", "indicator--81121fce-8d62-40f4-9264-f364b51eadb9", "indicator--dfd740bd-bb44-40c2-8c35-b2d73b70c684", "indicator--11c703d8-43d6-48ac-b81b-794285656729", "indicator--333f6b94-0131-4bf8-8463-4694e369ce38", "indicator--83d8b17c-5fd0-4580-9df3-0c35da3cd784", "indicator--e5e2eef3-e13c-4bf4-9399-01a1122df7a7", "indicator--5d787e0d-e57a-4140-b0c5-38fe0329a46d", "indicator--d5a56b44-fa65-47a8-913c-24c4e9807b12", "indicator--a79a9e95-2f91-46f2-b56c-e732bca53d61", "indicator--be1047e4-e4be-4c78-b415-7ce6eee485c4", "indicator--1863dd18-f5bf-4e72-a05e-f2aded9c7a97", "indicator--53c27099-ae18-492a-808f-09ce18b9bc1f", "indicator--a92b00d2-bc73-46e6-b553-bf90aa6185b0", "indicator--cc122d9b-c63a-4d26-bdae-5ea250d9c259", "indicator--ba8c2d3f-c095-4973-b66d-5223b6716aad", "indicator--cf8274c5-4701-4241-a212-a7882f12b06d", "indicator--1ed7fce0-f385-4332-8479-901005d7d407", "indicator--efa446f2-310d-441a-afec-c5754064182f", "indicator--46b784e1-2502-42d8-a539-66e3adf39332", "indicator--fd91ef21-5571-4202-852e-2ac65daafb65", "indicator--12044963-f5ef-4dc5-afce-caaec4f46d14", "indicator--d90f91a4-3552-4a50-82c4-4720196c5d1a", "indicator--f85fbdf7-3882-4b3f-9d2f-f257ff62e62d", "indicator--a428d731-4716-444b-abb9-635ec3720d5b", "indicator--00784e27-efa1-42f9-90c6-f5a8dfa2169b", "indicator--998f6f15-9ff8-4d31-b0fb-b2da5ab457e9", "indicator--8c14578f-ae8f-4f0e-9de6-cdcca5e3c4b7", "indicator--bf647c00-1675-4a2b-8a5a-0633655b2ee0", "indicator--2d29364a-7114-4863-a553-5e0ae9790828", "indicator--339c1435-2331-46fe-9431-efddcfdd8076", "indicator--a504dc44-d9c4-420b-8c55-28f2808f940e", "indicator--021ab222-b5c1-437b-bc8d-a6cfd7bce21b", "indicator--5fdafd49-4f80-44e4-aa65-f4fda4d871e7", "indicator--bcd150de-146c-4b83-b50c-aa170f8994ce", "indicator--41961467-6050-45a1-a802-347634fd95de", "indicator--d9645ba3-8c96-474a-a135-8b9488a65f4d", "indicator--5ee0f4a6-ca3f-4efc-b151-cdea92e748d6", "indicator--41906d80-c87a-4406-a8ec-45be60628612", "indicator--d1dfbce0-653f-4d43-9d7a-fb327f1a9d15", "indicator--848690ea-78ae-4cae-b49d-e8eae3851742", "indicator--e1ec129d-63e0-4508-a6da-564fe3a14ac4", "indicator--785ce7ff-50ff-4ffd-a59d-6dd9925b10aa", "indicator--d157f93f-a1b7-404f-ad53-2c63662c1072", "indicator--d8f09c98-f253-4f19-8afd-544ececdb7a0", "indicator--87902fd9-1b76-49f2-9ff7-1f0482c96e87", "indicator--23a24909-6383-4e40-baef-fff3242f547a", "indicator--7a245f68-be29-408a-b9e0-a58859bba456", "indicator--d03aba34-c0ed-4dd7-b8d2-687b94bd9bc4", "indicator--53aa4c26-a6d4-4d6d-806b-d5127f9f6983", "indicator--67803229-d2a1-41e5-b55a-1b90179efa2e", "indicator--036c17b3-d421-4488-b92b-f52653319e7f", "indicator--3280ca21-68a4-4ce2-90c4-33c516b499ea", "indicator--d1b01f60-56b6-4fa8-8dc1-91226a5393fa", "indicator--0890b855-e907-4304-895c-ba6c9b06642c", "indicator--798d15f6-dcb7-4551-af3e-3eacfbfe359c", "indicator--c46ec08d-2fd5-46f3-a7d9-6166a96b253a", "indicator--56d54368-a587-48bd-a305-bf1107a5ff05", "indicator--d3feb459-9522-4b4b-8487-dacac27bd9d2", "indicator--0708fc2a-5abc-421a-bc90-e643605f9b52", "indicator--8f991615-a84c-4dfb-9da7-ddf5277ac8fd", "indicator--5194bcd6-cda5-4c31-8218-9cc1dcc6ec03", "indicator--94994769-3dfd-462a-8b14-b5e2f59ae04b", "indicator--160b7beb-ed0a-4dc0-9878-95bac3080e38", "indicator--4dc7f10e-ddb1-436b-bef9-828a833da2d7", "indicator--ab2257ff-03cf-47d9-9d71-05ff545dbc2d", "indicator--e2194172-21d7-429d-a6d5-fd051eed0cb8", "indicator--2fba6422-2225-4630-aa8b-f54d84f4f4ef", "indicator--6dd0a9a5-41c6-45c1-85db-5336f2af41ab", "indicator--e906295d-9f41-4149-b4ba-2a81080ab0b2", "indicator--7ce16125-5cc5-4d6f-9836-858c059ccc56", "indicator--3875c318-ba54-4530-a467-ce6923d8847a", "indicator--29330b4f-cdbc-4402-ba2b-ccebc08d8e68", "indicator--8237911e-ba44-458e-9755-522b63c87e3a", "indicator--8fd325af-ed6c-4b30-8c50-af390e135d23", "indicator--dd3d6fe4-2baa-43c7-8519-3f785ba6a7a5", "indicator--3ae783f9-2578-40d8-9b25-babfad3797e7", "indicator--d11d4bfc-17c3-44c6-809e-8e4e4fef1c1b", "indicator--b454ee88-2fad-4e49-8179-5a644b053171", "indicator--02ac1b1a-4c64-4064-9b67-8dc50f555960", "indicator--4cee7646-d8a9-474d-b284-2b0dfde223e5", "indicator--1b5eb39e-fb1c-4676-b099-192e62caac6d", "indicator--1d445c6f-05e4-425d-83ab-50f78967ffcc", "indicator--9d24c9c6-914b-4d0b-9b7e-0f86a93a31e0", "indicator--0d19fc60-fc20-4ec8-82c8-8434f463a2e2", "indicator--00793001-bae8-4f41-a175-b60a66a6f5fa", "indicator--7d35e914-e723-4d42-a3fa-03744b9a3cfb", "indicator--5a9369ac-12f6-4525-b2db-4fafc0f1c604", "indicator--17fdbfa1-e7f9-448b-9775-ac347d9501a8", "indicator--2d21e3b5-d335-412c-a67c-6e2d79809aef", "indicator--0aaf1966-5402-4f0e-8dd3-fc83507ceffb", "indicator--c985f66e-b06f-49a8-bc81-9bfbdf039cee", "indicator--c7651292-9143-4dd9-9031-e18f3f4df8ca", "indicator--04d2c00f-1011-4247-9b9d-042a7ee06a03", "indicator--23f848c2-0902-44dd-a735-16d14b691f4b", "indicator--b1b01449-c81c-4a32-8ca7-84b147e45619", "indicator--4bc56add-36a8-47bd-8e2f-867bf4b4f311", "indicator--70266657-b9cc-4947-9422-975b2a65e42d", "indicator--fc9ba315-916f-4f85-a8cb-b784892a4eb3", "indicator--24c5f1fb-5039-4590-8449-35077637efe4", "indicator--01d9a5f3-2282-4081-874f-d973acccc876", "indicator--3fe9bc70-78fa-4d29-8d87-59633d49d097", "indicator--9b3e11f8-ea5a-446b-bc5b-af2e480efe79", "indicator--dd538cd8-6634-4a88-bcd2-eedc7c04e4bb", "indicator--a2b42f51-9926-4fa5-bd7a-7c177c823ee7", "indicator--739f0897-2f74-4f2f-b421-5975c0ae8281", "indicator--1341fe33-346c-4260-a911-4962d6ce61c7", "indicator--f66a2e9b-4112-4a4a-ac79-5e701f793590", "indicator--868bca97-ac6c-44ec-9bd6-375dc5c75c26", "indicator--9f1cbbeb-ca67-470f-b48e-da4d8c44f46f", "indicator--2b16b15f-a108-4b52-8ffd-067fb8040714", "indicator--f84dc43f-28f0-4b00-9a73-9b4f4fbb1415", "indicator--ba5de685-8506-41be-8345-9136b2ed0b6b", "indicator--557a44d8-9dea-4874-a642-58b7dbc26e8f", "indicator--989c5045-4c9c-4a1b-8d81-9716f9380970", "indicator--10b87679-801a-4918-a651-d643950ef9c2", "indicator--ce72e03f-371a-4045-a599-4504e29fe6ea", "indicator--10ebebd1-b3ef-460d-b4c2-4a236b642e9e", "indicator--829bacda-8be3-4156-9e56-75e96ba0feec", "indicator--a39b442d-6f2d-4d46-b283-8982711f3163", "indicator--be9c6922-1802-498c-9764-cb0dd39c05c4", "indicator--559b9598-d11a-456c-9877-856122df9afe", "indicator--6b799664-1cac-4e6e-b4bb-a6d52191b9fe", "indicator--d658613a-5180-4223-9de4-cb03b255c300", "indicator--f5361ea7-f160-4a44-b761-710acf88ccfd", "indicator--281e847a-af9f-41bd-88cd-dcf03e708104", "indicator--00fc817f-910e-4e0a-8141-7729f52342bd", "indicator--8517b307-b00f-4427-b5cb-ebf5aa1d13a4", "indicator--2d9832f5-3caf-4410-90ad-682a30336f06", "indicator--82281f81-6c8e-4893-9cef-eec159b5a702", "indicator--87248a02-2a17-45d4-882c-cd60e8d6b6a2", "indicator--f9d07545-dbf2-4ac2-9934-2c4b69acdfb7", "indicator--e181906a-d83d-4265-91b8-53e3246f13f9", "indicator--877a6e09-a52f-4962-824e-8e940ad068c2", "indicator--4512129b-32a7-4d8b-948d-b8418a1351cf", "indicator--1407953b-bbe3-4572-b6d8-a9faacbe63aa", "indicator--720c2544-58c7-49b0-8501-b8704445e442", "indicator--0e327ada-3909-4c48-a25a-188c82153bc0", "indicator--cd920ffe-5512-4d83-8366-d568de88dca2", "indicator--2dcafe68-2250-4acc-af94-ab7eea83ba41", "indicator--9d6c663a-5883-49af-b13b-bbf4c7b086d7", "indicator--45eaf44a-8491-4f82-866a-6ffb0e6f54ab", "indicator--0bb90239-5398-4d4b-a5ca-3162f5c093b9", "indicator--4e6ef886-7bd1-4be2-8433-a0d4fead61fc", "indicator--5ca4202d-5c13-47d3-97b4-b33679527adf", "indicator--a692c2e8-1c09-4517-b566-c812266fc289", "indicator--7685d450-3a3d-4f43-8294-e08de07db46c", "indicator--7d93dc76-5791-42b4-b3d7-7f314b32d74c", "indicator--84ca5a7a-884a-421c-861a-cc57154ffcad", "indicator--6cae62dd-d018-42bb-b1e2-b2d732277a5c", "indicator--129db2bd-d256-41ca-bdda-479390042d14", "indicator--0ee96cac-1bad-4d4e-b34b-771f1d9da54c", "indicator--482f54d3-aa3d-4a18-bc3b-6f31465b39df", "indicator--07cc9b00-71f6-4f69-98e9-6f0ec50fd1e1", "indicator--68f97491-9fd6-4524-b965-4cc01c146667", "indicator--f3070727-f4f9-49e2-b3a0-8e0998d48504", "indicator--29a582af-5ac5-40f2-865a-e82dc1e3ab18", "indicator--40b043f8-9aa1-44e3-8036-6cfbb79ecb84", "indicator--7045bc92-09fb-4e2f-9166-df677b6e1637", "indicator--fc75ea81-227c-420f-8b18-72238aefad6f", "indicator--c7943447-5928-463e-8de4-d10561894d02", "indicator--05df555c-c284-4230-bd21-b10f781e6cad", "indicator--db24925f-ff10-49e4-b1e0-94116e1b55b8", "indicator--faf50eeb-ebe2-4dba-a381-68c8cdbf1dc7", "indicator--314142f6-1e68-477e-ae50-3316536856a0", "indicator--e1633153-81f9-48ab-9b37-2d9f7fc6db89", "indicator--e8bdb269-46f5-40d4-b786-4e97b90fd974", "indicator--ea2905b2-cfd0-4b0e-a808-5d491a4d2306", "indicator--844ea54a-5485-4ca7-bd95-0e5a3e5b9295", "indicator--f0ea5de0-8228-4739-8395-f3c3ad0c9a46", "indicator--8ccbcb72-4f80-43d1-afe6-c5d2f4302bf9", "indicator--407a1efa-0115-46d8-9ca9-ef7bf7b1ad7c", "indicator--0a19dc29-6fea-4118-adfd-d414fe3658b0", "indicator--b8db5cdd-ae73-471c-a2ef-ac34a760ffad", "indicator--a9443abf-317d-45da-8ecc-3b4bdc1850d3", "indicator--f96abbe9-cb75-4bb0-b986-3674a1f2635a", "indicator--5963a127-33dc-4103-8480-f2f1d4f2c434", "indicator--d291b736-8eaa-4d47-91b5-b033cfb70005", "indicator--829e85ca-dbd8-41a7-8b89-176000f408b9", "indicator--3a4d1484-bfe2-4e11-9a60-bdfec3469cb2", "indicator--bcd2407d-acc6-478b-95e5-f193139a282e", "indicator--aeeb383f-2771-43c5-9509-a036540f15fb", "indicator--f4a547ed-f5c3-40e5-8611-a2e253ce396b", "indicator--dd4a5501-f18e-4e3c-b650-cfb91b7ac384", "indicator--677e7435-5bbb-405a-89d4-cc4cd1dceb24", "indicator--dad3e7ac-009b-4905-998d-9d9e2e1892be", "indicator--5c622dcf-cb93-4fcb-ad5d-52d5d0a53f76", "indicator--eef948f2-c2b7-437c-bc81-984d6b19f98f", "indicator--da491701-bfa2-45ff-94d1-bb6b6f0f5b30", "indicator--994b40cc-908b-4628-8ecc-e9c2c3ec1902", "indicator--be83c2a7-7005-455b-80d6-d3d4bcfa43c9", "indicator--6cc64338-87e4-494e-bd2f-989e67bbea40", "indicator--8335c4d5-77a5-445b-b270-4075fb2715da", "indicator--c1b0cf96-741d-4130-bbe5-389ea491c7d3", "indicator--905d47fc-51dc-4b55-88a7-1aee5329553c", "indicator--1ad08fc6-5ddd-42bd-be8c-71a13d035680", "indicator--c1c39a99-6c9b-48bf-936c-ed85dc8ee314", "indicator--bbd40156-3dd6-4da6-93db-9f46861e2247", "indicator--bbd7403f-7c83-446c-9e34-65f8d26cabad", "indicator--ffeef163-804f-4ce4-8313-b5ab7cbf6232", "indicator--3efa4e2a-4ab2-4429-89c8-2eb6014ad33d", "indicator--aa0a672e-a74c-46cf-8da8-6403aa45ea9b", "indicator--54f9278b-15d7-488a-a919-782ca741d843", "indicator--02f63c03-3cde-47d8-af69-9a395ad3dc61", "indicator--e00db762-5c27-46bd-9cb0-123279636a01", "indicator--5e0bae51-c3c8-4014-84e8-45e2f0c07f23", "indicator--0cac6b55-b7b2-4f1d-aa75-ac7d5c2840b8", "indicator--3e0f23a9-a6c0-4a1a-9840-679f74de4799", "indicator--53175f5b-08a9-42f7-a430-ed9d90c8e7b9", "indicator--bf2904fa-d22d-4db8-8241-7bcb9a098ee7", "indicator--46a8400b-3082-446b-9d1f-c8b4f10e3680", "indicator--cb52cbdc-942e-46e3-8fe2-8f71684e1695", "indicator--be662f8a-4f66-48a0-ba74-ca21d34e9bf0", "indicator--25b50521-769b-45bb-a352-31a7b757255b", "indicator--17273b20-b002-4d1e-af89-ede3502c01ec", "indicator--c7c64a8f-1f69-4fa0-aa6c-a4b108b6f82f", "indicator--25948c86-f1d0-4b68-a295-d5d7525fad17", "indicator--bce55352-79ab-40d8-9b99-5cefb3596a83", "indicator--7ade7b00-3eee-4c9d-9c00-82bcd33923f7", "indicator--d37dcd03-d20b-4ab4-8bdb-24352430a3a0", "indicator--53bfe1d8-010a-4571-9d37-953cad4cc4e2", "indicator--270c7c69-5699-4f5c-a227-3c56b0dfa950", "indicator--3c374a4d-3c57-442b-91bf-2209daae87a3", "indicator--0b6accbc-ae61-40f1-b96c-07b0db717f0c", "indicator--896173da-ca64-4fd8-bded-afc563b8156d", "indicator--4fbaf729-dedc-4abb-9643-690ebc3c0da7", "indicator--e0b3fd07-9585-44f7-a895-18e89bcea1f4", "indicator--d878b824-36c3-42b6-a881-86aea44e300e", "indicator--103f9264-78a0-4c9a-94e5-8b46070c6b7a", "indicator--4295f0a9-8d75-44f1-ae71-0fe232b854ae", "indicator--6f81029c-fdcb-4785-96b7-e522e1c09009", "indicator--40b1f5ff-057a-4cc5-8968-a2c36dcb8b47", "indicator--adc7bd72-7750-4278-820c-950dc6855f78", "indicator--c0025b99-5bbc-45b8-adff-00db86883dfe", "indicator--5a20131a-f4e8-4178-8450-6581926ac22a", "indicator--34e54a63-d0f8-43e8-99f2-498320a9311e", "indicator--02793e1c-1228-4d59-bfc5-feaa4ac9720d", "indicator--a6431ec9-b5c6-42f6-9ac5-23768f3396c7", "indicator--e7b251b6-4738-47d6-b16d-1c9893818a43", "indicator--7c71c830-3e99-425e-90d8-4ca2a4bc133a", "indicator--dfc97fae-8cd5-42d5-b342-17e2bd58433e", "indicator--34e67ff2-0c6a-4820-ad1d-d0cb3cc10610", "indicator--47719349-3f55-4d7f-882e-806d3dd26541", "indicator--25aed255-fc88-47d7-b4f4-6f415f054a91", "indicator--a8fa023a-f1b5-43d4-8c67-7fdbe5781751", "indicator--cb9e9f4c-0b5d-4cde-8444-6e24265e251d", "indicator--42f6e660-8b42-49d9-84ce-faa6801bcfa4", "indicator--6a5d7397-34a3-4599-b72c-3831d72ead78", "indicator--790d7596-bb68-4997-b07c-d6f39412a78e", "indicator--016dc81a-4da0-4d4d-9edf-eccbc7f9508f", "indicator--cd72cc37-98e8-4c2f-8e99-89fc7bfc899d", "indicator--2356e10e-4bf1-415b-b007-fed94b389e27", "indicator--a55820f1-531b-4ae7-8752-3e437c06bde3", "indicator--dc859a3b-b5d0-4d37-bb0e-b199352df7d6", "indicator--78641d73-7ce5-43d0-a46f-5f95194b212a", "indicator--1d601738-0001-499b-bf8d-68d873ba3816", "indicator--50d3c452-2f8a-4ad5-9dd0-2818f06c17c4", "indicator--76211359-9bd8-488e-b76f-d550619018f3", "indicator--1fe1eb3f-dd98-4df3-b2a7-b537b82703db", "indicator--11178e67-cdb5-47fe-9a78-9e3d77c8bd90", "indicator--5b650cde-d501-4891-b0d9-5c717ada9843", "indicator--9cd9d86d-72ea-4bf0-9148-88f102d59abd", "indicator--15d2c138-1912-4b1f-bb4a-36f6418ef00b", "indicator--cd147543-770a-4d6f-a008-dcb130a6bd78", "indicator--a023318e-1fc5-4f48-9b4e-ebda2ab39e5e", "indicator--c12b93de-aefc-41bf-8256-c09f24b7aa8b", "indicator--22877058-2c9b-4a06-9d25-d5a432350297", "indicator--7419c6d0-aa0f-4c60-906b-331ab4f87a04", "indicator--d728b0cc-cd70-43fd-9fc9-ca7cd5a39c63", "indicator--82b3298b-ab41-4679-9973-8ac2098e82dd", "indicator--2b3e28b3-381c-44bc-951d-5ecbf0bdfaca", "indicator--b2e31729-faa6-4550-8e34-a1a95d4e4587", "indicator--23fadb6f-14d3-423a-bc1c-e7acf87a7e34", "indicator--c0ecb0ac-9d0a-46b6-9586-b64a8b093cc9", "indicator--ef6facff-6ed4-47dc-9c13-845e3b4e0479", "indicator--9a1038cf-f71b-48b0-af44-7b0d55552ced", "indicator--1fe4ea2a-8678-46f5-94f5-c5e9dd579779", "indicator--36da9fb4-a431-48d5-828f-af6706cb008f", "indicator--7b3bd19c-5c9e-45be-b14e-0e5e7118c9a5", "indicator--0d18e3be-f1e9-4da6-804f-9a3f601ca2ed", "indicator--ed476b42-0500-4181-bd57-95d2ebdb5dd2", "indicator--c9ac1bcb-0a9f-4b58-91a0-1c7fda08accd", "indicator--3e718c9f-b556-4ee3-9c37-581e429dbe78", "indicator--f6bc42ac-8165-4655-a411-4e6abd4303ec", "indicator--ba37638c-75fc-480b-925f-cdad1e9f4e0a", "indicator--86ace8f0-dfba-424d-9c7c-0dba4c76b488", "indicator--8cff777f-7d3b-4620-9321-8384159d6e35", "indicator--8bd9607a-02dc-4bd3-bec5-376d03c26324", "indicator--934e76f9-25b3-49a0-986f-d6c2d55ab823", "indicator--717175eb-c997-48c8-b917-912e35c66cd7", "indicator--0a80858c-f0d3-46d0-b40e-6724f568cbac", "indicator--4855b474-7284-42da-bd55-a192fcf913b6", "indicator--fedc3a4a-09a5-46ab-a72b-3b20f84ff70f", "indicator--f28ef65e-a07d-47e9-81ab-1f9549ec8806", "indicator--1effec5b-686b-4226-bef7-fd8b04f49dc4", "indicator--7468ce3e-305f-4bdb-8498-4c9603f0d2e7", "indicator--b510c2d3-2e6b-49f3-ab64-a34e774abc9a", "indicator--95167fd4-cb3d-4bce-b916-065924509570", "indicator--dd55ac31-7fb3-45f2-bfb2-de3dc1ff5470", "indicator--d858a68a-0d2d-4ddc-b340-25b2cd5def31", "indicator--71c01479-5ced-4681-b0d4-3edc7bc42a0a", "indicator--1ac26b1f-283a-495f-be0a-1c7e99a067aa", "indicator--583da801-e62c-420a-b774-1e6140411bab", "indicator--99ee19a9-a515-4f96-914c-81dc58bdd016", "indicator--a70fb1e3-786c-4544-9128-c38723cb15de", "indicator--caad7f84-d0e3-4c5c-aa06-8d54f6f23eb7", "indicator--0bb74753-707c-48ad-8a05-966b997f7687", "indicator--9c1c4dfc-98c4-445d-86e4-665bddd57671", "indicator--b2ce09c7-6c96-492b-b2cc-9aaa851fe83c", "indicator--4f01bc5c-e321-4f69-8df6-82edf5410d00", "indicator--167cd45a-9327-4ef6-b224-597305d68a57", "indicator--56451022-e137-40a6-a4e1-549700ea0b33", "indicator--29e3a0e3-5286-4a40-b2c9-ef2032474393", "indicator--0c5bd3ad-2aca-4065-adf5-954bdf893780", "indicator--936e090e-4485-4a35-aece-4dbd38aa343b", "indicator--125e7a5d-7c5e-48b2-beef-37428c35db3e", "indicator--bfc47e7d-67e4-4f33-9684-6710cf5ca104", "indicator--f47fcc9a-eddc-457e-823f-11772beece5c", "indicator--b3ab24ec-0e1d-4e81-aab9-4ea956f52417", "indicator--1eb8b63f-eee4-4f73-8ced-17e377b211c1", "indicator--dd721b52-1c33-4859-a7bd-f12ced38624c", "indicator--7792d090-0b25-4ea8-b9d5-0c11bdd618b2", "indicator--cf8bb172-3275-4e6b-8172-41364dfe5e35", "indicator--9b0cefb1-a4e3-442d-9ee5-decc305505f6", "indicator--93505f1a-362d-4fc4-8a6e-050d5455f12d", "indicator--1496da31-d600-411d-86dc-490a3e60480a", "indicator--254b2d36-5aff-47f2-8d27-48697a005b80", "indicator--0107d668-f000-4e38-9c6b-7f79d649e6aa", "indicator--113eac2d-e9d4-4b74-9d99-c54786766caf", "indicator--6e0a8716-770b-45a6-aa53-80688717032b", "indicator--f022e633-9664-41a5-a28e-4455c5242c5a", "indicator--1a685221-205d-4019-8dd8-52e22158bd86", "indicator--adfef0cd-8cae-49c0-a66a-cfa94ddd6154", "indicator--1f0d69a1-ff33-4224-aa7d-c0716304120f", "indicator--e7dffca8-8bc2-4ab1-850e-f5d7abe7d7d6", "indicator--293a7db2-ae87-4728-8fbd-30f578118065", "indicator--5bc6c0c2-69a2-486f-b335-3b8e1219389b", "indicator--cba1b137-2672-4380-855b-f0cef1a8193b", "indicator--18cdaab2-8c9e-48aa-908e-9b1354407d2a", "indicator--2ee60f6b-a011-4581-aa52-bdcefd7f758f", "indicator--3752f11b-47ec-4a85-9544-5284e8ddaa93", "indicator--f2d7b568-dfec-460c-9718-84504e3eecbe", "indicator--c98de2bc-f258-4f15-a031-934427353cd4", "indicator--4d1af287-f285-4744-a36b-a02fdea47e83", "indicator--b6c3f9ae-2921-4094-b1e4-003812441c17", "indicator--c875a1d7-6135-4b79-94fe-5fba383dc76a", "indicator--7bb12345-1785-4416-aa44-46ff620dcf7c", "indicator--823264d8-72fc-481d-94a0-c0d8f0e7852a", "indicator--3a718697-dc43-4d0b-9950-8dbe92e6537e", "indicator--022ba8b8-71db-413f-a210-4f40f798b12f", "indicator--004a2fba-008e-4779-a5df-8a099c54cdba", "indicator--68f7abad-74fc-4c83-82c4-6d6883a5fc46", "indicator--354fe687-ea36-46b8-9ac4-0d99e92349ba", "indicator--e626b68c-2cda-4a30-a83a-f89eee0de844", "indicator--b4de85fc-0e7e-4517-94e3-20bc077defb4", "indicator--5f02c658-46dc-4254-b142-38f3414f79cb", "indicator--ba8d59eb-a136-466b-a6db-9c3d02b07163", "indicator--4382ef92-3749-4ae0-8ec7-edb4ab575ca4", "indicator--49c47f30-897a-43f2-ace3-2b3065173b54", "indicator--aa7fa2e4-5aa9-46b1-9625-7fbfc707116a", "indicator--ccab54d5-419e-4b1b-ae7e-c7dcbd34687f", "indicator--f9124888-d18a-44ac-a0d5-f561c8883cd8", "indicator--70021095-4fab-48df-a313-670a3c8498ba", "indicator--948a5d2c-a66c-4f0a-8aed-82bc78545912", "indicator--b169e9c1-a505-49e3-b381-8966d0f6c57f", "indicator--659396b4-2935-455d-b63d-0da240792395", "indicator--02617538-3096-4f94-b697-29df0026bbd0", "indicator--57ab4e35-1ede-4c85-ac39-141ae2b33665", "indicator--e65cbd57-671b-4a78-b9c0-424ca0b6386d", "indicator--5e05dec4-36a5-4a63-a67d-d06a59d1e7ed", "indicator--b9d0ed6f-68ad-40b0-acb0-782cdf042ec6", "indicator--e717d8e7-817d-40ef-b5f1-1fe08efa89b7", "indicator--5adc6103-daaf-4c1b-bfb9-762696eca91f", "indicator--f8712dce-a213-439e-8816-97f57eee50e7", "indicator--3ec2683f-a749-4410-a768-1ebf175960f7", "indicator--5afec7ba-d810-41d0-aa98-e764a48375c5", "indicator--8938f6e8-b12d-45b6-bd33-1ebaa5229e9a", "indicator--80bcf59c-34ee-46e5-8132-19fc66b8e188", "indicator--58fe751b-fea7-4840-be15-694209ddd8e0", "indicator--68c66707-b4d7-4d36-804a-ba2607c15e67", "indicator--a46c8de5-6533-43ba-8c08-4fc5eb23ebdf", "indicator--6825d2af-86b4-4812-8fb8-1bd0dab7aaac", "indicator--29293aa8-c3e3-4363-b86b-b694e8fc43ee", "indicator--abbcbc9f-67e1-453d-b655-645b0a3c1dfc", "indicator--351dcce3-f795-4535-a2cb-bf165fbd5d02", "indicator--58d3116b-d37b-4146-96a9-a582985fd13b", "indicator--c971941c-362d-4eab-bb42-8059716562ee", "indicator--fc1fc2fe-ed0b-46eb-b9ff-43b128e5ad3d", "indicator--20601c99-95df-4e20-b127-df65998c2143", "indicator--bf2f9b61-c836-4e02-bf4f-6716bfbd814b", "indicator--b4c5508b-70e3-4b38-ab0d-d9a6129bead4", "indicator--a364f6fb-49c5-46f6-80e8-2c2917e30f90", "indicator--fb88824f-0886-4048-89c0-49ee592bfbc6", "indicator--e58c7837-4c3b-4c9b-b732-befd20f0239c", "indicator--c14765ea-1840-4d39-93e0-b2773bf15126", "indicator--d4e5a638-cfcd-4508-9da7-8a19fac9578e", "indicator--70bc0499-c0c0-4c6e-8772-dce469c1812d", "indicator--2c63eefa-70ca-402e-89f7-2678f803c79b", "indicator--a074d41a-76c1-4729-8f2f-63907a7f2760", "indicator--1fb7ca79-bb05-422c-867c-1895c8282439", "indicator--e40c05db-0df1-4b0e-b976-34d332a2105a", "indicator--2c18c309-e3e5-4919-8f3c-eea6a29f5315", "indicator--caad62d3-6573-4eb7-9247-43f0696e6e66", "indicator--fff7454a-2163-4b6e-8224-ab03f0f08b7a", "indicator--e95503da-c48e-4d13-8c92-6b7709048aaa", "indicator--44fd5e7b-8b05-4702-aa73-8d13f4939d33", "indicator--0c3e43b0-1a8a-41eb-8ea2-29cfdf967997", "indicator--225308d0-35b7-431a-a39c-c42ddee39387", "indicator--4c4fa576-6f4a-4cd7-877f-25112ea63c19", "indicator--6e0ac9ff-388f-41c6-ab79-3f8213ca89b1", "indicator--ae4d0904-bdb6-4744-8c24-0a98c6e0c317", "indicator--c29e2070-405d-4365-932e-bb19cb1d7e68", "indicator--842fbfc2-4031-44e8-8e71-f97e369425d6", "indicator--a00e2224-b130-463d-a521-0a6aa660c415", "indicator--63132055-1c3f-4071-929b-6f13b708ed0c", "indicator--4baaab23-2b70-4a4b-b8d8-ca3c3446c120", "indicator--b0ef5d44-aad9-4d92-9b28-e1d09e63fb49", "indicator--2bf73487-f825-49f2-81a5-d429ad9bdd9e", "indicator--24c2b118-310f-49cf-8dd0-f5eb5c697acc", "indicator--84526630-62c7-4709-a511-94033fd640aa", "indicator--d0c15345-e106-4a58-9395-3e82f9fd9079", "indicator--b80a9f5d-d9a0-4c1f-b3af-233b1683e6cb", "indicator--4f608e2d-3bb6-427f-b27b-62665c098850", "indicator--6099a5c8-392b-4312-833c-2755ca19d063", "indicator--f9c3fd30-39f1-4d9b-a7c9-74b5c51a959c", "indicator--9c10510f-cbaa-4d02-b140-20687254e447", "indicator--605c2988-c014-4e49-aefd-0a27408b94db", "indicator--56ad92cf-c3ce-4fb8-8b9b-f7b5695c7736", "indicator--47c24fbc-feb8-46d9-836f-22e35ca5bd50", "indicator--e1a1eaf5-d49e-44d9-ac36-f0f2d518779d", "indicator--46602165-a4ae-4424-9003-9eaa8d9e7a31", "indicator--61fcf12e-665d-42e3-ac67-a986f6b526d7", "indicator--713ac23a-79d2-432b-ac7f-57953421327a", "indicator--c3f8216a-d9f7-4c56-82b7-de0e7f8742f9", "indicator--67cd33b5-b79a-4ef1-9182-d09261147f41", "indicator--e6610a03-4e34-439b-848f-e924b36d2f58", "indicator--a3363913-1866-45c6-9cbc-e3c60e9829a3", "indicator--1d8a080c-8214-4874-b1a7-f5d1d19ca166", "indicator--5a96772c-c5ca-4604-b766-baa453c42721", "indicator--15949220-f220-4ff7-9648-b74370be0b1f", "indicator--2a822335-8fe3-4975-afb5-679d7463b6a2", "indicator--c591b454-5d09-4c4b-952f-f9289b0357fa", "indicator--3687725c-ba87-48c6-bb44-ac48c65c50c6", "indicator--af3df833-46d0-4bf3-b8a0-17e58bb07b69", "indicator--9689dec5-080d-4734-9fd8-0984c5870ad6", "indicator--7c0fef6e-988a-4088-a35a-23a87f1cba25", "indicator--026da5a2-7c16-40ef-a0ab-299a2fcbed84", "indicator--229e5adb-35cc-4580-b5b2-eaeef9cbe993", "indicator--30d9658b-7be8-43de-b1a5-a9dfef796306", "indicator--0fc499e3-46a1-46de-b5ea-c5d0cf7f6e68", "indicator--fec2f19a-5730-41d0-b5a9-d5b231bc0e9f", "indicator--3b9ff3bb-5b42-4349-8278-b39df6e6cca0", "indicator--09098170-dad3-4572-988f-67245a53d774", "indicator--65e40695-878f-4a73-8cdd-3685fac4d50b", "indicator--8e5d84f3-412a-48eb-aa39-cf541495e93c", "indicator--cca50f77-7f93-412b-8f5f-9f48fc2bb137", "indicator--a788b263-7be0-494d-8d77-5c8408445235", "indicator--3afa09b0-5eaa-457c-ac1b-410084627c84", "indicator--0d190275-34d3-4099-87bb-d36753551a6e", "indicator--a8f35708-ff28-43b8-be55-daef9131bcb5", "indicator--c2512830-38f2-457a-9bea-eb533754ed2f", "indicator--73965b43-b3fd-4173-a257-b36f47c23061", "indicator--11a11c98-b84e-4a4a-a18e-03d6853a8dba", "indicator--59668511-005c-4862-ab8e-1845ab943062", "indicator--92af26f9-61f5-42f0-a568-70583a4802ed", "indicator--023bf3a5-dc47-481d-b2ce-1bf5e8f95e25", "indicator--9d551702-b8e8-4b63-850c-19bf4a524f82", "indicator--60b8ac49-623e-4a78-9f27-fcf4848430bf", "indicator--fd7ab64d-282e-4a8a-ab96-6c7f3d92b065", "indicator--c45e4e5a-d6ec-42ec-9f1d-e945c6dc4c3f", "indicator--a4b71c08-93ac-4f7f-b143-6c982be9ebb0", "indicator--702e5457-d206-42ea-b252-0f91c6696a8b", "indicator--bbe745ba-f4ae-4d4e-8e1b-18e11340578e", "indicator--3d578e2f-0db9-4aa7-90e5-ffe9b1cf2e59", "indicator--9cb9daa6-f989-4732-a7ba-1e24e55cd2cf", "indicator--01b97f05-a7dc-4b6b-9ab6-ae25aed17e23", "indicator--4e88fc62-8f43-473a-b277-9144260d0d5b", "indicator--29a3cf72-0c6a-4f12-ad4a-87d9cfa13c57", "indicator--737d579d-9f34-4b52-8178-a1a49fb6b5e7", "indicator--a82c60fd-a6e2-4a77-87af-ddf00c55df57", "indicator--7db5add5-1059-4e34-970f-c0f143fda303", "indicator--f537edb4-7a0f-4d55-9c5c-cf5e719791ad", "indicator--c0ce439a-8694-4e8e-8f41-83d4e856078d", "indicator--5a7ace9d-7c27-4ab0-99d8-35ce02491f66", "indicator--2c40944a-480a-47bb-9018-e3e01de2f2a0", "indicator--8dce1b44-4409-40e3-bccf-b88a6bebf5f3", "indicator--156e52bc-9a06-4389-bb5e-3e1c71d06701", "indicator--fc493ea4-fa9f-48ff-ace4-05e728e1b159", "indicator--5bc392b2-7ea2-46e5-8d81-a155c4919b58", "indicator--6b348858-c2eb-42cf-beb0-95b9af2a2cca", "indicator--7bfcbfdf-234a-437e-954f-87f6b3db8dc9", "indicator--cbf871d6-a634-470b-a954-7169551bfe91", "indicator--bdde73ed-45d0-44a5-9717-1a040bfb099c", "indicator--1a6a577b-da3c-4243-a10f-05a4283dc679", "indicator--0dab6aa2-4801-4add-a085-8299e8013567", "indicator--a9d4029c-faf9-452a-8aa0-9d1a2db74e3d", "indicator--03f44997-2092-406b-980f-2922687117b2", "indicator--20376bad-42a5-453d-9393-f231e7ebb03d", "indicator--b47ce8da-ac8e-41f4-a6e0-bc49ee2581b9", "indicator--93576f50-dcbc-4b16-bf1d-6257a4830bb9", "indicator--68822c5d-523a-4a05-8ff6-7b3c9a5852d5", "indicator--f1f17c6f-69a8-44e4-927f-020cf690afe5", "indicator--e3bbb57f-3559-4de2-8e62-c5ed9930474b", "indicator--574958ea-af51-4981-b1fe-2290409c1459", "indicator--8c395911-9908-49bc-a373-f577aad84340", "indicator--0eb1dd59-15f3-4454-b80e-ca74a7aa7393", "indicator--692cb54f-7405-4c48-9551-5c0f9f30e995", "indicator--84977cf2-d96e-49a5-afc8-970b3ee4e448", "indicator--88428164-54d2-4391-a204-02055b346d1a", "indicator--400aed5e-153b-4bd1-aac2-268807d5f6ba", "indicator--07d59f4c-a5e2-474d-8188-ee1fbf7929fb", "indicator--df28bb43-6bb8-409b-b44c-573379558661", "indicator--e1153be0-a655-442a-ad0f-b519dccc2559", "indicator--6b802d75-d38e-4e04-92bf-8cd094cdef11", "indicator--a30f83ad-8d80-4be8-9ec4-c6eb3b1d144c", "indicator--90d5a3cc-eaf5-42e0-9cd9-db80b76f4275", "indicator--4bf0df71-c3cd-422d-b1bc-fbfc220b156f", "indicator--dc6526d8-76e4-4f00-b013-48b15f7b46da", "indicator--027490d1-cf79-4054-b6ab-5eb021f030fd", "indicator--84c47f64-1f48-444a-8c17-0934710adb0f", "indicator--d481ef0a-13ff-4f54-aac3-1d87688753b4", "indicator--a99ad9d0-b793-4df7-aa8e-3ffa17b093b9", "indicator--61946da3-5c16-47dd-9bba-2f5852fd1c0f", "indicator--75162567-8ac4-42d4-ac9e-b1a052776317", "indicator--14000b59-737c-46c6-8dea-cc5466bfc8fc", "relationship--610b7a7c-a86d-4b48-b7ff-71aa718e08d4", "indicator--7f86fe3c-479b-451f-8434-956f97566d2b", "indicator--a4235fae-bcbe-4e33-b995-23c6b44e6223", "indicator--097b6763-54d2-4530-96b3-c1488728bb3a", "indicator--cbfb8f0f-7853-4ac7-80ec-4d187c8158ac", "indicator--e614198f-05df-48d5-98b9-4a67dc726d64", "indicator--c4b47549-326e-4621-ac12-471b22476466", "indicator--daf18e51-f11e-4793-82d5-9645bbc9d19f", "indicator--5374a066-209f-4118-8b35-a02b6e08d974", "indicator--255ad792-07f4-42ef-b2ae-455afe2b8715", "indicator--8ed7b6d4-aaa1-4bbb-a7d2-2d447f56af44", "indicator--92094673-2f4a-4eac-84ce-281be073b132", "indicator--48b19490-f2c0-46b9-8533-24f05062981f", "indicator--763a1d19-6150-40ec-aa76-cd1c385208ac", "indicator--7beee345-54ce-44a2-8a25-184b06e25d53", "indicator--cdead951-81e5-4b57-945e-d8ae14e5e0eb", "indicator--d2f5846f-ef1e-45f7-8def-71d16714f1a5", "indicator--d30763ad-222b-44bc-a1a4-c23c29a39a3c", "indicator--4e7cf160-b85c-469d-9743-54935bf898da", "indicator--41e51289-44c4-45e2-82ac-6722a0a904b7", "indicator--15fdb1be-b576-4c0c-ad8f-3d756da4edf9", "indicator--3a8c4656-663d-44f1-b743-dcff130e268e", "indicator--f461ecc8-7676-4cac-a42a-24bcd0bea30b", "indicator--261c0f01-94ab-4ec4-95e8-18ec506b2a97", "indicator--e7e97dba-ba74-4638-a82b-e17348f70c45", "indicator--12b2439f-caae-49e0-86bf-61940d441a94", "indicator--836661dd-ff6b-400c-a932-5bc210ebaac9", "indicator--a28db56b-4842-4a80-8f22-660058d369ff", "indicator--b842652d-1ec5-4f46-91c9-9a31d05a6109", "indicator--a4cf78e4-2cf7-48b8-bb4f-9d18762bd94c", "indicator--a9af097c-193f-4376-85b4-d57c4116fc26", "indicator--c88a17f5-fb08-4cdb-91cf-96ffe7793463", "indicator--49e6f1ec-72d1-4b6a-bf57-c2ea901b4a0f", "indicator--fc22b459-6411-4da0-adc5-382c39af321a", "indicator--f93f0839-ee4b-4768-befa-4c365fe86d50", "indicator--ee61c7a8-bb8e-4092-a31a-b528be4bcff6", "indicator--bddc44bc-5f61-4f55-a074-47a7a6759304", "indicator--d8eb4d04-6ecc-417c-a9b5-ba8bd2712e0e", "indicator--b037c399-3f07-43d8-bc2d-8646476bb07f", "indicator--d5e78054-a7bc-4291-96cd-a3de7c1fb319", "indicator--80c0c24f-bd00-4eeb-8622-f580072ce486", "indicator--5fd23ffc-0b47-457e-a721-ac9b94321e44", "indicator--4e24407b-3b88-4f2f-810d-763572391e9d", "indicator--130fb4bc-de29-46a8-b8f9-0098d42cdfb3", "indicator--a53629fc-3ad5-4bff-8eba-3782acd6c7dc", "indicator--b6e6e05d-8f50-42f2-bc0b-63ac290863cd", "indicator--6679c8d7-b62e-452b-8130-5abe03528177", "indicator--56a7ff25-bf84-49ed-ac7d-454460cdbf11", "indicator--c2408d90-d8b1-4267-acab-4107e9f73051", "indicator--42072937-e983-4541-8209-c06decaaee03", "indicator--c6b8166f-5a73-491b-902a-e917e2615912", "indicator--4d63e515-e0aa-4779-baaf-c742adf3399f", "indicator--43685e78-83dc-4e7e-8a7b-0e9c6c983bdd", "indicator--0311fbed-1028-4e30-ae58-aa05ea37e5f2", "indicator--4db16a88-cdff-4545-9651-0967dce6b7a0", "indicator--4da350be-9664-40f5-b1c3-f00a44166fc9", "indicator--14c1d899-3822-4843-ad87-f2a916a55064", "indicator--cce6d64e-3721-4d07-951b-c3ece742231c", "indicator--c7f84f1e-9b66-4ab5-8733-4fc1a57fc834", "indicator--be3bb5d8-f98a-4373-ab1a-abfd3c90ee26", "indicator--7a72ccfb-515b-48e6-9dbd-801d708cf5ff", "indicator--8c0228e8-e4e3-475c-9172-416f3e6b4f13", "indicator--7b32f022-c3b4-4853-ac28-9d84bab2bca4", "indicator--4b105f40-6d4e-4d62-9677-b36a1c13fc92", "indicator--4511a55a-758e-4a7d-880b-c015fd16b5fc", "indicator--d385a1b1-311e-4448-a72a-b11c4ea09c53", "indicator--f6c8929d-4eae-4189-8e70-46841bd2805f", "indicator--73eb1f5a-314a-4da3-9734-cb7584040f79", "indicator--71dfc75b-b75c-4fbe-b8cb-8eb45d3c2a5f", "indicator--d2b7a55b-52ed-4369-a71e-dabc1d8648bb", "indicator--eb37c3aa-567a-4c6d-99d4-94676d9fbb45", "indicator--f12afa05-898e-427e-9750-add1f98d539b", "indicator--5b448389-a9e2-40e9-956b-6ad90da0a23e", "indicator--002afe45-9805-4a3c-bae6-9a6a22c7f277", "indicator--42d9ff6d-ab43-4dd8-8eb3-c4f3147bd3a9", "indicator--b6c214d5-65b0-46d1-b06f-7acf93f54a4d", "indicator--30e81a2c-8a43-428e-b290-5e10d5e8d8b6", "indicator--dfc3d5ee-2960-43d2-b0f9-dbee97186c2d", "indicator--bb9caaf4-63b3-4ae2-bb44-4df59b240397", "indicator--3df35a95-3c26-4182-9ac5-630ebbd838e9", "indicator--e6ea48e6-4d30-483d-b740-3b45be9d5662", "indicator--b8d83601-32f1-4559-80eb-5926efb11fd5", "indicator--0f202d1f-f3ca-4bc7-916b-43c4f1f9336b", "indicator--90058b0c-ac2b-486e-81dd-b81eca1097e3", "indicator--f2727b0a-23d6-42a2-b000-32fe14d866ad", "indicator--fbce75e9-dda6-4481-945a-b92449426f84", "indicator--776ea41d-b5de-4172-9b01-706b8ebedfec", "indicator--585b92d8-b5b0-42f6-b198-6065201201f5", "indicator--b5bf90da-9ad8-4c2a-b6cc-3d016ce50493", "indicator--bb1f2bd5-2204-470d-a928-4e45c60daf53", "indicator--2a4b1e80-12ac-4efd-9dfc-bcd5741ce92b", "indicator--70604f54-c793-43f3-9f53-e8e3984678d8", "indicator--a0c29058-f646-420b-8150-b2f070904147", "indicator--37a48af7-278b-4da1-8392-e27abfaececd", "indicator--017b9873-ac46-41d3-8761-efa17633d761", "indicator--b56b242e-7148-420a-8faf-c9f062d5bc91", "indicator--fe792501-a31a-42e9-91ed-8e72a97637fd", "indicator--f91454a5-3203-4492-bb27-c315d82c8b1a", "indicator--0ff0c74f-8092-4114-af7e-b6827870c35c", "indicator--b1d85607-96dc-44da-8ed7-10fd0fb012a4", "indicator--ef9dd716-425d-4413-a4e9-c6293d2e0cb3", "indicator--86af5eb0-d8a1-4fe4-a223-5372d97f2f13", "indicator--5336cb1f-f99a-4039-8b99-372275e478d5", "indicator--c61d95fd-4c28-4003-8109-22ae6d0ed1af", "indicator--1765dd2a-1168-4596-828c-2d8783700864", "indicator--0a7f7508-9237-4621-b429-c60c4fcd589d", "indicator--52ee17e6-eb1e-4e45-a0ae-72bba80aeb3d", "indicator--70a7c6fa-4f33-44ec-95f6-8d48d570abec", "indicator--85cfe1f6-4260-4404-9013-9ae533209ebe", "indicator--4eab57fb-eec8-4d25-9ea1-abafba02dd84", "indicator--6995077d-7608-48da-8723-53103004874b", "indicator--91a2f57e-2db7-4e3a-b90b-14c96c4358a8", "indicator--7efd0e29-8add-4559-b3ce-92593de9df0c", "indicator--03707888-4989-4798-b270-85a0950ac94f", "indicator--63d17853-de11-40a5-807b-b0772823a8c2", "indicator--d93d8a2e-09f2-4a09-bc83-5c1465da5d4e", "indicator--621d2207-2979-447d-b5a5-ef44fb49fbff", "indicator--71af2943-41b9-46e2-817e-461aef6370f9", "indicator--f2339ccc-1b5d-4e58-9693-1443db1717ff", "indicator--c2cfe280-2d41-47b4-9820-d72bf4046dd3", "indicator--5dcb525a-eba5-470c-9276-4e3b400b5bcf", "indicator--e0d6faff-cb80-45c1-a724-3de2ce53a697", "indicator--f1596a08-87dd-4682-b3fa-b2aa3b1af25e", "indicator--d671af8c-85ac-47ce-9233-3d6796f6219e", "indicator--1206c955-4f44-4cc7-8d56-e8b838007492", "indicator--2e59f6ef-5394-416d-8542-2e5a51dacacf", "indicator--c598d78b-496c-4046-b01e-08f4ce32d12a", "indicator--3a86f2af-3d8d-4066-a20f-b7811d134caf", "indicator--0e357e37-e0ab-4a7d-963c-f0e1f98db511", "indicator--c760e63a-e972-4cd2-bd91-ece8286fdc7a", "indicator--30337e77-6932-4331-85f3-7cd97c46fbdd", "indicator--a0545839-ff20-45c1-88b5-d4b9b78e19af", "indicator--06b356fb-a36d-4781-b3f6-50b601259e42", "indicator--33fe2c9c-d3af-4c38-b121-314b49fcd2a9", "indicator--6ab998be-2a48-42e8-9f46-3a61cb74d1cf", "indicator--42e8994a-2cf7-468e-95f8-9da1d0c3e98d", "indicator--0bba6079-4889-4943-886e-e0d6ffaac3b4", "indicator--f7c7a836-e10f-44ed-968f-8b4f17135efa", "indicator--353ceea2-5682-48aa-abd0-210f1d93317b", "indicator--921e0f60-33bd-40ba-a7e1-0becb52cc300", "indicator--3ca93ff4-a449-46ca-b6b1-45942a0f267d", "indicator--52402012-b8ac-4d0e-8da5-903f779635e0", "indicator--42c9b90c-59e8-4a69-bce6-11a6e61d2a89", "indicator--8265c81a-a0e5-45fe-8354-49191dc837a2", "indicator--4b37736d-4643-4e81-888d-48620fbc234d", "indicator--ca11377f-716d-4214-9ed1-2b522b8f01a7", "indicator--86adad95-f52b-42fc-890c-729ee6cf8392", "indicator--01edbd95-2011-4310-a7de-b859f285c4b8", "indicator--ee0492ed-2837-4e08-9c99-0b6496812742", "indicator--ac99d577-6b7c-4990-8903-15f8e46a26d5", "indicator--d2dbd4ac-82b7-41cc-9e92-b36321fec780", "indicator--a26e0fd8-8f53-4d66-a11b-9fb9fdbebbb3", "indicator--43fda288-e8a1-4a9a-b8e3-def7f2b91327", "indicator--c5f696f8-b1f2-4610-ab79-2a94173893bf", "indicator--6167cd8e-764a-4908-91ae-9f02e12e7c70", "indicator--4afe1791-d8e0-448c-8369-7237ec2186b8", "indicator--0659b127-c4da-4db2-a3aa-a81e1a12b927", "indicator--7389dd67-ccf6-40ce-93af-79da1dae04ea", "indicator--820cd85e-f8a1-4e35-9226-7a3454b971b6", "indicator--3fbc0c28-6624-4584-9030-32298e53875d", "indicator--ad3e208d-4c81-45dc-a4b6-6219dbf25bcf", "indicator--0a6f2b37-cdfd-4fef-9c80-20ce302e3ba8", "indicator--dbc28b3e-0b7c-4161-bc90-428c8b1d1af0", "indicator--aefc7009-23a5-40e4-9ba2-bc2e04ebe6a8", "indicator--402e4d6c-f4a2-4fee-ac0f-a49d5cb559ff", "indicator--822af352-bbc6-43d0-970b-a70c49dac47c", "indicator--f317aa87-8607-44c0-b48c-aba6f1ec1419", "indicator--d5165f87-e195-449d-b9c2-389b070aaf1d", "indicator--e8ef4984-aad6-417d-9905-e63f9759bc89", "indicator--5cbbf198-dd08-4142-9cbe-8a6804d5cfb9", "indicator--f8895276-8d04-495a-b1f3-1d0a93b53767", "indicator--1fe9d843-5bc8-439a-85a9-661dadf2b801", "indicator--b4ef8189-1921-4771-b2fe-8a33590f5bd2", "indicator--396e808f-096d-4c7e-8090-d8aeb463a800", "indicator--8c3adb3d-1bf0-478d-ae7a-08e99663a694", "indicator--d9eb3e0f-f3d1-4777-b93f-b4e4899bf4ef", "indicator--65ac29c3-fb79-4d8d-92eb-da47221f47c8", "indicator--cdeeecab-adea-4b2d-a957-d3d159b9b804", "indicator--3ef0049b-5ab2-4dfd-978d-b81e0ea51158", "indicator--54866c13-23ef-4f4d-9bc7-3c03c12600ae", "indicator--cb436373-31bc-471c-9bcd-ae4dc726d939", "indicator--8e2fac7b-70ce-4257-a97e-1f27c0660808", "indicator--d09ca685-79d7-4ae4-baf8-0e1f2e745c39", "indicator--9858bb4d-19df-4d23-96ef-f260b0b4fc60", "indicator--36d473f0-e73b-4d63-a850-0d94af5a6b74", "indicator--2bfd9771-a0ee-4d03-8579-61cc7c7ba926", "indicator--61070d54-65d9-4d28-8f4a-9841336ac937", "indicator--e3fb332f-c4d2-4b49-b3f5-638143861a19", "indicator--2969c25d-5a8e-4e87-b01c-1dbcc344b3ef", "indicator--ec2543e4-bb8d-4ff9-9b28-0c3205b3c116", "indicator--e71a58c9-764a-4dd4-b532-6a60d03a787a", "indicator--c1736889-8073-4f17-9e7b-bf788807c189", "indicator--ef101ffa-cb5b-4465-9453-284c5c0aa737", "indicator--c4cfeba6-2610-4967-9418-4485aa418053", "indicator--0750becd-fa6a-46bc-891f-3ce6b9fafd9b", "indicator--55bcd84e-5a6e-4e15-9ea6-3e3e7ab0a98a", "indicator--4c5f95d2-f912-4c90-8736-7ca1f38adf13", "indicator--f7784f5e-dce4-464d-b275-486bb978e44c", "indicator--9f22bf7a-9368-41cb-b78d-d1e7e29ff356", "indicator--131e29ef-6b36-49da-ae22-8d9b722967b3", "indicator--54bc06f1-1bbb-44d2-ae4b-ba0d3338f57e", "indicator--1f99b462-3ef3-4824-ad2e-7cfaad29e101", "indicator--fabdd473-dbea-4264-b3dc-4f33daf4da9b", "indicator--d9ab55aa-c738-4612-8d95-c8b641fc000f", "indicator--83ba050b-00eb-4cb6-86ae-6f6afa555ff8", "indicator--34485892-5e7c-4fe7-943a-f7bfa481098d", "indicator--f681c3a0-5917-415d-bd36-922b775bac4c", "indicator--e0e10eb5-1345-4096-a2cd-7b9d33bfb6c1", "indicator--217a69de-31d1-4358-b4b9-f78cc0085512", "indicator--2842ea33-b4a1-43aa-af77-61be4a2421a7", "indicator--b15c18dd-8c9e-4448-a910-5175cc77d852", "indicator--1c46b13a-829c-4427-ae59-44ec146c6317", "indicator--3045414e-ba58-427a-9b71-aea1731948d2", "indicator--aa82cc2d-950b-49d8-89bb-6662cc0ecf4b", "indicator--e8feeddb-e05f-44af-acbd-1a75f2789706", "indicator--50b499fd-b9e8-4d64-b163-f1e196f2e4fc", "indicator--2dce9b58-c519-4e3b-a072-613918c24260", "indicator--e11561b1-cc80-469f-bb77-c29bc0536651", "indicator--47d7c1fd-ed9d-4dd5-8f14-025763fbfcc6", "indicator--c08dae8a-ec14-498c-8b96-47e34a786395", "indicator--497fede2-07f1-4185-8496-f42ecc544d0b", "indicator--e616f490-ef68-48ea-90a8-8c8274be44d8", "indicator--47176356-de30-4abf-8d7e-ffda9e464b39", "indicator--532486ca-21fc-4f64-9bf0-1ac9a989e91a", "indicator--9a5302d7-7e7b-47be-ab61-d012ee1f1417", "indicator--de2d382c-4faa-4a90-ae3e-50e58c62d86a", "indicator--895bb9e5-5e11-4b1f-9a75-107a039998a3", "indicator--6f2e1901-3daf-44b7-9704-56c6e61ff387", "indicator--a5b00179-0d53-4b2b-900f-eb68886f6a65", "indicator--f487a9a5-d055-453a-80d4-628de7adb263", "indicator--48061e27-e905-47e3-a6b4-64822358b203", "indicator--2f57a32d-0a18-4498-a45c-56769199797c", "indicator--7b275924-ffaa-4f91-9701-6cbcae325b17", "indicator--6858b9d5-73d4-4430-af71-0f5c759c9ecc", "indicator--4cc18db8-149b-492f-b170-1cb9d5d70d7a", "indicator--dc603dd6-d556-4c4e-ab5b-04368e80e1a7", "indicator--3bccb18a-dafa-4d20-af02-5adcfc035df6", "indicator--d7a45a34-8d8e-434f-b1d5-5b0cc002cd76", "indicator--3b95d354-42b8-4780-b6d4-f921a2cbfbce", "indicator--5a4858ac-c710-452f-b2bb-e56ffd29b64c", "indicator--b3089609-6b4b-4692-b585-2dbafe7cdbe0", "indicator--b307d910-bc52-4730-8adb-645f46d1aa68", "indicator--6bc36569-f270-4261-bf37-4b2d856e1397", "indicator--e1d8998c-3ddd-44e7-baef-1c31e7e114dd", "indicator--c022c067-2533-45b6-b94f-09acb6f5bf19", "indicator--17aa387f-9363-4a2b-a79b-93aca2451233", "indicator--797eda64-01a3-4577-ae44-c138e6c41fd8", "indicator--cab5d525-1b47-4d83-932b-1559a3141a78", "indicator--13c46c9b-bf66-44f4-80de-58629d5a29a9", "indicator--3b2ec1fb-11c2-45d6-87fa-54d33dde6b60", "indicator--dfa20f75-aeca-4213-a323-ddcfc5103f6a", "indicator--e5da611c-0018-44ae-97e5-c91aa8ba1419", "indicator--ca1fd143-183f-42d5-8d80-1b3953d33073", "indicator--ca3b33ec-5d88-4b69-9b62-9b3d963ffa9b", "indicator--d5912d4d-3121-4e25-8fd2-4fd4365ff517", "indicator--2e90b761-4d26-4bfe-aa0b-32dc0ebcf361", "indicator--4e6898aa-908b-4bdd-a4fc-4f879c39aeb0", "indicator--a2daf71f-3605-413d-8c74-8a0cdbf0d3d5", "indicator--860cf92b-396f-4b16-bc9e-7978d749b828", "indicator--8b8082b5-53e0-4a24-b43b-4a3fa54d6c67", "indicator--e3ff96ee-ce77-45f3-95da-8c2bc1f43ec8", "indicator--35a0bb73-4f84-40b1-97ca-9258a477d203", "indicator--7630246b-50d2-40e9-9017-c0b682188360", "indicator--b17701ff-23cf-4e6e-b9c3-9bff9a2a9144", "indicator--d2a71da7-f4c6-4697-88b9-a214fcbb02bb", "indicator--38e24489-592a-4b6f-8044-91ef3c957a1b", "indicator--d896f535-79e9-42c7-bf3e-b10e4e2cd322", "indicator--b9092a28-1411-457f-9400-a4ce0f114362", "indicator--85ec70ad-b758-4c57-b27e-6f2ad6fb7024", "indicator--3c47ca63-6d25-47e2-a345-48b0eea74f79", "indicator--13fe4b89-56de-4553-b751-9da775154fb5", "indicator--e6923ff3-c8d8-4253-85c5-038dd6cbad63", "indicator--47ec51d6-c916-4c3e-80cd-96f751af147f", "indicator--40f9f86e-3d75-421c-852b-fe00e38f6c4d", "indicator--91a91a29-0065-41e6-acff-2bb4c569d843", "indicator--1f8b2aad-9ba4-4a0b-a794-afab26118c4d", "indicator--674ab86b-7c3d-4bc1-87a0-024b23f0058a", "indicator--4b77eef6-4837-488f-b2f3-6704c1f7ab51", "indicator--2d7502a1-3a79-42d5-82bd-176f5b6da2e2", "indicator--2aca762f-6865-4974-9c37-8d154e8204ef", "indicator--2bf4bcb5-05b6-4d8d-93e6-1f57c10bcd49", "indicator--d08c9d74-5489-48d4-a985-7374e5245d20", "indicator--3aca3a39-d9d8-4efd-82dc-5c41505be1f3", "indicator--ceb15ea1-5099-4732-b4fc-2cd3d2f44aaf", "indicator--72327be2-619e-4bec-9111-a74d53139aae", "indicator--37053bd4-134f-4e64-b54c-a958c57af1d1", "indicator--b9acca2d-26eb-435d-aa36-4d5c7bff1909", "indicator--9fccf27b-46b2-4d78-a28e-10d51ccd41f4", "indicator--5308e627-a93a-491a-812b-7b178cb145d0", "indicator--8a233062-6f5d-4615-bb30-905a8b815300", "indicator--61bd81a6-2c35-4caf-93d8-9b0c53001d4c", "indicator--10ee9fab-e399-44b7-8f78-101142e3f575", "indicator--34822159-c4db-492e-b8a8-715344678706", "indicator--720044d8-81f2-44b7-a126-1528033b34bb", "indicator--17eb0392-f287-4786-990c-f7f0bc836ac7", "indicator--1b3a1a4d-92b2-49a8-901a-78f911cf31d3", "indicator--1b2be6d8-86e1-4f1a-a0d2-a3f210f558d1", "indicator--a4b9d066-d66f-4df4-932c-12751a36d096", "indicator--7914e5f3-821c-45b1-adf0-8c89f9f863e3", "indicator--838feac8-6b08-4a09-afb2-9b5608880ee8", "indicator--beef8f98-81b4-46ea-9822-af98b623e499", "indicator--18417660-a52d-453e-8d70-1d8c8078eeed", "indicator--df3ce86f-e93b-4b85-a8f4-df5b46f6007a", "indicator--d29b043b-7ad7-4a76-b383-d3ac6c868d83", "indicator--e96807fd-db54-41b0-884a-8d82967f6636", "indicator--97c89336-d553-46c2-aa32-9904c34fdd77", "indicator--186b5557-504b-4b55-9c00-e056c0427c01", "indicator--5c28749c-852d-4975-84b9-45b0f185fcd7", "indicator--41d762e5-0e49-442c-a422-221719409112", "indicator--4548c157-1fb9-4cd9-9a56-46ce95dcd39f", "indicator--70918c9e-9f5d-4356-9a12-51b38d6d7022", "indicator--0e9db74f-c926-4bc1-8da2-0ec523efbca5", "indicator--7205ab4f-a301-4720-aba3-83784c19c189", "indicator--a3d96e15-0a63-4f9c-aa11-afe496bd71fc", "indicator--0090adac-c2d0-4015-86e1-13f597b7c30b", "indicator--5351d7c6-464a-4b02-92e8-4bda18bddc8e", "indicator--55e7470e-c651-4a30-8e4d-a6f598960819", "indicator--86c82c08-401a-4909-9f3a-8bdb6c491eb6", "indicator--525771bc-3372-4d67-939f-d986bc2bebbd", "indicator--b9ee4ec0-e627-4e22-9245-f1c4b66c7b22", "indicator--08faf0db-a39d-48a0-b749-e1e882668a68", "indicator--04003fe4-27e6-4adb-b18c-e0906190609d", "indicator--27be14d0-92f4-438e-9bb9-2b8b2024f36b", "indicator--ba8a2f9d-4592-43b2-aa53-ea6c49ea6dc4", "indicator--1b6098af-b8e7-4d53-bf25-b172de2be70f", "indicator--6d19309d-2464-4191-8604-e713eea62eb2", "indicator--e6b30175-65a6-48b5-ae88-ad313ececd71", "indicator--e1171e94-78f0-44fb-a47d-ad367f82fd91", "indicator--a05f24f7-5105-4c2b-9f4f-befec8e8cefb", "indicator--f43e5a91-8728-4fd6-9a05-d9944185ca7a", "indicator--214fd37e-63d3-442f-b869-7dde95fbc686", "indicator--866e1764-54bc-483b-ad48-77ef7dcbfa6a", "indicator--d35ea6e2-8a61-4d9a-a7c9-40431d13c6e8", "indicator--910be005-6fbc-4bc3-a931-c6aee46d2ecc", "indicator--48a508d6-0908-45ff-b9ec-0a315cd6fa72", "indicator--75f70ed8-db25-4f6d-a02b-aa007aa97587", "indicator--bfee68fd-dbd6-45e5-96f1-17800945d7e5", "indicator--e609b329-f267-451b-8eec-da78e1b09424", "indicator--74ad5f4d-e97c-41de-b55b-73e5a6f51cd0", "indicator--894159a6-0922-46f3-8c66-ef5170bb4745", "indicator--4846ca2f-4552-421d-8f2d-33bdd3b02943", "indicator--1e873e73-ee4b-479c-8e00-42d758222825", "indicator--95b5a080-b8fa-46f9-983e-19b0dead6dde", "indicator--54481791-74a0-4d10-b2d6-3d5494e214d1", "indicator--63f62314-1b0d-40f0-a0f1-c8f24175485f", "indicator--727060bf-f5b4-4d0f-92a8-9a0458983ba0", "indicator--82222a18-8330-449f-975a-b911e1cea96e", "indicator--69a30a2f-6b9f-4e1c-86c6-218aaf4f5f6c", "indicator--b9aeed89-a453-4bba-bd6d-5d23f1b022f6", "indicator--96bd92e7-bd6f-4ac7-989c-879b858eaaa4", "indicator--2eaabc66-8c18-42ac-857b-7cbf5ea9b211", "indicator--cc6748fe-9894-4f61-8918-6a966ac3c1ab", "indicator--12b81da1-b6f1-4329-856c-3cdc26e3a41f", "indicator--b8ff494d-f091-4bc4-8e0f-314d8dd0faa2", "indicator--6355a162-974f-4880-9918-ee4fab6838f9", "indicator--15701c2b-807f-4df1-962c-33f2f3dd2bcf", "indicator--ff3d58d1-c866-4c11-aa38-f74dcada2081", "indicator--c3caf41d-e0f4-464b-afcc-0490b9f39658", "indicator--993a81b6-f988-41a3-b0cc-5415a97fad5f", "indicator--79f456ee-25b0-43ab-b0bd-ffec81bcbddb", "indicator--6206daf5-8be1-479b-ae6f-102f7228e922", "indicator--9c671525-4c68-4e36-b276-f2cd02a9f4a0", "indicator--969909a1-70f0-49ed-98ea-c893f2f85e72", "indicator--f6670bb3-87db-4ad3-adfe-bbbb9a46a8e3", "indicator--b61b1b05-c119-45d4-8d6d-2571ecd093bc", "indicator--c82f701a-2cb8-437b-bb4a-e29f7a7ddc6b", "indicator--81deda99-1434-4c09-87e8-d4e791608390", "indicator--c6225974-a4d1-4c3a-96c4-af638a5f19ec", "indicator--8c14d915-12b2-486f-b5b3-22150414c976", "indicator--21fdbb89-bcc4-4e3d-83e4-2ef08eea3193", "indicator--8835365b-d07c-4655-8058-a33912481b2b", "indicator--d67f4e2b-7a88-415c-87ec-f8d76e63777d", "indicator--504f2057-67cf-4274-af53-52f96a1b6536", "indicator--3145553b-dd42-47b8-a82f-521623f129fb", "indicator--19df2865-964e-45c1-be19-4fd22dccc0ea", "indicator--3ff5f5dd-531b-43ec-9087-93565c953a28", "indicator--3cb1aa8e-1ee7-4ca3-8154-689755e7b9ee", "indicator--a0584f5d-62c6-4c1d-b05e-e26a047d478d", "indicator--574f3863-6381-44a4-8d52-98f5e196b677", "indicator--cbd029f0-1f3b-4289-8c06-7d48b8be2c66", "indicator--f4932920-7a13-496d-8701-3a3c8dc87453", "indicator--9da5836f-9fa6-45ca-9e59-522abafcafa8", "indicator--740cc280-875c-469c-b83c-7ec56a46f8a3", "indicator--b20bf5ea-c8d4-48d7-b527-8c716336020d", "indicator--a76f9129-198d-4aea-9eb0-46d8c3e0fb94", "indicator--d37f9cf6-8aa0-4186-b508-4f5ebbd2a538", "indicator--fdd1c8cb-1853-4704-8288-8d8fb2023c18", "indicator--a9adb993-c688-44e2-a516-5acbe6a85694", "indicator--09f828ee-0a81-424d-8961-a5121f043efd", "indicator--e52874ea-ff4c-4d93-b517-e5874ec3a0ce", "indicator--4ce4d219-f713-4abf-84e0-4d5009a568cd", "indicator--febacca1-f839-4cc1-9626-5dea2f5593fc", "indicator--125f8433-b6d9-4a14-b1a1-d45615effbe9", "indicator--49e71e96-3eed-4493-a8ae-294ba26d1802", "indicator--339b5337-2db7-449b-9490-0837467ca41b", "indicator--927cf111-52df-4c84-9a6f-d3a0f1dc3d18", "indicator--5ce96266-857e-45c9-8545-9dda6249a16a", "indicator--243797af-2710-4243-9a5a-36d920243294", "indicator--287b2f15-f3cf-4bcd-bc2f-87ac63d4dde4", "indicator--72e8bf4f-a60f-45e3-bb34-1e956712323f", "indicator--4921764f-8e83-4dd3-b230-00a83d11b97f", "indicator--c2f836b1-9d57-4751-8f73-a84c61164c50", "indicator--20a19cc8-b565-43b9-aca8-702444751c30", "indicator--5b2c6a14-3626-46ca-8f1c-e3067ddb28f9", "indicator--c9720f56-7cbb-4e35-a11d-c6799bd3f1f4", "indicator--a055293b-f406-4bdb-82fd-05221955a976", "indicator--a05b73fb-e378-47c5-8e45-0dc4053639c0", "indicator--80ad427b-b541-4a05-8a23-390579017237", "indicator--15a02ffa-ffe0-43c1-8c36-52291a18b547", "indicator--cfcb466f-3d3a-4adf-bfc2-5295a519f50d", "indicator--cf37bc6a-627b-4254-8e57-3cb32cb3502b", "indicator--7db86515-f37e-4c3e-a286-5521e6e1f40b", "indicator--1229160e-a780-4f2c-98da-ce16f9d15c47", "indicator--90767bb4-8818-43c0-9115-f6660076b7cd", "indicator--41622531-a1fb-4268-b103-71a1a9e75c17", "indicator--f77be234-792c-4c73-b725-913e7c02cfcd", "indicator--afe9bf41-7de5-403e-882b-8917a2b009ed", "indicator--34fe6283-61ca-4ef7-b23a-ccb3c740faeb", "indicator--ce8ff282-43f4-4970-ab00-fbbffe24a881", "indicator--4cc56778-d145-42f9-acd6-c333089cc822", "indicator--e77d7068-9d71-4897-b07c-90a3e979f510", "indicator--3e6df5be-65e0-4bdf-835c-71914142d9bc", "indicator--3308ff8c-0d46-4983-9845-79c4b35c59e4", "indicator--88c8240d-7968-44f2-84d0-a52735eaf9b2", "indicator--36ffe404-922b-4377-ac1f-a1dba7caf10e", "indicator--af7f5f93-9e71-4497-be2b-7203c6eb4c87", "indicator--c3333bb7-8e37-4d5e-8915-bb1d9ff65648", "indicator--6e341fdc-b199-4bff-9f3e-8ab20f147ed9", "indicator--691cb3a2-ef49-4976-b1be-dd914a87944e", "indicator--679d1871-7f28-47fc-b72c-7609d4109a87", "indicator--8da22a75-180b-4f44-bebe-263dba57ab19", "indicator--e507280c-b3b6-4b1d-aae7-7187e3de50a3", "indicator--4d622601-4b80-4189-9438-66353802d406", "indicator--2f2e8ab3-91ee-4a72-969c-af3898ff77d4", "indicator--a6f12cde-05a5-4593-ab7e-07bb87d6eb16", "indicator--ae5d7cc2-2a52-46fd-a04c-5a5e6dd2da11", "indicator--489beb5c-258b-43ab-82fb-0f36bb86c583", "indicator--c9ad1951-a278-4628-8311-1ca9851348a0", "indicator--ee6999db-692d-4e5a-b78f-419aeb2acb57", "indicator--33a33797-0148-4abc-84b7-657cb71045b4", "indicator--7f31d981-1162-4e3e-8096-120de3f37698", "indicator--55529b47-28da-4ca2-929f-989455cf2d35", "indicator--aef66e5a-7123-478f-ac17-0c04b8f626c6", "indicator--cce94883-512b-4fa4-8e71-210cc286b612", "indicator--0cbb3121-b3a2-4924-97a3-88b055788c14", "indicator--8519cfa7-bc3b-44d4-a9ee-8525e487e35f", "indicator--f9854f53-abbf-480a-9aa1-d86447c82154", "indicator--0d45018a-0a46-4bf4-9438-c22844e27f16", "indicator--b5baaa11-e86c-4bb6-bf9e-b17539b16346", "indicator--7b4434e0-87a5-4682-9e8f-5382065de19b", "indicator--fdadc513-530f-4511-a0b1-5bafe0e8832c", "indicator--d249feb0-9160-431e-8749-ebbeed1c5a9a", "indicator--c24a1890-a944-4957-be1e-f807452e0fb3", "indicator--deb9446e-bc9f-486d-8476-c7c32e41eb36", "indicator--f96cbc75-a246-4dd9-b1a6-9d36840ed680", "indicator--92f7f05c-921e-4a7d-aa4a-91f6ee17c4a4", "indicator--101f4975-3d3c-4ff9-872a-e04d3b8e1b02", "indicator--cc7449ce-0d86-4262-8fda-1ddfed2643a0", "indicator--96a0fd19-e283-4651-9a83-ac89803dff43", "indicator--6d420c1b-d83e-495b-aa48-41e0f0eeeae1", "indicator--61c227a1-6c3f-4941-acc4-382d877e0db3", "indicator--349c102a-9ca1-49d0-91a2-3c996a6a786b", "indicator--f8290072-9e9e-435f-8a5d-6ccbd86a1745", "indicator--99a6c8eb-8d2f-44ba-a235-809a9e84cc60", "indicator--96cc41a5-5f92-4f50-b0dc-68785463c535", "indicator--2920424d-53e5-47ba-80d4-38822a1f4c73", "indicator--71028e3c-6b42-4563-b9a0-05344468338e", "indicator--ab75191f-8026-4704-b660-23e7356b6b5c", "indicator--839ac51e-7f2c-4b1c-9a50-a167ea098d34", "indicator--6bf7d8b5-55b5-47fd-bc34-03671eea6c87", "indicator--b4b7b4f2-28be-4350-9322-9f3536c6215b", "indicator--2e3dd6fe-a026-4715-a71b-a941e37506d2", "indicator--77ef506e-0780-4957-9b5e-23881ffc9cec", "indicator--058078a3-6103-4e98-a332-94d747b0a2c0", "indicator--dfaa4c06-b41b-46ac-be58-d5ce45aa7f14", "indicator--07c5985e-b4b4-43fe-8806-c66fc38732c3", "indicator--57352b86-b215-4317-ba50-13700510e986", "indicator--9ac60bda-7963-4f4f-9d95-93f40d166903", "indicator--1f2b133f-a85a-4294-acdc-ad0c9e31cdd5", "indicator--9280bc80-f05e-465b-bbab-0b4c0d89fdc4", "indicator--3be1e3fc-c0db-4460-b9d7-b866863a6dae", "indicator--5202a7ab-8aa6-49d3-9a9a-97b7fabe3d3e", "indicator--f66f6302-d546-4883-910e-7d5dd7a1fd9a", "indicator--e739eacb-7dc4-49e6-a4d1-f32ab057384f", "indicator--7dfe271e-b0f1-49c2-8f85-1e58f961fc24", "indicator--4e8dd744-432e-4796-ae92-0b7c2863bb87", "indicator--912dcc38-35ff-4b2b-b1e2-50c0dbdab500", "indicator--4e261ce8-5873-43d8-84e2-2d6eb5cedc4b", "indicator--a47bfbb6-3cc6-45e2-a87e-9ded8ad0d35b", "indicator--5a536b0c-3ecd-44fd-816b-f4c498b8617b", "indicator--16fcd48e-8039-4055-b447-8038156457dd", "indicator--73e4699c-42da-4f25-9db8-37f05b79e6fe", "indicator--46935ed7-1830-4986-abe7-b3c1f4dff02f", "indicator--7b892e90-5633-466b-910b-8836023279c5", "indicator--5af0c5eb-af44-48b7-9b55-dd00ac122517", "indicator--4f53671b-b197-4824-8dcc-6b6e446780a4", "indicator--33f842c0-ed53-441a-915e-7dd6904260a4", "indicator--d1edfb35-0e52-46f5-9657-9f4d94736590", "indicator--fac467c0-28f2-49f6-a681-f08ef2a324f6", "indicator--af148c1e-401c-4fe6-b5a7-cccbaf4a7b8c", "indicator--842fe6cc-fa86-4138-b5b0-e768e986e5c2", "indicator--1d9cc7b4-3848-41e0-884f-5c4326bdc246", "indicator--9ebb48f9-7ae8-437f-a54e-1fc8ddd227b7", "indicator--bedef17a-0909-46b0-b1db-d0230c910e06", "indicator--623f0624-3a3c-4f13-b70f-ce8004b49838", "indicator--a30cc84b-6cb8-4df8-90d0-ad06559d461b", "indicator--03538964-a622-4589-a4f0-d73a10d0f1a3", "indicator--84c60c57-5d68-42f9-9ca2-c3ab0f48a559", "indicator--83e276a6-8567-4e6a-a43a-6168bcf9331d", "indicator--a4d0726b-9c8f-4d2e-8864-c337c69d316c", "indicator--f251d286-a99d-4717-ac7d-a948850c6509", "indicator--1859cda5-1e0c-424b-a96b-e0e253814d72", "indicator--df699f62-750e-40c9-a26b-5703a27353f0", "indicator--ca889dde-6c0e-40aa-a194-7f3a89836797", "indicator--a0532b64-c5cb-4e53-8a8c-9a460a6e790c", "indicator--ec2e09f3-d0c3-4ef9-a4bf-a7d2422a4683", "indicator--70dc3912-e239-41a7-8708-1c71f4a83800", "indicator--4d6efb04-eb14-486c-8c84-c339788922c6", "indicator--ec621cd4-e8ea-4343-affd-a19854b918d6", "indicator--8d68dec4-c424-41ce-b165-6e1f446fc9a5", "indicator--d0a82a0c-c2fc-4478-806d-66a7efaaccbe", "indicator--697a3052-3544-47ae-92e3-911ff8231237", "indicator--149a9bbb-d0b9-43d9-b47d-ba0d9e2c474e", "indicator--1d0e3632-a94a-4561-91cc-69dc98604c1b", "indicator--cdf9cf63-6e81-4c58-a05e-e95bf4bcfe30", "indicator--ee613375-e5d9-4df3-b850-70ecc87ef4ef", "indicator--a67982c5-82ca-49c1-94eb-3556cdd11141", "indicator--c7ef7809-2d32-4447-9004-a62160961f92", "indicator--cc0203be-1b59-4944-9a67-cc52f49664fb", "indicator--7e8c0aaa-3ae5-4597-98dc-f576cf62ef6b", "indicator--25ed0776-e87d-4326-9ac1-c38a2b7c572c", "indicator--ad4bfb46-df56-4504-9fdb-d22475f14b3c", "indicator--4eb2bfca-4dad-478e-9c1f-967db21d042c", "indicator--015cd32e-37c7-4e78-baf6-0e9200f7fdc6", "indicator--c3b82d27-b179-4e88-bd56-de774523394d", "indicator--befc1d7c-be71-4ab4-b2e4-25952c04a542", "indicator--0aaeabf2-5aef-445e-b45f-bda063683323", "indicator--54fd7d86-c9a2-4559-a666-281b61eaec34", "indicator--6756eaf5-301e-482e-9c7f-08d8d9520649", "indicator--6f635608-242e-42c9-a09b-4bcb2e5d47c0", "indicator--38c12042-1647-4cf8-af22-a66b343c342a", "indicator--7a9cc863-025d-4479-bc1f-85b2d0d3799f", "indicator--e0b1273d-e965-46d9-9e20-db26efd450aa", "indicator--a2fdf6c3-2548-46f0-bcda-dc2836908573", "indicator--7e403c43-ae97-41c9-8c0e-aaeecbcc4dcd", "indicator--df9b0943-cfc3-429c-8101-7b5be5896d1d", "indicator--c1bb3758-569e-4556-8489-99d307d522bb", "indicator--a870caa3-605a-4080-ad25-6218185c214b", "indicator--c82ae77c-52fe-45b7-85e2-b0908ee67523", "indicator--22ec9197-18ea-4274-835c-d20602fa03ce", "indicator--b535a013-b561-4d85-b662-74917a56ca99", "indicator--51bce739-5384-44e1-9363-acdaf71363bc", "indicator--118ae7ae-c59c-4cdb-be05-9c7aa184ead9", "indicator--bc3b59aa-61c3-43c6-aa56-743a47f3c9ea", "indicator--2df9775a-698f-40cc-9574-40ccc4e31ee6", "indicator--00de58b3-88be-4185-b9c8-018e54de1942", "indicator--335c7763-571c-4fc8-903c-220875474729", "indicator--ff9e1500-4e92-4291-9c4d-73ec50519863", "indicator--41ec6a30-68db-430c-9304-6a2b6c4e78c7", "indicator--bf95cbf0-5ea7-41cc-b4ed-8b47220d4f2e", "indicator--0913c43c-c624-4adf-97ec-c9ed58cce285", "indicator--7b230453-f3fa-4c4c-a64c-97a3505e31ee", "indicator--d1a94fcc-10e9-4202-8b4e-5cc2c7949ac4", "indicator--7d6c50af-8206-4f38-b7bd-c4e60ae251e5", "indicator--e8b07b10-2135-4807-a319-f44e74b7e348", "indicator--a051222a-e50f-4645-8752-ceeccd972fbf", "indicator--829c16e9-de1a-4f46-9fe4-f09e4ca747e9", "indicator--b96930ef-e2fe-4107-9fbb-aab4d6ad8c38", "indicator--e210fd2f-fe77-4323-be56-c4240a99028a", "indicator--5336f788-4825-4fd1-ac93-aec24aa6e092", "indicator--cccdaeb9-e538-4697-a402-0106811098a9", "indicator--a3a2b027-336f-4842-ad1f-b1b62677065c", "indicator--74b6921d-da07-49fe-b133-6dbbfde149bb", "indicator--1282ec74-becd-491c-9c1a-1ffa267673dd", "indicator--ec21d01d-40ac-40c2-8a26-01c7b9f8d0f9", "indicator--ba0be273-b6f4-46f6-a943-cfb8fff0f0e7", "indicator--e3e39666-316b-4d44-ad4a-5a591644e774", "indicator--098230bb-eb8d-495a-a3ae-85d89f9d0e09", "indicator--12852b41-cbc8-4b99-acc4-9a0b68720468", "indicator--36dff748-8fb6-4d15-b810-6a59ce7a0300", "indicator--5338a233-86f5-4af4-afeb-9adc69a8531f", "indicator--c098b9b8-307c-4d17-8c49-bd2bd6112be6", "indicator--c6883859-d111-4d72-8e9d-5d7b82d87218", "indicator--35e1190f-a448-481f-b48a-4aee5c4afde8", "indicator--f7a6fb9c-56cb-4b58-aded-25b457e07f9f", "indicator--7ecb2ef9-57be-4977-aa96-29bfb50b57fe", "indicator--37a7c9d1-a2da-4d8e-b858-0807d286833b", "indicator--5443593b-38c8-4d86-b35d-570c69c8feb0", "indicator--520eb415-3ba2-4560-bc9c-acec31a3e564", "indicator--57f5a61b-fb67-4fd9-af24-0c35869bee17", "indicator--7f0d88de-71f5-4b64-b676-c6622d106cdc", "indicator--2ac32d96-ed85-491d-85f5-165bfe423f10", "indicator--29943cd9-f959-440e-9f55-fa36ff68592d", "indicator--fd15e89a-aac5-4ecb-a6ff-876b0c4fc732", "indicator--9ac201a0-9f9e-4c91-ba34-4a688f189fc1", "indicator--078fe487-af69-42cb-9d77-9632a78964d9", "indicator--da251a8f-39cc-4121-b89e-bee729211c1b", "indicator--65b2afe3-86c7-469f-825b-56d218839593", "indicator--fe1b9e6b-7528-4e69-8248-e16b8dde59a3", "indicator--ad76ef07-d7a0-4e72-bbdf-8303080dde5f", "indicator--0c57991c-e67f-4ec0-8cb7-dfa913c76898", "indicator--f8a6443c-2c90-4297-8f48-850969510890", "indicator--ee4756b6-93f7-45c9-bbfa-926abb051f2f", "indicator--c49a18e8-03ef-4e77-9537-72f2e58425d1", "indicator--a6d798a1-9d2a-4cd6-b304-804baa662011", "indicator--b93a2b49-b22d-4bfb-a2fc-f8a7f2a62873", "indicator--73783abb-9bc0-4715-a2a1-67344cf18354", "indicator--2ac77cd9-c83c-4871-9ca7-bebec135de57", "indicator--b489dcf0-0866-48f4-926b-333c0d289e05", "indicator--4253e637-5196-43b3-981c-e0e3e32aa7a6", "indicator--4db2f71e-15fe-451d-8a12-42dff3ceeb0c", "indicator--d6b7d6bb-aef5-494b-a313-f4fa877a61bc", "indicator--41247bf8-1afc-4b29-94a3-d733b2aa8644", "indicator--cf1d4172-7fcf-48b9-b170-4e248945c512", "indicator--7a2b9388-a30e-4f66-9b6e-3e18153f3d68", "indicator--bf1d6097-7bac-42b8-ab4c-ad4bfff4851e", "indicator--9a37a740-b191-42d3-a28d-d10ff0198427", "indicator--dbe69a0f-4da9-48fd-87a8-5b8aa54216f5", "indicator--00a8ed8d-3484-4539-93ed-3f5beaa35f0c", "indicator--12cce2e3-4194-4dab-aa93-8463717addb4", "indicator--0bc2203e-df7e-42b0-b54a-1fbdda2ec674", "indicator--03a04292-1ce4-4a78-9c02-09f4643ec850", "indicator--14e836cc-abf5-41e3-bec8-1fed634b7ec9", "indicator--2ff3ff10-0beb-45f3-a151-1f5467f7a1da", "indicator--0b9e3ce2-f2ab-4dfa-aafc-bf3e9871d29d", "indicator--491075ba-44ae-405e-b5f3-6dd8d8e374b8", "indicator--855120dd-61d9-4746-9995-6f3aaf06e3ad", "indicator--3d22e728-1a05-49d9-8b4c-fb3dfc38c8a1", "indicator--59065a35-bb95-46bc-af0a-7248a4d1f73a", "indicator--de93da1b-b714-4173-a1b1-ea60e65c89fc", "indicator--253f5b05-20e3-4bc5-be00-14d013004047", "indicator--6deced33-a778-4d52-baa5-1423a6167312", "indicator--5242c35d-b73d-45dd-99c3-ca435b952d37", "indicator--02b942d9-b3df-4147-87ce-b7183208060f", "indicator--4cd42a3f-af69-4bce-9734-d3bc154ed6b9", "indicator--8a88aa09-104a-483a-8f2d-622764886f41", "indicator--a60f5c68-055d-4e11-bbd7-ba1a163d24a6", "indicator--18abba69-5ebc-4ed3-aabd-a819da130b1a", "indicator--9d77a97e-c628-40f0-9f2b-7587ef147d7b", "indicator--0d5441a1-a826-4d3b-9afc-f22c4707f6dd", "indicator--c4673224-21b6-44ed-8c1e-1c025055249e", "indicator--63be8df0-c72a-4c90-8c0a-aa05e312ccc1", "indicator--fc13c350-ea3d-4d34-8a2b-3e24156777e4", "indicator--98b6370a-d3d5-4e57-b146-7ecf3a71d336", "indicator--2fb0487d-a404-412e-bd2f-2b4fcc8b7257", "indicator--fe0b27e9-f083-42c8-97bd-6a2f039cfad9", "indicator--ca07190f-a6b4-40ca-9f67-513b6a4dda49", "indicator--697c2b03-81c0-475d-a454-db6263f118e1", "indicator--a284f016-0c0d-4859-90f8-37589e5d709e", "indicator--89341883-cfbf-48c8-b93c-f6e4ea96c5fa", "indicator--9168004a-557e-45a1-95bc-d885c8fb11f5", "indicator--f8742075-b0fb-4b3b-b510-33a1647ab387", "indicator--48629b74-6ca7-4c6a-9a6f-57ba2ef8a173", "indicator--3b6df4b4-7d9d-4665-b354-65676b725f67", "indicator--be2aa1a0-9bc1-4aa4-afda-846e943b16ba", "indicator--79f245bc-de6e-4f3f-bc59-1fb7452f2efa", "indicator--15b3ae75-be8a-43b6-a90f-893c1b8e3a9f", "indicator--137d1ad1-8ee8-43e2-8eb7-024fae0b5d7c", "indicator--bd1c5b42-92ff-4d39-af01-6dc22cbd44e1", "indicator--4c5bb761-b095-4461-911a-60682a772884", "indicator--d36b86b3-b166-43f4-94df-0e502b5ba511", "indicator--65285c50-e482-4f54-9ee2-1e0f174aeccd", "indicator--f067ba7e-eba6-4407-8484-d885e862a2fb", "indicator--e0fa6f11-1272-4df8-8e21-1e848bb4716e", "indicator--d6eb9419-beb6-473b-9f4e-c31efabbc021", "indicator--2696f978-045d-4bca-844d-3e7a209b136d", "indicator--e272f336-d5f1-497b-9bc9-145c682e641c", "indicator--675bfbbc-fea8-4e31-b7a9-03cdb5687b50", "indicator--5d69eb63-74ab-40e3-8e08-2020961710de", "indicator--9f289a57-8763-4c5d-871a-5493c951ea66", "indicator--af7dc48a-bde9-46e2-82d9-53e3f3d90dcb", "indicator--552f18d5-9dfe-43bd-b2f0-923c6234ce3d", "indicator--84ac00a0-373a-4b9f-b4c1-1985f9fd6131", "indicator--a02b863a-7323-4349-84c0-8e195a85b610", "indicator--90b057e0-eaf4-4969-8b9e-e74c1a551126", "indicator--adb73a48-8929-44b6-bf6f-2b165c773227", "indicator--645a6758-a4be-47f8-8f4b-8167c475f981", "indicator--be79947a-e3c2-4c99-94fa-cd043118d237", "indicator--9f470cad-1bcb-4f9d-8b34-65931d3fd1ed", "indicator--ba401d97-baf8-4d5c-b040-1ff822607c92", "indicator--74526509-c5d9-4071-8580-c6903e474031", "indicator--4195a319-577f-48ff-ac8f-6671ece9aa9d", "indicator--fa67f892-0525-4539-af43-367a1ca963e2", "indicator--85869e4d-51fa-44d8-8b00-40951bc8e42a", "indicator--9270f3e1-ea3d-4129-9009-4288309e2e10", "indicator--2a30ad9d-3e0c-4683-a015-6d78271668aa", "indicator--435db09c-25c8-4d3c-a406-dd4e0f3dfb1e", "indicator--80e539e1-e336-4e35-868b-481d998c924f", "indicator--4cee98ba-73a9-4b21-870f-2795afa27d36", "indicator--43992a78-c93c-4d49-8711-9702e63d90d4", "indicator--9281cec2-f43c-4859-b6e8-bc5e29d872c0", "indicator--a835a014-579b-4579-9060-6d85ea271d68", "indicator--c6eb1235-fc62-42bf-b6a4-5d90fb2cac33", "indicator--6b01566c-53fc-4d11-a2ca-021d22e09c29", "indicator--0b1c3ed8-439f-4b39-b5eb-0d341dddae93", "indicator--ebba4a25-8bee-4e6d-8b26-1627dee267a4", "indicator--f293a8b9-1513-4a99-bf48-22d51e96f789", "indicator--9e932ff6-9c37-4c4e-b97a-fd6f741b37cd", "indicator--f84d268c-9f33-4c49-9d01-06888834db24", "indicator--953b79d4-2360-4af2-a141-6bdc5a02d30a", "indicator--00f86735-7a4c-493d-a3a3-7403115abba7", "indicator--3f46e581-23ab-4671-a117-f102e2416a84", "indicator--f3064a2b-af73-4098-9d9d-6173c53d9a19", "indicator--52eb2986-d123-425a-ace4-83015d4a17a4", "indicator--56142787-6d85-4359-afde-f520a72e047a", "indicator--ee747c4c-0996-485a-9794-3be26c4f6810", "indicator--7f6ede3c-a0f9-4a41-a735-f5db0f8707ed", "indicator--bdeff40d-7514-4c11-aa66-c391b962d734", "indicator--25940beb-4805-4125-9b45-3e6e68afad5a", "indicator--01adf37c-cab5-4b6b-a7a2-8231ef8fbfb8", "indicator--5a0b900d-15ae-4104-881d-c9e0c14549f3", "indicator--99d6a9c7-b16d-4e4d-a96d-2550e60b2d95", "indicator--72036f28-7cde-4ba9-81d8-b6e1b8fd9c57", "indicator--e3acc46d-8ef5-409a-a310-7ebc1c35c514", "indicator--23ed5d80-7212-4070-864a-426436484ee8", "indicator--897daf35-7e13-40f8-a224-a2ee162d0c85", "indicator--1da8842d-a953-4b05-ab14-3cb4e6c6f9af", "indicator--e55c043c-a719-43c9-a285-6efc5accf6d2", "indicator--f6e35727-8395-4c46-ab32-117d2ce71227", "indicator--578869de-000d-4a3a-a8d4-637dedaa0f3b", "indicator--280919f1-3709-4dbc-81fe-7261c9fa261d", "indicator--97a44079-7fff-4aa7-a5aa-2a76310244e9", "indicator--0491a985-c5e5-4be8-8f77-cf0b0447da27", "indicator--a949cbba-3df2-4a61-b698-52b123833bdd", "indicator--312ebc3f-745f-4b98-9a80-4730e9251a31", "indicator--7b192131-26fc-4645-9564-dfeabab7df43", "indicator--fbda0799-7466-4619-8454-b0d6c6353dc3", "indicator--6b766dad-6e01-4074-91fa-3834724bb933", "indicator--4184339b-6588-453a-a461-6ea87532d943", "indicator--b4104558-d4e3-45d1-a01a-b567357bb78a", "indicator--5234a36e-d0f2-44d5-9b66-bc322c83f5d4", "indicator--134724c2-c6a0-4cde-ba65-05b935712334", "indicator--91800eaa-031a-40e7-b19d-bdec241a8f8a", "indicator--d8c07b5f-8d22-4330-9901-b5f6c8bdcc99", "indicator--1a8e5f4f-0ecf-4acc-ac67-fa5b336b2739", "indicator--82b142bc-78d9-44a4-8879-0973034fd97d", "indicator--66755001-068a-44ab-9af6-464084a1de4f", "indicator--84992f8c-7242-45f5-b9cb-4dfb79c97fe2", "indicator--a5a5f4c3-70bb-44d7-82e4-c1254a023a07", "indicator--8b2fca2d-0c66-42fd-bac7-ea7e3efe72dc", "indicator--ce29288e-902c-48b9-b486-6f2564242ff3", "indicator--175d1b50-dc68-4b92-bf1f-d1dbf6a67c02", "indicator--7ad950b6-c358-4ca0-8230-c436a79d5a19", "indicator--7b2ef0a6-e0df-46eb-8c56-aed003c2ec64", "indicator--1dcd2822-c5cc-4eb6-a37d-fccb8cdb38b4", "indicator--6233ee07-14da-4a1b-9750-e54da5a83e5a", "indicator--089f1e94-b51e-4310-b670-b0703e10ee08", "indicator--d6a6134c-69db-46ec-9ffa-94baedf98bc3", "indicator--8ec064a1-b6c6-46b7-b29b-2c78874ab5b6", "indicator--ec582ee9-57bd-4dc0-885a-7f3fe07fb78f", "indicator--0e0a1846-e270-4fc5-87bc-6f4ac405b54e", "indicator--ca8aeba1-843d-4786-85b5-3f4618858c61", "indicator--cb22c0f1-a656-4a23-83ef-4a4d2b7eec4c", "indicator--26f6c81a-a947-4778-8ed7-54aa29633022", "indicator--e44a0381-a4dd-442c-a4cc-153537020af7", "indicator--92c0e213-c376-443a-8ef0-18da6ba449e8", "indicator--74dd52e0-c23b-4b29-8e99-3340071a748a", "indicator--c9a2caaf-87fa-4be0-9184-18034dd1459e", "indicator--8a82324d-10f5-4226-8da1-bfd7d7549edb", "indicator--6d7b0f88-13f9-4850-92c9-183fc5a16646", "indicator--0838ca62-0113-4f00-ab7f-ceecb95fceba", "indicator--7de839fb-5e7c-40ac-bf31-8dfa1f7c2c44", "indicator--98021887-a508-4523-a6b9-4155a10e74f6", "indicator--133b7560-3ae0-428c-ac27-5762be9649b2", "indicator--ab4a890d-f4fb-43e5-aeb1-181fd4c714c0", "indicator--1bc2979f-24e5-4fa2-a0c5-a56973a273f0", "indicator--075c1307-bbf5-4ed0-870b-ad1869e5e28e", "indicator--3e76ea34-2877-403a-b784-e5c344bc6750", "indicator--63bd29b9-70fd-47ff-9b07-c0a6476ba48a", "indicator--167fcd0e-3b2a-4c17-9613-480dcddbda9b", "indicator--1492d691-92fa-4b45-9d9d-73a7df3db41c", "indicator--e085dc1b-6650-489a-8527-d85847f29769", "indicator--d6e402fd-b103-4ae0-9d33-b52d3dc14650", "indicator--ef969a88-c5c9-4112-b711-e839f1c7239c", "indicator--7bdc39ba-3ebc-47ca-8b83-db6a543f7a56", "indicator--614f5ea2-8e8a-4164-9f7c-1dad8761919e", "indicator--da1abb7c-e165-4bc7-8ef1-d1d455b0a31b", "indicator--9b1163e0-6d9d-40c2-874e-20c593abf903", "indicator--ca242f41-45c9-457b-a4a6-db2b37dd6eb1", "indicator--b927da96-61c5-4b40-9b87-b638621748e2", "indicator--588cae33-5e00-451a-867c-e96b564857fb", "indicator--bbe944cf-f799-49a4-860e-4e94f7b7e7f3", "indicator--55bd5426-43fa-4c1c-965f-d0c3611878d2", "indicator--92d05aa4-4130-45c9-ac0d-027925ef2de7", "indicator--b279c9d6-e21f-4c32-8719-6a8997579ac6", "indicator--34ca064e-de86-40a7-b64b-8f40491949de", "indicator--15e1cbc7-b7f6-46f8-8b57-60807af276a6", "indicator--b1a031a8-99c5-476c-b5c4-b9647d44d223", "indicator--c1968654-e294-41f1-ba9b-49599f485ddc", "indicator--a6232768-9c18-4928-ab84-2fa4dfa13194", "indicator--993c85f8-c2c3-4a73-8d56-5ca88d1c7180", "indicator--a93e3856-edc9-429f-9955-ac632df772dd", "indicator--051c6459-ce01-4fd3-a7fd-3b3a66ebf09c", "indicator--84b82199-c22b-496e-9ca8-365682c77b6a", "indicator--9b6ee98b-3f03-4232-99f2-7a62203eb803", "indicator--7f8536b8-ce7d-453b-967d-6bbdc26ac63f", "indicator--a849998f-983e-4d77-bff4-d2eba62dae47", "indicator--cbb3c920-4b4d-411c-92fa-94922688812b", "indicator--bf03c3a2-fb49-456f-b8cf-51b4a3422061", "indicator--84eb63a1-1546-482d-80db-eff13da5e0cc", "indicator--c29e853a-7850-4300-9779-c1b3309fa7e8", "indicator--5efd2647-aa2d-43a8-a627-262279e85a44", "indicator--0769c2f8-2ba0-4dbb-9ef4-605257816dcc", "indicator--13433d8c-2519-4c58-b58d-88e8ddd11ff9", "indicator--1a2cf9fb-5f98-4f38-b03d-3d5e4ed9affe", "indicator--931b8091-70d4-4bb3-a4c8-9980c6f927fb", "indicator--c8f932e2-089b-443f-909a-a5f4d8e173a6", "indicator--70ab9cc6-99b9-48e4-8eed-fa0e7c61c5e1", "indicator--39b6b843-8f88-4d3e-b695-19fdd1d03e5c", "indicator--31eab777-728f-4fe6-bf36-4409de0dff9e", "indicator--77fac271-921c-4e33-a931-116dafe72684", "indicator--884eb4c6-3ce1-41e0-9db6-fff32099e2d2", "indicator--93912022-2e5b-42d2-a380-8fa8afd229eb", "indicator--9cc162a0-f043-482a-a4a3-afa6a6992e77", "indicator--ca58d03b-08a5-42dc-ba98-79910cf65802", "indicator--7d9b7a27-a3c1-4d34-acdd-97d3c3fc96d4", "indicator--65870bfb-dd98-47b7-b887-0d0231d4ee04", "indicator--8d72c2d2-ca53-4de4-8a4e-c60dc4a74eea", "indicator--f52b48d0-7b8a-4691-a66c-98e588b90964", "indicator--5886c04b-535b-4535-ba36-77d6524b1bba", "indicator--60987a02-c260-4737-82a8-5b07dd92e43d", "indicator--c6ec67aa-3cd8-4a13-8252-acebd2fc615a", "indicator--ad1fe9e6-08ae-4756-9eb9-dfc108d04da6", "indicator--738271cd-8e52-4df6-abdb-3f78b57e7601", "indicator--29fc8df0-e336-4a8a-8e3a-98ca86a95b2f", "indicator--e62cc2e8-591a-4e96-bf26-3914788c0f46", "indicator--2469fb67-e6df-4965-bda1-94b275d26a96", "indicator--25ca106c-d74f-4192-9a32-66d811ab6464", "indicator--ac364273-75ab-4727-9420-ed3100e818c9", "indicator--1531ec1e-c1ae-4c48-a6d1-46ad1cdd98f2", "indicator--3f0a3c0c-0900-4d29-9718-2e7d6c6b1785", "indicator--0b9752bb-373c-4302-9f5d-a551c9d8f24d", "indicator--65d822e3-3898-4e3d-bc20-6679a59ecb6a", "indicator--3cc27d77-4718-47e3-b628-f98581c996fe", "indicator--bd1385d0-3f54-456f-95fc-19611165794d", "indicator--6ea69b4e-2a6d-4108-be95-c926870d7d38", "indicator--7c3080cc-5052-4822-a9c4-d4ae1087729e", "indicator--3321dabf-d225-4f19-9136-58ff10802a84", "indicator--27197ec3-c0e0-4f1e-b0a8-4ccc83c54d12", "indicator--f20e3821-1ec5-48e1-8a4a-ac3d1045745a", "indicator--a6b1330e-b77b-4199-89b3-54a6212a1cea", "indicator--3e754084-6b04-4de8-a859-e7aac189c5e3", "indicator--152f11eb-a131-4871-b957-7b88b773a060", "indicator--6d23919a-3da8-4771-ba01-f94b1aadf429", "indicator--6be62c64-0ee6-4240-8c38-83428aeb4dde", "indicator--247985a1-0932-458e-b145-3622a477a578", "indicator--bd00658a-ad0f-46ab-b1a8-206b04840732", "indicator--78aa4c79-a5a3-456e-9ba5-78a9abb73484", "indicator--495969a2-dc3b-440b-bb36-afaf32dc9a0f", "indicator--73b6eae3-5eda-4e5a-88eb-d342f94e8a75", "indicator--b7268489-e7fb-4051-a179-e7b3cdc73322", "indicator--82bf3847-123c-4725-bc90-e652df23913e", "indicator--fdbcc36b-8eee-4e10-84b4-35561d8f85fd", "indicator--bfa01aaf-7977-4762-950a-38221014e042", "sighting--88e8f317-bf0e-42c3-9ff2-89dac8b7b2ab", "sighting--2d09bfef-686c-4548-a072-6e7bc8fcb83f", "sighting--1583625a-83f2-4a30-8d7a-6adbb9937d60", "sighting--a7502c3a-6afc-4553-9310-1e9fbfb72475", "sighting--5f9e33be-fccc-4a31-be56-ead1b31c325b", "sighting--64d5a1c8-3ae2-42fd-ba86-0dc8c795d902", "sighting--76d7e1e6-f4fc-46bb-ab99-a743554ed1c2", "sighting--9f001083-818c-4cbf-b870-a7643dc18c11", "sighting--f7bb805b-a720-45f6-8a26-ea89496c664c", "sighting--51c53910-e32a-499e-bb7e-849a30603705", "sighting--ddec1e0c-a05f-418a-96a4-98d81ef94fc1", "sighting--1a4ab982-501e-412c-bcbe-6fcdaac86656", "sighting--0906cfdf-f894-4b26-9cb0-4638938b6b05", "sighting--ee521149-d4ed-4aec-aea4-46902fffaf6d", "sighting--044cef19-4cd7-458e-92c7-5be03127c3b1", "sighting--96c60042-9e58-41ac-a636-f0ef83c57e7a", "sighting--e32dbc66-9463-40d0-b116-ef352254c32a", "sighting--ecfaaa98-ce1d-4f75-817c-3e0fd79b03d8", "sighting--72967300-e3d9-4e9b-af03-4b78862873df", "sighting--58e5896c-b1cc-4a9b-a7d9-880aa2771d3c", "sighting--3d7166d7-c57c-4618-85ea-0cd32c9bf0f0", "sighting--041f0516-8bcd-43a3-b280-0775c55bc8ec", "sighting--fd0427e9-2570-4fd2-ace0-fd242264fd29", "sighting--7870331c-2ec2-4f05-9c25-8dbc7897aff3", "sighting--8b4aa472-1c36-4f2c-9542-e7cf50048c2b", "sighting--dba3245b-832e-4276-a0de-4434656c7116", "sighting--90e4b134-becd-4791-be13-b172e4cf0267", "sighting--1a3efb60-d49c-40c4-91af-588938c715f0", "sighting--18d6c4ba-98a7-4b31-a00b-fbfb4c211d02", "sighting--2f313a1b-260d-4943-940a-84264371e68c", "sighting--bb2171c1-4f96-4ad5-aefa-1c3f6d746522", "sighting--45a7942e-c9d0-402e-b13b-22b8bc69b92a", "sighting--3e600b36-6039-4966-b6e9-c799dd7bdf17", "sighting--e231cba5-6969-4dee-8a9a-6b5b375da3b5", "sighting--1010cc40-104a-4cc6-91ad-b2be8d519f92", "sighting--969f2acc-e1c5-475b-beeb-0ee9f2679893", "sighting--92c8d1f5-f03c-4636-b3a5-965a53c124d8", "sighting--3ec5a456-0be7-450e-8ae3-2b3d59d50c60", "sighting--9e53a6f8-f7ae-4cfc-b471-a29bcffc8eb7", "sighting--bb95cb15-d8a1-4d1d-88a3-9091143b811c", "sighting--b3e3f47e-eff2-4651-a7bb-94946cca2c4a", "sighting--da33c097-ffe0-4bff-b40e-6f1b760fab2e", "sighting--9cde1147-c526-449c-ae5f-04809f66c0d6", "sighting--3071a619-c853-45fb-b5cc-7107d8678a71", "sighting--6dcaac37-294b-4ac5-a171-425028f33568", "sighting--f024559e-5823-432b-9973-3058e26e0714", "sighting--2498c806-f7ff-4ac5-87eb-a6c19d1cbb6e", "sighting--bd2ee52a-e67e-48f7-95bc-581cad9fb244", "sighting--0b96d40e-91db-416b-a485-0eeaaf9f8dfc", "sighting--ef504676-87d0-48b2-8ad5-5af488e3d242", "sighting--83db56d6-7b43-4250-b5c3-31608ed86da8", "sighting--caf96ad2-e45f-4374-aa17-5b25824a1391", "sighting--3862255f-9928-4a9d-8e00-92188a68088f", "sighting--a5a5af1b-ca92-48de-b395-bc572eea2db6", "sighting--2ba732e5-433a-48a4-9c3e-7288de9edffb", "sighting--b8cf5c09-da05-4b9e-8970-1e29acb97568", "sighting--eca92f7f-6f4e-48fe-be31-87ab5464292b", "sighting--5915537a-8e96-4668-a83d-5c0c820e0485", "sighting--091ac770-0e7b-4e54-94e1-1ba6359a74a7", "sighting--e24675c4-e020-4a2b-83d6-69e4b4a0ebb1", "sighting--5d275626-fbc9-487c-8f39-67c9db761cb1", "sighting--c7695bb6-cca3-4abf-87c6-199a97f6b625", "sighting--66b78552-7821-4914-b31e-ab5609c1bdc9", "sighting--9701556c-21e8-4f14-b904-6bbd5afc827c", "sighting--a1c174d8-18a7-4659-aea7-2ed9dc6b441e", "sighting--316688f4-0137-4055-a5f4-d741824b2e6a", "sighting--0d6f1696-11b1-4b01-b08d-0b14c4e746c9", "sighting--0dcf27e1-567b-4993-af4a-7a03f85bb535", "sighting--ef753182-e2cc-477a-871c-d646ef1c1a21", "sighting--cfd7a70e-4fd9-4bde-b9a4-4aa46857d475", "sighting--4fe4d2af-5c34-4a96-830d-65d1f1204227", "sighting--a4e05e19-30cd-4f0c-b793-7feda0842672", "sighting--c2a0f227-7a1c-4991-b167-560203501046", "sighting--4139fc23-485e-43a0-8274-b5b0475917b4", "sighting--53642771-7148-4782-a16d-3c83cc962b2c", "sighting--d184bcaa-f80f-48dc-8e94-84bbcf863f5c", "sighting--24f81286-8c77-4b23-80fe-17f016f0fbba", "sighting--955eff4d-c2b3-438d-b50e-0a96a5e0fe1d", "sighting--929aef39-b854-41f6-938a-5c1ef3928aae", "sighting--3b6d8764-3b8e-4904-9572-fa331ba7e876", "sighting--939637c7-8eb0-46a4-812a-2a3199a73155", "sighting--b08a1312-f515-46ab-9909-6b7e68994e95", "sighting--393c1a97-3e6a-4720-9ae5-bdaf78afad1d", "sighting--bf6229e4-d84a-4ffc-a277-68fb48ecc2fa", "sighting--bcdbfbc2-f26e-4c18-8414-613822cb9202", "sighting--e45e8d47-d08b-441b-bc00-8abdcde6644f", "sighting--8af77eb6-333a-477d-ac50-e5c3890169d7", "sighting--2087b727-389f-43a4-b914-11f39355df02", "sighting--8efdb6c3-0033-448c-b629-9d9e4deb0811", "sighting--18a59c4c-46d6-4692-9465-7ca87e46ea1e", "sighting--61ddbc80-32f5-44fd-a82c-b50aafdff718", "sighting--998ce15a-dcd5-42d9-8142-1630d0f1367f", "sighting--7203f1f2-2734-476c-851c-e3bcc9a2dae9", "sighting--e0f55c40-4c63-45f3-931e-71bddf3b19be", "sighting--c0ed775e-f1ed-4fab-94e7-2719b1d04457", "sighting--3f3b18bc-92bc-4b46-9a8a-5905298a363d", "sighting--f13bc281-511a-4b55-8111-1da732ca9df7", "sighting--55c5962b-d422-488a-94a1-d852da7c7a00", "sighting--9b9d2292-a674-4fff-b771-f5c4fa77396d", "sighting--044e434e-609f-4452-b1b5-aa63c5ade8c1", "sighting--c75da4e7-f49e-4bdb-96fd-26203052a93c", "sighting--60e81d52-8529-4d09-aea7-41cbeb2c956c", "sighting--448e8c45-58da-479c-8d86-bf451f3b58a2", "sighting--66e25150-293a-4269-883d-db67bd46187d", "sighting--f061d9a5-95ce-4d67-a18f-e2817f600bdc", "sighting--784a2c97-f068-45fd-b6a8-063830c6adc5", "sighting--191d41de-288a-4f10-879f-c97d16e6eb73", "sighting--095492bd-38f2-4d3a-b3ae-b9204ab71cde", "sighting--86f3517f-e24d-4ed7-b883-e306c9036fcc", "sighting--9d185ddb-157f-47ef-ae26-5eea5678aa3e", "sighting--05e94cd2-f460-4a03-83a3-c7dc2be271cb", "sighting--8bd36cb7-1789-4765-a84e-43aef7a31bb4", "sighting--2235ffa9-319a-4aa0-b531-3499e7a8d7e3", "sighting--948493c5-e84c-4093-92be-dc77ecd972c5", "sighting--adeb5571-0f20-4a0d-b51d-13cc91fbf18d", "sighting--7f8530d0-f655-410e-bac4-93910ba12aa7", "sighting--5325dc71-7c47-4964-8320-cf6d75b9ac4e", "sighting--1c9f1005-74ea-4f33-bc59-e745a77d0c59", "sighting--a0f22146-0abf-4dca-be8a-cf246c79940e", "sighting--7771e7b6-6e8a-4537-9553-16bd0378ea40", "sighting--3edb5246-4a5b-4ade-b933-809c6c2aa654", "sighting--5484ed9c-46e6-4b00-bbb4-5667bc562a3b", "sighting--48346a9e-ff49-449c-b1f9-561e97118933", "sighting--db27658a-60f9-46a3-8307-a6f72b77e58f", "sighting--184b556e-ce35-4e23-8ee7-0178c0b5bee2", "sighting--55130fb3-0c76-436f-96ed-0bd4d401b818", "sighting--3742559b-517f-4d4a-90df-6af5a9f656e8", "sighting--d0cd3c00-ce24-4f54-b80b-7b9185efec9b", "sighting--404b5a33-343b-4bab-979f-91bd13ced2aa", "sighting--ddb7f2d4-7ec7-4e8d-b708-ce8d2746154f", "sighting--af036485-35ae-44e2-8750-95fe39d0b8c5", "sighting--dff7ae3b-cd3f-465b-a069-20eb56087cde", "sighting--7871f2bc-4e39-4ad3-9641-e7da46f3f509", "sighting--8cd0c47b-1f74-474b-838b-676767396d6c", "sighting--85439fad-50d6-4b83-889c-272c0bb7a6ec", "sighting--58cb60ad-002e-4381-b701-8cae3b557601", "sighting--df793e10-a674-475e-8749-d8d671339a51", "sighting--15b87904-e053-4398-a5ae-19b51f08f1b2", "sighting--d72f0928-74d3-49ec-a68f-5ea1ec58a8c4", "sighting--26499f92-53ce-41a5-aa6e-1706161846d4", "sighting--5fc4f997-9841-4be8-94df-bdda60a8ea4b", "sighting--066ef198-8577-4c5a-84d6-56896fe228da", "sighting--5117e36d-6a7f-4d2a-8ce0-dd059bc31223", "sighting--b933317d-6fcf-4cb3-aab6-a4b7ebde1180", "sighting--71033189-f445-4b83-8b42-84cb028f08cc", "sighting--5164f62e-3376-42d3-9dc5-f71d30c576bb", "sighting--978a162e-8d47-460c-ad85-da8e9fb1d5d3", "sighting--2dbac4a1-ab7f-4138-8367-af72d48e06a1", "sighting--6dcfd923-cb1a-44bc-b288-cb580db61a14", "sighting--d399d0c4-b8bd-4b40-b62e-dbb44adad717", "sighting--6385a2bf-d99f-49d1-920c-be706475a4bc", "sighting--7240bd73-a636-4a94-924e-bdad22b4727b", "sighting--51cac26f-afb7-4a4a-a47b-464a15ca86e8", "sighting--8ed7c65e-0210-4d7b-a090-9b6cb48fdf2e", "sighting--e694c7f3-515d-4eca-967e-46d358781f6d", "sighting--ad20841f-2b83-4ed1-9680-54195a15e79a", "sighting--4c199078-0a36-4887-9c28-94ddb7bb4ecb", "sighting--5faa9200-2f08-4bec-87dc-99c8bf33bc1e", "sighting--8864158d-79a1-4c4d-a53f-fb09deb39530", "sighting--1d41f457-8751-4f22-9f7f-43743f8ea984", "sighting--8e80e0ce-b796-4c9a-99a1-006d99c2247d", "sighting--866ff7ba-1025-4b46-aae3-e37dbc820f3f", "sighting--a809e610-de00-44da-a313-6f2493cf873e", "sighting--c1e460d7-375d-43ec-8791-6a40e7c2f2ad", "sighting--ebcbc315-baee-4ba7-906c-4970e22b6649", "sighting--58099e14-1894-42be-9397-d097cfd92c14", "sighting--12fba9e8-7dd6-438b-bf86-a38ce25c6974", "sighting--8f4f0a41-8eb6-4298-8a1f-8c886424dce7", "sighting--d930bd73-5ac3-44ac-bb76-824705c56c3d", "sighting--ead2432e-75ca-4771-95cc-2a0585bf776a", "sighting--99019644-1822-4ab2-971d-8ee3b03cb16d", "sighting--ac397f66-df95-4d76-8a3c-a74ff28dba42", "sighting--a3372eb5-a9a6-4f41-b455-7a5e19e58fef", "sighting--0a77a6d7-8682-42f3-baa0-1bd902c292db", "sighting--e1dea763-a1e3-40d9-b226-65e39ba94604", "sighting--e6e94ef3-dafa-490a-a5d6-dafad986bf9e", "sighting--035451fc-8d91-469b-9a4c-f1c68afe8bc3", "sighting--c23e74e2-0804-4032-aa77-0d053664c82d", "sighting--74575079-3463-4ca4-9c6b-8cb00618104e", "sighting--1c3a129e-7966-465e-9f9f-e3b49ab03b9c", "sighting--21c60dae-28e5-44e8-9ff3-61e7c273fe13", "sighting--77670da9-293d-4b8e-9d6c-7e1a8daf6a90", "sighting--31075aba-eb6c-4c5d-bdba-e2a084cf5bcd", "sighting--8af6d650-b4fe-4f69-822b-bf7af9ede1fd", "sighting--5b4bbdae-2397-4d8c-bb3d-47e8cf81f83f", "sighting--4155a890-84aa-4d17-ba2e-2bf5497ee948", "sighting--46438ddb-11f0-403c-b2b3-a1e4eb5b35cb", "sighting--c210ed6e-07b0-4fe4-9f2b-4c1b0fffa8d4", "sighting--bab7d3cc-6f79-49ff-8746-b672d13fd7f0", "sighting--1f78c593-b206-44ff-b401-b722db8eefb0", "sighting--ae22b45d-8247-4006-a08c-43d7e90033a9", "sighting--3c10632e-cd83-4edc-a999-513a9fe909bd", "sighting--72350c72-55cb-42c6-986d-273f7eee1234", "sighting--eac0cbac-4c89-490a-ae96-30749b6542e4", "sighting--17d6c607-6622-49ae-ac36-7dc1fb392b9a", "sighting--83864f4a-0d04-492c-8182-1ef6de6ba00e", "sighting--241dae88-6d13-4bd0-9767-d183888f3376", "sighting--31405d52-e4da-401c-b78a-d19b11b2f98d", "sighting--fd55b812-4591-4686-be49-96da5189a604", "sighting--8e580a62-7bb3-4bba-a1a0-d73f8fc30c67", "sighting--07bb6355-41b6-4082-aea2-da2b9ebbdcb2", "sighting--1013a4b5-2552-47a0-9217-e9d3320717d6", "sighting--243d85fe-8e9f-418a-a7f5-2e580ccefe78", "sighting--51dcded2-f489-4972-a7e1-2d74dc30d771", "sighting--745e7f90-8f74-4a29-be66-eb7d480604fc", "sighting--c3ed6a09-2bb4-4d24-bd54-c911282119a1", "sighting--748d63ae-72dc-4338-a636-ef50231d461d", "sighting--1594aec2-b32d-4913-adc5-3ea8c73a92ab", "sighting--f7342141-46f8-4305-9572-19075ce296d4", "sighting--eb50c918-796d-4db8-bc0b-dda894909e4b", "sighting--57eda152-584a-4471-a998-e43fae688e50", "sighting--c371c6b6-f4a0-49fd-92d6-5882d72094ba", "sighting--4a66b4e1-0bf3-4131-96fb-329adf614662", "sighting--21ec8f7b-e42d-4cfa-8d21-6563329817e1", "sighting--458a61e4-c7fd-40a3-b8e9-c0c9715258a7", "sighting--48ed025b-8a45-4a47-bd16-2eb86fb9b9b7", "sighting--63ff33e7-9a83-4dfa-bb87-7f590034e1d6", "sighting--1bbab68d-340d-4820-9495-250c371e5dc4", "sighting--ac1add04-68ea-45a4-b37b-28dae010a588", "sighting--c6e87be4-f3c9-4d9b-baeb-2e205e4bb355", "sighting--75765829-1b69-441e-9f5a-21b658ba49a7", "sighting--c568eb5c-e501-4cf8-b8d4-97406b563496", "sighting--d175f119-1b08-436f-a1b5-0bb107b08297", "sighting--27e191ce-b1cb-435e-9021-dcc5d8b50a2d", "sighting--7c5828ec-fe20-4d7d-b97c-d292e8c752a9", "sighting--e59575bb-bcd5-4104-a91a-d481cd1928a5", "sighting--03209188-64b2-4dd6-b74d-53da31c868bd", "sighting--f1e81bb0-0868-4a24-8c8a-53a80cc96ae7", "sighting--74e6dbf8-eb52-409d-905b-adb945e5deb4", "sighting--e663c961-168f-4cc9-b495-0778f12b5ea5", "sighting--4582c370-4f28-41dd-8891-212505c33c18", "sighting--53cddb48-2db3-46c6-8e5e-46fe327d7311", "sighting--aa27b542-df5f-4430-b1eb-7183d51e92f3", "sighting--5b762871-b98e-422c-967c-2f29f553dc1d", "sighting--6fd93c3f-0422-43c1-8779-599dfddae0ec", "sighting--3125fff3-b2b3-47d2-bfd6-d1174dfc63a7", "sighting--af2c7101-cac4-4049-94a5-b857c5bdadc7", "sighting--8a0f53c7-9a28-4f10-a09f-b57a2571efca", "sighting--484a7023-1c53-4738-a96d-abe402424687", "sighting--afd20f37-3eb7-4573-983c-aedea3269224", "sighting--ea8699f2-7207-4e19-835c-b37ab5a31caa", "sighting--987a6a9a-1f6b-4636-b225-2eb25bbb3a0c", "sighting--b669bf48-fdfa-445e-b087-de391559389a", "sighting--11d695c8-66e1-4450-8e7d-9f88868a2f49", "sighting--3b8099e4-d0fb-43d8-8dfb-711d5379d654", "sighting--5d1062cd-b3c3-431b-a059-b0cb9baf2553", "sighting--13d1653f-8fde-497b-bd9a-437a9dfdfad4", "sighting--017ff449-5a75-459c-bdd0-ca8c74a285f6", "sighting--591a747f-ce5e-4463-bc25-964b5f4a8d04", "sighting--ca45135a-ba95-4e2f-8f09-9dc037e06fc3", "sighting--b998783b-6541-4ff0-ab5e-ec29388a5125", "sighting--dc7ffba1-c867-4bfc-a43f-bed5582fa601", "sighting--0706ad10-6de0-4562-95aa-a562a38e5e1d", "sighting--3b88b46b-3b53-4bf1-9766-ce86759b9ab5", "sighting--96a8194e-07e7-4f81-a6fb-24de165eeb25", "sighting--57260aa1-a43a-4e83-bbc0-b3a2e4dc0f90", "sighting--113c2001-8d5d-41c8-b09c-82c5caf96459", "sighting--7e1ff712-71a3-48f2-b0b0-b63c379fbdbc", "sighting--95db94b8-d14b-4594-ae4d-9d3ac4449a76", "sighting--4b35fdbf-fb43-4fb5-8c0e-32288b72d35c", "sighting--3b36105b-8f67-4036-8e81-b03b3f70a4ba", "sighting--afb0ee80-2d68-4432-8eef-cbcd5fd42745", "sighting--2595b373-0259-4331-b588-4e75f4b7288e", "sighting--726d248c-83b1-48d6-bbdf-3210c14a2d5d", "sighting--e6bb7a9a-748f-4906-a845-b7751efd2645", "sighting--443cb488-9ce2-45c0-a38f-44e357c9d669", "sighting--3060547a-c213-4e60-a205-dadfe7c30286", "sighting--62faed8c-2f3e-435a-86e2-e94916152e84", "sighting--0837b7a9-0f86-4965-8b8e-bbb931ff6082", "sighting--380aea95-a1d4-4388-8193-90fd72b139f4", "sighting--2843cf0a-5e1c-4e6d-87fa-46d055a9cf7a", "sighting--7a82938b-6f4d-45ac-8343-63a0cf76f9f0", "sighting--55fc2be3-df6a-4cbe-8d3e-4edba24a1f12", "sighting--409942ab-f693-4192-a6a9-d6230f924c4d", "sighting--226e70e1-e034-4b73-a726-ded86af7f198", "sighting--2448d7e9-7ed0-45cb-afa5-3c0e41ee674e", "sighting--f2ab6233-54d3-48dc-87ed-7cd28d152b5f", "sighting--4eb1f599-ff46-414f-9362-3294c6491c15", "sighting--29716276-7c8f-4717-893c-92bcc5058cbe", "sighting--edf3d1c8-4522-4157-918b-869bb925d541", "sighting--2e5f9efe-9643-4fc8-8c95-236a981af249", "sighting--9abcc7ee-de5f-4c04-8ef2-5a5e659e3b98", "sighting--d4561a5a-23f7-4f21-9523-a2016f8a1e85", "sighting--c9057fb1-5c9b-4d72-bbde-7a27af45d0c4", "sighting--246d67e6-a267-4877-9644-0f4b017c89bb", "sighting--0b464d45-a453-45df-83d9-11f6064a5962", "sighting--bb69e27f-0eee-42f8-9629-003efc13ec88", "sighting--0699d0ff-72cb-496e-9f2a-6cfb80aa4912", "sighting--3c22fbf0-61e5-4866-9b8a-9d0645f9c83a", "sighting--ec058d35-833b-4979-9d1c-51c8c6084946", "sighting--82f76ff2-cb57-422f-8f9f-4cc6c8fb9e04", "sighting--32adae7b-db12-413e-9448-f2ccf2235fa9", "sighting--26a38f93-afa4-43e0-9869-d62fff3a239e", "sighting--621d69ee-c33b-4418-a52f-19eb9d8e9d7d", "sighting--ab5dac15-3b86-4d69-b4d3-a645c0d7c273", "sighting--0d51393c-3c1f-40c2-9021-4fc5c13ed1ee", "sighting--514fba75-d400-45bc-9c9d-b5fe242b09fc", "sighting--74358e65-61af-4cdb-afd7-9e7f8438bc1a", "sighting--7471b000-30ba-4a83-b7ae-3352436d3219", "sighting--d300154c-e09d-4ba7-bedd-23bcd37ff5ce", "sighting--498309b8-6254-4572-912f-cc5a64183b3a", "sighting--8a2cfa2d-27ad-456d-aec7-b9760fbe1b95", "sighting--dd03ae2b-4a77-41b8-a16a-4e90fc7bcc1c", "sighting--bb2b1723-8a3d-4317-b6d8-230b30ec9712", "sighting--2a37c879-2d14-4a5d-ab44-23d782ecd231", "sighting--7d7e0415-5880-425d-b414-0c9a4e68fe97", "sighting--d59cb624-546a-44ef-be49-8b0df88a48cb", "sighting--c8edb2dc-e784-4fa0-882e-a1fff3f70ae8", "sighting--7f05b90a-daeb-452f-b070-4e9d1e45dadd", "sighting--d9c9e0da-cfaf-4406-970c-5491c3440835", "sighting--e248a7f8-4048-48dd-a874-d0ed8c59a6be", "sighting--01f224be-d3dd-4094-aad3-0da59ed96564", "sighting--bf58363d-e387-4ae8-95d4-68fb1f497675", "sighting--2cd4937f-89f1-4b9c-a0d1-1a9ff4fa84ab", "sighting--50aefccf-414b-4bc7-9973-ef9762d17f9e", "sighting--f7107abc-3a24-4bb8-aba5-26cf30bb9bc4", "sighting--1caea629-46f3-41ee-a010-4ab489fa95ae", "sighting--cf292b67-3068-4b8c-a2a1-a0c308e36fc6", "sighting--2d3cd061-a88f-461d-8004-892b9f6d3bbf", "sighting--48e70410-10b5-4381-90bd-feed6b33ca4d", "sighting--b1f347d9-651a-4074-854e-7f38565c825f", "sighting--a2ea09aa-4a21-47ef-9ab3-4c04d95f9341", "sighting--4b630e46-0078-4e4a-91dc-66848f48330c", "sighting--416d65bc-9ef5-4af0-a1b1-df156f3c0b52", "sighting--fb92c267-3812-4ad4-be3e-1d112f59d4dd", "sighting--f4cf8ac5-a6e7-4bcf-b68e-1b96e2f02d11", "sighting--aa1f89f0-d240-4c69-8ccb-74a175418ba0", "sighting--9db2aa76-c9bc-4f18-b466-4d6853b532de", "sighting--e931f105-1cc0-42b0-a39f-6c70d136b12a", "sighting--59b7aeb9-5e48-4b5a-a5bb-c603189f7643", "sighting--e84b3ce9-399f-4512-83d5-4288429b5496", "sighting--7685d49c-dcb5-4782-a03a-8ba2b3254f0d", "sighting--a84b3fbe-cc21-49ad-bf43-8e8dd2ec7f69", "sighting--5969c923-ae07-430c-a4a9-efe92e74cb70", "sighting--2ed778ee-8cbe-4dbb-ac33-3d1252681ac8", "sighting--743cda2e-b38e-4301-9211-fd48ba5c383d", "sighting--74fcd91e-1e13-4a7b-be1d-09a12123feaa", "sighting--e57e7510-dade-43dd-b81a-b16943998bfb", "sighting--3230cc28-a92a-4a5a-9cda-8f06360fab01", "sighting--0efe6b23-039a-424f-9c12-f0a81b66631f", "sighting--cbb8fbb4-fcb2-4e8e-bc6b-72d386db0b87", "sighting--96b24970-b3f4-431e-99fa-a73014040d05", "sighting--ebf1898a-835a-4947-9c19-002a11f73146", "sighting--7ce80e1c-da8a-49a0-af56-d823ebe679c2", "sighting--8c80aaa8-008b-4a51-b802-6ff8a9a7d682", "sighting--d5979412-6c28-4946-9f8d-52f84f5694b3", "sighting--2d9b8ba9-1401-4567-82fb-8b50ad91eba9", "sighting--381d9386-c1de-4cd6-963f-f93d089bc8c4", "sighting--4b8acaed-b5fd-4353-8397-962de66c9e77", "sighting--860eb0d8-7a83-4606-8cef-824308555790", "sighting--2809ace4-a645-48f1-aa82-7f7abc21dcc1", "sighting--1444b724-aa3f-48e0-b3e0-543aec0aa940", "sighting--c699280a-396b-4d26-8496-9b0cb84eff6c", "sighting--ef88663c-90b1-427e-9513-3815c4d4ec40", "sighting--bd9ea23e-8978-4707-8dda-94edbd066312", "sighting--8fc269c8-2782-4e5c-963f-20bcbe2dd7be", "sighting--8980580d-862e-4e90-baaf-ce4a6dbad782", "sighting--f8d2ddfb-b73a-494c-86fe-0b0985ed4c5a", "sighting--8fd66e79-6ec0-442e-8b0d-084882c09505", "sighting--9738ee89-c1d8-43b4-8006-ec088a388111", "sighting--31ee01d6-8782-45db-bdea-9030acab2493", "sighting--21ace740-5fe1-4657-8d86-5049b654a0d6", "sighting--5ae3bac2-8167-4da3-af3c-f2ef8916d0e9", "sighting--e4018ac9-f9c9-4ba2-8232-2456235ffa95", "sighting--869cd622-b306-4aae-8845-c6f7733085f5", "sighting--533bb67f-7d73-4119-ab1f-ed0e4a6ba8d1", "sighting--90e40a26-b41c-4413-9fa7-aa347530b8ea", "sighting--cb624950-dfba-4749-ab4d-48d3ad3e24f3", "sighting--93d31e5f-b0be-46bd-98ab-674bb768bc58", "sighting--a2c13291-36c2-4ce7-985a-4a441602eec3", "sighting--07fea298-5769-4bf0-a054-19070fa36ae4", "sighting--34d3f8cc-3744-46cb-9908-cc1ae35e76b2", "sighting--cd25e375-fd3f-4e53-b01b-35a0972bed03", "sighting--77ce99a6-e427-4767-9edb-6bf4f7ef01d7", "sighting--4b8b60a4-af4b-4b3d-9a38-753d2a981130", "sighting--19b9abf0-f5d8-462e-b128-4924d92327ab", "sighting--e0763741-1572-43f6-98e2-5e1c6c5ccfd3", "sighting--41a330d1-6e8c-484e-9ad0-89d5a5c31a5a", "sighting--d6ae89a1-1efe-4879-bb27-f35d2865793f", "sighting--8c48567d-0bbd-44ef-971e-cabec36c3145", "sighting--f6f80459-2591-4ded-af42-ae4af8dacf59", "sighting--4ba9129a-b8bd-45db-b105-c9eeb0552562", "sighting--8fe308dd-1237-4e1c-a9b2-7ea413ecfdd8", "sighting--446cbf68-dde2-419c-ba70-c4fadfa7161e", "sighting--196706f8-f940-47c1-b7df-e3b4df421255", "sighting--50592ec4-698b-4a59-96a4-1222b71bbf8b", "sighting--a19a560d-8711-4125-877f-f6b7d8e52deb", "sighting--14b9a7f2-284d-454c-aa64-0e02fb5cbe2b", "sighting--70466376-c4da-47c6-a2f0-b4dbbb290070", "sighting--40c142c7-6d5f-4d72-a2d6-75f4ac1fcfc2", "sighting--c5d8ebe6-2553-401e-ae7f-b85c57371ed3", "sighting--78b749ca-2758-4a89-94ec-e211a2faf732", "sighting--19ad4362-adb8-40cd-9cac-43b1cd9f6e54", "sighting--ac0cb600-85a7-4d6a-9f58-f0bf56cc1588", "sighting--6f9e7232-d1ed-4f81-b02f-a5b66a8f2b52", "sighting--2311e430-1da0-4f94-93c7-edf65576901b", "sighting--f6bca18b-81f4-4e41-8573-172ec4946c6a", "sighting--20feb286-15b4-447f-9762-90289b41b43b", "sighting--13271489-4fbd-4136-aa9b-fc6c83a0220f", "sighting--4eaea70f-ff0b-4219-9fd6-bf978ab89812", "sighting--058d192f-0481-4fd4-9414-df4eed89571e", "sighting--a1e4adba-5d7f-4565-b6b9-e8e40c522b38", "sighting--56f8807c-b2e7-4d4b-a9da-29f6e5934089", "sighting--81865971-99dc-48cd-af5a-949568210359", "sighting--cce453cf-a24e-4fd0-af71-25081b22a607", "sighting--bf3927c6-5475-4dc2-81ba-13ebb0e33cfc", "sighting--d0a560a3-84c2-4003-9445-d8c99a27f285", "sighting--80e77ed1-6b9d-4829-ab7a-e68dc7873823", "sighting--34384196-3865-4e41-8e38-bc9b5d4e6ef5", "sighting--554e5e54-7ccc-4a16-8afe-74c44e519de1", "sighting--9ad1b4c5-7a14-4d58-93d5-e5d5b47406a1", "sighting--553d6c07-690e-412f-898d-44d3ae6ffeee", "sighting--3cd15406-1aa0-4506-b299-c4e458426e6a", "sighting--c783c0f6-33c0-4468-a4fb-668fcf06b13f", "sighting--cd87d9b5-0cc5-4111-9406-f0c44fa7dbee", "sighting--9c661752-cecd-403b-bdd7-d07fcfc29932", "sighting--01ef7e6e-eee7-419d-8054-ff043541315e", "sighting--5417bbc6-9585-4ef9-af45-42d3a55a63a0", "sighting--263999e2-97cd-4cd5-a113-b58683be1b45", "sighting--6e4654d3-2bb8-4a64-bbd0-f6a9cad8f929", "sighting--dca19bc2-48cd-4c72-85a9-a6d6d12d810b", "sighting--7b3056af-78ae-4b55-b0b6-d6740d9b9757", "sighting--ca6ac2fd-2efb-45d4-8b7e-9efddd3490f9", "sighting--545574f7-b61d-4ae0-9d2e-1534e069c500", "sighting--fcfe3909-d3cf-486b-8a9e-d2d08fc12c3b", "sighting--c54f39f6-26bc-44e5-ae96-506c99f6c22c", "sighting--6e1b870d-a272-433b-82fd-994fbde3baf2", "sighting--3a054f2b-fde7-4b58-83b0-f77a5f796909", "sighting--19d5336e-e6ea-4e32-829b-42c2868d883f", "sighting--9e2395c5-efe3-4710-8e34-02226dfd7304", "sighting--d07b7214-bd44-4186-9557-716b9d123356", "sighting--485da04b-7a2d-4ef7-93e2-3834d04cccb1", "sighting--a268141c-6f5e-4ce3-9d62-23b92abcd8b8", "sighting--a83c73ee-5a42-43c2-b3fa-457141d174ea", "sighting--a3bf20b6-90a4-4c56-92c8-6acdb8ff7389", "sighting--48fc2152-618e-4322-b531-0d4e146f6884", "sighting--8a032109-903d-471e-a842-225fd58c5274", "sighting--8bf64f2f-5107-44d1-8172-e582b8ae7f6f", "sighting--9a2c021e-fa4a-4ad9-93f9-738f9550e958", "sighting--bf5c7332-bd94-4429-8ec3-1c6d1b75cccc", "sighting--c1032c72-78af-4985-a5a6-10681eafeb3b", "sighting--30b976ca-048d-496b-b57c-3a9be565cd97", "sighting--0db54c6c-48a6-44c5-a28e-d9ad4f618fce", "sighting--4cd6e1d3-fd50-46a0-b334-927f4e746ad7", "sighting--68c75516-5cd6-4f6d-9d20-c6d0f196aa2a", "sighting--29806730-6f91-434c-998c-441a0b840fc5", "sighting--60b23af3-c303-4a48-a6b0-8a910feba160", "sighting--fedf1de4-4d42-4559-86e8-db992729d8b3", "sighting--1bbef5f8-b9cc-4aa9-88dd-4d38849ae9d0", "sighting--2d42a7fe-55bd-44c0-a960-2db81e3da5ae", "sighting--35e458d5-0789-48aa-8977-a8a4c614eda1", "sighting--fb238b74-c58b-4fbe-b69a-29331376a678", "sighting--99ff89ca-0cb5-4768-97f5-f547a6fe68b6", "sighting--7ce719aa-f5d7-47d8-92a7-0116f6e9d667", "sighting--fb0225b4-748a-4961-b3f5-5da869092e6f", "sighting--b8a30f75-e418-4e4c-9e5b-b8278bcc5c99", "sighting--85b8e2b5-a038-4737-be77-215d9159795f", "sighting--62033d43-8dd5-4e7b-8786-387b74407d27", "sighting--c4fc6daa-61f5-45c3-99d1-de028fce75ba", "sighting--f9a89a2b-ecfb-4c44-ac53-1b1c2da67f61", "sighting--4d18451f-14b3-49fe-a3d7-83f58d6ebbe8", "sighting--e9e6039a-c6cc-4a27-b0b8-6cf44ab6ce22", "sighting--039a1b06-61b9-42f6-a004-7f4950e73561", "sighting--a652ffde-72c8-4ce2-a416-12557e2fc039", "sighting--0d6a55bd-93d2-4593-98b4-d285f652c263", "sighting--77b28cee-a819-4424-986c-471b85550daf", "sighting--c6ea553b-5402-49a5-a03e-d84e029101d3", "sighting--60aa4bf6-5f6f-411e-b37b-bee2190aa44b", "sighting--73b4a749-7fca-469c-a341-79ef852d407c", "sighting--1a226ece-9887-40fe-8e64-c5744954b8c9", "sighting--ab0069d6-478f-461d-9424-e2eeb9cf58a2", "sighting--193babcc-ee2e-498f-83cf-8208f1b844d0", "sighting--35aba07a-e1ee-4b97-a5e6-db2dd60efae4", "sighting--6cc287f7-0668-4840-9b6d-22917233cd15", "sighting--fbf70cb3-d33f-4e32-a4a1-c3916c8051aa", "sighting--e76659ae-878c-447f-bc4b-030ddeac6d5c", "sighting--06e8455b-b61c-4c0c-8a94-87676debb97c", "sighting--d8cdbfb1-8471-4312-817b-53ffb7b4e313", "sighting--b74f446d-d9bd-4e4d-b771-1a22461b08c3", "sighting--b025a7ea-e1e0-4f13-8967-131e455812d5", "sighting--2c071a11-a853-46a9-be23-c48194d10e2d", "sighting--c74a4606-3c13-4607-9dad-51f87304a79e", "sighting--d4ab1f59-5a44-4a45-bf0c-f246e425bad6", "sighting--507309be-9390-4067-abff-4c62d8843e33", "sighting--dc722001-3770-4ec9-90bb-dd336a91f98a", "sighting--4fe67210-57bd-4f6e-8e7f-de91fd14172b", "sighting--d604a93a-2774-4e74-8f55-676b17b4661a", "sighting--f7221978-a640-4ead-b117-dc89d0c9c8be", "sighting--5a1eb5d9-ef84-4351-86b8-1484705d6c31", "sighting--401d95ff-3b1e-4e37-900f-dce6c804c02a", "sighting--4a085128-b675-458f-98d7-2a2fd05f6a95", "sighting--da75a778-b11f-44b0-90b7-bf9e79ff63b0", "sighting--e1f1c8b0-4117-45bc-99ac-6876aaecd43f", "sighting--099883af-0dac-42f3-a733-6ce983d059f6", "sighting--33a40f15-548b-44cd-9f50-34e734fd03c5", "sighting--936f673b-1ec8-4c51-8900-276efa9e63ee", "sighting--1835816f-984d-421b-9c99-255dc0749b63", "sighting--b5a1b858-1068-440a-be5b-8cca294d0278", "sighting--8054f851-37b6-473e-910d-7d09cbaa5883", "sighting--86943871-4752-4398-a452-b547502eb47d", "sighting--4ddc9fda-400a-40ec-add7-08e99d7c80f8", "sighting--f4037be6-ccf7-4920-af18-d1e54c08b1a5", "sighting--7c2b3620-d861-45fd-9b1f-e5dc1906c639", "sighting--8ca6758e-2cfb-42bc-8b3b-92b95e2c9fee", "sighting--a0db0d3f-0a9d-4183-8739-338fa25540ff", "sighting--2503065c-c5f4-4027-a22c-970dbc0ab17f", "sighting--8e999d20-9258-4aed-ad76-de94ee4ac966", "sighting--9c999ed4-1f47-4401-a3ce-d7f5ed159b38", "sighting--aaeda1ea-9326-412a-bc33-3505beced520", "sighting--d10a2b5a-f0b3-40f6-aa70-1928fa072a06", "sighting--5ed79efc-41a6-43be-b4e3-8d1e8d3bda7e", "sighting--abd7285e-15d1-4ec9-b16e-53c3ac48c081", "sighting--8307ca13-1acf-42b9-aed9-90409cfd10d8", "sighting--764c981c-c0f6-40a4-be22-f13847205159", "sighting--230cf67f-10ed-4cef-8760-ab5ad79d78c0", "sighting--ce662e54-ce1a-4918-b355-f4a541c3003c", "sighting--facbc3cb-e92a-434f-a5cc-a437b7cf0184", "sighting--cda0dbbc-be7a-4a92-9f38-8fc90cb12b42", "sighting--77ba9a7a-19dc-46c8-ba4e-c567eac6a833", "sighting--bcb15a1f-c8d9-4778-a31a-f290cf642f47", "sighting--8469b0f3-bd7f-47a2-b8f8-0c72535e2794", "sighting--996cf176-1626-4cf1-9783-1b555096cba2", "sighting--b51b64f1-929f-4ee8-9acb-cd2e6fcd64c5", "sighting--81cc7bfb-4ddd-40b3-9ff1-46e2bf46755c", "sighting--385a2fb9-9882-492b-8150-2641003031b5", "sighting--bad6130f-12a1-4bd0-95df-6372585ef3d0", "sighting--91a43eda-3c4b-49c8-adb9-9244af784a93", "sighting--55c24cc2-dec5-4a0e-8c91-da6af9a8816f", "sighting--3f43d69b-1c33-4fbb-b173-4bc296237c1f", "sighting--c81e8dac-46d9-4e06-9cd5-ccc6597316b0", "sighting--592e7864-9f18-4c8c-ba6b-fd2590b47569", "sighting--9436e2e0-7d33-444e-aa39-5ca2ea5ba468", "sighting--30cac733-6cc3-4686-908d-dc9ba5ac861c", "sighting--ee955b7e-f40a-4c52-bc15-12496aaee614", "sighting--939f4c0a-5640-408e-a77f-a35b8d2cbe0a", "sighting--0306d90e-7daf-4d8b-9e09-66ef4dd151c4", "sighting--144a6fb6-d8a9-48bf-851e-59afa0f2bbd5", "sighting--45d1c165-a3f4-4f5a-a0d4-347e2ad5acc8", "sighting--69abb426-cefe-4a78-b055-e2395aad1b26", "sighting--c27c9866-64bb-49fd-9bb5-9ac4e87657bd", "sighting--fd957a85-5434-41f0-8b77-4f6817888853", "sighting--5dd72daa-d1cd-41ff-b92b-8d68dc4296b2", "sighting--30b72f1a-c9d5-4e29-8fa1-3ea16adc78e9", "sighting--8a03a5d0-1881-4bc1-a184-6436cdfbf916", "sighting--b16bb484-622b-48e0-866a-6f3b2ab8b5d6", "sighting--ec40bd37-8016-4117-9f87-4b280694a0d4", "sighting--f01e856c-6849-4657-b06d-6f6c3586b179", "sighting--de0af76a-f53e-4900-a3fa-557018115d87", "sighting--d811f97a-ee31-47bc-bbe9-7c68ad1ad5e7", "sighting--21a2604d-970d-4aac-a7dc-f6624bf1cc0c", "sighting--272be380-6827-43e8-aabc-c777160f09fd", "sighting--25db9081-e082-4824-9532-a673f6a470f0", "sighting--790f027a-6014-41d6-84c2-9224770ffc69", "sighting--158ce8a1-95aa-4466-b2da-75a497194a59", "sighting--079527fd-40bd-415a-8f91-86cb52ebb3c5", "sighting--5bf46192-d31c-4b2c-b7c3-a01eccfd370b", "sighting--b360a4ef-230c-4e65-bb74-ab3154a2ebcc", "sighting--ba27cfd0-1171-453f-8cd7-fe6b1ddc2e12", "sighting--f6152ede-4bac-44d8-9ae9-bbee54902529", "sighting--d6c2cb3a-b09b-48d4-97b5-a885826e45d9", "sighting--a423c2ba-7d28-4a82-b1a6-f230be338d3a", "sighting--74a49c53-4fa5-46e2-845c-832b75d8e072", "sighting--13b4d7f2-8f16-4f26-a36f-cf1ac1826306", "sighting--aee2dc71-1d4b-4157-9826-1c69320608b2", "sighting--af6eb343-0a24-4c40-ae76-1f239a78f905", "sighting--42b53e6d-7152-4cfc-939b-2a9ab2e42179", "sighting--596da1c2-1291-4219-969f-7726e2f1b78f", "sighting--976927f4-5925-43fc-9caf-89db327998d7", "sighting--e77a2823-8e68-497e-8c51-a8dac86eba5c", "sighting--a04e21fc-cf33-4964-bcad-c2c463b26445", "sighting--cf558c68-bce0-4737-99e7-5d220b9448af", "sighting--ead6291f-0f57-4d34-bacd-693492d654d5", "sighting--d903f7ab-36bc-4250-a5ac-4434797e422c", "sighting--e2be05c6-c224-4667-aa24-9110b963e4ce", "sighting--96d87d2d-20cc-416c-822a-8567bf18edc5", "sighting--895d32fa-446a-4e56-b132-9437b4b6c3cd", "sighting--e14f629c-4752-4002-b8ff-720eef14132a", "sighting--b1f887c2-f4fa-4f9f-bbf9-a399196ec69a", "sighting--314c8e28-63d0-45f9-89fc-5de9bafc1300", "sighting--9fec02e6-73b1-4a52-af6c-d88bf990e103", "sighting--09d3cdbb-5dd0-46cc-aa8c-cc079c7c46fe", "sighting--eda31cb8-d6ee-43a8-86e6-3b0ecb7b32b8", "sighting--ace8c445-d698-4a07-8f8a-dc3242ea71d8", "sighting--884faea8-9523-4b72-8b88-844c96412113", "sighting--26a9ca04-e62d-428d-82df-04472f2e062b", "sighting--f6cd1b2c-3534-4f4f-a48d-32a1e3115ff6", "sighting--5dfbf58d-b32c-4025-9710-c0ff0aac5011", "sighting--19d93c5e-975f-4e83-be32-e82b9b5c849d", "sighting--a61ef2db-a190-473a-ad26-75aa1ba617a1", "sighting--3acec76a-9429-413c-a976-d9a495f97546", "sighting--c1355933-41c9-400a-93d9-f7da485b806d", "sighting--206b347f-7ab9-4d6f-80d8-2f41ee84afc4", "sighting--4b3f7ab1-dd08-4470-baa3-075693a89cb4", "sighting--59d03b2e-a7de-4ed5-aca5-c84a878ab164", "sighting--ba2d5bfc-230a-49eb-aaa4-072a3dcb0174", "sighting--48b436aa-5216-46f6-a2b5-d6354f505edb", "sighting--141436b9-1b04-4340-8b09-9efb58e54109", "sighting--c7bfe183-ecfd-426c-a0d9-2e0809bfcc26", "sighting--86cda4d2-53bf-4f5e-849b-097b12994248", "sighting--4b04b87e-1919-4189-bbbd-6af1f68d4b6d", "sighting--d5e6d17e-3671-4ac3-b000-671d1b2f48d8", "sighting--ad4f8284-bfef-4360-85d8-9e22ce009a54", "sighting--09d1be0a-95db-47be-9fc2-9e752ee1bf21", "sighting--7ab6e9bd-db66-45a1-ad29-fe7b456e3fed", "sighting--70e246c5-32ac-4727-b495-22ed7b224e4a", "sighting--f2586649-fc57-4ece-8bdb-26d770a80bdd", "sighting--df567077-3288-4af1-8487-64e5cd086376", "sighting--ff735f97-a1fb-435d-bc12-ec08f25a0805", "sighting--409d7f3a-36fc-41da-881e-93f734dd175e", "sighting--9f2062c1-5640-40b9-9042-4f8808c1fef9", "sighting--b33921b2-b1c4-4c29-8ec2-f29f80523118", "sighting--85907ffa-db6c-408e-a91a-941467f896d1", "sighting--b47f06ea-1cf5-4992-9490-5a56356eebeb", "sighting--42f694a1-d287-42a8-89a1-f1408d430f9a", "sighting--2295a671-69e6-4a24-8985-15a0de75d735", "sighting--709aab40-1289-418a-972d-29f32a319cde", "sighting--0d842547-7f35-4c82-b444-fc956f83a91d", "sighting--1a267fae-a240-445b-9467-a18697d55eb5", "sighting--4728baad-0a71-4c8e-aad3-7524781f915d", "sighting--b10b35cb-9d84-4f17-a76a-840bee4ade55", "sighting--e2bb458f-a1f1-4c90-81e8-7c06177b163f", "sighting--79ffb39b-325c-4495-bb09-d30cdf8da297", "sighting--84bdfa3b-d8b8-4f9b-ae40-0e6f3a526a37", "sighting--54820a57-7cc4-47c0-b1a7-1847e8ce04cd", "sighting--60c59355-2118-490e-9156-b7ee0f19be1a", "sighting--4e3b8f3f-dfd1-4742-af8c-7e27aca09645", "sighting--1d86f363-5612-4971-bc7f-77240b99770d", "sighting--49ba730a-e966-4cf2-89d0-26cbc3de9da2", "sighting--b0d81b22-3cf3-499d-a3da-ef9fd771a029", "sighting--608e2fbf-2135-4e00-a79a-f761b699c53f", "sighting--efacd7b0-3a23-49d1-88ec-9cf04ac3e870", "sighting--9832f932-a1de-43ae-af16-c04134e98765", "sighting--e065eaa5-9457-492e-bf0e-e5cd7afa7f46", "sighting--397056b4-f6b9-4baa-94c7-a05f0abd8934", "sighting--390188fc-0617-4a7d-b9d4-5c0de5d75fd0", "sighting--de1dfe52-5dbe-4335-b74c-b74e879b020d", "sighting--ab7652ec-3b0a-4513-b378-5b92e13fcfb3", "sighting--b9a1fdb6-d274-4db2-a005-8cf77f684765", "sighting--b380c41f-9050-4673-9950-75b96d1bd0e4", "sighting--d191a50e-50ca-4b10-9aa2-3980222fb843", "sighting--7356b801-4f10-4dd2-be98-23a40473fe67", "sighting--92782a66-1c7d-4850-8b1a-12557f73af54", "sighting--f4434510-eb0f-4347-9196-9edf057e6461", "sighting--89d7bd6c-b6f5-428b-9bcd-89244fc0df6f", "sighting--f571b9b7-798a-4594-a2c5-2bda3d3269ca", "sighting--4218faff-5d1c-4f34-9c73-1b6fab9557d1", "sighting--08c9493a-bb07-49b3-a892-7018fd3e7f26", "sighting--a195861a-1264-4487-9ced-22ef57d4ce93", "sighting--0947e514-ba9f-43b7-8a1b-baab36fc78df", "sighting--f93c1005-aac5-4d74-812f-a18381c21d63", "sighting--f2731f2b-befa-462b-9849-a91582b8d0bd", "sighting--2af8e28b-6717-48e7-aa9d-a8415871b0ab", "sighting--8959574b-9ee5-42fe-868e-48c912bd1a52", "sighting--1ec3dccf-88f1-4a9f-8036-9bf4303e2f7b", "sighting--26c96dd6-81a6-4ac8-b803-0c9c7f4bb60b", "sighting--e419d8ea-86f8-4ba7-83b1-992da208c33c", "sighting--8720b525-f83e-4785-8f25-0c2a983977f5", "sighting--a19a2a5d-8e6d-4fc6-bb35-091e0c81ae13", "sighting--5da5d06a-0ad2-4f4b-93e7-c32dd1b2f68d", "sighting--6661c508-f7aa-41aa-a9dd-de882a6e1dab", "sighting--f04490e6-cd0f-4ab5-bfa2-c24ccda43557", "sighting--8b17494e-2e71-4b62-9401-8a435dd9c3ec", "sighting--f8f4498c-8356-4575-81c4-d2447dcbb333", "sighting--7b417174-098f-4402-a956-38d1f4d63237", "sighting--41312611-9ec7-4ebd-82cc-b829202a7494", "sighting--0b53ff8b-06fb-4ee1-ba3b-ddb4c3c0a7fb", "sighting--70c0d39b-135a-4cae-91a7-13b7abc152c1", "sighting--85e74f6a-974d-4307-9134-de985732adc8", "sighting--71c1b227-8367-40b5-b93b-c3424d2bcd65", "sighting--6dec01e4-0ed7-4ed0-a6e7-2b726e7d2e4a", "sighting--588d5028-df28-42a2-83c2-b6cb3d00f916", "sighting--e523e6e1-a004-4368-b446-9668a3fe627e", "sighting--9a69583c-6de7-4e7a-b32b-bd39eb82ff6a", "sighting--b56143c0-cae4-47f7-b8bb-8569e5f66cc5", "sighting--c9862756-03d4-41a6-9dc7-4065c0ece222", "sighting--b306bef7-797c-44d4-981a-3a21caf7aa29", "sighting--b76a61c9-8369-4489-9d18-8aa27da7d95e", "sighting--4a8a80b8-5829-4a8f-87fa-3148806709ef", "sighting--80362a70-0f1a-4c0a-a5fc-b5118ae04c1c", "sighting--bc378253-42ba-48dc-bb59-535d714fc7a1", "sighting--23a6a753-f1bd-44e6-af31-d0019dcc26f4", "sighting--e456df47-5aa6-4712-a8ab-a8c14d73aa31", "sighting--289f6ef6-433d-4929-908f-f3b55e274d27", "sighting--776e5f3b-c537-4e4a-b125-736e324f940d", "sighting--ea8d5acb-e512-4d99-9070-1595393448a0", "sighting--5bd8a8c7-64a8-4410-85df-619c6998b083", "sighting--f112beba-5aaf-4dfe-8481-a71ffb086617", "sighting--21340048-fa0f-4f25-85bf-dd902b01dbf4", "sighting--c19c6d19-73bb-4128-87f0-e5aaf1e33243", "sighting--6a62e4c5-8e72-43b6-bcf1-26e5eef98899", "sighting--d68969bc-b267-457a-928a-17cfb981c5e8", "sighting--bea08a69-29f8-4a9b-a91b-aac99d865a04", "sighting--665de944-d4e8-441c-b4c9-1e67cadaaae1", "sighting--9f54d86a-1269-4bf3-87aa-11bbab81e2d1", "sighting--36bc75a4-e9a5-48a0-8efb-b3d3ef94b1bc", "sighting--834783be-5425-4c38-a00b-5c996ae7b7bd", "sighting--59d99b63-9735-4075-9ccb-54a0129bc7e4", "sighting--43d08f0a-4113-4d74-8a0e-4e6f6ef4b7ce", "sighting--0bae394a-1210-45fb-8177-2bcc2e804b54", "sighting--7403b938-68f8-4f06-ad58-3a95e94a5542", "sighting--5861a5d0-262f-4b39-be2c-2a3cc2433b69", "sighting--307dd178-c4fc-4807-8d8e-98f87dc48c1d", "sighting--d0ca085c-a055-44db-9406-a6fd4e9f0d23", "sighting--6daf784c-98d4-46b6-947d-02d80d77bf91", "sighting--eebb1f5e-a47d-4284-aa5c-985a116b3f47", "sighting--a84adb76-a8e4-4734-807c-6018c9a3fb8f", "sighting--8c1b6deb-bb77-4175-b396-e3fa4f3708a3", "sighting--ebc5d436-c70a-4a60-a122-19950a8eda8b", "sighting--67cc5532-3373-4aba-a184-c72f3c129250", "sighting--39619c87-0738-4684-992c-6a244613a03f", "sighting--4aab2b38-5b27-47f0-9ee6-206634a55fca", "sighting--f00ff473-48fd-40b9-b9bd-6fc10ca22b0d", "sighting--f3f3cfee-3144-40d2-9071-8ccb612a6845", "sighting--5076d5d4-a376-43b8-a8ff-b9cf8908a29b", "sighting--1dcc5a52-be6a-4725-af97-b38747aef646", "sighting--20a650af-b40f-4799-b83b-ef9a6a2ba4d2", "sighting--497dd590-b310-42b5-af0f-ff99716be212", "sighting--8e514764-65aa-42bb-92e8-fda1dd46ff3d", "sighting--bf4174f2-d74e-4879-8051-84e3ea9abbcb", "sighting--10a0957d-803e-4b9b-8885-b219d9af49e4", "sighting--086e030b-cb16-4e25-b94d-5314fd85c729", "sighting--d5f7ce35-630d-43c1-846b-a80cf6ae90b6", "sighting--a8cc72d3-171f-4635-95e7-140420701911", "sighting--27208c47-e3b7-4f53-82a8-d2793381cf4e", "sighting--8d7524f6-17b9-4388-a85a-471c45fa4e97", "sighting--e70a6734-e21f-49cf-b66a-7802c93ba060", "sighting--1bc0fa41-ce18-4364-8fae-9772fbdae364", "sighting--01f2a64d-7cf0-4f6e-828a-a0b5ca074494", "sighting--d3017bcf-5ebe-4486-8782-0f7340955b7b", "sighting--52a96b83-a2f3-4769-aa95-5a3e49293953", "sighting--5fabe751-539c-4fe1-b5d1-dbeb6c7612dd", "sighting--ac784c5d-6b76-40f1-b199-f9a50318f165", "sighting--241effab-378d-4ed9-8b71-0a8c2e0505e0", "sighting--58338801-91ed-41e8-834f-df7d8799d004", "sighting--90ca6509-1df5-41cb-bafb-5e61460d3d26", "sighting--d91d3c3b-7e1a-48d9-a8f9-72602d46197c", "sighting--19cd8fbd-d5d9-4de3-a937-b58a6f7435c3", "sighting--03304ce9-a6b9-4d2f-8218-0282794154f6", "sighting--fea9190e-ed46-4beb-ab0c-1cbd112a8038", "sighting--140a7637-f08e-45a9-b161-4331de340827", "sighting--ee8a7b91-fa8b-481e-9540-d0285e3efda7", "sighting--89d8e657-9d0d-4183-b35b-dfec2044f3b0", "sighting--02a0a45b-efc9-4892-a859-cbcef0703336", "sighting--4100e50e-fe98-415c-9283-6630a2b71949", "sighting--b7a298c2-afd4-411a-b7c8-4c128e0290a1", "sighting--2ad7be4c-ddc7-45c1-8914-7f77f86aa38b", "sighting--4e0ee886-00e4-4713-9c1a-1dda255e7364", "sighting--e133ec8b-d386-46c8-a3c5-a673c82fbf68", "sighting--fb69fc85-e331-426d-8353-f38119cc3c7e", "sighting--e62cf208-e4a9-4e56-9d1e-f86befb6dbed", "sighting--2a2e813f-d8cd-4844-8710-79b81928d522", "sighting--453a2583-dd52-465c-9e23-86060b41b9e5", "sighting--2dce7c16-6200-4582-aeaf-8d90ca28fe61", "sighting--3d7bc80e-9cab-4202-9681-49c8a7cf972b", "sighting--83ec5160-66b5-4191-a685-88f11942a0cc", "sighting--54b47391-2ab0-40ae-b0bb-f0dabcb48c70", "sighting--adf4978b-4a23-4b36-b7a5-9f16eb3e8d47", "sighting--74cadb36-19ee-4825-9a1b-5d8a29d13856", "sighting--3e21053b-712f-46dd-b2f1-c9c23fb4bbce", "sighting--6d3a2543-b178-41d2-9d25-8df9ea1b6da9", "sighting--28024057-4fae-4a2c-9341-d8ffc86503c0", "sighting--43e7578b-f08d-44a5-ad9a-98d539ab2625", "sighting--fcb7817d-1ee1-41c7-940b-ff0301f0ff25", "sighting--cb72a7b2-ad74-437d-a469-6a2ed7b058bd", "sighting--f34ed0d9-4052-48bd-96e7-513f5c80294c", "sighting--688f5387-07c1-4486-90c5-386022adcd8b", "sighting--ded8863c-fe3d-4049-ab20-e3f9ac9bf20e", "sighting--87a4b49b-6f8d-4686-af7b-5f661e9cf833", "sighting--991bd065-73a5-428f-ab0b-7e880b2c463b", "sighting--57e6453d-6ab2-4af2-83ef-7a09afaf1e2c", "sighting--8298084d-86fb-4d17-a1f6-bc06778b234f", "sighting--d31d878f-ea0a-4ba7-ae03-5209e01d93c7", "sighting--f7864ce0-67b1-4d96-b03e-a2f886134731", "sighting--08a728e9-25a7-44e7-bb51-e90b920b3e5b", "sighting--efaaf118-4a9f-418b-96ef-7c10c595f436", "sighting--9ad00570-0fcc-46e6-88e8-2f0e68f8afcf", "sighting--d6498423-346f-434e-99a7-38243e74c86c", "sighting--d2f5493d-54a3-4815-946b-f8f835134333", "sighting--60f72d71-3126-4356-8677-42e33a03de4c", "sighting--956f641a-1b9d-42ef-b20a-e9241005a029", "sighting--14f08fe8-999a-4610-b36d-0c587a2bc61c", "sighting--5bb5ef2c-d664-4740-b33b-1ceb9b41df00", "sighting--8c82cefd-478c-41d8-abb7-196da45f78f9", "sighting--17fef009-3baa-4f51-965d-993daf4077dd", "sighting--52c53c7e-a209-433c-8e95-342c66c8ee81", "sighting--10848125-ddf5-4dd3-adb0-28b215465acb", "sighting--a5dda9f3-cd87-4edc-a090-544fd5ec8996", "sighting--91f366cd-017e-4d80-830f-d984b2c62cbd", "sighting--762ce431-e363-4247-a513-06652de0286f", "sighting--92d2a006-adf3-44c3-9a71-afb049050d70", "sighting--e68ecbd0-2fdf-4eaa-a84a-4031dd8108bc", "sighting--25d10494-5d10-4570-b20d-91efc33f036b", "sighting--64439168-4eac-418a-87dc-fac5b19c7476", "sighting--3c7c970b-3b87-486e-beed-800bd3a3485f", "sighting--f2654c78-4b5e-455d-b51e-409eee187dcc", "sighting--2d35acf9-e16b-4de8-8565-c7c29990b63e", "sighting--89d5f30e-1d98-4ff5-9db2-1a434dd2fa26", "sighting--627f2ff6-ec4e-4e16-8a1f-df59345a9e93", "sighting--66bb80b8-8e29-466e-80f1-e29b65e21a99", "sighting--eaa83c01-24b8-405f-a715-153fcc319778", "sighting--2d4f371c-31cc-4335-9713-c8f93d63058f", "sighting--743691b2-1483-447c-8149-9cda98a40c0c", "sighting--ccbbfb90-57e1-40b9-85d4-860a93f8cf93", "sighting--aac44b5a-2a73-4b26-9c6e-33f97467aeb9", "sighting--f88f5db7-489e-447c-b1bd-a58285fb922f", "sighting--2adf11b8-d261-419b-a70a-68994aa4ca82", "sighting--7d76a4b6-5378-4da6-987a-167108a2f6d0", "sighting--fd21af8c-a5bf-4022-b6f7-c7ea1c1a05a8", "sighting--c71d0029-fc4a-42d6-bbec-68914bbd53b7", "sighting--ea476440-ba3d-4c74-849c-d55fa5703182", "sighting--07f61678-298e-4bfc-a552-966975116e51", "sighting--4fdff9b8-55c1-42e1-b319-34eefb563788", "sighting--d576484e-032b-48b7-9cdb-0209b9c8c986", "sighting--712cf765-50ff-42c9-a8f7-5ce319310ab6", "sighting--c4b027fa-0a42-4842-96d0-9c0228f4e495", "sighting--3e18ff1a-b338-4b8f-bebf-509d60cb8307", "sighting--2b3a7c4a-096f-4719-8347-dd6f6d8f3477", "sighting--45861134-65ce-4b61-8288-b64124c04268", "sighting--4966e1dd-1aca-4ca4-9224-b30880ce1bde", "sighting--7261ea7d-694f-4158-8484-ab92c68cdc8d", "sighting--8f619579-9a37-45fe-b4be-c99e598618a9", "sighting--24e87025-f40d-4306-83b0-840b46087b0b", "sighting--91e5f2a3-c47c-4588-bbc1-6419a9e42a72", "sighting--6e9c36f0-8a01-4da0-b496-55b162afe9b1", "sighting--00135063-24ab-4d1c-a001-86bff7c399de", "sighting--1e7e8920-2d95-4f72-a96b-722f5f88beea", "sighting--1bffd9c2-54a9-4ab7-9190-c88ea17e1ce9", "sighting--103aec13-75f2-425e-b841-dcc4182697ae", "sighting--99dd15eb-fa5c-4ec3-b91d-958e9fedec2c", "sighting--e127ae56-38b8-45ab-ba89-a31e6584cc97", "sighting--98527017-3074-44bf-95fe-5876d7d03fa7", "sighting--73aaa1ac-fe45-45f5-949e-6982e3e8a7fb", "sighting--e8d6272b-54a6-493b-9b1e-0786e07436a6", "sighting--53171411-7284-48a0-8e35-3a4176ddab6c", "sighting--c9c9fa47-c6c3-4b47-b89a-de3c17eee3fc", "sighting--1655b7b6-f559-40c2-946a-a090d109a6ba", "sighting--7fc5c033-2104-448a-b1a8-a7608911ffd3", "sighting--7ff4ea16-2d0c-4051-86f5-15c04683f194", "sighting--7009e73a-1fdd-456f-b178-eca5be3c9763", "sighting--5866218b-71c2-4a60-b66b-429c5a1428d3", "sighting--7da306d3-799f-459b-b04f-3164f28f9f2a", "sighting--a9bf359d-611a-45a9-a702-45d35498b35a", "sighting--207f4f1c-228a-4bd5-a976-0689ce580085", "sighting--4cccceb4-459b-4a57-888b-bd3aed74219b", "sighting--f29df3b2-9b8c-4370-9d88-1985e5d082dd", "sighting--108befd1-1588-4f72-bbf2-ef2d61ebdf50", "sighting--2049e43e-449e-4289-88d4-4493b8fa357c", "sighting--f991c5a4-65a6-4af5-9757-b150d0f46fa1", "sighting--f3d513a8-c474-44ae-aca8-a4732c60cfbe", "sighting--43fef508-64e8-41c6-b874-c2e02c5b368a", "sighting--27662ad3-cc7d-4fba-9096-9eaf09521672", "sighting--3751a9c5-502f-4e0b-b1e8-08f7de4e0bac", "sighting--b9b14530-94a0-4e96-99e4-b6a9bac2e315", "sighting--d438e384-facf-4758-a466-97a81abd9b14", "sighting--7b6178f1-6dbf-4ac7-9c35-20af5c01ab7a", "sighting--c775ab5f-702a-4fce-9af3-fa32ea7cfdaf", "sighting--f5fefc1c-d010-499b-a848-a68e7b2ebd3a", "sighting--bd3d703c-8ad7-4e06-af13-f9a7c1cae91f", "sighting--c497142c-d05c-4a51-9be5-a5fdba7a4865", "sighting--38b71612-d407-4636-87e9-d46c310bce6a", "sighting--04c44c1e-e7dd-49ba-a9a0-c5e3be40e18b", "sighting--1142acf2-5197-48d1-bf19-2f5f09deb333", "sighting--db971b74-e678-4a11-98c0-36d695d2d416", "sighting--a5b699f8-92f6-43e9-b577-54384d84a254", "sighting--5a1c2a72-2322-4413-956e-6bc61f1cba38", "sighting--c4dd66f0-d6e1-4d6b-8a79-6912fa5d95f9", "sighting--ef809965-b0e6-4004-b85d-c1d2526716cd", "sighting--7b93a0f4-491e-429c-b439-70f4e99d697c", "sighting--984959a5-b2d4-4311-9596-f58795585381", "sighting--99f48884-0017-4db0-aac6-b4d8bce5530d", "sighting--ebafd6ae-a217-471c-a62a-e369da5abbab", "sighting--233e1e67-2872-4bf1-8d6e-da949e451841", "sighting--589c4007-23f7-4ced-b4a4-50646aaa06de", "sighting--98d56286-37b4-4638-9453-80d3d1551695", "sighting--eb50ffa5-57ab-4694-a3ef-db297034d587", "sighting--66b90110-f8a8-460d-b22d-dca45e670679", "sighting--332cf508-6668-44fd-908e-5502d07ddf20", "sighting--bc8d8394-b8dc-4d6c-bf5d-4ed7958ed811", "sighting--91296416-de5a-4e67-b585-30bc0e3609fb", "sighting--ab0f9a53-ac0f-4aea-a847-928963646005", "sighting--cbdee20e-e9d3-4371-ae73-2ec7983c4740", "sighting--689ec905-8d9d-4009-b8b0-178015c0f0e3", "sighting--4d365a38-93c1-4819-bf9d-c22db19e6d0f", "sighting--cafecfb6-5cc2-433b-921f-ce8c62aa8075", "sighting--5da2e13c-4cd9-483b-8e03-75f8939fa327", "sighting--fb9a6924-1f81-47b8-8f6e-98c0417518cd", "sighting--9a373be7-a7f5-4774-aef9-2a82e2363c30", "sighting--72d910bd-cc58-481b-9780-1228c37d39f6", "sighting--af68a164-535a-4ea8-82b3-69f0222425ec", "sighting--895a280a-9d49-4b3f-ba3b-99573e5579b6", "sighting--14c04a43-7b8d-42c1-ad41-1b7776fd9f03", "sighting--bed1af96-8302-4534-8504-ac15bdb88524", "sighting--022c72cf-4eb8-4001-b03d-27302cf32e9a", "sighting--699941ab-8ef6-4dce-a457-5b5ddaed4547", "sighting--558a8d5e-fe37-4c89-8bba-35505b5d3ee0", "sighting--38691f3b-13ce-4924-b601-dcf23f555f3d", "sighting--095b694e-1422-4fce-934e-8e828e62b502", "sighting--5c063ece-6864-41d5-9cf1-e19c589734aa", "sighting--7b5aff88-bea8-4be4-a050-27786aaa958e", "sighting--58c21fa1-b8f0-4e85-81d9-a17bbde8ac00", "sighting--ff07e63f-7375-491e-b24b-784991e493dd", "sighting--29b526de-0bb1-45a7-af2a-701dacbb862e", "sighting--d3944287-220d-4b0d-98aa-1928e74251e5", "sighting--2532d774-513d-4396-bb8d-fdad88de53a1", "sighting--d0d17dde-64c4-438f-a867-571362b3bebf", "sighting--ae70ebf2-5073-4c45-a10b-c471e0631a9a", "sighting--7b6bfe87-f5fa-4bce-bde4-a2110843441c", "sighting--3b05e3cc-75cb-4777-8430-5af244185296", "sighting--4dc14376-14fd-4eae-9c8c-b780e1f40dbe", "sighting--c2f83fbf-d2ce-4da6-96ed-329b691ff8dc", "sighting--018cf892-55f7-49c6-a9d8-b5abda97bee7", "sighting--ff5ce2b9-ea48-4b0c-aae5-0d2f1b1a3cdd", "sighting--505dff90-7e89-4018-9630-cb9d0b5ee21e", "sighting--5574d17e-cb80-44ae-93eb-508c4b2bd626", "sighting--82a85ce3-6a54-4b8f-af01-94f6fac12dfb", "sighting--6158336b-e16f-45e5-9cbe-6e4e83235dcd", "sighting--3234ca54-efc7-4fbd-9dba-b2e52c253e41", "sighting--1b114b18-c421-4cf0-80aa-1e865af0ab71", "sighting--acbfec17-5b1d-4279-9a51-61ab56b75478", "sighting--61df45b9-cedb-4c74-8a3e-5038d1813322", "sighting--113d43a0-b1e4-4e52-a455-2076bf682f60", "sighting--488da8f3-4d39-4901-affa-e210ec319094", "sighting--067b5a69-3657-4028-a3ef-fe534d8115e7", "sighting--fcb28a18-7b74-4ef8-b4a8-61ec5313b482", "sighting--f78f3061-66e5-4bf2-b7a9-5f36616be86e", "sighting--6b3c9f30-bd38-4702-a836-4af0168f9fff", "sighting--ce8df8d6-3d6e-4b0b-b513-73b8719d1029", "sighting--6717fc9d-37b3-4f11-9b71-e7183ec304b1", "sighting--49d5ea14-81ab-49a4-9539-bec5ce701502", "sighting--717b1a1c-7e0c-4f91-990a-fd65c1ae7f1e", "sighting--298728f0-c05a-4761-96a2-1d32a0ae0116", "sighting--926867a4-a1e6-45dd-b4d5-6ee386437f6b", "sighting--7e6b07d1-bf8d-4bc0-abac-4aa69bde4929", "sighting--7e66d1d4-ec78-4474-a7bd-ffc040bc8707", "sighting--7dc03d1f-edc6-4be9-b9b2-81599d37781c", "sighting--d3861820-3aee-43d3-bddd-6d824b1b6178", "sighting--c639f809-6659-47a3-ad9a-bcf6398b250d", "sighting--f8c04115-789e-4390-988a-820cdb012640", "sighting--8d6aae06-84ad-44ec-8546-40bbeadc8fc5", "sighting--cbf6e2ac-9c4c-4083-8698-85f61aacf05d", "sighting--294c7208-35e7-4924-a445-38cf875a8fb5", "sighting--0763e5c4-75d9-4e71-846b-49dde9fe8bc6", "sighting--c9b399f0-2578-456a-9b61-6fb4ac3e6d13", "sighting--3ac2404f-eb0c-42bc-b955-dbfe8f9cbc09", "sighting--b90cec71-bc71-4ec5-bdca-abe757ef59ef", "sighting--0529cd50-0077-4f07-9799-faea40df4505", "sighting--f47f8560-d078-47d1-8768-b0f71c0720fc", "sighting--47be99e1-04ab-4430-b93a-79d9227b6fc0", "sighting--4868b77b-45bd-4246-892b-12831a594482", "sighting--15032fa4-3c91-4f0f-9af8-23ef2e97675c", "sighting--6e50bbad-282d-4f19-b1d3-7f7edff5de39", "sighting--fae0889c-d0e3-4c5f-bcf1-90481d3b00cf", "sighting--74be4bd5-d507-409f-893d-fb1cf4e77163", "sighting--1da924f1-4a66-46c3-a601-00e587d596b7", "sighting--bd670716-f856-4237-9177-a2a82ce00f18", "sighting--29e5dbbb-af00-49ba-8b4a-fd7c550658c4", "sighting--70f7c5ba-c26f-4499-881a-4289e666b5ac", "sighting--979f733a-f515-4c11-ae73-7912ac68d2ec", "sighting--958584b2-087b-460d-bd21-1e2eb669d985", "sighting--e8a69598-b950-41b3-b924-db477055d232", "sighting--44800251-41ea-45cf-b914-6e1567ec402a", "sighting--941824ba-9aa1-441f-9ec1-af8149b9b887", "sighting--549d4f50-c420-49ca-a172-33d4f9fa558b", "sighting--fc02c00c-a3c3-44b7-aae0-b61947ae22f1", "sighting--85b906a0-6a59-45e5-a725-7243c4af2ab1", "sighting--8a733515-adf9-4b3f-a653-7985c8fbb0b4", "sighting--a987fe1d-5632-4af7-85b6-24e47b70276c", "sighting--b2888e6d-c4e4-44e0-bbef-0f3d5aa27490", "sighting--a035e717-e24c-4905-8f5d-b57c3c6a58c8", "sighting--3b94b747-d536-4986-9d51-034b793a8a10", "sighting--07462607-6266-4e2c-a483-636c84af89d9", "sighting--c3a18c40-0139-42b0-b734-ed83f01cb3a8", "sighting--ca0d7224-76c1-4de5-998b-16f619cb03c3", "sighting--aa721466-3dc2-4fd4-a7dd-0f22330d175b", "sighting--e8275ccd-6f9d-43b3-a7c8-949902dc75d4", "sighting--23d6eb10-467b-4024-9556-35a9f0d16230", "sighting--8c69e22b-0d3d-4e1e-9da9-1c51655e0afd", "sighting--aa4334fd-d0d1-447b-b84a-5db497b33ff3", "sighting--919de989-43c5-4a3e-a4b5-4dd1ca9a71f1", "sighting--ee205c40-f98d-4f13-81f0-9efa8fa75037", "sighting--ffc78390-6e75-4d6b-99e9-d12e231c2160", "sighting--5f73148e-4646-4c0e-9137-f31f6d955404", "sighting--b07fa57b-fc26-4077-8e1b-30e6202ee704", "sighting--519c1059-c650-4eb7-ad16-42aeef5f0a7a", "sighting--3c12472f-9d1e-4f18-8377-2055f5d97fb7", "sighting--91ee0a20-9edc-450a-b089-cc47a5045ab7", "sighting--09ebabed-f2eb-4e6e-a44e-2c48411ce0e0", "sighting--8e000f52-ceac-48a7-bffe-9f17c9c70e1e", "sighting--69ca8418-e38a-4574-aed5-9ec8c6f1f2f3", "sighting--3826027b-82d8-467d-9953-bc312d5e9b34", "sighting--05c1ed1f-e9db-4d18-8b4f-eaf68e09573e", "sighting--ec040666-89eb-443b-af31-e7121e4f8b3f", "sighting--0a3aefdf-d84d-4ca0-aac0-b636b63413ae", "sighting--40a08d37-218a-4b25-ad17-b68eb44a1836", "sighting--fe91f2e8-c027-4ccb-afca-19d7aff8f604", "sighting--660e145d-7446-4b02-8b22-3b3f86d351cc", "sighting--77083604-59ec-4218-a4e4-e740f0834bde", "sighting--65ca8c1a-0800-469b-abb0-9289e007cd36", "sighting--09131010-bfa5-4e53-8560-b31559554a41", "sighting--d5b06cd3-eb78-426e-83a1-87af03b96ed4", "sighting--a39fb868-ec31-40a8-97f8-e173a4b4bfab", "sighting--cafc826e-2e0e-4877-ae06-fe55baa4e0a3", "sighting--96fa9be2-fe10-435d-8588-e2a5ad8a41f8", "sighting--ad2d8a4d-5928-4484-9f42-9ab0b306280d", "sighting--13d41e1a-c488-4481-978c-7b9fba80c7e1", "sighting--24a2b945-bfa8-40be-94b9-f37c7bf6c17f", "sighting--c7b0be0b-15e0-4212-bee4-d62086176e59", "sighting--e0fe35aa-0e72-41e1-b464-116dc4fa13d0", "sighting--a1b57c25-f24d-458b-9784-b47b4e712194", "sighting--24861e6a-932a-40f8-a597-c2a0878098de", "sighting--7d57bdf8-2856-4830-9cd0-1a7cdb68084f", "sighting--89967974-0fdb-457f-b5ad-178e2ce1be8c", "sighting--488e02a3-f29f-4dcc-b249-4e83936de8d7", "sighting--b0c8fa36-d733-4c69-bf07-b86477d561c4", "sighting--9cb6ddee-9e7f-4328-b93d-ff6f3060dc32", "sighting--c3f59a33-652f-4de0-85e7-a76f791c03e8", "sighting--465cc5c3-68bf-4fa5-83c8-ac3c8883323a", "sighting--632a5b7a-eec0-435e-b0b0-ab187ec22c73", "sighting--25a6f37f-7e91-4f19-8cf5-023f08030555", "sighting--76a18058-b1c1-4d68-8724-9573f98af5df", "sighting--f10672ec-e937-4960-a236-1db229daedff", "sighting--5bb9cddb-1453-4cd8-81ce-380a310056b3", "sighting--fd3df556-ce6c-4f5b-9c41-5a1b1199b513", "sighting--b6531eca-d742-4f82-a274-6bf1e0959904", "sighting--5e252d5e-b56b-44b9-b20c-c56f2efc5365", "sighting--19eead32-657f-45e8-80a8-9eef495c1654", "sighting--bdb6c8ef-d6a6-40d4-afa9-87fd78c44c62", "sighting--a8c4352b-732e-4d1e-b874-4af8788d36db", "sighting--c0b3f067-e48b-40b6-89c6-3fe44ff5ee02", "sighting--6520d3f9-e070-4e1f-8e84-73d538bf4cd8", "sighting--8f712328-dd1d-494f-a735-2e176000a72d", "sighting--67cc0a34-52b1-47cb-955f-74c58b659d51", "sighting--322ac743-70ec-484b-a3ff-fa4dab17dfb1", "sighting--89c2d144-70be-4146-9223-89099db5224d", "sighting--243d60d5-88f6-4ad2-9745-20f9b87b85a4", "sighting--89134ecb-ef76-4a49-a8fa-6fcc5b6b0bce", "sighting--98e1d3dd-7d1b-410e-be12-6a05013114cb", "sighting--4e707e4b-73e9-45a4-b429-51ed9f65806e", "sighting--bca84f26-89cf-4eff-aa52-95fb7c5a248f", "sighting--4c3fa2d9-f4c5-40c4-a17c-7db3f650c9f1", "sighting--4a8e97cd-b1d4-425a-8854-b9581739fee3", "sighting--ba6a0635-aed4-4f21-a9a8-edd4f232b882", "sighting--935c579c-f011-4629-b236-0e6906fbb6d8", "sighting--e8db5c5b-8f53-47f4-870c-64bc2ff26c72", "sighting--9a2fecfa-0255-4af8-b947-6e2c2a3aa077", "sighting--dfe8bcb3-bcec-4fec-9e98-cdee682ceb1a", "sighting--797653dd-3e77-49e9-a6bf-07da69d9c602", "sighting--e3a76ca9-b136-4764-a1df-38f066ab286e", "sighting--dbfa550c-ee3c-42e6-b7b0-258180e2489a", "sighting--9290e828-18f6-489f-b74b-7cea7efcb152", "sighting--f3d6d3f9-f52f-4443-866e-f9bff6096492", "sighting--8dcdd65a-e4bf-49fe-a9be-e8cc619599df", "sighting--0c20fba8-d034-4eef-b453-64ffda0413e8", "sighting--30390421-68b7-4fe2-8e14-d6b7e87fa211", "sighting--1589a5f3-bddb-4055-949d-f4e7ea550d97", "sighting--db1fb18a-4d64-4c84-b58b-5fb9312653ea", "sighting--9c24fcaf-9921-4842-a50a-b4efed4fc547", "sighting--b8d2d6f9-43ec-4bbb-9477-4c538941e771", "sighting--d0657bc8-481d-4775-bd7c-87c6c8c58481", "sighting--af76c70c-5397-40b6-b16d-6a3d3fc22bcf", "sighting--4bf4db8b-c03c-49db-aebe-264f70e32f29", "sighting--a521a39b-6725-4918-908c-00957b577c5b", "sighting--5daa6fa0-1cfd-47a1-bef3-7f2684ba21bc", "sighting--729dd5b1-a6d9-41d3-b42d-44def4c164e2", "sighting--02c7c876-a2b3-4564-9b06-d46a4f0534f1", "sighting--94f736f1-94f0-4e4f-bc97-066fc732caf3", "sighting--c7e27437-e61f-4862-93c3-590682d32486", "sighting--276efb2f-a695-464b-8340-48b426010864", "sighting--d2e569d4-c15b-48cb-b0a1-fdabeda665c2", "sighting--6f10b74f-ffed-4ea2-ba94-7150fe5f4664", "sighting--9d2d4713-d2dc-4b59-b0dc-9a9d7db43cc0", "sighting--a3344cf5-dc98-4679-a95d-ad8d4fe9aa25", "sighting--0c071d40-99cc-4215-9adb-28701aece63c", "sighting--a4893ad6-2f70-476d-9262-adac68c8fb5e", "sighting--abb283ea-a33e-49e4-82c3-1c0ff93a2480", "sighting--d0acf3a9-206d-46ff-8655-61fb5d90c7a5", "sighting--f0204d27-6568-49f2-866b-d8305b82e516", "sighting--c5f04a47-a81d-4cb9-adf3-8ee4fbf08402", "sighting--068987e1-4a1e-43e0-9cfe-1acfd7ce6542", "sighting--c9815f4c-7a26-4023-85cc-e390cd06766e", "sighting--26040da4-be4f-4d69-8b4d-f16760bb739c", "sighting--cbbeb2dd-7cd5-444c-9b57-9e2185c674f2", "sighting--e659712f-c1ce-4649-8bac-98b31e11ec9d", "sighting--dee6b370-46fe-4521-a022-dcd3f45a1fdb", "sighting--82c0ae61-28e3-4d3b-b972-1cbee6896955", "sighting--6dd8f1a0-faa8-4cb1-a344-cf30e775ec48", "sighting--1c789a9f-2d86-4d7a-b801-ad3645cd1085", "sighting--22003811-22aa-4d08-936c-f2bbab6695ad", "sighting--58515985-c2a1-4c06-9996-731dce46fc07", "sighting--33e1c7d5-46c8-418b-9405-321bc3579fa7", "sighting--c6afd4b8-d85a-471f-ab40-1d9a52a748b9", "sighting--b6af7aab-5799-40ef-a80d-9faebfb7fb02", "sighting--f259ebf3-6955-4ddc-bdc6-2d4863babc6b", "sighting--99e118ed-6071-4341-bff7-5c80f18defd0", "sighting--6a4b6a99-7325-4aeb-8dba-984e717d0f77", "sighting--f70b39c4-c352-434d-b059-beecf33036ba", "sighting--1dc935c1-fa9d-4643-8c53-f2777b1d6831", "sighting--5544e0ed-1c0c-4ae9-8848-08e9de4f0198", "sighting--98196e86-d8c3-4a69-9d4b-d99bb2886785", "sighting--0c127d2d-2392-466e-afd8-ab4a2af6c3cb", "sighting--d76503ca-7b6e-468b-a554-e3129eb93a71", "sighting--cdc5452d-de68-4be8-8d60-fe247b2c7c60", "sighting--c8501a34-d945-46fa-baf7-1a50c0ee407c", "sighting--97c85267-e0ca-4240-b31d-69cc5067d36e", "sighting--f376ce3d-bf6c-46c0-b6a6-d797fb9521a6", "sighting--efffbcde-8f51-482b-8690-3450b23d763a", "sighting--69aa8040-8610-4f30-a708-95014136aba9", "sighting--1cbed925-f19a-4c2a-82f5-ea3d0846464e", "sighting--8c0fc4ad-4fd5-4bdf-b879-7ec3d187df11", "sighting--af051813-6473-4985-aa0f-7eac91b8acc5", "sighting--77029664-9a7a-4869-ad97-f02f1b69952f", "sighting--3f79bf6c-0bf4-42a6-94cb-cf506ae156f3", "sighting--6dc4a155-6a4c-4290-8c77-3dcb99097688", "sighting--724b6626-8800-4594-9bd6-393f93ad7b84", "sighting--5edaa072-965b-4b59-bbe9-2a6b9802da54", "sighting--efa1cf64-63fb-4297-bd88-a0713f89bfe5", "sighting--ad2edb63-ee51-482e-a866-3c79bd83783d", "sighting--62a258d3-8e07-4815-9674-a38948e55dd8", "sighting--92770db4-7361-4ee3-8d53-587afbfc0d57", "sighting--5b4cd1e5-4f0b-40ea-87d1-46a322da6ffe", "sighting--afde3c50-3d78-4fd5-934c-3de68be9c975", "sighting--71bf9bb9-cb5a-4ccc-a2e0-59096f756fb3", "sighting--62254372-53f4-4325-919a-529cbd3e5139", "sighting--bc0047f3-4a73-4090-9da8-d6c21e468079", "sighting--b7c80414-7e41-4f8f-8ba3-bd78888432c3", "sighting--7cf67c03-f6e1-4497-bc7a-8251e1dd832e", "sighting--143577ef-0461-48e6-b5a5-f362f92c0c69", "sighting--04baa466-8d53-4348-9c87-749d18a5c69c", "sighting--3b301778-1339-4519-897e-8cb633809f3b", "sighting--526e6ddb-311b-4053-9196-eaf52805e902", "sighting--bbec2ba4-3931-485e-9af8-d6c50914a9ca", "sighting--a2e60677-7f51-48a8-9e74-209f19510625", "sighting--244cdd36-abb9-4e36-836c-03bb3162b6ac", "sighting--bece1fe0-be16-490f-8425-f5a587f60fc5", "sighting--0c1295e4-6f25-4c64-b69d-32458f46d317", "sighting--cca4a8a1-2bb8-439b-bc49-5d9bcc1cbd1c", "sighting--3a21a5be-af63-4295-b882-ff69f0fafc03", "sighting--cf6bf39a-d8b4-419e-be5b-6295ee4dfed0", "sighting--f8a12c45-4c57-4fe8-97ae-1575477fca4e", "sighting--6fcd990b-5851-46e3-ae71-be974f811e70", "sighting--43a86335-2850-4c2a-942a-721f8e0c7783", "sighting--3083963e-b788-40d2-a501-3003337e0e7e", "sighting--a6909951-88b8-436a-a53d-be3155c527cc", "sighting--9c4c7271-9e3e-434d-83e8-b69f21500611", "sighting--f092dc71-db60-49ec-b786-d588dcce0c80", "sighting--07690d6e-8b14-44d8-8e29-4773267b73c4", "sighting--53a12715-360c-4901-a34b-9e5ad1ba2820", "sighting--e87e3034-7c90-4ecf-ad42-5c71775d1592", "sighting--83f3eca6-5a3a-40fc-935f-47bb24315c08", "sighting--3289c07d-b32b-4b8e-9f18-e4ee28d0911f", "sighting--4e7dcc1d-61f6-445c-9c86-02344f8f815c", "sighting--dd3355ae-9fa4-4d60-a8a0-ef7d61d3b54f", "sighting--ee4497ca-5ae0-4a4b-9282-d8fa83902070", "sighting--1e35507e-d722-4bb5-ba8d-a27a946dbab3", "sighting--d289b889-97c5-405a-93d1-e610554e8acf", "sighting--cee375ce-25e1-49bd-890b-9e4c3f6791dc", "sighting--47555924-5375-4251-8d92-afb847ac081c", "sighting--22da46bc-4a11-4d42-865c-679023cbe1b5", "sighting--3ce06928-b8b0-4abb-a7e8-efb552689f15", "sighting--8edbf444-1dcc-40f6-8a8f-33047f2776e0", "sighting--bcd31938-8341-4b21-b249-23652e917912", "sighting--19abd348-e1ac-40b7-9193-9ea225bd856f", "sighting--61240ee9-3ddc-4e6a-9f49-d9d2d4a6ae67", "sighting--a2f2a4b3-5c36-493d-9c8c-385b8fbe58ab", "sighting--8e8fb70a-216a-4878-8ee4-3483bfd9eaf7", "sighting--ba1f0530-2c5a-4dc8-a249-f9681219b47b", "sighting--aa8abf44-3ce4-49c5-aab8-15a7c161a4ef", "sighting--c68a7646-317c-4cf3-9e98-bf3207386a75", "sighting--03847236-17f4-4f09-8dd0-92275b8c7ee1", "sighting--836d47e8-aef1-4c55-9b19-1f909cbc6812", "sighting--387b96e4-7a5d-4214-892f-e5615df942c1", "sighting--221e387b-db66-4632-9ddc-424648885656", "sighting--9b687a40-4285-46d7-8216-e44eaba0bbb5", "sighting--a04e7bad-b144-4b3d-85e7-ff6a6987108b", "sighting--81486378-4ea5-4d46-be0c-30fe96e5e51c", "sighting--521288f0-3355-4248-bb91-789754abc926", "sighting--c0da3126-f330-42f6-ae02-3fa5dfe93844", "sighting--f85607e0-e3e6-43fa-8596-983fe31e8e63", "sighting--e5f933aa-c4b4-4fe6-8f75-a8e895dec817", "sighting--d3d3076d-d39b-49a9-ac9b-bb9323c033f8", "sighting--d05e2933-dfbd-4638-9a74-ce1b14433d0d", "sighting--29c7c1c6-0f5e-4b60-a02f-195a08eb587d", "sighting--bd88f6ba-84ca-4347-be46-7287d33624fe", "sighting--c56af7c6-0c29-4884-b791-3185ab23186e", "sighting--f38bfb36-c268-4277-91b0-50e6494d6495", "sighting--cb5e67cb-0d60-4c45-9a6e-db78058a1133", "sighting--bf09b4fa-2896-482b-869b-e9b89ee55bbe", "sighting--35106c8f-4024-46e6-b38f-c2186c22240d", "sighting--dfd6bb1b-dc03-4841-b07f-f2c5cb9d8671", "sighting--c7bc3abc-a0e7-44b8-8514-975bc6b90ffb", "sighting--3898e95b-ac9c-4a68-97c3-82b4fe70d3d2", "sighting--610f2673-fb4e-41bb-a5ba-23168a13f88e", "sighting--2625916f-d378-4934-b41c-dbf1ce4424a5", "sighting--fefaf5d0-0195-49b2-8045-7bb6b8bbaa89", "sighting--3f2afd3d-7351-489c-ba4e-7e27a1e40363", "sighting--81c62663-c330-47e1-b0bb-5c5f05bc24e8", "sighting--dc6dbe60-d123-405e-9105-1fbe3d9f3c26", "sighting--4f07ac0d-e81d-4391-a1a8-9f4219a2c462", "sighting--81bb424d-4e73-4301-af96-98407c1f3e85", "sighting--73bb1df6-03f8-46e3-8e3b-77fd53bf11b6", "sighting--93d27938-581a-42ff-be42-d729b06ef0a6", "sighting--f105a27d-4e65-497a-8ced-2077d6c30500", "sighting--3728faa2-1cbf-4f46-9cce-060c7dc6c1f0", "sighting--6ad9b2a4-ab42-4bfa-ac19-e17028a5e5b2", "sighting--b72fb336-ddfa-4493-a21a-5585dd061d47", "sighting--56c6f8ca-c4b2-407b-9054-53954044d555", "sighting--c686331d-4911-4844-a6b8-1ffc2f22bc58", "sighting--39ceaf37-a1e1-4eea-b5e7-b7343a2c769f", "sighting--4585b8e9-5064-4ace-aa46-692f63bba4ce", "sighting--2bd45047-e653-42bc-bd06-0fe0e9f78ed1", "sighting--07f6c278-5ad4-47fe-beb6-b9bbe155f964", "sighting--291b1a74-5c80-4790-91c0-e4e427c9765b", "sighting--487036c5-0248-4574-b903-0683addef834", "sighting--1e9472ff-d5ce-4801-8193-935ef0f738f5", "sighting--0ab5161b-df25-4bc6-8bd1-10c4f1c9572c", "sighting--60bf2184-02a6-433a-b0bd-eeedb50cb381", "sighting--b3ec4bfc-71f2-45e1-905f-1ef17b981c19", "sighting--dc8827ec-745b-4bf3-b09d-8995964e8f88", "sighting--bcbcbb28-34a9-41bc-a073-3ac12d79bc83", "sighting--548f2d25-bdd5-4c36-905f-526172812949", "sighting--5907fb66-0290-4b7b-bd0e-27a4d16b1eb2", "sighting--b3e57363-6c1b-46c8-aa57-5adeff19940d", "sighting--9985c6f1-f7ac-4759-8432-372f64ef0c9b", "sighting--1bb537e6-9e1f-4c4d-84d5-2ddcbe4a4c20", "sighting--907030bd-ae50-4c7b-80e9-bcaa92f0e1e4", "sighting--98fe6cd3-1883-4eef-8cb2-eb4c470be093", "sighting--c82f4671-7c99-44b2-bf97-0d69137f0a91", "sighting--bae82f5d-f1ce-43c0-aa94-76654d055f8e", "sighting--754c668a-87c3-4bae-a180-ae1091b2f228", "sighting--238e0aab-680d-4fbd-bd44-1c3623c5204a", "sighting--279b501d-0e08-429d-a2b3-30d52356b6da", "sighting--9f6d77c5-0480-455f-992f-0d73ff913ee8", "sighting--35665b19-9b95-4e4e-9cce-ed3dfaff58fc", "sighting--3075434b-df37-4138-bf90-5022f1bb357c", "sighting--38c40d07-6c66-40c4-bc7e-a19374d5d42c", "sighting--73c11a5c-3776-48b5-b18d-03a2f03d7051", "sighting--01da0f1c-12f5-4f84-92df-5ffb1e746186", "sighting--cbaaf3fe-c9bc-4c76-958d-6a82217bf00e", "sighting--ce85d16c-f445-431d-b99f-19b71236efb0", "sighting--4ed4425d-e625-4e05-a590-7a2ae6e2cff6", "sighting--4cd344d5-6306-4ac9-9584-5715060e1ad3", "sighting--501155f6-566b-49e5-b74f-72e22cd5d720", "sighting--a9236bff-b257-476d-9340-2feea9c596c3", "sighting--586108f5-4605-4134-8b8e-ebd8207d2bad", "sighting--60f14577-f311-445f-b629-4a5a0c18bb80", "sighting--96520f6f-e83d-4e64-ae32-c4abcba870e0", "sighting--95269ca3-9fe5-40c1-bb9f-458829cf82bc", "sighting--92ff5c1b-12ed-47a8-a4fd-620216bb106e", "sighting--155df2ce-a3d2-4389-8d7b-6314d1ecf011", "sighting--59c0a795-e704-4972-a757-06bebd62fadc", "sighting--fe67361a-72c0-4fea-98ea-293ed7f11ed1", "sighting--5638f618-d170-42c8-8fdf-bc4974e857ba", "sighting--4874511b-1e89-4652-b1e1-aaf137304865", "sighting--aeddae9e-848d-4da8-a997-694ec252a4af", "sighting--65b0855b-d795-4a67-8169-edffd0d22e0d", "sighting--9556310b-aa14-4ecd-a7e6-ef0f921837fa", "sighting--1cb54877-64c5-44d3-85fe-034fbfcc035b", "sighting--504234a6-8419-40e8-a01c-8a70a6d4c18d", "sighting--a3dccd6f-bef7-48c0-b2b3-fef8c269cd5b", "sighting--c2b0fa7f-5fe4-441d-b0b5-9d1ab27a172b", "sighting--a5c3bec7-4ca4-4b8e-818a-cd74a899f442", "sighting--db3ab252-87fb-41a2-a57a-e981b175ecd3", "sighting--e379e204-a80b-4f39-889e-149c91a7d419", "sighting--5dca1361-bac0-4f8c-81c2-fd1840d48422", "sighting--359bb9ec-fd22-4b4a-ad37-f13a8e356273", "sighting--7c5c8a7b-7de4-4a97-a254-e69ae1d6eb50", "sighting--d3dc3f9a-2286-49f2-b7a2-beb25268294e", "sighting--9d147e5c-3afc-489e-90fc-293115df4fc4", "sighting--142ebe3b-e804-4366-9f97-9060f325a23b", "sighting--a7d449d4-af8f-452d-8ec4-41b7e85529ca", "sighting--79a3bd45-e557-458c-9420-e5668807b251", "sighting--65e2e5d9-e802-4f60-9e74-b3d963e50baa", "sighting--45b9ecc7-4977-4414-ba7e-f37521b19266", "sighting--44e8422d-a3ab-4be2-970e-dce0e36b2e54", "sighting--0862a63b-2e43-4b7f-8361-78ef5ff28814", "sighting--ecf8995a-bed3-4020-85b9-d9452a634fc2", "sighting--29b975fc-8ffd-464f-ba65-8c061db8ea86", "sighting--e46ddd2b-c879-4166-8e7f-2f248a53d2b1", "sighting--8f9cfa34-3d6e-4850-b623-7bfc9f4cf9e5", "sighting--e96613ef-9d1d-49f8-9c4d-5a1769681b43", "sighting--4990615d-5f17-4ce6-b0e9-b89a6c6f906e", "sighting--74c40d91-6cdd-45fd-a9f3-2517e8b8a6be", "sighting--9383ad94-bbc7-446e-954a-4c5c4a9d7781", "sighting--d31b05eb-1a40-4eca-bc1a-1b256c1d7c06", "sighting--15697a73-cbb8-402f-8b20-f1c08ee4671f", "sighting--0a6ced85-165e-4bc4-ac0d-2f559d958246", "sighting--c741f9b3-7eeb-45fb-b166-da33c99ccb7c", "sighting--3e89ebf4-5f1a-4993-b7ff-ac4c6893c8be", "sighting--836114ef-d26e-4d4f-ae75-055b9136410c", "sighting--eb099ee8-828b-455b-beba-4dae9eb638ec", "sighting--60831ddb-9781-4312-8695-593ab70123ab", "sighting--32cc8944-6a8c-443a-85d9-f34451e19e3e", "sighting--5ca9b90a-ebc9-463d-961b-355ec7f36390", "sighting--9733d1af-c010-40fa-a515-9739fcaca280", "sighting--dbc24818-6ab4-472e-ad3b-78b74f510f8f", "sighting--346080f5-bcba-48ea-b2ba-cecdc7297603", "sighting--37c84151-1ab1-4a2b-899f-26e85234fdec", "sighting--2d596713-91aa-4186-bc3a-3d8c2525b244", "sighting--275c5d8b-54d4-4fb0-9973-2eec437d8463", "sighting--d2bfe98a-45fd-4094-a7fd-7947e8bbab61", "sighting--616bc072-cb58-4ad4-bf70-6108ed9053d4", "sighting--42a1e99c-a130-4d6b-a36e-1d598b46d4b4", "sighting--46f92de2-cee3-41c2-98c9-1f02c263a2d6", "sighting--117f8d19-af52-4325-bfa5-f2d4f9ef1aa6", "sighting--3d1c99c6-cb60-4fe5-8b09-9185c7fc6f16", "sighting--44e7994f-4f85-408d-95a2-7ead843c04c5", "sighting--f78f8bb3-1e63-40d6-a529-3aacd23ada03", "sighting--dee94885-5db4-479d-9a33-dd1093d0b417", "sighting--2921cbe5-5dc6-49a2-934a-5e8d444afc47", "sighting--e0dd1eca-9e87-4d62-be6f-0820563ce3f8", "sighting--31fe7031-b4d9-49e9-b679-46a645004c10", "sighting--8a119e11-a85f-4223-ac86-feb020105a2e", "sighting--a66fd37b-ce00-435f-9e40-39662569c3f3", "sighting--78fd31f0-3d39-4a88-80ec-b0c4735763c6", "sighting--8e5cd475-0e3e-4da9-8e74-2fc7d674ed35", "sighting--5a6c579e-fdab-427f-946e-ce0bc5e4eff6", "sighting--149da851-ab19-44b4-ae51-95f0d282524e", "sighting--e4b6a1f3-5b57-444d-ae08-73df2cbb5c7c", "sighting--509e603e-1568-4f55-b5aa-56da5b4d7ade", "sighting--c03d9d17-e2f2-408e-b5bc-64143ca6b98d", "sighting--e5927989-b97c-47e1-8ac0-a3107df89b29", "sighting--9b9ad03b-c323-461e-9614-61bddd5b360a", "sighting--aec86b08-95cc-49fa-9374-b5696ea9db36", "sighting--cd3aa34e-4d48-4643-83c0-5d65bc32568f", "sighting--e251f94c-c6ec-4257-92f3-56468d129a58", "sighting--fa6d6010-459e-49b9-b102-a32a82619dff", "sighting--1e8c9130-6478-4c38-8f35-fd5c69cdd9da", "sighting--48dab1e9-9acf-4188-82b8-019de87d9c41", "sighting--337a4a82-d12a-43d7-8ecb-42d5e78c6ed7", "sighting--1edd6b88-3676-4fd7-b7e3-c022a1757ca5", "sighting--e67c2d8c-5d94-46ec-8913-dfb281d56112", "sighting--cf9d7ddf-eed9-451c-8e77-6d92e458131e", "sighting--6a9f4375-1739-44f8-8ed8-92f6427e24c1", "sighting--54fca79b-a674-4a7e-bf69-9f19c345c686", "sighting--968bc58e-d53d-4621-8e1d-9b0fe102a28e", "sighting--944c59af-c0d9-4594-9677-51d1d41b94a2", "sighting--b7e8ec4a-aded-40ac-9cf5-396fe526c784", "sighting--4c1afa6c-e7be-4d03-bcce-891e2c9519db", "sighting--97d6f93b-420d-4be2-9550-54cdcbe65c36", "sighting--6193a5ec-a267-4060-9edb-75084d85160b", "sighting--39aee3df-40ac-46bf-9871-9b0956dca3a5", "sighting--e6a00ab9-b755-4bd8-b5b0-a2780bf96c4d", "sighting--08862d47-11a8-41e7-995e-fcd11418087f", "sighting--cfc75eb8-1773-4eb5-b887-a1a85a96876f", "sighting--6a12cc97-b044-4b06-93f7-57ee76cf58d6", "sighting--1e3dfd2b-acfc-40ac-85a5-c492af433976", "sighting--a7d2ce80-16ad-4bfd-bf0f-1aa173e6861a", "sighting--11ad42f8-1d30-4035-99e0-2073d5bd0cbd", "sighting--6d955d70-a1d9-4d33-9c5c-c18c3a82c5f4", "sighting--cc998777-dab8-4101-8c8d-8976bbc816dd", "sighting--fa3d363f-679f-4768-bc47-916796fe00ce", "sighting--4a2e6753-57d3-4a12-86ca-bcb2a4e3bf15", "sighting--ae4d63c3-8e9a-4eaf-bfbe-d51882c01858", "sighting--37583e24-bc41-4acd-8277-785e0d25c4d1", "sighting--163b79d7-1074-4c4b-93d0-05514959a483", "sighting--1283641d-6eb5-4f6c-a600-fdc053d7141c", "sighting--f79ec4c8-c6a4-4c1c-8593-544139640bdc", "sighting--ec32b26a-e4f0-4f65-a0c2-4011e8be510a", "sighting--9a1003b2-288e-4663-a463-3afaf983171e", "sighting--cad81748-a690-4228-b196-618920855f42", "sighting--a83517fc-9ef6-4e1c-84b2-6590b34b0d5f", "sighting--93962d3d-16cf-4c85-b31a-22b035dbf28e", "sighting--c0e7abcd-82bc-4155-b7ef-cfc3099825f7", "sighting--0752e926-04f3-4192-9e29-9fb19dd30afc", "sighting--a6cf4fba-90f6-44f3-9ccb-d995bc642d50", "sighting--bdbbeab6-9067-42e5-a408-8e4204a6ef68", "sighting--d42f7004-51ca-4c4c-8486-49abb9f1ebfe", "sighting--59547432-2b82-4db8-b085-5d980c1f5927", "sighting--c1e0e0be-bc27-49cf-803a-3e760c24273f", "sighting--d3a86d4d-d9f4-4337-a44b-cafc99e4995e", "sighting--87276383-242d-4aee-a03f-deb5a30fafc4", "sighting--72e2b46b-430e-4b60-acef-a9c325bd1da1", "sighting--cf1e0d6a-7e38-4236-bb6e-384b51db979c", "sighting--cffb1e30-ae90-4e01-a311-b8aa0b5496cc", "sighting--266b9ceb-04e7-4d50-933a-3175b3f83058", "sighting--95dfc0de-56eb-4342-98d1-7ff4502dcdaf", "sighting--6fe4d017-ff04-4daf-8650-4adec2049e4f", "sighting--2137c6c8-1b2f-4b20-b6c7-72170a970662", "sighting--5d308db8-9a43-4c75-bc9a-2e4316e4f0ea", "sighting--aa35e811-b89d-4055-9fa3-9d88cdb54d9e", "sighting--62de8fe3-a058-4ef9-9a7a-a988ea68cafb", "sighting--619d53aa-d2bd-4ba0-8012-6ecb9d66cc05", "sighting--1a72ba37-a73a-47fe-b6dd-18ea497baa78", "sighting--3574eb16-bae0-45fc-bc8d-34e179824615", "sighting--5d17a18a-ca82-422d-bd20-bbb36db1a79e", "sighting--d172a255-861f-469d-97ad-2f755222c4f5", "sighting--9328dca3-12fa-4c68-893d-51387d2c152c", "sighting--4ca47ed8-dc38-4b4a-9b77-100f861fdd13", "sighting--04df95fe-b535-4b77-bbfb-caa4c37de3c9", "sighting--0c488b1d-3648-45cf-85c7-aa3517ee823f", "sighting--1a219859-e7f2-4aac-8b00-81b1b5f7f2d9", "sighting--34667c25-6066-44b6-b1b1-18bd5427477d", "sighting--14ff5bef-a4cd-435a-9f2b-508a2927ab21", "sighting--dc6e9789-c72e-4344-a140-1428de1bdd16", "sighting--ccb91eff-24ec-4373-9b1a-76eeac613c40", "sighting--baaeb3bc-29a8-4076-ad99-7fe32b7c20e7", "sighting--ab99e8b6-6f0a-49d6-be00-543455b7617c", "sighting--360dc3d5-8e35-46d0-8957-893532b08e3e", "sighting--91ac0cf3-db45-439b-8bf7-203168cce2e2", "sighting--6db99527-3986-459f-85f7-25e6f89b4342", "sighting--70db6189-f107-45fb-89b0-523f036f6628", "sighting--5661fa2c-9649-4cb2-9a76-f0b2448bf0ba", "sighting--dee7661a-8486-4ce2-a052-adad594fd47d", "sighting--0798463c-d4b7-4a46-a042-491b5e0c71a9", "sighting--8eb10e8a-b87d-4cc4-b4a6-69105c319426", "sighting--5cb193f9-1eba-4b28-be9d-0043ad7cbfcd", "sighting--d1895d6d-9893-4ffb-81fe-ade7020310e4", "sighting--c8a7c146-6fc6-4a6e-8cec-502af4b90a7c", "sighting--f3a1ad9c-91a9-4489-b50a-de84071db20a", "sighting--01b8211f-3f9e-4423-8bc9-86fb703f37a1", "sighting--6ad6995c-f170-4a26-86bc-b2ac05593621", "sighting--d1fae149-20a8-445b-8f8f-43fa77673f3c", "sighting--ea11624e-243c-46a8-a44a-21a08c2869b1", "sighting--b2ed605f-25d0-46b1-b443-f9a74c2e0fe7", "sighting--f96fb61e-0aeb-42a6-abed-4f01ae1f1cd2", "sighting--f83eb1b7-9fce-4951-b22c-57f1d04337d5", "sighting--8294e84c-d0c2-45f8-8ea4-35e1606af075", "sighting--680a5edd-6f3c-48a8-aadc-28ce323014ec", "sighting--17ae942e-b916-4dad-afc2-6dff67c0274a", "sighting--da680b93-a33b-4488-961b-4ec1ee7eb20c", "sighting--1689abbe-77cf-4c10-9177-ad2542ed9efd", "sighting--7ac8f363-6092-42cf-b25a-639cba42f130", "sighting--4425bbc1-4af8-4415-9fbd-ef1afe296db0", "sighting--f4a4036b-9498-4466-922c-eb229a4afb39", "sighting--dc80d4ca-878f-4ae2-9583-4dd7bbfa00d7", "sighting--907598ea-11c4-4cee-916d-24bb235dad13", "sighting--b3c3a4e0-0339-460f-aef9-bb3956e8204b", "sighting--9b904756-eb42-4045-bde2-729d92c3af15", "sighting--315da999-0315-463d-ae8f-289e30ce2618", "sighting--b338c0bf-9bf2-468b-8fad-a46b4cb5f09a", "sighting--bc963723-e5e7-4660-89a9-86302e3f7187", "sighting--750b930b-d18f-4f23-855d-418b83ea55de", "sighting--6f833d81-f1b6-4e2d-97ce-76c69f5cc1d3", "sighting--57ea692a-d07b-477b-8f31-c5fe8bf58850", "sighting--3cd25f9c-b30e-4f0f-bf97-c7a194cd3d43", "sighting--78ab105a-fe42-41ee-9d21-f159c99d26ff", "sighting--4b7933a4-c242-4ef9-9c23-30eacece6ecc", "sighting--f7bdccb6-8d3b-46ff-86a9-8f8e23b69b1f", "sighting--69690983-b88d-47b5-b29d-3e9705170193", "sighting--08d0f749-80dc-4922-8c19-74ad0daba488", "sighting--8d763fb4-2033-403e-a0a8-772e5778bf95", "sighting--f643c9f7-7cd8-4d9a-ab45-4af62db2b3b8", "sighting--d2fe17da-c42d-4c3a-a6ac-122b7d06be08", "sighting--89605036-a925-4adb-87cf-0677a5bcb72b", "sighting--c9901cb5-8043-441f-a42b-d3ed2efb676d", "sighting--38d35b04-4f98-48f8-9764-7bf2ac5d38ff", "sighting--33e6f42d-74a9-4323-a9b3-67ca20e6c63c", "sighting--2145c97c-6f3b-469c-8fa0-d2acaf8a73dc", "sighting--9ca266bf-a3c1-4bf7-a86d-5b5cbb39c734", "sighting--cf8fd354-e63f-47aa-9d38-d08969ae1669", "sighting--b4d588c2-a120-4c6d-b8bd-37a660bfeed8", "sighting--1981575e-1dd3-4e0d-ba01-aaeabe02d3e6", "sighting--32f6fe75-f515-4f4c-996f-47453b9b7310", "sighting--a81b991b-380e-4fcd-bc16-5b24d84baa75", "sighting--bf22e940-1836-4097-8ac0-563b5db0116b", "sighting--c2b0bea8-6ae6-4ba1-b842-bc3601560523", "sighting--ce99af39-1785-4610-9ac1-0954a45e30ac", "sighting--fb57e3b0-a0c5-4d3b-b551-4eb585fcadcc", "sighting--6c20193e-01cc-4ee7-a30c-2147750037d0", "sighting--6440ceb5-d708-4c6a-add9-6807f2375d22", "sighting--a1b9549b-9713-41e6-8e3c-8509b975ae8f", "sighting--a24a1afe-551a-49b0-9303-8c2d2e2d232b", "sighting--f61d06ae-679c-4d6f-a428-47e88da91c80", "sighting--4c9b875c-6057-4c6d-8060-ba9ab1e89359", "sighting--31689e46-664a-4271-800f-ea3c05fe58c9", "sighting--9fcbf78b-b3e3-4a15-b6cd-fca461b6fe74", "sighting--ec4721ce-eec0-4361-a629-88a8eb9702e1", "sighting--56ad22db-f54f-4bfb-ac20-dc2e76dde043", "sighting--6c155eba-6610-4ce5-8635-0bb40bf6c962", "sighting--6cde0efe-b1f7-4cc6-8d8d-c2d5d94728be", "sighting--4bc9754f-55d5-4648-9bd5-8bef912531aa", "sighting--76d3ff69-3b75-44da-8429-35ea0031ec61", "sighting--1a24c5bd-5c85-4442-be00-ab35ecf366c7", "sighting--d7d252e2-ee50-4e7a-b4ff-52793257ddc3", "sighting--a2647041-1f17-4b8e-84cf-f3eac040560a", "sighting--ee4141a8-c79d-44b3-bff2-f76e12a8c693", "sighting--47ac3db3-7eaf-45ef-a09f-356d4d3b489f", "sighting--d2827fb6-5158-4695-b0d4-d4c1b8d7d332", "sighting--dd388788-7913-43f8-a580-2f391701adea", "sighting--f145dc41-677d-4fe3-9068-46338140f842", "sighting--406cc382-0103-4342-9ee1-61ec7ae257e1", "sighting--35d562b5-e549-4085-8c17-7a53ef969195", "sighting--79674198-dc83-42ed-a2d5-c643a7bc0232", "sighting--731a9936-3b21-44b2-9a4e-2125779f9a31", "sighting--4f2ef5ba-55a9-45bf-a23f-4b0f67d9937d", "sighting--a0e01a06-ae80-4eb3-aede-95da1f3b751e", "sighting--05cb067d-6415-446a-b748-24b795a2d334", "sighting--c227407e-ac0c-48e9-a857-1d1e15ecd742", "sighting--4e1a0e5a-f4f2-4d50-9d2b-6c0305086dea", "sighting--5f886aed-d738-49d1-b027-320e42ba820c", "sighting--1c1f1691-86c6-4566-bd73-012c8b56768c", "sighting--f1532cb9-04f7-47d4-9d27-1068c4191f26", "sighting--6a6e7849-db9d-4cc3-807a-1716edb81a35", "sighting--396b64ce-4f9a-4df3-bfef-40af88b0bbbc", "sighting--812f197b-06b7-48eb-9592-a7443662fcc0", "sighting--f478e178-aed8-4f0e-80fa-416e187aa158", "sighting--89875d34-6af2-4e10-9d10-590da8c52fc2", "sighting--066219ca-aa25-465e-be89-aba5457f3c6f", "sighting--d02e5657-2c9d-4704-a96f-2581e9d68ef1", "sighting--705f2090-79c7-4a04-9540-83efe248a8e5", "sighting--04b0b665-8049-409e-8c03-e1c83cfd7cfa", "sighting--f030b9bf-7051-4a3c-8e48-8ac265196548", "sighting--8f1cccf2-3883-4975-bc92-f656d7a99be5", "sighting--2c889331-1320-4b3c-a2ae-bd0f17d10db6", "sighting--e055d832-8942-43a4-a67f-c3d5c4dde8be", "sighting--f6f7e1b2-20c1-4d53-81ff-c1f37c74ca02", "sighting--8b2bdd7f-4d83-400f-9625-1166c887c429", "sighting--9ff7e1d4-8fa7-4583-9546-6efbbd976337", "sighting--4e6b444b-126d-478f-988d-85d9f1df58eb", "sighting--8950adcd-d625-4a8d-b396-5ea57e7df5a7", "sighting--d7f5744d-1cdf-42e6-aae2-a12c0ca6d63e", "sighting--153ae08d-1409-4763-8edc-9c0277cbc356", "sighting--786fab76-2b8a-4a08-aa36-91c6373967b2", "sighting--1ef556bf-64b6-411d-869e-5f788c9a9259", "sighting--5d170042-473e-453c-bae3-9328f1468e3e", "sighting--c7ebead6-4aab-4428-9f12-381ec43e111f", "sighting--15ee2c86-004b-4691-99d2-ee80f6899acc", "sighting--0f2d95d9-b292-4fd0-891d-c23a67bf67eb", "sighting--0813e20a-ccd2-47ad-96ad-4ffd165e8d57", "sighting--1c8cc29b-63c6-4e48-9127-629e8fffa917", "sighting--11fde6a6-6b60-4e14-bbd9-4e14dcb14244", "sighting--d3aa7ded-5fb2-429d-8ff9-4833e8fc62a6", "sighting--04c0eaa7-137b-4246-8c07-e0fbdd94df5b", "sighting--daf2b821-b821-4b40-8020-f38d5f3c18be", "sighting--59a9a26d-076a-452a-ab52-2a2e482cb669", "sighting--847e60b9-4fa6-4c3f-8330-d0251373236b", "sighting--1ce633a0-4f40-4491-8420-66ab95ddeffb", "sighting--d21075bd-e969-447f-a54a-388f6e2fe48f", "sighting--2a052687-8be0-4004-bc5a-d028913f88ae", "sighting--878efd36-817d-4d5f-8ba2-4b4f2812e2ac", "sighting--0ca164f6-24e6-4e4b-bc3b-d4ae323a26fe", "sighting--dfd76dd7-e8b1-45a9-9896-ad1b6fd66229", "sighting--89ed3059-b587-4e5c-b96a-3e27815e05c9", "sighting--0dfaf52e-44fe-429d-81f1-232fe3389480", "sighting--8fed553b-4e3d-4622-a579-ca62664feccf", "sighting--8967d505-3774-43c2-b48a-dd1070ee2093", "sighting--9a34b69f-28e2-4de6-b851-08ad4efd2586", "sighting--3ff30985-3f83-4107-a902-d052af6fde2a", "sighting--d5ebe679-1ec7-439c-b9a5-6a4e18f0ed5f", "sighting--d8500bd4-4076-4027-8476-27e8812ff1dc", "sighting--f7820534-c16c-4bc8-badf-5af4247323e1", "sighting--acab6fc1-cf4e-4115-8f87-31c2454d1575", "sighting--1cd5c0be-6da5-4fa6-a2bd-ada13397a204", "sighting--e9e1d719-2657-4e6b-96aa-ad0e03e1897e", "sighting--f385f1bf-50d9-4f15-a9d4-d67aa68c1ee4", "sighting--67eb7e89-fe8c-41e3-a1dc-02d27be77d06", "sighting--dcf1ca42-1ec1-4309-af7c-a1e3724f8b42", "sighting--38a656f6-28db-46d9-b84d-af5484298b4b", "sighting--14916619-bf37-4796-8396-33643f44b5ff", "sighting--2dcc60a8-0522-427a-8c17-1bda12074b57", "sighting--4c760cd6-8218-4839-a04f-aaa43cdfac2c", "sighting--264600ed-c540-4ddd-a78c-12993cc9b9a2", "sighting--670142c4-7a3b-4292-9f0e-aac0eeb6f489", "sighting--d8f00e27-2554-48c0-ae56-4d98a3259c0f", "sighting--ed3cdcce-01f9-4c50-b002-ea9e1a8ec204", "sighting--5fea8663-80b1-4010-86e6-99d2ee49d1df", "sighting--dd794fd9-934e-4fcb-bd4d-3f20d6552edd", "sighting--2ee9c4db-513a-495e-a4cc-18264d928752", "sighting--190a440c-b42b-4a06-bbdb-eaf3f872fae2", "sighting--390ada54-e15b-4f4a-9751-bc6a7b3fa445", "sighting--ecfa6bbc-9d44-4e10-81b7-c46cc621f579", "sighting--00cc2883-2fdb-4971-889a-809fe82dcd96", "sighting--64c4d136-3e00-4631-bc00-678c3493e36b", "sighting--2ce0147a-1daf-48d2-9330-faecfa566b33", "sighting--899cf79c-a000-40f7-b5d9-1699330fdfdb", "sighting--5d5b3f8b-0729-42ed-b869-702bcd253aa9", "sighting--d135aac0-9aa2-4bcb-9a92-37998685ba69", "sighting--fcbb6508-70c0-493e-a4e2-f27e9859db71", "sighting--66081891-7dd4-4df1-8334-7eb000f0a796", "sighting--a5572441-8ad0-4d22-8af3-cce0852d1967", "sighting--945ebf48-4ea5-437f-86ab-7850a0b8aab9", "sighting--8c216908-6b3a-4381-8341-00ecb445f24e", "sighting--040a8712-46f0-4d3b-ad35-28775c567c47", "sighting--010014fb-2bf0-47c3-b51b-a22d17d1a0a7", "sighting--2e054f2d-3761-4608-8830-d9f7411ead81", "sighting--daff7c81-bf83-4c7c-acf6-3c7198680181", "sighting--9df66a04-7ab5-488f-a44e-2a5c00f87c08", "sighting--1cecfa9e-ce05-47a0-98fa-ccb2de9e4acc", "sighting--b49aa908-a061-4454-87e5-7610a8ccd5ec", "sighting--11dae7cf-f0ad-48c5-bc06-f607d6d6092a", "sighting--bc94a220-62b7-4ff9-ba59-ccb8682942a1", "sighting--8f7a5bad-4201-42b6-9f68-73d18326df85", "sighting--a8b9f5af-eff4-48ba-8901-71a13bdb923d", "sighting--58ed532f-91ca-4129-9b41-d3c16f018fbe", "sighting--6ebe3964-14df-49e5-bcbe-75153f59977c", "sighting--5b6c8b0e-ea04-440f-b4a2-56de272ec4d0", "sighting--11a0da9f-bfd5-4a0e-a61b-d584898c648e", "sighting--69ae0838-0adc-4204-89af-5916f60adab4", "sighting--4bbd3e5f-d936-4231-a4e9-13193224c9cc", "sighting--6db71f1c-a7ce-4f4b-b402-5866c39798d3", "sighting--06f3747f-091e-4010-9959-fb1299e786bc", "sighting--b9046de0-221e-44e0-bfd7-d387c821313c", "sighting--7063d5d3-f6f0-45fe-bb90-1cc92b5bbaac", "sighting--b3792dd6-2378-4463-a4fa-adc587a417d1", "sighting--24b79d07-3c22-4fc5-a5aa-ff947460d533", "sighting--c11c6d40-c712-4291-8c5f-8049373c956b", "sighting--95f6c55b-8672-4af8-a8be-916117051b8f", "sighting--b8868b34-0eff-4fee-ad38-930bf8a9ed68", "sighting--3e7dc7ad-f352-4720-8460-937336902118", "sighting--47a80ce5-6214-4542-9d96-2f9c9af87298", "sighting--88d96abf-06e7-43f8-9728-d073a97a75d3", "sighting--0e9ebd6a-132c-4194-beed-ed73dcb81969", "sighting--286d8ef1-1178-4fdd-a60a-fcb270e225fe", "sighting--7d30cd1e-d4fb-4e0c-9f98-c80949d8fe7e", "sighting--40d9a545-a7d5-41fd-a30d-2a0e49fb3d9f", "sighting--bb422dbe-81cc-4798-b1a8-9807fb3b9671", "sighting--9d9aa51a-760f-45b8-9dec-92420970f4a6", "sighting--20dd5953-e0a1-46f2-a1b9-6cb8c79f10f6", "sighting--65aba92a-9332-4943-b35e-9ede0ea14239", "sighting--c84d97fb-6327-466d-99d6-687ef62f3f93", "sighting--da211a8c-8382-4bad-96af-e4259ab01fa2", "sighting--0be98d93-eb33-4dd4-bf81-a90126eb987f", "sighting--9cc4349b-2e4f-475c-854d-c308f689ee00", "sighting--e74bc3d9-03d7-4db3-a114-ec84e82f51fa", "sighting--d9553b15-fee8-4410-a58e-45aa158ca5f8", "sighting--40c52172-46dd-4568-96c5-71005ce65668", "sighting--9fa0c8d4-e2ad-49a2-9caa-73580f6642eb", "sighting--3a7bee21-9793-4b8d-8fc1-d3e1c5428c59", "sighting--462047f3-e600-4274-ad4a-c8abda3f3508", "sighting--fdd5762e-ceda-46fa-847c-8199538594d2", "sighting--710b0a1b-a1b5-413f-bb06-e6149ccbf644", "sighting--aa3a8a03-88c6-4182-9a68-2d2132060ea2", "sighting--6f9a3500-442f-4f3b-99b5-f5497deadef9", "sighting--646e2c3c-1e53-43ff-8890-e645160dd5d5", "sighting--40f0a0a7-bfb2-4ffa-8f96-27f5bf235a28", "sighting--b254bacb-e5ed-47c3-a796-c39c1507cac7", "sighting--1d835bf1-9f61-484d-a664-8ab0743f91f0", "sighting--5dd37483-e15c-45b1-b4f3-a6cb32b335af", "sighting--c5c18b21-6ac1-4e8e-8bfc-b5952922d074", "sighting--c03cbadd-e5e7-4b31-8014-c488446df689", "sighting--19eed898-0815-436c-8b87-3aab8e53671c", "sighting--ef5026aa-1a26-4017-8be8-e7afbd43da56", "sighting--0e9c3f89-ea3c-4307-8617-c60c631cfe46", "sighting--3b575db6-a3e6-4284-874c-922bb7f96593", "sighting--99491daf-8a7e-4239-abb5-24d93d0e8ca8", "sighting--1e066310-5127-4d51-9c5a-177cbc12f8a4", "sighting--b40de785-1e7a-4706-9973-9c4d9c9375bf", "sighting--fa7a99b5-4f66-404f-b421-0bcf2ba4b087", "sighting--a29642f6-243b-438a-9a71-bbe4a23583c9", "sighting--72472eec-df25-4067-9940-c480bc12ce8e", "sighting--c5c64313-91a8-4e1c-9c12-1f915f97d2b7", "sighting--9d044ebd-99fe-4f1b-90bf-32a676554cb4", "sighting--d55bad95-1d67-4975-9029-5e6810db347d", "sighting--6a0359fc-0475-46e7-bf1d-2905b37c9a95", "sighting--b117ef95-0f38-429b-be91-9bf4cd70dad5", "sighting--2c74cd86-11bb-42c6-8811-32fccae6c878", "sighting--5273789f-92d7-4675-8e70-1703b2aa0aab", "sighting--25c5a402-aa0a-4bed-b0fa-900b2fb17cff", "sighting--e3315555-e6aa-48a5-a831-e0443cf4a8b0", "sighting--33fc682f-ac43-4c5a-ad8a-cbfb8c238883", "sighting--58b766a2-cb97-4e6c-8752-7f724bc4fec2", "sighting--93394575-abeb-4015-b6b1-49ed9e991696", "sighting--e6aa0a92-38b6-43c2-86a0-2d9d819c8943", "sighting--525efe5b-7b96-4e6a-987f-38ed50c4a459", "sighting--ddb5e7d3-4093-4e72-88d5-5f9cd2a5efec", "sighting--f9a75d73-0b70-454a-9b58-8be56ff89e0c", "sighting--c015a41b-7172-453b-aae3-4c3a5284345d", "sighting--780201ea-a2f8-446e-b9f0-bc760f4ae12d", "sighting--0a2479e7-8cd5-4ff4-b502-710437122a21", "sighting--d4aaceda-a513-48db-9465-9121c2d55e0f", "sighting--ced786ef-628e-4434-ab18-5e2b03ad98e7", "sighting--3f664ce4-7dd2-407d-8782-63c79c0d237a", "sighting--0ab7ffdc-9600-41e0-a5b9-d865255fe697", "sighting--db391fb7-c4a9-41a4-9708-c672146103f5", "sighting--6038eccb-b2ca-449b-b661-eed7467698ae", "sighting--0ae9284b-30fe-43bc-b883-567adde9115a", "sighting--aa915f75-aa78-4f1d-9361-2eeb065ac18a", "sighting--376d7b10-9555-47f0-81f8-ee99c3b1fa52", "sighting--b6ca6882-90c5-4bbc-85b5-880f5cf98612", "sighting--9ecdc7cc-defa-4034-b468-ae3f3782d902", "sighting--ff210dae-5fae-444c-8d59-ba633cb429f1", "sighting--e41203cc-bd99-4d90-8195-01785e6f5bc3", "sighting--69656011-8977-4e7d-b76c-caa9819b7281", "sighting--66d5f902-1c39-453e-bc06-17080e0d8d62", "sighting--39f513b5-bfe4-4100-bb53-2eabf6983e0a", "sighting--d966ec34-754d-45cb-90eb-db4675e0a3b1", "sighting--4f7a971c-5bf0-4125-ba6a-b2e7c4b22b64", "sighting--e3a3e9fb-6c8a-4c79-a577-01d7c8777463", "sighting--208d5b2e-e55d-457a-be23-0bd3d05f531f", "sighting--8a6aa386-5caf-47ba-bdae-9b7cd8419d30", "sighting--b9e5d560-dc0a-481b-9582-261d0e04ec03", "sighting--d8a3fff9-60df-403f-8551-330b2f802a16", "sighting--80a5d427-030a-40db-bcf0-f322bba2955b", "sighting--c2fe8eb3-4045-4218-93b7-e6912d1f4a38", "sighting--2385a401-3201-4423-8aa9-91876c8e0364", "sighting--a3748fb0-b9b5-4ae7-9af1-a3c0295a3745", "sighting--ca3ed31d-f67d-4736-94ec-b20f60297d43", "sighting--d6d43ff7-98fb-4e12-9429-41a63c9f253d", "sighting--d429b103-f2ae-4bc5-86be-50d80771b076", "sighting--6fc847e8-7305-4a18-93bd-73f7a8fddcbc", "sighting--8a29359f-3829-42d2-8af8-2cdd175c33c3", "sighting--72ea4b16-3eed-4c48-821d-89e7adc7fef8", "sighting--a9ac89ae-e327-4492-acf8-553b1bd851a4", "sighting--7dbaa854-e00d-4363-86d2-75a0c5d5e6cd", "sighting--ac85a749-d826-429c-a88d-6c17804bd734", "sighting--4ee19af0-2d3c-47cc-bb19-ca192710c5f7", "sighting--73588d58-e01e-42a4-8501-93481166dd4d", "sighting--842b797c-26cb-4dc8-8dc1-b61227cc2e0c", "sighting--3deda319-6285-4be8-80ee-30f6dc925360", "sighting--0cbc5776-3797-4edf-902c-83e134d6ceca", "sighting--7b928731-f2e7-4a79-803c-241254bc19f1", "sighting--31769e14-5675-4a4b-a31c-73e1353099b4", "sighting--5eb1d95b-8215-4346-8893-f6170bf699b5", "sighting--21cf4074-83bc-463a-a369-86fcbd0b68a9", "sighting--9b8eaecb-ca81-4d59-ab51-fd333d24fd6c", "sighting--19128240-2941-4176-968b-c2b65d094871", "sighting--b4029f2a-4ad4-487c-b669-3c2bb3145b94", "sighting--24d2ebac-b2d5-4acf-af51-b8c2c1efe456", "sighting--db1535b9-ddc7-48f7-9b1a-fa229e61e9df", "sighting--c2a43165-6e0b-4866-992b-5cea24b0aea3", "sighting--98e28080-37dc-4986-8e04-3f7b4a6ff642", "sighting--7321017a-614d-4315-86cd-5b19fd0ce41a", "sighting--ba26708b-9cdb-4361-8637-c6e437cb71be", "sighting--af488ec3-60b4-4668-8885-463c40e26b58", "sighting--89981985-a010-4648-ae10-252edee8dd75", "sighting--8efb0791-ae9a-4e46-baa7-825bfa51be4f", "sighting--533059ef-4b1f-4669-a3d1-4671cb2014f0", "sighting--0bb183e5-e217-4cc2-85dd-cfc363e8f189", "sighting--8a3e706e-ca92-4289-a981-b66cd125b403", "sighting--3a01bb06-6227-4a78-9025-9f4411815d15", "sighting--a6c94877-5895-467c-b311-f2d2bdfb892e", "sighting--bbe4ba59-8012-4c0f-b33a-e186f57a79df", "sighting--225980d0-7fe8-4c9c-8df4-c938ced75841", "sighting--f774ae3f-268f-4912-9a76-a71ed92460a1", "sighting--88a87b88-e123-4852-bc44-75619a9a9cb5", "sighting--f2ee3021-32ea-4111-b432-ef925a9f597d", "sighting--b3174c4b-b665-4560-bfb9-22212e959287", "sighting--7cb9db67-26d1-4ce3-8478-a73f34e0cdaf", "sighting--20e60401-d0d1-4cea-b1f2-e201f0be3b45", "sighting--0dbc1e80-08bc-44e8-b046-3689b428bcae", "sighting--42002522-a873-40bd-83e8-6eb85a6c9936", "sighting--0bd23364-a85a-4fc1-be90-d56de3547afb", "sighting--3e2e412d-873e-4bb8-ab1a-508e1a76ba4a", "sighting--e15125bf-fe5c-445f-b0cf-270cf730e046", "sighting--7101be6b-f769-48b0-95aa-8c8340dd8e4b", "sighting--cea5f4b8-4f2c-415b-a60b-058084b5d2bc", "sighting--e2945ae1-f805-43be-a1eb-2fa211845ca3", "sighting--9f9c796c-a37b-4e32-a801-e0331f1194f7", "sighting--99d0f355-4301-4daa-a65f-39c6b9e8664a", "sighting--9cdaceef-a22b-40f1-8caa-ddf7c1fbccd2", "sighting--40bda494-683a-42f1-bae1-c28d533a9d59", "sighting--f4b325fa-58ac-4d62-b961-e508c6dcc67f", "sighting--afdd91ef-d053-4a0b-b929-3a3d1890363a", "sighting--e5564e16-3da2-4698-9ac9-1464b87ee258", "sighting--2f9091ff-2900-41b0-8595-6f0fd23f2707", "sighting--cb0020df-4306-444d-8311-b138c2264823", "sighting--02ffc7c5-53b5-4a1f-bc79-9a5d4de6d0f6", "sighting--6cdc5cfd-7cdb-4375-a6fc-8f87e52c3618", "sighting--37283b23-fdce-4c5b-af1f-1e77fc826d2c", "sighting--7daf2a96-224e-4dec-a640-562290ace1a1", "sighting--7ff8cd65-7b54-4dcf-b2d3-0c7d7556e89f", "sighting--df8c4bb5-ad57-4a86-98fa-63a18e14ebca", "sighting--eb644167-bc2f-46ba-a36c-768177b8e11b", "sighting--cd152470-9137-4f85-a503-eb12e3cb9501", "sighting--f0f74870-7947-4e16-a07c-7d2ae2b49a48", "sighting--708e1537-e328-43f7-a9d2-e9488dceebf2", "sighting--c6fa9113-6bfb-453f-a41c-7b5927a5811b", "sighting--b9d2dd54-a90e-4c2a-a3ec-a8905f3117a8", "sighting--5fd78e9f-974e-47ed-81ec-aaffcddd4e26", "sighting--aca605a5-f167-4607-b6c8-900a087babdb", "sighting--44bbd23b-2747-4f29-9b48-bcca27a87949", "sighting--883fd689-b349-4578-a215-f29aaaf00144", "sighting--af9557b3-e480-4363-88d3-aba25070656f", "sighting--aca9487c-eb89-4616-981a-046ebf22a85c", "sighting--c6b4d5b4-284a-4990-82c8-a78260986d29", "sighting--f587ebd7-d8e0-434b-91af-3409bdc9a9d7", "sighting--3ed29e25-dd1c-4a93-9e8e-e25097a5bc62", "sighting--99587ff7-aee0-4785-b806-02b03d0d6179", "sighting--e52915b1-904d-4bfe-b726-560ec1e3bc59", "sighting--7867690d-3009-4235-9d46-3e4dcc20311e", "sighting--f3e17f1a-6702-42e6-b414-d54a0443c3eb", "sighting--a75a90ad-ccc9-4d11-9d95-8deefd48fa4b", "sighting--d8259423-34a0-44e3-a1d6-61d30a337de3", "sighting--70169647-8cfa-44db-8784-eb2d5c9e9282", "sighting--f77b0b1e-a485-4f84-8706-a31b0a374958", "sighting--a7803325-3d09-449b-89b6-0e0ec5483cca", "sighting--5440bee1-f1d4-4161-80df-e07eda802446", "sighting--45ed4dd2-5980-49da-bd90-a57fa56d4227", "sighting--41ca735d-fb71-44fd-90df-ce7a8bc5c514", "sighting--13cefb48-4938-48b1-8aa2-ae3c1252dcff", "sighting--399df1e7-e2fb-4ce7-adb7-a698a4baec94", "sighting--169b94c8-2f85-48e0-8fcc-d181b1020d40", "sighting--99bdd080-0c3d-4736-aaf1-5424be971d2a", "sighting--928f4f3c-14d7-4c6a-815d-ead244a7ef57", "sighting--c0a32e3e-9f51-4677-9331-4c98ee815367", "sighting--1e1c2d52-f389-45d5-af5c-43854143fc24", "sighting--3ff5488c-15c3-41cf-a2ed-40e24c71cc75", "sighting--5a926aae-067a-48ef-9300-e911340f2a5b", "sighting--974defb5-e953-407b-899a-b0df0896c00d", "sighting--454b865b-0002-4ab7-89ba-3ca475de6ff2", "sighting--4157866a-3063-40c0-9f33-95633058dc5f", "sighting--833801d9-49ad-4c64-b5a6-3cf6240bd3ee", "sighting--deb9fc4b-68f6-4372-a455-3cce7f58705c", "sighting--baa53739-b1a0-4387-8c49-3766ffb00340", "sighting--d53f24f8-2993-4b15-a011-467f78432599", "sighting--7db5e7f7-0207-4d36-91bc-1b0a3466cdb9", "sighting--9d5b8e45-e93a-491f-bf60-eb01a04be291", "sighting--6ae351ea-09de-4463-a6a0-128a95683d4b", "sighting--689f1e19-d3da-41cf-b65b-fe5d78841f2a", "sighting--a45953a8-d2a7-4ad1-9465-25f16feae6ef", "sighting--8f38255b-ebe8-4b08-a6b9-a147c471eea5", "sighting--12a0e059-956a-4550-b097-95f771584c66", "sighting--af7dabf5-7e07-429f-9674-e006a03d6a6d", "sighting--275bec8f-517b-4983-a0fc-d866946fd41f", "sighting--aefc9476-c556-41f1-ac20-3a10d9037033", "sighting--9ef12644-87c9-4259-b2e9-a6ad8d9fc2e4", "sighting--fce89685-3dfc-4c5c-bff9-8c9cfc92d578", "sighting--3fe865ed-1fdc-419b-9cdc-48dacd207ad6", "sighting--fa6cac71-8f7c-4cf7-9eaf-10a93ca23e77", "sighting--4aaa5fa2-2b1e-4fb3-b6ea-4eaa8ae4020c", "sighting--e1f12e0a-983e-49b4-a2ab-dde7949d81bd", "sighting--36b2872f-bf97-487d-bdc5-a5efc05694f8", "sighting--68b573c3-8c21-468e-9e5d-c44e0cdd6915", "sighting--1fccd714-df96-4538-9988-7e3bd0e5fd31", "sighting--12f308b0-2b34-456e-81e0-67fa11b4b9a1", "sighting--b31b6856-4cc6-46ee-8d04-66a05563daac", "sighting--12297c9f-4f60-4923-bcd1-6a7c18e905fd", "sighting--8df887ec-5656-4a5f-a510-f095e8125e4f", "sighting--d80ad868-d0c1-485e-8f7b-9d77b06b1cd0", "sighting--ce990fb3-cde3-4354-aeba-e6a17ba0a164", "sighting--370ac9f6-7def-4839-857f-ffaad9fbf316", "sighting--2add31c5-fc63-4522-bcca-3890d29b8574", "sighting--637c0084-1a9e-4465-a0f7-20f3b22e8658", "sighting--d2fdbf3c-6a75-402c-ba93-e514b37eb43e", "sighting--4b65998b-05c2-4161-83fb-86ad8569e5c7", "sighting--d1169ed8-258e-4bbd-9f49-0c941054ed00", "sighting--7abad44f-bb80-4bc0-8a98-f454b3125a94", "sighting--837e3990-5e28-4c12-aa0c-9bf79cdbee62", "sighting--ac1aff77-c7dc-4432-aac8-06c386745177", "sighting--e4dedbf8-19da-4fd8-b862-da9d8c8a9552", "sighting--467e4010-cd7f-4297-b083-d1da7128ffdc", "sighting--609fe178-4140-495e-8e94-71426673b19b", "sighting--abe3b549-fd72-4617-9d2c-7e83356c5a93", "sighting--369c5157-0786-4e66-bd17-34f962946795", "sighting--9b7dbf26-7346-41a7-8b66-cc6489646b42", "sighting--5138b368-9f24-4de8-b1f1-1ce8abd0e2a7", "sighting--855711d4-1de2-4f9e-b84b-129c0482a12f", "sighting--b0c4e5b7-c0a7-4a10-8b3f-810912367910", "sighting--88a87fa1-39ab-42f6-9469-716119f75ade", "sighting--ba351db1-f1a4-4c27-98c4-8502047274ae", "sighting--e8896de2-07c8-48e9-8e2e-1cc4b11dc805", "sighting--8de6b6e6-da91-4844-a6f8-010728a39e55", "sighting--f5f9a5de-1ffe-4c18-9895-e8ee9da6d81d", "sighting--99ed5c09-a016-45ce-9a10-f166df90f1ce", "sighting--62cc9327-413f-428f-be8f-b3f59f78485c", "sighting--a70b5457-7120-410d-93ba-0b0350b25a0f", "sighting--47d92581-fbc5-42bb-b1cb-7e13174b0d56", "sighting--0557cb43-f3e4-4274-bad1-5d81b89f41b8", "sighting--d0c1ca0e-fa3b-4755-bb35-0eef12150ddc", "sighting--5a79275a-cd5a-4853-9158-cf37cea68822", "sighting--70c8b5c8-3ee8-4fd4-a2ad-6e4e19fd141e", "sighting--708a1e98-2739-4073-a588-098c466d286b", "sighting--211da506-6cf1-48d0-a71a-79acede17f76", "sighting--ab0c2805-6cc9-4dd5-9575-03c92a3d5f32", "sighting--7899cd1a-b59b-4d16-a453-d41339ea113e", "sighting--3cfd98e7-aa4d-40d2-8810-b5ff0b3988ab", "sighting--94997ef5-d89b-4585-a206-46605c3a267e", "sighting--1672bfa4-18fd-4425-8585-f905ecc7a918", "sighting--c0a205ce-c5ec-4b83-bdf5-573900733c26", "sighting--6a3dd4b4-8bab-4024-88ac-cc9ecd6e6c88", "sighting--917c04b5-1afd-4d33-9b90-08e5f2c95fbe", "sighting--d7003438-9bb2-40d3-b173-670570883279", "sighting--f30a1445-1b5f-4e97-ad25-7e8213f6c2aa", "sighting--86e34837-76e2-476a-acdf-260327c2c351", "sighting--cb5414d4-c2c5-440e-84e1-e4afb5c64111", "sighting--22cb65ac-4fcb-44db-967f-024f71edf6c4", "sighting--838300d9-c37d-4e6d-8b66-b73db22197ef", "sighting--7d2f43c4-fe99-4d2b-a0c1-78e25c614657", "sighting--6077a4f7-0cce-4197-8fc1-706fe8ee6e9b", "sighting--45792b23-db09-4270-8ffb-e126dac41478", "sighting--5b4697f3-691c-4294-81ff-55b414bdeb0b", "sighting--32f8b036-784a-4417-939f-3a26a5a72b27", "sighting--836458ea-3760-455e-a8a4-4863b0c7786d", "sighting--5dba44d4-d1aa-45f4-bcd7-13caf6330687", "sighting--62682482-2a0c-4212-9573-18b7c3dce184", "sighting--8493fad4-900d-4910-bdcc-04f409e34888", "sighting--82ab531c-2dd6-4d35-92d1-f7ee96e4124f", "sighting--067af7d3-c3ea-4660-aab1-e3a3b15af1d7", "sighting--dba20fe2-17b1-4938-8365-e1fce7167393", "sighting--84390026-3231-445c-9bd5-b5bf7a2de400", "sighting--dcac78e0-17fd-41f1-9f7e-13daf97a2094", "sighting--7f168420-3fa4-46a2-aff6-6070913ab8c2", "sighting--c2a278ed-84fd-4258-ab7b-b8199cd0d338", "sighting--028bc9d6-a8af-4083-9c82-e9a38528e123", "sighting--064987f0-a718-4e23-94af-c94be77b692f", "sighting--05f03bcf-561f-4e4c-9dd7-5f385f4ac5e6", "sighting--f5876d60-42e3-443b-9b0b-dedcb94eaa89", "sighting--29c38a0c-bda6-4ade-bba8-abbe95122374", "sighting--816b844f-2715-46a4-b737-8ae8c9b9e4ca", "sighting--20d9a28a-9594-4434-a6b2-91de902a9aec", "sighting--1e49ff88-6cd1-4452-814f-41a3116ad068", "sighting--9a76d7c8-fc4e-4658-9f21-23473fae9e47", "sighting--35a669f6-a979-474a-8bb2-dfe7da571981", "sighting--2ac49855-3ab1-4e04-bda7-4f226749d416", "sighting--49f8b2d3-8ac8-406f-a86d-e11f6181fff4", "sighting--e6f86b7e-2ffd-4565-a43b-6624c2c6ab4f", "sighting--b6b50fe5-45ca-4f00-973f-b446b2950516", "sighting--c4843c75-37eb-490a-b8a9-3a22f6990537", "sighting--acad6ed2-8148-4fb1-8056-5a17160d9dc0", "sighting--8a7e1304-5f99-43a9-8d16-9024f9ea230c", "sighting--e84188c9-6616-47c5-9b6d-11b86d01ac29", "sighting--ddb71a4f-0894-49c0-8b52-e0f3a6c0e3df", "sighting--32fbf3b8-419c-4b69-92e9-16a0f464266d", "sighting--3e85cf52-7e28-41af-be8e-bd3a03459497", "sighting--cff8cdb0-bb71-47a1-977e-5f6cc226038e", "sighting--e08a80ca-6391-441a-aee7-41e02f3c4caf", "sighting--38f01490-c037-439d-bd56-62ee85b5f290", "sighting--47b2b076-f252-4b64-9d40-76b6ca04d4e2", "sighting--e5bea359-e412-42d5-ad13-b52f1087cf5d", "sighting--0c4a1820-fd13-4a3f-8237-1cf6cb546f7b", "sighting--e8417c91-924b-4be1-a560-77fa186b4cbd", "sighting--e49ffc56-7e13-4afc-8ba7-a29e051c9d7d", "sighting--aaf69869-1414-4f74-ba66-377df3c7c22a", "sighting--ab741607-f538-4beb-ade8-6496971013bf", "sighting--2c0c7d00-a15a-4e81-9e4f-deaf8d7ba890", "sighting--dad94fed-5325-4e5c-85e4-73303a44faf4", "sighting--fe53564a-c860-461f-8a16-3f35ab9def81", "sighting--5d867259-7418-403b-b295-84d89d2cd772", "sighting--6c190784-8898-43a7-b474-bfc49d3db09d", "sighting--bc88915e-c6da-40d6-8f59-979119984f1e", "sighting--05ffdfc0-9a31-4c9a-aa3d-2f863ad11ae9", "sighting--d6510bce-c103-4d61-9826-bbeedb0a893d", "sighting--47fea541-37ca-4f34-a545-534d891d0815", "sighting--3f72f92f-8ee7-4c67-a955-0fce1649e930", "sighting--1796203c-f0e1-4719-bc4c-608c1086a40e", "sighting--93f10415-bd1f-4de8-b240-8fb0a6bd309e", "sighting--61d4b3bf-5984-4a47-af79-4e5d8c613cb5", "sighting--d23f30c2-183c-4574-acaf-116492038939", "sighting--6990b58a-26e7-4002-92b9-b6fb5a5a43cd", "sighting--d4c0b641-51d6-4df0-8e92-ef588e70ebd9", "sighting--61d9c5a4-5f8e-4a43-9d1e-fdfde44d9454", "sighting--9e36b954-3279-496c-a6da-78dac3a13c61", "sighting--18f1f025-0dbd-447b-a33c-94d2f406e892", "sighting--4be26540-3246-48dd-9107-ccd2dc3af737", "sighting--fad1ee0b-b5cc-464f-8bb2-ade878062ba5", "sighting--cacfb6a8-6b11-4dc4-bd8b-c568882b1c44", "sighting--08e10dd1-0a27-4b7e-bc31-30d24efc3f3c", "sighting--3d4fadfc-3c99-451b-b0dc-2b630eaefa1a", "sighting--ad55fd03-4810-45cd-a2ba-f22ea01775ef", "sighting--550301f4-0dbf-4c93-bff8-43895045dace", "sighting--3d26c5e4-e843-4283-8314-e1354e5e70c0", "sighting--3a8120ab-6071-4e67-832d-8099f5f9dda4", "sighting--1543555b-29dd-4e73-8a2a-5c53418fc2fc", "sighting--ac54af70-2954-4774-b247-c72ac13c3e4f", "sighting--34929ad2-37e6-484a-af9f-52d381975fd5", "sighting--20b16f9d-2137-43bc-ac48-caf13dc594c5", "sighting--0ce38c8c-e461-468d-a714-101048f089b9", "sighting--e5d7883c-e30e-4895-b618-3101a26eef33", "sighting--65478a4a-6f73-4e64-9f7b-38d483eb8c51", "sighting--d909505c-9b0c-4f73-b729-c61c1bc57d8f", "sighting--286d6c98-03dc-4bff-bab4-4aadcddc2ddd", "sighting--3ebd389b-68c7-4d21-89dd-e72ffe454911", "sighting--93f7e27f-c0cf-4aa6-bfe2-74f06c12e14d", "sighting--9035f9e9-9682-4303-b001-4004883e5002", "sighting--aa13e784-9790-434b-8a80-10ef3009dcdb", "sighting--8265c321-071f-46e2-89b6-0cb7e1ddfb40", "sighting--a8b7d752-c336-43e5-bd92-42b7aab7d3d0", "sighting--2f55baab-b4d4-41f1-bee6-57bb79f6472c", "sighting--24e2e136-c2a2-407d-b120-5e3ba6ca5675", "sighting--ec1fc911-099d-48b9-93be-e027607851ee", "sighting--4970efea-864c-4e67-98b6-a101559bb576", "sighting--639ee07e-49d8-42d6-a623-346f90bf5af5", "sighting--9d06d56c-5b21-45ba-bd47-380f127c315d", "sighting--03c8df24-e4ab-48fd-8959-40b39e7709a3", "sighting--dc81d959-090c-491b-8412-8a764ea3d341", "sighting--326d0c76-e6d0-43fc-8eea-7352e9e995b3", "sighting--112b0d7a-fde7-4e81-a3cd-3f76f846ccf8", "sighting--9a9545ea-4eeb-4ab3-9fea-afd76036714c", "sighting--1b61a9ae-51b9-4702-9d30-c4c2524c5a93", "sighting--b63724fc-a693-4701-b419-4f5a042a4f01", "sighting--cbd79172-82f3-4638-811f-7030a85793b4", "sighting--0eac7280-eaab-447b-b808-1f2fabd6cae2", "sighting--70a07d5d-7ad0-4957-8a12-c2282d9e6b24", "sighting--7282bfb2-40a3-41d1-bc09-34cb4955a92b", "sighting--8020832d-630b-41b8-8356-72b9d46502f2", "sighting--423fa3a8-372b-4062-a8ee-c10b1ae04ef3", "sighting--b5b30321-f1d6-452a-a93e-8d4ead2aa12e", "sighting--fbab47cf-9b87-476d-8b27-16218a96ba5b", "sighting--a3684007-0eb5-4934-9d3e-764231c703c6", "sighting--65997be9-0f4f-49aa-88c6-35ec696a8b7c", "sighting--cea29440-fa92-4482-a665-96e4d7f3dd09", "sighting--32ebd02f-9b00-475d-b657-91accd79ebc7", "sighting--acf7ca45-b6f2-4a0b-aa7f-697d1233c8d8", "sighting--d3248b23-511b-4abf-8890-c920ad233843", "sighting--486e8707-d613-4b76-a765-4786ccd8130b", "sighting--6bd63b9e-cd4b-4c96-bd14-90924d0ea7ae", "sighting--58d30c5f-a48a-43a9-8170-2f90c82c64f0", "sighting--72c1028a-a1ce-43ce-bfd8-33b482927f5b", "sighting--01e7d03b-e3d4-4aa4-9fd6-871fade76077", "sighting--454340fa-2698-40bf-bd9b-be12b37f3421", "sighting--8e699cfa-a43a-4fa4-b3ff-029accf76537", "sighting--d9514af7-f409-4ddc-8253-29d35c6cfe26", "sighting--f8bd4bf8-5f4d-4632-b612-f593ce32c656", "sighting--5264ba8b-b21e-4ce8-b780-5acd3aa1f4a9", "sighting--06d938e9-eb49-420a-9cb4-59f467ae3931", "sighting--787679cd-b927-4164-b3ed-0778a77aa4cb", "sighting--e90ba955-c791-4a34-83ad-850815aceb92", "sighting--83db2e3c-342a-44c8-b737-2db9ee6240d7", "sighting--df9ccda8-bd47-4587-854b-005304530dfc", "sighting--e0a1e3dc-fff3-4129-af4c-0d1287df72cd", "sighting--2a95b727-ac9b-4a5f-8e0c-8074610a789d", "sighting--656211ca-8e13-4f17-95e5-2fdb3f9a58a8", "sighting--3a779e4e-9838-426e-9b38-f5c66ecbbbe6", "sighting--9de5c621-7813-4a28-8dd7-9e7a8b305cd8", "sighting--7615e637-092a-4438-ad8f-2c95322e9ab9", "sighting--3b1953ed-b537-40aa-92ce-fb1eda56b78c", "sighting--16af158e-6e86-41d0-b005-2fcbc16e96ef", "sighting--5808c4a1-2a7f-4c2a-b4e1-1a6a0917602a", "sighting--96bdac99-0e9b-45b9-bca1-4d8d7565115d", "sighting--07b6b3d6-d4e5-426f-bbaf-675717203cf8", "sighting--55254f76-49aa-4b3b-9408-ac6cb78dd5e9", "sighting--e90b18c2-1984-4925-be5a-4f15e8f9cf98", "sighting--bf282afe-6cee-49de-81b2-ed629bbdf4cc", "sighting--7cdfe559-826b-4b95-8bf1-a19597e607ee", "sighting--c6b21094-2548-42fe-88ac-93d7d6a54062", "sighting--1fb3be06-aef2-4b4e-a724-9db9dadcafdc", "sighting--53e9f0a8-515c-4fe2-8076-bd788c42e0af", "sighting--3dc0728c-65df-4919-9d82-81abce569b0c", "sighting--39cb38d9-7584-4089-8ffc-19a3f166e47d", "sighting--9ee6d916-6507-467d-b9be-98a5bd5d5f65", "sighting--64c9754c-93d0-4328-897d-f26cce0b1f1d", "sighting--aebda7c9-f529-4847-9678-5cb2ede8640f", "sighting--dc6823b7-d795-495d-bc0a-4403e5a0c143", "sighting--e0ecbc49-6a05-437d-8841-4a72ca256867", "sighting--605c4089-78c5-4a6e-98e4-2758717f25d7", "sighting--a45ef3e3-f68b-4fd7-a592-b6aa0ab5e88f", "sighting--6c59b342-1505-4123-a23f-097e177657ad", "sighting--05a39f0b-4fda-41ef-bf6f-04fdfdf938d7", "sighting--28658452-99a2-490b-8976-ede6ef9c9931", "sighting--fdfa8522-3054-45ab-a6a8-068ef812b85d", "sighting--3982ec50-eea4-4cd3-9b50-badf5732386b", "sighting--d0a0bfb9-01ef-410e-8873-3c393a9980db", "sighting--eaef1eca-f6aa-407c-8c6c-88006a6c04f8", "sighting--3d6c34df-d07e-4504-bae8-1a24b85a31c5", "sighting--deb10832-5e96-4369-8b85-7670e7104caa", "sighting--636c3081-f4ce-4098-834c-1743815d16da", "sighting--e47a4deb-a1a9-4bd4-8711-b784da4fac39", "sighting--a76b280a-00d8-49a3-b8f7-e54f447cf97b", "sighting--157abaa0-6ac8-4d53-9dad-af7014ebd9ed", "sighting--30333db8-961c-450a-a968-b6fa3a905b63", "sighting--4f208f73-c9e1-41e0-b6b8-fec9c4e16577", "sighting--6661a1c4-f1dc-4e27-aa1c-c3987e620095", "sighting--068ec153-0274-43c7-803f-d93e4f2e13ca", "sighting--c29b1606-8047-46c0-af20-92c5d9905320", "sighting--a3d38d40-d568-44f4-89b7-43a96256c5c9", "sighting--53449d56-6a6b-406a-8216-5e9a018e4d3a", "sighting--1a556158-94a1-4496-b103-a4e11e4744d2", "sighting--bf5e58b5-83f0-4bd0-89d6-7756682ce79f", "sighting--d0e1964e-3c63-44a5-8d4c-ce6b924f1d2a", "sighting--49ab303f-31c9-4363-af2f-9732a273f4ba", "sighting--073f6048-58fd-4cd4-bf3e-ee54d1be9ffe", "sighting--0c64cde4-4b95-4254-8666-3908824b57ad", "sighting--d08d919b-104d-428c-8aa1-8c28ab19e5fd", "sighting--828ffc4e-8787-47f8-8fe2-4f976ad2b240", "sighting--2ab3ce2e-2fe1-4fd4-ba90-0f36c33e491d", "sighting--61ab6e9a-fd08-402c-8a1c-a58a55edae3e", "sighting--0b232e5a-3c9c-43d9-88f8-15fb8b4ece8b", "sighting--db992a6b-9162-4b62-9a44-5d91626f2968", "sighting--5f5081bf-d2a1-44cc-84bf-c8371258e60d", "sighting--edd00bc6-3e61-4c9b-883b-acd12df7a824", "sighting--8653d55e-a49d-419d-84bb-5c667ad939ec", "sighting--8e383c45-63ff-4f26-8cac-705d10e555f9", "sighting--b53ec7e6-56e9-4176-8ef6-cc6e2a607569", "sighting--9db0a6c3-29cd-44fb-ab0d-f696f05e9857", "sighting--79b13a3f-8c78-4354-bb3d-08a75742a2f4", "sighting--9a3758ea-5cfd-4ebc-a6f2-e673397fbf12", "sighting--2a6b637c-ca20-4e47-89ce-76fce133151b", "sighting--7c1818bd-5d8b-4f36-b3c6-2e9a72ff634f", "sighting--2d4e503c-634c-44a6-8836-49c17dafc7a0", "sighting--ee50625e-5026-441a-a03e-ed5c41bdd02c", "sighting--4ecf0a48-0c00-497f-823f-73b0d890c74e", "sighting--8a87cf79-feec-4e71-a9ed-e7fc4d8fe57e", "sighting--cff23a47-45dd-4403-ab6d-108c12a7d884", "sighting--0f338af2-81dd-4bc4-80de-f21b8bf9d4df", "sighting--a788e5db-46cc-4458-8b00-7c02e0bc44bf", "sighting--6b8f3b5f-de0e-467f-b5ec-4ab61d5403dc", "sighting--66b1a872-a329-4b0d-9318-b4f59a4f77b0", "sighting--05b24165-c96f-407d-be40-fb4039569536", "sighting--ecc18b15-d31b-4366-8d25-18ab9eefcb2b", "sighting--a314514a-6712-42b4-8802-e404a076d4dd", "sighting--0fd16304-83ba-449d-990a-5a5ccf39d4e5", "sighting--3420d3d6-3441-4970-a93e-b5d45143c389", "sighting--de2df29b-2ccc-42af-b7fa-4eee550154f6", "sighting--74c1511d-0c98-4eff-8363-c5dde77a62e3", "sighting--9a1c8cc0-be84-460a-bc8a-833d38dbebed", "sighting--d5bc6a2d-4526-4482-9506-2a3ee3558024", "sighting--199accbf-b251-47f9-8483-be18ea48357b", "sighting--ee644986-002c-4001-866a-1b6d27c474e5", "sighting--e3de09e7-83a4-44d5-91b9-eb21a5e43499", "sighting--499f0799-ed80-4491-852e-d65ad8e34401", "sighting--df8aa474-570c-4921-bf87-85fdf62d95de", "sighting--1d6cc81a-fc09-4715-93a2-d33586ca279c", "sighting--7c82a076-8ec7-4a5f-8d36-2d5c2edebe2b", "sighting--15b6a790-c7f1-48be-8d20-20bcf41b10a1", "sighting--b74f86fc-572d-47dd-92d9-643ebcb7934a", "sighting--5978d446-d502-490a-9f12-44293e2a8f07", "sighting--1aac0830-67a4-4e70-b75b-903cc430e079", "sighting--840b6efe-284b-4dc5-85b4-54fb22510f34", "sighting--16e2489a-dde6-46bd-98e7-f9088fbd272c", "sighting--e038f753-c11c-462c-8fa5-acba74b6c88d", "sighting--0f487b23-0f61-4724-868b-c88993905f2b", "sighting--29a9e554-31e3-4d65-b4c6-a59b292dc99f", "sighting--4419e254-76b3-49c7-8846-fe78f22e36a6", "sighting--a445f97a-88bb-44e8-a23c-4c2cc9cd3da6", "sighting--524c8baf-c6b6-4f7c-b7dc-409c5684032d", "sighting--2b48856a-4753-42ec-a19f-1192f48f38b2", "sighting--18423d49-2ee9-4777-9447-5da92b429397", "sighting--8d25e6fc-c8d4-4475-a48e-9a704d11b6e1", "sighting--b8242ddb-3152-4b95-8d1a-8e1d9cfd6f59", "sighting--67f14200-ca3c-4f81-9638-7bf90400b678", "sighting--5f132527-e896-4121-8653-e10d9bfe81d0", "sighting--f1ebdeb4-278e-4246-90df-a108f313ac50", "sighting--446d5b05-d954-4d09-9c70-01f3b988eb60", "sighting--815009a1-7ac5-405e-bf18-3660bbf85bb4", "sighting--1e80963c-f9ee-46fe-a6b4-4b821012a1b3", "sighting--ea54662b-f99f-44a9-ae35-e2421b91f2c4", "sighting--4efe35fc-dab6-4157-b174-72f6070bdd18", "sighting--a07cb631-257e-4d45-a45c-2fcfea6989f1", "sighting--091643a6-37cd-416b-a7b6-b298955e2d0b", "sighting--c7a455d0-f3a8-45de-bda7-e202d5f14e22", "sighting--ce622d8b-27ee-4ea6-8c65-50bf6a779d3d", "sighting--87097bfc-e878-4d40-8a41-3cdf25dcbe5d", "sighting--372767d5-9478-42e9-b682-fd590c2cf3fa", "sighting--bad534da-2b88-404a-8db6-54da8c19f1f9", "sighting--0c30cf73-9ada-4f05-a74b-fb7ed9b186fa", "sighting--7490df7b-2e5a-4134-ae46-2de1faea9055", "sighting--8c1e8a16-e465-4cba-92cf-48ced01272fa", "sighting--1aeeb4c9-186e-4f73-82f7-7c2d9d2e1acf", "sighting--6a89dd41-3163-43a7-a2d0-2bc07b9f927b", "sighting--34fc502a-9b0a-4402-ad36-2769a2533eaa", "sighting--ba08606b-6f15-41b0-b1b1-a5ddfa6c7487", "sighting--7e7eb5ac-45b5-4477-9924-5b74216b9645", "sighting--479c1fb4-4478-4383-b55a-e68069db8dd2", "sighting--84240f08-c75c-488f-9e31-7a76a073b10f", "sighting--c81fcac3-5790-4627-90c7-0b134b5e8d26", "sighting--14ee28e7-dc1c-458e-ad13-36f548a9603f", "sighting--e54e0676-700f-402c-abff-805a04cd6272", "sighting--cc9d891d-d43e-41c2-bd7f-a1bf600e6f62", "sighting--adb0fca5-3188-4c2e-908e-b605d3e90147", "sighting--126fc444-1739-4899-beb9-b149bca01d3f", "sighting--9fc1cd93-9627-4f33-865a-0c11de59d10a", "sighting--0441ac2f-a589-4cca-bb80-f0613fc9c1be", "sighting--ec4f012a-8982-493a-848f-be9bda9438ae", "sighting--be329938-0d1a-4d2d-9094-7c2a03ecf0b6", "sighting--fc813c68-d75c-48ba-98c7-e277aff08c62", "sighting--ffd236a6-485d-4fa3-953a-97edcb8967dd", "sighting--efe069ef-ebee-4f18-8a60-208de65d2d69", "sighting--7a161ede-8083-4123-b7e7-90c8a4842568", "sighting--ebc6c818-da2c-4220-9d83-877144425e91", "sighting--275b3803-6d54-47eb-8dc7-c60b7a62fe3d", "sighting--e69c32da-1c28-4c13-ab7a-8ddbd6c2c612", "sighting--2d318bea-5372-4b68-9ce8-6a304bc0c32c", "sighting--f734199c-82de-44e9-80c1-228fffc756e9", "sighting--26f10d56-a94a-4ed3-8bea-c347308d1011", "sighting--8aec253f-351e-4d6d-8c76-c9ee33db2be3", "sighting--2beae9ad-f997-4f2e-b611-511cf12c014f", "sighting--78ef0016-0ecb-4cfa-b952-db6ddb1958f1", "sighting--1e1116c3-a12e-4946-97d7-33f66d762603", "sighting--356d1a16-b8ac-4098-b4f4-71e39894fa8b", "sighting--56031ba9-672e-432a-a798-2bfce4080a36", "sighting--a244027b-8752-4bac-a6d7-7fcafe3d80ef", "sighting--3e5c599e-5b41-46a6-9c67-e60d0dd9b76f", "sighting--e1015c4b-8ed4-4410-87ff-4332c3346979", "sighting--d02c463f-89aa-4206-824f-1007c0649232", "sighting--5d9b2a10-f78c-4638-b40e-20c8e3f22afa", "sighting--f0599eec-00b8-4b40-b553-7ab30858d3b3", "sighting--d58e3c7e-f3c1-4835-b0c9-51d7589e6594", "sighting--257258cc-9580-41d7-a158-9bfcde5b9c02", "sighting--95b0e112-fbaa-492a-abeb-d7d4270b75fb", "sighting--b22ab93c-ff66-40f3-ab24-9f7460f2bbad", "sighting--c4f60f87-d1ed-46aa-9bff-2a717f4a29b7", "sighting--2d10469d-8bf5-469e-bc36-79d8088fa138", "sighting--61f07b14-abeb-4280-a2bb-40b8cfe0386c", "sighting--163c58fb-1dc6-4359-af9b-a46a933fdfbb", "sighting--f37cb1bf-070b-43b1-8466-961af9095f45", "sighting--422df4d8-1231-4ba1-9480-ad3c53dcf85d", "sighting--3d059a23-e630-4320-ac55-ce63e2c2cfb1", "sighting--b3334914-cd23-4419-9574-04604e8a2e8f", "sighting--7a99014a-dcdb-4653-8ba4-b4f0bc4d864c", "sighting--f87179bb-d6fc-44bf-bbb0-05b20d752c45", "sighting--5eba7945-6b95-46bb-bfae-3ce8972b028e", "sighting--52703e52-4257-42b2-a279-364f11b163f7", "sighting--7e8720bf-be30-4ae9-b3c2-ebf632952253", "sighting--df354761-2048-4c19-9808-fc3e35a7d3bf", "sighting--4fa9d101-9002-4fd7-bfa0-feea4f0e7f05", "sighting--cc47ef05-f03b-4958-82b9-82f4383eaf4c", "sighting--191dd056-8503-4236-8882-db725db655c5", "sighting--0e162037-e72e-4926-893d-e18d2b3d047b", "sighting--458983ac-914a-4f7b-a842-8dc06991e85c", "sighting--1cd406bd-9da8-4160-bee5-39dbcf78d059", "sighting--b17c3a5a-72b6-4819-a386-afa4f0681682", "sighting--0d98bb15-75d4-4048-a421-65faa877a1a4", "sighting--838acdbb-49ce-47aa-81fa-3999f52f7bd5", "sighting--cca9bfcd-40c5-46e6-a0fb-04de69a454f6", "sighting--c6b9e46e-2a69-4496-9b11-2d110aa56aef", "sighting--afde7ab8-19df-4a90-814c-bd0262dc5271", "sighting--f9f8a8ea-dc9d-4596-a424-4dd8159feac3", "sighting--9244fa5b-5527-46d1-8435-355ebb7619ec", "sighting--c269e34d-5395-473c-986b-93e0d32eeea3", "sighting--d6d4c15c-5dea-40ab-8f2a-99c6d3d6227a", "sighting--969c8391-66f2-43ba-902d-ed8904ee2fc4", "sighting--b94adc3c-851d-400d-94b7-d595c7f9c4cc", "sighting--b33809cf-d24c-48a2-83f1-158cfc564d6f", "sighting--d7482369-f177-4041-8b86-07d24dfae13b", "sighting--26bcbf9c-0683-4796-99ab-b4b58992cf52", "sighting--b747ac90-364f-453d-9845-c601c2cb4cfa", "sighting--b1d194f2-0870-401a-8476-8481f8ac65ff", "sighting--27e6a911-2a37-4234-8546-af74135baefb", "sighting--5ee1ee76-f438-481f-979c-acc011a1d14f", "sighting--22adadfc-982d-469b-b2e3-ea0a0bac0e6b", "sighting--d55ae575-3646-458b-92e4-5630ecd95999", "sighting--848435db-cb28-47a8-87c4-7e0122dbcf2a", "sighting--6a93d0c4-0811-48a6-a60f-2ce03843be86", "sighting--ee2911be-248e-41b3-8073-1c9f88a2c0f4", "sighting--c9a55ce2-6c85-4e2b-bce9-1a290a99abf0", "sighting--678345f3-1e60-4c73-8585-7e92e202059f", "sighting--7342240c-fbd3-432c-9e9d-5ff3854381cd", "sighting--dc16baf8-a0aa-4cbc-9e4b-0141befddfba", "sighting--cccf8c04-5732-4689-b2d4-71d87e139c2c", "sighting--2dd37417-5e79-4009-95cd-424bd9c036ac", "sighting--4d515351-cf5e-4c9c-8b26-b8429946b4cd", "sighting--76a6127d-4260-462d-be81-eb160c9d1389", "sighting--4211e9da-ebc8-4dbd-9487-f517c6eb725b", "sighting--25995d2b-30bf-4192-aaa4-09033c0984d2", "sighting--132969fa-abf2-4b70-94d7-2126fbdcaa3c", "sighting--811921c0-0e06-4063-a319-8d5c54d5ffbd", "sighting--b4fec19a-1857-4311-87fc-8a2a1565d2e4", "sighting--2d4fa52a-9bb8-448f-a551-17be05af30dd", "sighting--b3849be7-770d-4184-9233-91ddec2acc49", "sighting--5616d7d9-d676-4930-920c-fa0287a0ca8d", "sighting--f7264814-1da5-416d-8aaf-93659bd2279f", "sighting--00f830e0-78ce-46d1-9f81-0d9ca49ece1b", "sighting--c7380112-1bf7-4b51-abe2-4621e7b8fb8c", "sighting--c85dca04-9aae-4700-998d-616e619e05db", "sighting--98d22f76-7f79-4748-a3cf-4d1f8b13b471", "sighting--280bbece-2302-407a-a8a1-cc667d19a78f", "sighting--28567e78-17f4-46ed-9b98-1d4cea9a822d", "sighting--71dbff55-85f3-4286-b407-84a73e2ae0a9", "sighting--c9802b7e-ba56-4254-8a35-395d9996b12c", "sighting--02d5a1c8-e0f0-43c1-bf76-15157cdc23f8", "sighting--7b6b06f3-14ca-476e-b790-c8f757093f0e", "sighting--ab1949d8-9ff2-45f7-8bb4-687024fc181b", "sighting--4b10caac-ed82-4c3a-8c32-6babd572d228", "sighting--0203ca46-9c9c-48fa-9edf-5e314617d351", "sighting--a898721d-263c-4aa8-af36-498c9dae2e35", "sighting--3159b212-b351-4eb5-9100-017c13705ae1", "sighting--c97d7d38-effa-4908-9104-076adf05c976", "sighting--33de6be5-ea7f-4cb2-b41a-9bf9f72376d8", "sighting--099c19b2-68df-4ea7-bfcf-f05391948372", "sighting--30478357-8e84-4e9b-a747-f062da0b488b", "sighting--10111e6d-0271-40f1-be97-7da889ea2d4d", "sighting--45b3ee83-41a0-4ba5-9710-0d26a7a8baf6", "sighting--062cbacc-d0a3-46d6-9ad1-258340e769d6", "sighting--56e4b6a0-70f0-4040-9801-48f1263bf29f", "sighting--d471ea0c-2bf8-4406-aaf1-d0cf5f8a5530", "sighting--3aa2a1a0-d16d-47ea-8e65-59c2bbaaf881", "sighting--16070beb-5c54-48eb-b9b3-03c977566cb5", "sighting--16e19bc9-d87f-41ba-b378-bcea17e98987", "sighting--acd64560-142b-4023-8170-8f2bbd45e956", "sighting--5107a2bc-29d0-4858-8f7b-c20ded8cb483", "sighting--ff404d99-2c8d-418e-9fb4-e10e1fdd488a", "sighting--65cce038-62fe-4671-a949-d67a502d1285", "sighting--bcf629bd-26da-442f-807d-13d5d4e61d17", "sighting--f78cb81c-1f59-43f9-9a42-ce733d0e0b29", "sighting--07b14172-3639-4548-b0ac-913ae8f82dfb", "sighting--5c3e8789-e793-4682-9b27-c779248148d2", "sighting--087b8550-7f5f-4808-bdea-638010077af5", "sighting--b276ae61-0a71-41f2-bc79-fd1d80aade25", "sighting--3e84422b-d25e-4a99-b651-f0ac9765e15d", "sighting--9d885ae0-f08e-4bc9-b9b6-0ad7348e47c9", "sighting--580ed36d-e48b-4f8c-aca0-266bfa8b4589", "sighting--5f6b0669-2e16-4bf8-babf-799e5f8174ee", "sighting--db2220d7-44bd-4f7e-9826-1d8c7f7d115a", "sighting--85e752d5-b560-466f-8731-232cde1f0ada", "sighting--ce53ed41-edd4-4eed-8def-13317823060d", "sighting--6e6c9490-8e63-4593-b900-549dec529950", "sighting--62743f5b-853d-4338-8290-e04dd9ab2f8f", "sighting--2e812bc2-d4c2-4510-9240-52011b1bfbab", "sighting--3d67686b-aac0-41be-8c3b-2441254a8364", "sighting--27086358-f830-4b14-bf46-c365fb39a810", "sighting--c157f0ef-cbe2-4035-a7ad-1db0c768226e", "sighting--e5a4c67b-5440-4ec4-b0c1-142225d78abf", "sighting--dedd1af8-eb1a-4a4d-a07b-33ab14fb5a5c", "sighting--e3dd93cc-9513-4914-a27e-e3d2c4e38e55", "sighting--de2528a0-360d-416a-9b19-42658b6bfcc8", "sighting--38dd7450-9a0e-4491-8c10-c559fdc1f445", "sighting--75d1722b-f659-4656-9045-be367bbc61b7", "sighting--99f7ff0f-d90b-48e3-bf09-12a49878451a", "sighting--08aee353-acfc-44b6-a8c8-3bb69df673a2", "sighting--9a9e181b-d1de-477a-883e-4c415524087d", "sighting--cc71b3af-cbca-4877-a7d7-b5a696959711", "sighting--61ae98bc-61f1-4029-9954-df3fc649437b", "sighting--23c02812-d583-4cee-9d84-d70852e486ac", "sighting--cbf43d1d-ffe1-498e-93cd-b81d6f26ae47", "sighting--6e67dffe-0d7b-4787-b9d4-c1c9a2a6a9b0", "sighting--bc0e4cc1-bbc2-4c64-aaf2-4c9a253bdfc8", "sighting--fbff73e2-8ec6-4621-a46c-9cd45acacf3b", "sighting--584d8c80-0bb7-4e18-a0bc-17657bd1a3d9", "sighting--2e9fb8c7-1e9d-43e9-8ac5-07d1147c3dac", "sighting--19dfe9c1-1e2a-4bcb-89d9-f68ef772edec", "sighting--5427d85c-663e-4e38-b67a-b2bfbeb808c9", "sighting--3c718656-833c-43c4-9fae-6b75e2d9fad8", "sighting--b281f063-2c85-4d49-8da2-029ce5d04ddf", "sighting--22bd7d14-542d-415f-b863-396a0458911b", "sighting--26f7b8e8-64ac-405f-82ec-0d4773373bdd", "sighting--6737e190-3413-46e7-923d-de4ed420ce8d", "sighting--449c095f-1372-40e3-8c9e-3d50869e564d", "sighting--fa9b6f2a-2388-40cc-8037-49458e7ce0a2", "sighting--4557d75b-cfb4-4aea-9f56-2555d0e09b98", "sighting--550960e6-8be9-40b9-b377-f29fdde65f56", "sighting--28e108a1-30b1-4526-af30-3c763bcb02c3", "sighting--3cff4bb8-e9ad-47a6-b671-e7bc52ff97b4", "sighting--ea4c2c12-fc3b-41a3-a1f3-0034e27233b2", "sighting--4cdf092c-83ad-44fd-9cc6-90dd342c7244", "sighting--faec077a-8b0b-4625-86da-c032fdb9a59d", "sighting--c809847b-5853-4a20-bb15-a1b69b9050f8", "sighting--7990efe4-7a18-472c-89aa-0f1e4f377fec", "sighting--47be19cd-0075-4733-a7dd-611fb43fbb95", "sighting--8d20967b-d262-4912-92e8-36617705688d", "sighting--648b0aa2-dce8-465b-82e1-40bc7d93913f", "sighting--7fba821a-159b-4cd7-b8f5-ab199b46af07", "sighting--16a6c9a3-df53-439e-bd38-11f5f150ca77", "sighting--9f23ce75-1471-4e38-ac5e-5cdc221da6bc", "sighting--5420df4a-fc79-46dc-b061-d5bc3f222da9", "sighting--16467fd8-ca74-4343-b29c-0ff1bfb7b11b", "sighting--9408ffd2-f262-4569-9a88-7c083644162c", "sighting--f6d7f125-af62-42fb-8c49-83f9fd9ac37f", "sighting--2bd41657-d265-46e5-a67b-3159f6c67504", "sighting--fbacd58f-206d-4e45-afb0-6154f98668d0", "sighting--68d311dd-305f-46c3-94d8-8a229c6c1d95", "sighting--61551900-1b95-48c5-a3af-710ac8c176e3", "sighting--45152258-8350-45bc-b565-1303d815d093", "sighting--9266e727-80df-45e2-bc9d-bd0a02d27118", "sighting--b90b9b7e-01e9-436a-82b3-16db7390c3b2", "sighting--9ac3f57b-4651-47e4-93e3-ab41ded20127", "sighting--a680cd3b-67e7-434c-bc37-04ff54495e19", "sighting--4f638f34-5879-4af5-bcea-7c376ce6d67d", "sighting--0be153f1-461c-44d7-a9fd-5e22e876f2d0", "sighting--8e3092ea-0af1-4380-9d22-a8458c9cc57c", "sighting--ae87a75c-c7ef-4113-85f4-865626d9eddc", "sighting--e60bdda3-fa5e-4d10-a13a-2aa62bfe59f3", "sighting--b78816dd-13e6-4f76-8b7f-50111d0a1e27", "sighting--5566ebc1-8fb0-49bc-8abd-4a0d7ddb5ffb", "sighting--d2cbcabf-19aa-4d3e-9f07-29b041b5fec5", "sighting--2e268ed4-9f37-438c-b9fd-ae8ac69ca20e", "sighting--265f23ee-7f8a-4b5e-9ba8-b451be8d91d2", "sighting--536da8c3-187d-480e-b5b6-70c49e56390c", "sighting--ac4529b3-a6ba-4ac1-899f-623acc8771da", "sighting--a33095b2-1514-47c3-879b-8b27ea47d5e6", "sighting--0805f8c5-b9ee-4b26-8444-2aa7d485108b", "sighting--3b8b4ff4-efab-4ed5-8d3c-7e2120365ca4", "sighting--32091a16-4e47-4624-b4bb-eb82c7df49e8", "sighting--aba3a866-bb01-4d68-af37-e009548015b4", "sighting--7dcc524e-374e-4902-b593-034ecce4c2c6", "sighting--0c9213ec-76b5-4e3f-b93d-883463b6e769", "sighting--517d655e-f8a4-4be2-a5bf-828274f81576", "sighting--1ff57cdb-6fd2-46ce-9edd-76606fc3dbd1", "sighting--aa677e22-0f50-4a45-b0bd-4b67fba0beea", "sighting--294de89d-7786-45ec-a6e1-603df103179c", "sighting--475223df-b674-46a4-a458-d5a590d8cdb4", "sighting--539a5e22-ace4-492c-a4c7-e66aad248014", "sighting--8bb9efef-be96-4972-b674-071dde273e1a", "sighting--f9b330e8-0940-4fc6-bf93-b8a4176b0a4c", "sighting--4edca15f-6532-4dac-9554-87b9030af66a", "sighting--95e9d463-868d-4c87-b4a5-d48aaada7235", "sighting--5d213577-857d-449c-b85f-cbc614daac86", "sighting--02d10b14-9bee-4ce2-8558-f0b1a8ec2360", "sighting--1ce08c50-517c-45ea-95e3-e5e98c0ce643", "sighting--7ba1e221-7d57-4ffa-959a-b32a129d2a55", "sighting--3cb848fd-ca41-47ee-b5e0-59f4925e925d", "sighting--9c7be5a4-7a84-4a31-91fa-8d8699b82f12", "sighting--c8b1d026-7ad6-47fa-aebc-0a6e4ef4c2ad", "sighting--143a3460-cc87-4c27-8905-7359d043c76f", "sighting--2b7ee173-9c15-40b5-9064-13dc7936d096", "sighting--303a4d1f-347c-4c40-99df-6b0a0284e80c", "sighting--f2fddbca-c745-49f0-a401-c56680c8039b", "sighting--5a3b3024-b7ca-4853-85ba-53ce2e4a4baf", "sighting--81b4297d-78ef-413e-a4ef-46f7f963d753", "sighting--59f0e079-83ff-4b2d-9183-b662ad0ccc6f", "sighting--ea31a2ab-7c20-48dd-9af5-f41bccab1eb0", "sighting--465c66e1-39ca-47ad-9478-72860107c882", "sighting--2ed53d2d-6070-4fcb-9216-7c35f6431442", "sighting--00d59943-727f-4660-a4e8-561485d8528c", "sighting--933938b9-c042-4c25-859d-f2c2857f2e4c", "sighting--a69b536c-08d0-4b9a-a2fb-e62f16928e77", "sighting--ed5a561f-e010-4af2-8595-ee729b0b7bdf", "sighting--06708b91-77a0-483d-abd4-677dc930fbfa", "sighting--a5c3b585-0594-4165-a59f-4efb1415c334", "sighting--5ca9c985-d3c5-479c-8acb-091844f1b1d2", "sighting--3c6ee69c-6f20-4243-abe5-c8cb4baf26ed", "sighting--2eb53c0c-171d-4dbe-91bd-885ce000b463", "sighting--9a755639-5bee-43ab-a78f-eecf903f57c9", "sighting--8bbf46d0-5dfe-42e0-a4c4-4863f08a8f58", "sighting--c1a81341-d3f7-45a3-83d2-d5e20492e171", "sighting--1695627e-ff65-40cf-9486-e7f229d40ac6", "sighting--e66d6505-08ec-4be1-81a5-ccd0a644379b", "sighting--88de14d5-a3a3-40b2-b348-ed58c91c7ebc", "sighting--71a1fc6a-2c0c-422b-b63b-149e31ad0800", "sighting--d9917bf7-bf45-4ee9-b89f-1f3c8fa0089e", "sighting--a64e4cef-fd90-4b3e-a2d4-d2e40afe8e01", "sighting--a5539482-41c6-45b1-b148-14c320a4f54d", "sighting--2b8055a8-2da3-4005-83c6-25ce3ac9dd35", "sighting--8c231f0b-bbef-47f6-8d7f-9319a8103dc7", "sighting--f1b8724b-7cc4-4117-a915-a468119e651b", "sighting--bacb98ba-19e1-439d-b43b-c9d183b53485", "sighting--cdb4acae-49b9-4bb4-a51d-6a2677ad7f6a", "sighting--dda50314-8dc1-422e-b23d-dfd0741b8bcd", "sighting--df8924f6-5de4-407c-889d-3eaa77a75bea", "sighting--e3519661-9544-4e82-acd0-7f8c0a074ed0", "sighting--b8ebac55-a538-424c-960b-9c4efab992a6", "sighting--7f073084-2d1c-48b5-83bf-271a88919cee", "sighting--8ff3f16a-60d1-4ed6-94a5-e3dead46e660", "sighting--6006b0e6-2d96-4c02-8b95-99e747c5f5a4", "sighting--5a4afd09-8736-4a99-9d32-636d47d50ad9", "sighting--228e420d-b81a-4ece-8bfa-9fc17284f0b6", "sighting--75ba9579-da49-4a9b-9ecf-51d73955548b", "sighting--bb6c46d6-01da-463d-bdbe-7031867bc729", "sighting--a6521557-1f69-4f23-a96c-fee09de4eac0", "sighting--7bb6820c-e278-4183-8d72-600b99b99667", "sighting--d6a27830-6f24-4911-9a5f-d85f5b7a7266", "sighting--e4da2e07-40f6-4411-8273-43e87bf95832", "sighting--110cf469-4640-4851-8b66-136048b3580f", "sighting--a71e13f6-0181-41b9-91e7-1b13edf2ded8", "sighting--d7f22220-ab81-4f6e-8d15-ad07837b1f66", "sighting--8fe4d60c-0611-4919-8a31-f39fc2792b1d", "sighting--3dedb426-adcd-41de-9473-720cfaddf0c6", "sighting--92c9be3d-b42d-4a8a-b21b-3db032b822bd", "sighting--48696175-39e4-4430-98f3-13af500a5518", "sighting--5f1e9f1f-0f13-493a-8d8f-32598795390f", "sighting--567e99c2-6d70-498b-ace4-a25e1ecd91bb", "sighting--bf6c6bb5-306d-41df-a572-8bed376471c7", "sighting--8f1f0e05-354b-4df3-8c31-c92db740d0b2", "sighting--177d930d-2731-46b6-a82b-7d43fbab6fd9", "sighting--5028500c-7a88-4626-882d-b28bdcac5e72", "sighting--fe434851-ed74-4b4e-b3cf-38a5eaa16827", "sighting--e5c58d6e-d34a-46e1-a8a7-593e787d3aef", "sighting--63643200-9f59-40aa-aab4-222016ae3561", "sighting--782d9265-8b75-4648-bad0-18dab14d2a15", "sighting--4951a16e-2dad-491c-996d-667c103d13f3", "sighting--f2c2f53b-4f8b-486d-ae1d-3e19e275efa0", "sighting--91083551-3ef6-4d51-a600-81c47798a870", "sighting--f6414b73-8897-4d07-bd90-364a04f35be5", "sighting--fe4b5ad3-52d7-4809-abac-21b398d7e453", "sighting--2eb9f972-c32d-48d5-805a-93f99b40691d", "sighting--2a092537-461b-4367-af31-7416d4cb59a4", "sighting--1dddd997-a621-4f38-80ed-d2224ec5b685", "sighting--26f65987-f7eb-45b4-a958-891f7396e2e1", "sighting--0b91123d-a483-4399-9169-cd9cbcadbbfa", "sighting--cd47aef7-5ad2-49cc-b482-07c25b73fd0e", "sighting--534aff52-0189-4614-b1d2-f2a3856c97c4", "sighting--24616369-55f1-4212-9618-6cfe745ab078", "sighting--38cdf284-0d20-4b4c-818d-87cc4a68f72e", "sighting--87b5111a-78e3-496a-82f8-889c29427147", "sighting--f2563987-5036-4078-89cd-aa17171e2085", "sighting--b8be93c5-50eb-4849-96ad-30323a1436f6", "sighting--ec604f81-4b74-420f-989f-bbee519b0ee1", "sighting--75fd2a37-0f8e-4ba5-a3e6-96f17f261b1d", "sighting--31407b9d-4bcb-4fd9-b9e7-660fc6fbce44", "sighting--1ef82ad8-01a5-49b2-ad62-23357d50c4ee", "sighting--b2702ed7-a419-463a-a779-7e33538c521d", "sighting--7999f332-71c6-4e91-b984-5afbaa00572f", "sighting--0c557f62-98ed-49a3-9f6e-30971d52ce62", "sighting--ec0c4482-394a-43bc-ab42-769306937c48", "sighting--2b517d98-4a8a-4dff-9221-c22fcedc3d25", "sighting--706e5d62-5c56-46ff-b303-a7f529c05fef", "sighting--eeca5708-b3eb-44b3-a631-7796a349483d", "sighting--d9ef8be1-3ed8-4372-8cba-adad94836f71", "sighting--8596c9b1-0540-4890-8109-607287249c1d", "sighting--12df8614-4a81-4096-9bab-1d838d064d7c", "sighting--969da007-330b-4d29-92bb-28a71458905c", "sighting--64cac20c-9c71-4400-a41b-871849e1d73b", "sighting--e208de74-824d-4f0c-a32a-b67cd0af8373", "sighting--0b2b10f6-0a68-488f-985e-83ef27c952a5", "sighting--0ac0be6c-7a98-482b-b2d5-c56890ac586a", "sighting--0aa8f1bc-ba61-4fae-92e5-38a0151514d8", "sighting--43f85c4c-8350-4579-9ea9-8ff14c23a46f", "sighting--fcad4442-b58e-4c2d-93f3-562009844155", "sighting--e204bc1a-32dc-476c-88fc-77a559c39ea1", "sighting--9d58a19d-40ef-4a2d-b4a1-0f6d14023dd8", "sighting--3dc3011d-0de4-4d55-8fcd-b07a761d90a7", "sighting--cab4fc6e-e6fd-4968-a9e6-50cdf025c937", "sighting--c646161b-36d5-4fdd-90fc-d34fe2dc5a27", "sighting--b954af48-af7d-4780-8f2b-da51a03a0fc3", "sighting--d63742f7-673b-421f-aba6-62c4b4f62425", "sighting--069794db-2962-4e37-8354-064f4f6b74b1", "sighting--0b41d453-5e81-420e-97cc-45124fafe2f8", "sighting--7723c5e6-34d3-4799-9ab6-ace7c8af921a", "sighting--faf52eeb-5b70-482b-a383-8cb075977acc", "sighting--20c4e0eb-3be8-4d28-ab76-fac6bdca28db", "sighting--4f8c7fad-6f50-4b63-95b2-e9c4b61d675c", "sighting--9d07561f-144b-41f0-a4dc-1f826be06471", "sighting--8dee54a4-3d31-4be6-a4a5-7f8fd52baf1d", "sighting--be9763b6-fe32-4ae0-bbe5-8af1d34352be", "sighting--9450c9ba-000f-42d1-8e37-dabbc6aba438", "sighting--2c3c9dcc-6052-48bf-820d-418b851570ce", "sighting--a0cf0d24-ea41-46ce-96fe-a2ef39abca9b", "sighting--5ba96c8d-96b6-4b5b-8cde-aee6cd266c04", "sighting--5bcaf02c-9f99-49e7-93dc-0ffb161c89a1", "sighting--3951a07b-0bb8-42a8-b9c3-1c24edd49844", "sighting--81fb6e35-b1af-4545-a3cb-0f2729c039ad", "sighting--d75ce025-6443-4073-89aa-d9c6f2686130", "sighting--7e8c6b5b-8aaa-45c8-bf75-54f1fea52f1e", "sighting--384513fb-87fd-481f-90a8-589f29a83107", "sighting--c87ef18f-fcf9-4e0d-848c-6973fb519f86", "sighting--fc9535bb-2682-4898-bc22-e77ca286c1ec", "sighting--75270e6c-3461-42bd-a2e2-7329d7db9c3d", "sighting--ccf08b36-e3bb-48f1-8606-72607810fec5", "sighting--60178cc3-050f-4804-bcbb-b5109a2e64c4", "sighting--e7cda097-175f-4afc-9379-01bdcf226207", "sighting--f02d0dcb-95d7-4e61-ab94-5cd9c93bde3e", "sighting--45cfead5-16d6-4c5d-8c38-895d9933bc23", "sighting--b4eb2ccd-1756-43d1-92ee-d4205e24c381", "sighting--0a70951a-e603-42de-8e6b-dea30c667efd", "sighting--d87e81f1-7932-4afa-a537-49fb624cd94f", "sighting--706342d3-4314-437d-9784-d825e1a29bd0", "sighting--fdee0f93-e9eb-4d2f-9ff5-2e4b3f9c457f", "sighting--f7e0740e-4f07-4113-9aaa-7244b59e990e", "sighting--b3c32f55-2701-4241-947d-1d351e0ce12b", "sighting--be5bbce3-7ffb-4912-a593-c8c9d0623477", "sighting--d8ff3a6a-818a-4d05-89c0-44a910007190", "sighting--ef27fc43-2680-43c7-8b94-6c4c3be45e1e", "sighting--054b81e2-d94b-4187-8032-d6dddd48d258", "sighting--a08eb7d9-1bba-4fcf-aa80-d7627295d0e6", "sighting--c327862a-9d28-42eb-b66b-7246dbe66ab5", "sighting--a033b109-89d1-4563-a1b3-d606619b5917", "sighting--05a6d015-bafd-407b-898d-2c565087f351", "sighting--d6412341-0b20-43a0-8ec2-5a6554471a21", "sighting--019d44a2-1636-40f2-87f9-f8b3032d9a02", "sighting--68ec92c2-514e-4f70-b0cc-ab57fafd3998", "sighting--06f0728f-6740-4a76-98dd-7c64e2aba40e", "sighting--aeb3bac3-3ce8-492f-b354-0c0b509d6fe6", "sighting--83c1b3f0-d2fa-46e4-9949-d7cd0cbd99fa", "sighting--9b879d5b-d1fe-46e1-a896-325be4614aec", "sighting--4609f13e-2437-4e0b-905a-0b3828f0fa61", "sighting--6e49ac27-caf1-42df-a16d-af9181e1cab7", "sighting--e4ebfa14-9705-4621-89b6-812149f49049", "sighting--631809c8-79bc-428c-99f0-6cae3a62f4eb", "sighting--478972bb-469f-4cc7-bd6d-769e9e8182c6", "sighting--c22c7ad3-7baa-4093-97d5-09e579ac3d65", "sighting--2daa7380-3290-4719-a0d2-287868b065e3", "sighting--776622e2-4d80-46ef-9a67-38b64f7a070a", "sighting--43d02578-47fb-4d31-abf9-70d3b69bfc29", "sighting--b37c5228-cf66-46ea-81ef-8f7924f53547", "sighting--d7d3a2bb-ac0c-452a-8035-af4eb4cdebbb", "sighting--1043a3f6-a43e-4f1e-8012-2838df5a636a", "sighting--11452c0e-3ae4-42a1-be2c-85cb9f45d5da", "sighting--dfe23484-5ed9-49fd-a3b4-56dbe29ca071", "sighting--ea584516-d857-4a80-8d5e-4bdcb11a34e8", "sighting--b4a31e9f-1940-484b-8142-3cc94dcfb85d", "sighting--56fc9a6d-15da-4c46-a917-52451308c3c3", "sighting--b201899a-c5d4-4669-9c10-1c06b40af1f3", "sighting--63601e7e-6d62-4f0c-866f-9ad80f290a53", "sighting--9d774e9c-b09b-4b3c-a915-0cf26e1055a2", "sighting--49c6eea0-0a12-4a0e-9db5-7f8bdf28ebbd", "sighting--42fd0617-e93b-4ce9-ac0c-4762df854c89", "sighting--fd779d2a-118a-47c0-bc0a-3432e2e603a0", "sighting--4afc0001-9913-4af9-87fc-160b9324f135", "sighting--f6bb483e-0044-4e70-b33f-e042745ad12d", "sighting--ad3985ca-1ac8-47f4-b87f-e4fdf8def1c9", "sighting--e4683c9d-70d3-4b91-988d-aa5467ac5aee", "sighting--54f29947-ead4-4ce8-b5df-27c8dc4bdef7", "sighting--3b899cf9-7007-4561-8efd-a34033fbd3b5", "sighting--55fcf34c-129c-482f-b33f-aab6b761f2e9", "sighting--e4d3c588-f16c-4b03-8253-98fbf20eee32", "sighting--ce2e0f47-1350-4f3e-8231-e444053b562f", "sighting--64d004d8-8f0f-4eba-ba51-29df126290b7", "sighting--75758c2d-4c37-4045-b5b9-5c1468a6ee91", "sighting--5a21b08c-9e01-4acc-9e86-f2bdd1003542", "sighting--ec8bf7d9-9758-4076-905f-bbd3f7ebf1be", "sighting--a119575a-6030-4794-bec9-00f23319948e", "sighting--6082c3f9-2396-4fd5-b863-3d08e1c2f2f8", "sighting--b6019bcc-cd78-46a5-ab2f-0b28b60f5dd9", "sighting--43586747-7206-49e7-8b1c-0cd3c0d99cdf", "sighting--bcadd847-ab9e-4c3d-b68c-1cefe85519db", "sighting--025b7e0b-3830-427e-9291-b356736113c2", "sighting--36afec0a-a40f-42e9-8661-2f633b8039ec", "sighting--37a91bdb-58e7-435a-95f7-608512088725", "sighting--f416d2a3-96bf-41b4-a7dc-c40460e59772", "sighting--7cf74b24-9f99-4ec0-af08-f73c863dfb48", "sighting--2d58202d-e5b4-47a1-86ec-168c0cc7db66", "sighting--ec37f660-7399-43c0-8051-5034e655dd0d", "sighting--1ca64937-414e-44d4-82bd-c983443a73c8", "sighting--5dc387fe-5d2a-4e41-8895-520471fe86ee", "sighting--01f40273-7706-4a4f-9156-ae89375b5f0b", "sighting--2701bf1b-5833-4096-99bb-3af972d85e38", "sighting--0788fd29-e812-4e93-b79c-515974c1750f", "sighting--aaf06191-46ec-4b20-b92f-fc2b44a6345b", "sighting--0334c596-7e2b-451d-9c55-0cc58810b894", "sighting--e4fc3803-3e73-4b93-afa3-15890d4c4c89", "sighting--1175a1c0-382f-40c8-83e2-9f7d1680043e", "sighting--396009b2-6b8c-4ff0-8fd1-25b24d6f3cbe", "sighting--ad16f9fe-cde6-4080-9ac7-1a0cdef6cd9f", "sighting--203637f0-236d-4905-bd05-f1b20592d321", "sighting--86c116a6-3bcd-4f26-8f02-0063ac6814ed", "sighting--57604279-8c37-446c-8fdd-4e3e1872025b", "sighting--a3a8b9e0-3a35-452f-b893-d631f5d6cb24", "sighting--8ad1f7ee-3f02-45d0-8e6f-3ef37760a16f", "sighting--b893b3df-aac0-4993-9a51-6462d1246727", "sighting--322e6262-e477-44ed-bcc0-55b3827a1734", "sighting--4715a7f6-db45-482e-8099-2b70d672a47d", "sighting--0c811848-368e-4558-a410-c3999c883cba", "sighting--19282ab7-ee3d-4f23-b2b9-ea173e15132c", "sighting--47e02b68-e4cf-46c2-95eb-fb26e66d40f2", "sighting--fb836e8b-7603-4279-8140-4ec11fb109d4", "sighting--08ed4c3e-1e7e-4931-92d8-7fb31cdd95f6", "sighting--c26cec42-f624-4d1d-a5fb-50d3049e269b", "sighting--7e3117a4-73d3-4e83-abb7-3a7118f53c41", "sighting--33eeb718-f756-456f-87c3-3b546f4e2e22", "sighting--6dcd476f-bde2-4ef7-a23a-c4144b47f793", "sighting--0d796490-44e6-47e6-9cab-82178dc20ce9", "sighting--d0e36ca4-db64-4183-a8b0-b4f37f411b54", "sighting--6034a3fe-26ae-496b-b414-1f90cd1f74fa", "sighting--7942312f-47e9-432d-9afd-2a08ba470014", "sighting--a1bab034-d98a-4730-96be-65b8a2612a6e", "sighting--96591e58-8dfb-4594-bd22-85b47f4fd24d", "sighting--6570f0a3-52ed-4403-a011-09fc3bfc6d76", "sighting--eec4bc29-3ec5-477f-8f18-2dc43190c994", "sighting--feb60a1d-4558-43a1-8083-280b6afc5471", "sighting--2350698d-a31a-4c6b-9452-3242c1107e45", "sighting--d81db688-ca6a-489b-b1f6-38ef3caccbd7", "sighting--84566f27-ab94-4c24-9993-b11881142b9e", "sighting--fc7fd770-04c4-4334-ab5e-984594086cb3", "sighting--07950bf4-a058-440c-bff1-7feb2c102f1c", "sighting--a913f278-e2a9-46ed-bc8d-0b88358a087b", "sighting--667b7e5a-ff91-4488-8f2f-cebf2ca578d4", "sighting--7cdb2926-8215-4876-bde5-1ce7de44a40b", "sighting--3d6d7cd3-f52a-4639-a44e-1ff868e1f1c9", "sighting--8e7543a7-38af-4131-978d-d37dad0a3557", "sighting--a74bc17b-e689-40c5-aa10-f02afc09dd2e", "sighting--438dec9d-75db-42b5-9ccc-c072b19e30d0", "sighting--a3fd710e-d6eb-4389-b64c-88ed8beac111", "sighting--6cf4dff7-2106-493c-9d69-5e12f97aca13", "sighting--5a9b1823-935f-4953-a05a-c7d6353a594d", "sighting--ef74c9b3-0477-4273-a161-a44262f42f44", "sighting--fa43242c-25f5-4a0c-9896-1cc439ed2167", "sighting--dbf486a3-10df-4c9a-af3a-a2db63f2d95c", "sighting--ead0f462-da94-4690-985e-30ee60c453f1", "sighting--af8abe5f-fea0-43d3-960c-23694ee5cfab", "sighting--cd8b4f6b-e118-4160-b72f-ef23dc2dc12e", "sighting--c99b3efe-7b70-447d-bf88-94c1140ca4dd", "sighting--a3114921-73e7-475c-a371-1e92f23da247", "sighting--ab7dfdbc-b836-4bff-9b9d-32ae1f045ee5", "sighting--4a67f2a8-86b7-4866-a6fb-d85bbd14d281", "sighting--cae811fe-df7a-4692-91b6-a70b47aad8b6", "sighting--2e7ebc42-8883-4f20-9aa7-ec64bd9c31be", "sighting--90808217-730a-4700-8e11-ffcf331a68f7", "sighting--02369b39-bec7-424c-a5d1-6e9923b2f312", "sighting--ce0062f9-b72b-4db6-91a1-0aae0b8e8e79", "sighting--8bbf9af6-572a-4cfb-bc4d-807690857c1a", "sighting--8eba97b0-fa68-43c4-8864-c4ce83701b67", "sighting--54da3deb-af94-4dc4-8b8f-72f7a337f8f3", "sighting--28d79bf4-2092-4e8c-8061-c454c0948061", "sighting--eb4bfe89-b8e3-418b-9e3c-1f1a9355146d", "sighting--9e6b16ff-e5e1-4cd6-b3ce-4c29782c2dc0", "sighting--6e3a7eef-5cd3-4e98-a3ff-4936da2bef16", "sighting--d8ef9acd-1580-4c76-965e-913010bb1382", "sighting--7c5a4f4b-7464-4e89-bb0e-45e9c849f685", "sighting--db1a3d87-643e-40fe-82b6-c511280137d5", "sighting--e2e6c4f0-5431-4200-9458-3e40957a38b5", "sighting--d3d49a35-b023-49c9-bbce-0c5fe581a75d", "sighting--410512a2-b110-4727-85d2-d162e625ea88", "sighting--2a5fe9c7-c6c1-4b07-905f-439726d2d2ae", "sighting--4cc537ac-c0fa-4c51-adec-38e30bfce786", "sighting--4d5fbf3a-4639-42fd-88f5-907cf117a611", "sighting--4ded7dc0-9f3f-4919-82e4-f75845e2c630", "sighting--b237caef-fdc7-4925-b8c1-d743707c57b5", "sighting--cf578688-d865-4a4f-b9b5-f31d0b91ca27", "sighting--b3d826a7-8ddc-4f68-b346-b37d8b3c6881", "sighting--077d7673-3062-4b86-8d8f-05ae973f0e14", "sighting--91a837e9-fc50-4625-a0e9-6a4b23cf1620", "sighting--386921fa-1123-4f32-bca6-4bf2b75f5987", "sighting--9a7d7432-803c-4205-ac55-4b8a43bd612e", "sighting--0333479c-9d99-4fcc-9bf2-d7fe34cd0c9d", "sighting--94a2405a-4ecc-4bee-9342-9ac38fc5e09d", "sighting--e689d476-0211-418b-a789-ed8620e86769", "sighting--b2cab6e3-6825-4873-b4fd-e16315fa4ff4", "sighting--c36abe45-c9a5-48bc-a9cc-9aa986c95440", "sighting--64b9d587-a940-499c-a3a8-6a7dd45c411f", "sighting--44cad91a-babf-4221-9176-49878b4a657d", "sighting--3ef85733-230e-47a3-9edf-0f544a9c632f", "sighting--7335e8ad-047d-423e-8b1f-45c1f55047b4", "sighting--a6b04ecd-89af-4667-8c41-20b5a4de94a7", "sighting--3ec5b8ab-dad7-4f44-a8b9-7e6631e91054", "sighting--2d12acff-be4c-48eb-92bb-de9e526eddf3", "sighting--d07e2e7d-eb68-43ad-9f35-7c576350e5d9", "sighting--94c34f85-8732-4dff-8b06-3bc8fecb4b03", "sighting--99982c74-a1fd-4c7f-8a5d-734049baf450", "sighting--ce944314-7c10-4fb6-932f-abae39dba64e", "sighting--27ed91c8-8971-4298-b225-cc6f27e61c59", "sighting--4828f182-0be8-4f58-895f-aaa0f6ef902a", "sighting--b5cecf67-e09f-41aa-aea1-dbcc1d36f550", "sighting--d795f60c-fa2f-4dcd-b76a-0e49e65d5a07", "sighting--076b4d5a-de8f-4d20-b460-adff99e02a55", "sighting--18914c5f-3704-466f-969f-95f0e3792045", "sighting--ab42a9ce-65aa-42fb-8da7-1ea015d2456b", "sighting--f1c60dac-55ce-4cf2-9dc7-641256559816", "sighting--61702123-8df1-4f18-8a9f-a3984e026286", "sighting--46f9db5a-e1f0-4406-bfbd-98faa5316e27", "sighting--2fda355f-2864-4f9a-9e66-a59d75c0b250", "sighting--91bde29e-f0c6-449d-be17-334fa4b08a5e", "sighting--f1184f4d-6a6f-4191-aed6-8954da8e95c3", "sighting--83e95a3a-2706-4d2e-83c3-fc3ae9a701f3", "sighting--2748d38a-f26e-4877-8ed9-58045d83dde5", "sighting--76718da2-6047-4185-847f-c96384c85e44", "sighting--cdbf9cff-87b3-4751-b5fc-8c2bd453dceb", "sighting--a00ee634-9b3a-49ec-bf2e-25e3e831cca4", "sighting--9b5da567-b064-4629-83fc-cedd209f8aff", "sighting--07d362bc-59ec-4997-b7a9-3d4864e5ace7", "sighting--36c32136-8e8f-4d82-8b4b-cf58e639028c", "sighting--a5099b35-d791-4aca-9524-f10c8906de27", "sighting--ff6c0766-5662-4555-8af1-390dce3f36a9", "sighting--12a9b383-71ff-45d0-8c01-55450c98cee8", "sighting--abacfa29-9891-473f-b571-60f717342c71", "sighting--56fa6f28-aa92-4d94-8356-94e8054332b1", "sighting--c49b35ca-eeeb-4395-890f-cf40e97a5372", "sighting--8f12a9b5-daf0-41fb-9d9c-3379ac79220a", "sighting--d141f81d-4970-4a37-87f5-57d61abd0771", "sighting--6b85fca0-7559-4954-a406-0de1bc78e03f", "sighting--3221329a-4da2-4599-9159-251bf2520bad", "sighting--f2bc1345-7b97-4bca-b0d3-1f0e431bf379", "sighting--82891538-36bb-4fe6-af68-1e44da8d6d7c", "sighting--bc8a6ac7-8c6f-4e13-92a1-9b48725f6b83", "sighting--16f62681-129a-4059-9d0f-88e46713be02", "sighting--e74e0681-6f2c-400d-9b32-87f6bfc9abeb", "sighting--f939c0f7-74b4-4884-8aff-a3638facf8c9", "sighting--a2d0853a-f289-4c09-bd49-de194fab15a5", "sighting--95360883-bc16-4a58-b9e2-a1ee9ebd9cd4", "sighting--9abab4a3-defd-4549-a624-22c819279c40", "sighting--18be23e2-3857-4609-98c7-e4fc27c4b902", "sighting--4cf93c61-06db-4382-bcf2-8a17ce98abba", "sighting--19483e4d-2835-4666-8cec-eb82f5983e6f", "sighting--d4557016-0e40-4cd2-a17f-3d2727e89660", "sighting--9ecf6707-6998-467c-b2f5-3a023ce8fadc", "sighting--02fc601f-9645-4dd3-ac4a-d32be7bc2882", "sighting--86e5e5e6-9390-4fe1-bcec-ec6e5ccc4c1b", "sighting--f615aaa2-1b51-4089-93a2-152431dbf57c", "sighting--d6de0779-83b5-436c-bc97-9160cdf48266", "sighting--72775d3c-ec90-4b08-94a3-211212047a10", "sighting--1ad7f8f5-e7e1-46f2-985d-cd13e463b3fd", "sighting--24fbd441-0254-4db4-9f9b-a35cc2c13a5a", "sighting--ea7b470c-3d27-426d-a84d-9eccf9da0355", "sighting--0c57c6b3-1654-4780-a681-150695ddeaf4", "sighting--80c226f7-3c5e-4fb6-9910-4ff7cdbf3bb3", "sighting--3583e491-3cd8-4ea0-b8f1-42949af86afb", "sighting--5642f8d1-6688-4a0b-b1ce-6cf67b6857de", "sighting--3faab0a9-c123-4793-b0f7-b94a1c9c56f1", "sighting--2482c4fd-b183-4ff4-8836-fb41f8b891ae", "sighting--ac0adac4-2569-4684-999f-7fc85e7af4da", "sighting--003e3e3b-ac9f-42e5-928b-a087ff5b3ccc", "sighting--0e6538e7-5a5e-438c-a9b3-323017d1a5ca", "sighting--6544216e-c5ab-46bb-9dfc-454fe3cced96", "sighting--69533357-ee8d-49ec-a13d-b5698ff1cbbe", "sighting--544d77de-18b6-4668-bbc3-8fd5478d7522", "sighting--cd14bf8e-f419-4daa-968b-c9c2e6e3ba26", "sighting--7e09a0e1-6294-460d-95a7-f515d1a098d6", "sighting--971dcffd-61cf-4d5a-a4f9-0670c4a7af7c", "sighting--e0fc44a9-478c-4793-98b9-56efdd2ebf26", "sighting--fa2c88c4-5afe-4473-9b04-a915af569e7c", "sighting--a0616c0b-faed-4032-b8c7-c37f9446e2a3", "sighting--6bf9d973-edf6-4991-8aec-97ecccf77176", "sighting--68a38327-873f-40b5-9fd1-3ee9ef3eb661", "sighting--53a97fe3-177e-4121-aa24-5d424f50cb3c", "sighting--8514d3f8-1b33-4f80-9f82-7c5b22f28cdd", "sighting--87c04416-56ac-4078-9417-887128c6d3b7", "sighting--2e7bf38c-e18d-4cf6-b38d-08090215469d", "sighting--3acff17d-5c2d-41d9-9f32-ccd8a956c6ff", "sighting--502a8c02-eb37-4c33-9e0f-ba7b8c94122d", "sighting--a0b08fbd-53a4-4f6a-85c9-f1b6625fb2ec", "sighting--0f0b151a-2f30-4506-82c9-b0218d2ba178", "sighting--e00b4fa1-a50c-429f-86ac-15144f769442", "sighting--9c403874-97b3-4b71-ab6a-ed6e5e7b9db4", "sighting--44cbdfbd-78a1-49f6-8c5d-366b65ef6b2f", "sighting--ca4e600f-7a5a-45ca-a8e2-61d069502a45", "sighting--a3aa627d-5f76-480b-8549-d643172868c6", "sighting--7d87ab23-607e-4438-a2d3-c9f058149a9a", "sighting--a5d5c952-d4bc-4df3-aa63-5ba62fa94cc5", "sighting--0dff0f2c-ffd9-4a92-b4b9-78e6d12dd4d0", "sighting--3a398bae-474f-4dbd-8236-d8c4dcea2d44", "sighting--b6cf9c7b-c03e-4b30-b838-09a948e7da13", "sighting--59222d42-018d-4c42-b120-903e230f884a", "sighting--b0b59143-2dde-4ef1-9dfa-984f5d1f5afa", "sighting--4b653cb5-9d09-486a-b362-66b4d3ff88c6", "sighting--a5f75269-328d-4667-b6c1-417c6b893c64", "sighting--e19428fb-22ec-4f99-95fd-4f7d46dc7568", "sighting--510ae520-9409-4997-a3a8-64969b1fa6f9", "sighting--be26338e-0f47-4845-b0ec-80fc1d2b4dac", "sighting--95f29f4f-b429-43f5-928e-2c0e5d78aac6", "sighting--893bf315-aca8-451c-a562-a2d9c2aa1baf", "sighting--c97d9dfe-b26b-4bb8-8576-b691eaecf5e6", "sighting--5f7aa4a1-a0d3-4415-bc0a-29c065f8e4c4", "sighting--fe8d4c73-772a-4d0c-96e8-1a1d5596833d", "sighting--ec6f36fc-d774-40f0-a711-0bd477dbf2d5", "sighting--ae816512-61c8-4374-83d8-a10672db3d32", "sighting--6bbe5924-ec0e-45df-80e3-ff0ef46766b3", "sighting--919e3a2c-bcba-468d-bb4c-745dc43dc4e7", "sighting--9ed7b8c0-e969-4522-b9a1-f975c5547edd", "sighting--6c77ec03-7049-47d9-a875-c37fe0f7cc40", "sighting--2c4724c8-66d9-40b5-9d4b-20325759e09e", "sighting--63386170-bc73-459f-98f8-143bdb36b60d", "sighting--1e42816f-7016-4346-b62b-a1533ad4e6be", "sighting--4f13fe67-dacd-4f77-9497-9a68aef10675", "sighting--e506b164-29f5-4527-a749-0fdb42a6cb9a", "sighting--41ce49b8-84ab-4282-b143-1e019aa25ea0", "sighting--d2808885-8f25-45c1-9c5b-e5f9c13b1dfe", "sighting--6aef04ca-13b7-42aa-8022-28374f94ddbd", "sighting--9583b404-e559-41a8-af49-d2cbb2217ace", "sighting--f46c50bd-671b-4ea8-80bd-d0e94a33c3f3", "sighting--88576b4f-5a01-4675-9ee4-494e562e8a93", "sighting--2464e4cc-c428-4292-8c56-6cd8cf7f0184", "sighting--68dc3d63-1de8-463a-9153-bda749859478", "sighting--19cd4652-a1fc-4bbd-9e76-2b81c7dad8f1", "sighting--5b34561f-ded6-4691-85d4-f036478b9bf5", "sighting--844c4346-9376-4e64-a44f-8781f7d72ac2", "sighting--78862a57-2820-4eb0-aa02-66fcf8eb5780", "sighting--3c311eba-66c6-4a1c-941c-12addbb8da53", "sighting--d1c430dc-0053-4cc6-82f2-3c862e20e17e", "sighting--45674bc2-24ca-41b7-97fa-07e60b1befd1", "sighting--a3c81e88-3e3f-489e-8bea-362a996d6f30", "sighting--8a14aca4-17e8-44c1-9da6-cc3e2d22a956", "sighting--fe66826a-4d96-443f-b599-0a878851bd2a", "sighting--9ddb86f5-f009-4aeb-bff5-faafa2547d3b", "sighting--db9e8663-b4ac-4953-a896-6de509843d6f", "sighting--fd6bda71-a833-4a90-bb57-5adb9faad710", "sighting--c09f7168-68bd-4842-9fa1-ea5265c94b3b", "sighting--401cea75-528c-49eb-85d8-c23299e41824", "sighting--69997d56-8436-4e96-ac2b-a54ea3d17ba0", "sighting--3fca9f3e-2254-4049-9b23-132a44a51a36", "sighting--aa8f98dc-d88f-4301-88cd-b2862046403b", "sighting--75c51fef-cccd-4d82-a19a-67e05a786436", "sighting--d4e61d0e-06a7-426f-b325-23822e702437", "sighting--d1fceb4c-93bb-48de-946d-85145b489ad7", "sighting--135e5125-5a03-40cf-92f0-55826b815d26", "sighting--641ea305-dfc1-4a8d-8d59-d17481415947", "sighting--126d65e6-a2c4-427b-a41f-bd181e4dfad1", "sighting--47e4c282-20ed-4b68-b289-0dce80ba936f", "sighting--de5904a3-d383-4597-8c4d-7801f0289da1", "sighting--a53bb79a-5c10-4221-aadb-442b720455e4", "sighting--3ca8bd02-db4a-40f4-9a0d-9047a1516737", "sighting--c7d50c30-931f-4c5a-9dc4-324d89312c73", "sighting--de157374-d5c5-40ff-aa8a-c23cea5ecaf5", "sighting--2a3b6b6d-2188-4fcb-886b-6cebbbe5a1b7", "sighting--41a83774-b770-4893-a213-731b96d8f5af", "sighting--9a1670eb-986e-4afd-af53-62e78df3ab06", "sighting--f6e038b6-bf42-4401-8fae-409be43927f2", "sighting--fe1b7d6e-0777-4c2a-b954-d68cc6995f62", "sighting--9ca810b5-5799-4046-87f0-24675cd8dece", "sighting--4cda57be-ecd1-4ef1-9ca9-728ac75e3d13", "sighting--72a6b390-c4d9-4eac-8189-850a4937cd45", "sighting--0596bf30-4c9f-47e0-9330-54d26fa073db", "sighting--92389ba4-2586-4203-b577-49e6c8f9fc8f", "sighting--f6d085ef-fb05-416b-9f2f-54addb4ae406", "sighting--97fff89f-fb97-4e6b-beb3-e9a6878cb0fb", "sighting--64778f53-f6f0-4987-884a-14b7690c4190", "sighting--aa20fa24-6d7b-4b73-97ca-629620668408", "sighting--f8182f8f-ab14-4299-8d18-e5ea97ac61b8", "sighting--5317b1e3-ee94-4b86-b4c0-5a0f2b3e0ca5", "sighting--813f0617-eb44-40d0-989e-5b40157fb194", "sighting--70283bc4-7a2d-44d9-8409-a31d6fe34a8d", "sighting--74daa154-98fd-47bf-bbc5-f44cae605110", "sighting--a327a0d8-b776-423e-8612-a8a888ecae5b", "sighting--150e9a91-db76-4031-8b4b-86440a0ee691", "sighting--69693256-40c9-4a36-8374-afbf5a0b3149", "sighting--172863cc-ad2d-4b2f-9b01-a4e57385270a", "sighting--a27039f5-70cc-4821-9109-fc276924e530", "sighting--f35f45ce-24e8-4d28-8f80-d26452370053", "sighting--74061e74-7c27-4701-af11-34a026ab283b", "sighting--12aa0670-940c-471e-a57f-02d82bf352eb", "sighting--21da5295-8ca4-46b9-8af3-01c4c2d632b8", "sighting--23f41677-51c1-4997-af5c-da59b6c9d885", "sighting--47ed9328-c11f-4e51-8da9-6648036f2f3b", "sighting--b96eaf69-9426-462d-9777-a98208be0b73", "sighting--2d3ce02c-d636-4af6-8ddd-e58a0d6cfa61", "sighting--baa5466a-9ae8-454a-8e1b-a72d24e14617", "sighting--5b92f5d9-30f9-4724-afa0-0235a45536aa", "sighting--b925107d-f8b9-4875-9c05-8671c3625b57", "sighting--e95d0e89-0058-40ae-9a9b-8108a8883f4f", "sighting--8bb9d830-b012-4ed2-a4b9-9020303fa277", "sighting--190b091a-2c4a-4bbb-8e8f-7e76b32c94e9", "sighting--631dc4a1-6f2d-4eee-aaf9-b017cb544d62", "sighting--aa4d8132-bf37-45f8-89c9-4e3e272cb305", "sighting--3c1f194f-aff3-46ed-9043-28498f425c79", "sighting--61ab81bf-29de-4dd4-add0-dd0f7da67408", "sighting--4d847ead-cd4b-47e9-9e26-9c4dcd77c5ec", "sighting--626e54bd-5265-4459-a629-ede711f866f6", "sighting--aa8bfdc8-21ca-470a-8916-99b9f79260f0", "sighting--ffd2cbec-5a65-4658-b4e3-2e41be7b6644", "sighting--99a54b75-a87e-4b89-8854-fa8413d75596", "sighting--9e00aa97-ce95-49ab-b82f-5de012cb626f", "sighting--39529445-61d2-4b34-80dc-adf4c0a7ecf7", "sighting--6a1e4152-0de7-4fe7-9568-370dc30a0860", "sighting--dfc3c58a-565b-414c-92f0-54d3951c722e", "sighting--5e54c48d-c25b-4b10-a73b-265b3acf1b72", "sighting--6985bf95-5801-4ff3-9e5a-297db3a121ee", "sighting--5731df36-d76a-4fd1-9a38-677012e3e819", "sighting--c718defd-af9b-4fb3-9860-726df0595c4b", "sighting--72984ae9-aaff-4b13-bd25-12d425e853be", "sighting--bbb107c9-83a1-4219-88a1-bf731ddcf277", "sighting--d0629eab-eace-40d2-ab2e-8cec2f2fcee5", "sighting--3d994f67-2391-401e-82a6-6bdbc089d7c3", "sighting--2b2282e1-cd74-44f2-a80d-e202b61e7e6c", "sighting--2282581d-c83e-4de9-898e-730418631512", "sighting--24013413-d573-4ff0-8d73-58d214787bec", "sighting--6f28f0d2-8c79-4535-a4ed-c39545cb3a17", "sighting--c7a5716c-c715-4f60-8203-d756b203c58b", "sighting--90e796b7-69a6-4560-8e54-9a0842d17d5f", "sighting--3715836f-c3a8-448a-b18a-5c88c25e0488", "sighting--f1d83a9a-68e3-4016-9836-5123dd744dfc", "sighting--1fef7cd4-8335-4271-9ca9-7b71e70645b9", "sighting--666e50b3-9112-4bef-b3ec-777556af1739", "sighting--a5a37521-5fc6-4112-a80f-2b9e7043cfd3", "sighting--be06b57b-12f3-40b1-8103-9aef662bd6a5", "sighting--0ea557dd-7b8a-4de7-8f45-ecb92a0e2cc7", "sighting--453bfa19-39be-4b97-8630-dcddb2fa380d", "sighting--2ce78b4d-937a-4205-b65f-dee0287a85b4", "sighting--e85fe670-7ef4-4870-b4b8-906b70847e0c", "sighting--79a074aa-cd52-481d-9624-2f0dccb43311", "sighting--47d38d48-5c2a-4c95-ac9e-77c2c8ce7927", "sighting--b1237de5-0e9a-4221-85a3-01f54330b99b", "sighting--2587b9ec-52ea-4b14-83cd-a8a6787bcf75", "sighting--696e44c6-98b5-4800-a7ae-42bceb699293", "sighting--50c466a0-7696-4713-9481-207dad884794", "sighting--a81cdf16-5e2e-4ad8-a6bb-5d22f98b39fe", "sighting--6f73df1d-ba0b-498d-bc5c-b2069bbe66cb", "sighting--9f43274e-d55e-40a7-8d97-dc1a00e09c30", "sighting--929ccec6-c351-4da0-b82d-d10035424876", "sighting--99f9112d-5ab6-4e3e-8204-4e37e7967eda", "sighting--82ecc30a-6856-4fc2-95de-6cd19b968ddc", "sighting--85aff26d-3e04-45f2-8d79-edf69be8fb34", "sighting--274080f0-bb01-4af2-acd1-c2a6984b4de9", "sighting--c0212567-ed2f-49c8-ae98-fd18e762eae5", "sighting--faf6552f-13fc-4419-b32f-bae9879c2497", "sighting--d5209966-d4d4-4d33-9c9c-4448863abfb2", "sighting--995a4154-1e2d-4966-bab0-ceb5c537551d", "sighting--ed7c3a56-bd50-43f7-a24f-e8c27a576f49", "sighting--7285209a-dc90-4110-a4dd-8cabc882308f", "sighting--0c174276-2af1-452f-9b3a-350601778e98", "sighting--3aad893f-88e1-483b-8eef-f323eacc221d", "sighting--286c5d23-f469-4b0a-878b-0ac3418b02fe", "sighting--0eff7708-f3ca-46ba-9705-cdc1e31907ff", "sighting--293bfdfc-2d19-42b4-b988-70b295b2d4b9", "sighting--17ba02d8-a69f-4fb1-9945-d3064a1e5658", "sighting--b0464f9b-a615-4a0b-8cd9-cf574dd1cb5f", "sighting--eee9ceed-05ff-49b1-97e9-040ca2432077", "sighting--74e09a46-e8b6-4139-af9b-654625884e8a", "sighting--411ed8b0-09e9-47c6-a209-159a9e6927fe", "sighting--88519451-9408-4ac0-af7d-0d758579854e", "sighting--3b4ec5ef-3410-4e1c-87b2-4a32f14646fc", "sighting--c9de02d8-a07e-4f57-b19c-4145b4ce70c4", "sighting--be79d4bc-f349-4f0e-9290-4a317aef0c9c", "sighting--edd52fd4-1c2d-4df7-b9f8-dd06a0786a34", "sighting--69e1ec1d-9243-4027-a505-29227409ef84", "sighting--5672c5b0-7ae4-4da0-a731-2f7d175c5032", "sighting--3e9e4f12-b609-46c6-85d5-8e2002d87507", "sighting--07c8ea2b-5def-4d7d-b2c2-be7aca7bdded", "sighting--547c04a6-f9db-48d7-88f6-0f9d1f38eb4d", "sighting--792c1ee4-cacd-4e78-a44d-eb2a2634256e", "sighting--24a39793-8327-4c2e-be2a-e4e639cdc1e6", "sighting--09ba9aeb-6b99-4064-a79b-f78c621794fc", "sighting--a18c439d-8624-480e-99b0-49e2e50abf39", "sighting--5354a79f-22f9-4f38-82e6-64d7a6140dea", "sighting--0389c429-4270-4c3c-a8e0-98ffb996c1ba", "sighting--b3fa411c-0d72-49ce-ae82-a5f57f9fd966", "sighting--64639d63-e662-4193-88a9-5e13e4b985d1", "sighting--353fce50-9e67-4cd4-aeef-47f862c618db", "sighting--477adf24-2e4e-4cf0-a621-4c5c1a30406a", "sighting--a9dec065-87de-49d6-a265-81ded22b5d24", "sighting--a8229d55-63d9-4ff9-9554-a7979383d0c8", "sighting--f97e618c-56d1-443b-bc29-88aa9eab23b7", "sighting--becf6356-bcb9-44d8-9dae-bf5ec58540cd", "sighting--0eca3e56-267c-420b-beb0-28d8eec3c811", "sighting--30935954-0d01-451f-8aab-7cc7df20f1d9", "sighting--78b9379f-82db-4ed0-811e-e0bd938d95a7", "sighting--363c7ea6-b527-460c-b65a-dcc8c8fb9790", "sighting--557f6a28-f9a1-437a-8cb3-9b8c4812ffe7", "sighting--401e654a-3d46-427b-b0fa-4f03c9a24b40", "sighting--f7db9cc0-3c2c-4b96-99fd-7e5cf8a699ec", "sighting--41805cec-b640-4951-8dd2-31120858b38a", "sighting--a17315df-a0c2-403e-9ad8-0c7c1a9e854f", "sighting--6fa653d8-6c76-47cc-925b-2424e040ee4c", "sighting--183c58b9-8900-4fd6-817f-619f76532d7e", "sighting--2d952e4b-6147-4842-b737-b5689101c5fd", "sighting--b8d1f900-42f9-4b27-84ee-1087d41b7044", "sighting--8e41d402-2fbd-45bb-88d1-653216a4f79a", "sighting--82c0f53d-61bf-49fc-8149-da5b9f4344e0", "sighting--822bd87d-2ed4-4fce-9054-fc9f0da34939", "sighting--3b0350e0-a0d5-419f-9347-d373ac8175a6", "sighting--c9ec3d6f-4451-466a-985a-e33d57351165", "sighting--59602734-3b17-43d9-9fb8-1751f356affb", "sighting--e588acf8-c130-464a-a16b-e8d2a292304c", "sighting--fb65d423-44b5-4497-8d44-05b35d82b174", "sighting--a3a2ccac-9a61-4ef6-9071-f4cdc53d75b5", "sighting--a9b4a64f-0565-4f57-8415-fc0928be1939", "sighting--46281a8d-affc-455a-8816-15d1879bf692", "sighting--4ad59d32-5679-41e0-a081-d84eaf62373e", "sighting--05e49926-685d-4a56-80e4-a92f17db5a42", "sighting--da4a1bf6-5003-43e5-8680-a16b9625b93a", "sighting--777d8405-a48f-4aea-87ed-a5225799f50b", "sighting--d7145a5c-e6f1-49c4-960d-fe17c626fcc6", "sighting--7c1b0960-831c-4b86-9bf8-4d33f909b6ac", "sighting--5092fd00-34fd-44c0-b84e-007d9bdb3790", "sighting--20c598a3-4c89-42e2-b67f-65ddf402f7cb", "sighting--2310499a-7b94-42a8-b41a-4eefcecad763", "sighting--46e503a7-eaca-44ba-bca8-f9c093830c70", "sighting--30b619a7-f5f6-4b46-9c88-93d4781b6e38", "sighting--5cf50dd1-ce47-45d5-bdc1-e22625c466ce", "sighting--caf9987c-2e27-485c-9698-3449477b58c8", "sighting--ca66e43d-d720-438e-9b6f-7d19d86ec264", "sighting--d06a182d-315a-4b1a-9feb-107feb4ee43a", "sighting--0d37f6df-bfb3-4180-9ab3-74c45baa3f37", "sighting--03d15574-67ee-436f-8504-ea3a40f830ca", "sighting--f1b6c510-9a80-49e6-a1a5-adcbb19918d3", "sighting--d216af13-71a5-4e40-bb07-c11b8a91eaea", "sighting--142e2933-25e5-4145-ae81-ebad023fee51", "sighting--628931dc-3a43-4c8a-b575-195644604d7f", "sighting--8f152a05-9527-44a7-bed6-311a2c0970a2", "sighting--045fe2cc-aae1-4899-834a-c21b01d170ea", "sighting--8e06efdb-1231-49a7-98fc-231cba6f05bc", "sighting--b3237e64-d92e-4a17-8ebc-172b26afa8b4", "sighting--3d540a6b-4dbc-461f-89b1-89fcbb6c51d1", "sighting--728850dc-7591-4666-a4ed-8a4ed15fb97e", "sighting--1b41d9dd-cbb6-42c1-a3d2-0f094789821f", "sighting--24985841-be72-497f-98c5-24e9479d18be", "sighting--56f6d8ad-23b4-4913-a7a7-aff0df3bf994", "sighting--1c638692-a8a0-46c2-aadf-ac68f14dec77", "sighting--fe05a0f2-45d2-4faf-970f-5aaa646ca975", "sighting--e08f8706-9443-473d-abf1-dfcf21500e06", "sighting--e0970656-401f-4309-8017-5c91be135225", "sighting--01639061-cd76-4f57-a636-bf03521c488c", "sighting--4bd74423-ea53-4a3c-a10c-39ed458c69ca", "sighting--8d4a812e-4f71-4763-848b-90f8bc3ca7a6", "sighting--6b235a3a-f53e-4cc1-9dfd-88c433245fec", "sighting--6f8ade87-4b9c-446e-812c-d285cf04c0c9", "sighting--6dd23484-ba31-4e7c-a59f-da3ff057bfcd", "sighting--3f0dd81c-2361-4602-bda4-f4346e0c1160", "sighting--42efd7b8-b31d-43b1-b2fc-fbe43ad3ea42", "sighting--0c19a202-30e8-4ecc-b691-82649f7fc4cb", "sighting--04b8b074-3fd2-4d6b-8f7c-292c9d0bf592", "sighting--33ee2590-21b0-450d-9ebf-d4b2733f6191", "sighting--4df7b3e5-096e-4ea4-8957-e40f5a8bc434", "sighting--5ba84d17-20f0-4798-bd15-31d623b69ea6", "sighting--50ff1e95-addc-412d-97d0-989ce7d2300f", "sighting--c3ceba80-ef11-4352-aefe-eda652ab8414", "sighting--3b3f4abe-e463-4d6e-a820-7711c1cfb4ea", "sighting--e2d438ef-c662-43a4-b164-639c4428558b", "sighting--f79b145a-87b6-44a2-956f-70f73295b40d", "sighting--13e4e22c-1422-49cb-814d-669b20114dde", "sighting--75264aa5-81e8-45b6-9439-c6bf868340fa", "sighting--5b8301d7-b7dd-4b03-b3e0-870219f58916", "sighting--64533998-ff60-4ec1-bfd0-3d7c26d6ac70", "sighting--072299a0-c610-4b8b-be1a-9dac322fc8ca", "sighting--73778c9d-424e-4b08-846b-8d63d6837080", "sighting--851737ed-1c26-4671-93a7-f6b86f064c5f", "sighting--7baf75fc-f8f1-446e-808c-a3e9124c8171", "sighting--e9fa55e6-e515-4be0-af57-0bd335a683f6", "sighting--dd545b1d-80c2-47ce-a96d-01d741a99e94", "sighting--4bc86d9a-3669-46a8-9d7e-03a79785e5f7", "sighting--b3ec88af-0537-42b3-89b3-0b222382b1fa", "sighting--901eaa67-0b8c-4d30-9042-91f1a045d8b8", "sighting--8acbe540-fcc3-4379-b4c6-d2f820bfa826", "sighting--1ecf3299-cbeb-4ad2-8a31-4b515057e62d", "sighting--0149d492-61a5-4ac1-b544-d92375d37106", "sighting--8907c063-42d6-4616-b7cb-3658b8fe4338", "sighting--58cc0d05-73da-4bfb-9f19-5afe49cca6ce", "sighting--ab209f45-4f35-42f0-a922-e578ee2ecf3b", "sighting--9f55feed-373d-4536-a645-f1d020b1cd9b", "sighting--1d7e0aee-2b32-4ac8-882c-317290320368", "sighting--93305448-10d0-474d-90b6-3ef1b698a4cf", "sighting--86e0727b-a06a-452b-af66-bff919c9124d", "sighting--3310eb48-8bb0-4f1e-81cd-fb071995be61", "sighting--e4288118-af8f-4d12-876f-1ae637244ea7", "sighting--32297f7a-887d-470c-a3d1-1cb57774024f", "sighting--87519271-ee64-4051-9feb-461b3b8b389d", "sighting--b777056c-15e7-4237-8d48-11a9d1a180e0", "sighting--184b363b-e283-4db3-914c-58f5e849907d", "sighting--7a00c058-1351-43ce-8390-5827dc9eb926", "sighting--b0f00ce9-fbd6-4ae9-bd08-6dbb05bfe53e", "sighting--d6d2418d-99d7-4d68-80d2-37323c25a497", "sighting--e8d95891-6539-4a54-85c8-380137dcc6bd", "sighting--0a0d8f18-3bda-46b9-a306-5e0b88cadc7a", "sighting--6e6c970c-55ea-427d-b1c3-822331739d8f", "sighting--25f8ce59-6263-4d09-b53c-610ea77ed079", "sighting--a6473e79-79dd-4346-94dd-9f54071b739b", "sighting--567aec8b-826f-4df7-afb8-023b0a8f983c", "sighting--1ff02c1f-0e98-4de2-bc70-488e0a40cdec", "sighting--9b9b7365-4584-44ec-854f-7334a0d891c2", "sighting--19d5f388-9b32-4ace-9704-bb0c2870968d", "sighting--c88fc6b8-66b3-4a67-8051-a3d6fa1dcfa1", "sighting--91865bf6-8e65-4d30-a16c-2887f65eb8ec", "sighting--d0a729da-b98c-4c49-a90f-ffd2e3a7ecab", "sighting--6350b798-68ce-4483-bb43-07e16e8fa979", "sighting--d3d6f7f5-8425-4911-a0b6-b0f2a8e137b0", "sighting--8fc21b9b-a451-44eb-9c86-fc7214b7853d", "sighting--1f02f32b-d7f0-40e6-b0de-71720ea10a5f", "sighting--693147c5-9596-49a1-be1d-83cd11c2227a", "sighting--1d2204a9-2862-410f-96da-10b2189884b3", "sighting--e35b86fe-ad5e-42a9-8daa-90ff70579130", "sighting--caf74665-5564-4d90-ae05-2895e8f0e9c2", "sighting--b7e80ff7-1d8a-4a70-b4c1-033efc600d5b", "sighting--f24e41a5-785a-4e10-853b-d568964dd1a3", "sighting--52201d4b-70de-4f21-958a-fafadd7d186f", "sighting--f4602185-0f1b-4dd9-918e-1196f16a39d9", "sighting--26c2733e-8701-4da4-92c6-e4904bb6ea51", "sighting--3444fc65-b110-49ac-89d4-702a0482247c", "sighting--b201d41d-4a40-477b-966f-b0bb8f452862", "sighting--6128bde9-60d5-458b-b825-38e397c1ac0d", "sighting--e1f1e190-c946-4299-b021-1b6600dd459e", "sighting--3d715108-5f92-444c-9210-d6bf0ee48e87", "sighting--051313bb-9fa2-4a21-b611-1ea017b383a3", "sighting--0b87a324-c256-43e2-8d5c-387dbc09c36d", "sighting--4a9c21ef-f011-49f3-b8a8-df0f930335f0", "sighting--c8a164b7-98cf-484a-ae38-0130ad51c58f", "sighting--22695e09-1006-4462-a2ce-0e2bacfa4103", "sighting--078e96a9-985f-4d98-8f91-c1999317c49d", "sighting--0bf44c17-4826-4ede-852d-6b6e4758a456", "sighting--c01adc47-4520-418b-ab46-b89db970b245", "sighting--3913218f-937f-4b6c-8415-fdeeef121273", "sighting--99e6853c-cf9b-40bd-a87c-407ccc8d82cf", "sighting--c1bad24a-55ea-4a8b-a6e4-73146aba4519", "sighting--0286ee18-bedf-479f-88a6-8269c897c852", "sighting--8dfbcd14-8af1-4d0a-8bc6-237f1d388783", "sighting--e75fbca7-ca02-47b0-9529-ad88d76f7080", "sighting--72a93c43-44e6-4256-a0a6-196100391d4f", "sighting--f27b18eb-f7fb-4e59-93c8-905407fe50a4", "sighting--69d4d2a0-1800-4935-aa7b-c8c9f0f53082", "sighting--cd1793e8-a4ee-4e74-b644-848674026e1e", "sighting--1a552cb7-3872-41ad-b904-e7a2f9185215", "sighting--403d80ea-a32a-452e-a690-4d6e770082f8", "sighting--3d9f8536-aa50-4b6b-b72f-2f06ddd375ea", "sighting--456d05d2-c45b-4882-855a-d2042d718c54", "sighting--7b3077d9-9ed5-4d89-99f6-320c3c90a15f", "sighting--8af65750-f03d-4d31-87ac-6c3d8b01e400", "sighting--5e1b2b90-f234-4b18-b8c5-6134f72a84fe", "sighting--9ce406c1-c945-4845-931a-2213f5cebcee", "sighting--9f100474-4f75-4f22-9496-931259476c9e", "sighting--876dc45a-d9b7-4839-b0b0-17049c3f3e54", "sighting--099c0420-1c01-49bb-9579-592fc9d0bbd1", "sighting--67b71330-b2c2-4ba3-b708-a6ced57c3757", "sighting--5799238e-c48c-4c8f-9c37-8ad974a27186", "sighting--429f0157-7e8d-4b2f-86a7-00bbf3a45130", "sighting--08a7c859-2ef0-434f-83d5-a1d6b7175477", "sighting--596ce804-6bad-4de5-9986-667718764037", "sighting--5e6b623b-9a51-4b5d-a851-3a250787a8d0", "sighting--73812e24-f60d-4442-b158-28741c27380e", "sighting--871322ef-86c8-4b7f-a4cd-90ab60f4a9d5", "sighting--26d8c532-67b2-4468-b7a5-a2ef8bc18b31", "sighting--caa7933b-7c8a-41ef-854f-12ea353a4548", "sighting--2bd7cf13-aac3-427a-92cf-b7b909acda4d", "sighting--08759afa-ba22-4e7f-96ee-dafcaf93096f", "sighting--c1425914-d834-4151-8074-651853947f71", "sighting--aae84aca-ce48-4b70-af8a-81d320003c72", "sighting--0486ce30-c875-4be9-b134-00e2c44c726e", "sighting--b4ae1e8b-d4b7-4c4f-b0a6-1a56f018af1a", "sighting--f44ba850-e3f4-458b-ae6c-5519ae50d976", "sighting--1e075b67-49cb-42c5-b15d-5d46b2896ae8", "sighting--a96324cc-190b-4e87-8ac8-39cfde41cd62", "sighting--2a175bd6-a940-41b2-b5b8-dd5154a595ba", "sighting--95bfabc2-3a90-412b-84c8-5f3344272562", "sighting--3a920ba9-8cd8-480f-afe4-843850fc5657", "sighting--5822c2b0-f9d7-4106-92c6-6c561d10e3a0", "sighting--0342c918-6d67-4557-9be5-7b1514553c7a", "sighting--220b5db3-0c15-4ca4-a28e-728d2321beb9", "sighting--b1892a07-4fcb-4eb9-b314-814ad1c048b0", "sighting--28a0296a-4536-4e08-8a23-97fc9fd1ae79", "sighting--99b114f8-38cb-470d-8041-25f0df154e13", "sighting--fef71451-53e6-431f-9f3f-634f8330de2f", "sighting--ac20ec2a-14aa-488a-a82c-cc8ef2f8e6a1", "sighting--400faeb5-e76f-4254-b2e9-9188f8ba8ede", "sighting--a7666ecb-9422-4ed4-ac10-37c55ff30158", "sighting--70e92d8f-2939-4c63-bdc7-406d6f501c3d", "sighting--c98ca472-f330-45f3-a0f3-94d9b87e5560", "sighting--b95954bb-57a6-45a3-90b4-f0bb418bfc17", "sighting--5b47f6d0-1ced-408e-bc3d-7bd2902e54da", "sighting--f4937bf2-d64b-43b6-8b27-e02641c74af0", "sighting--12759ed4-aff5-43b4-8319-f92481ac1e84", "sighting--f0de4c6a-6445-48a8-b413-cf267c8c908c", "sighting--282426f0-8ce8-45be-a90c-670e4debfbcd", "sighting--e18e3aa4-03d1-47a3-9262-614bee057319", "sighting--bb291f56-8da4-4340-a4c9-1b6a7ddd237d", "sighting--07d48ab5-de8b-4c48-8b30-25b1883ed95b", "sighting--74455d28-0097-4766-bf2d-c4ea1b3891c0", "sighting--1224890b-bd01-41c0-b180-b77b67061bcb", "sighting--80129818-4184-48b5-af90-63dfe5f642bf", "sighting--f570c0b6-1aef-4389-87e5-47bf13baa5db", "sighting--e0e10a44-7a5f-4174-a906-080a7fda22dc", "sighting--7a022b7b-5ddc-452c-a640-cc6fe0443b50", "sighting--85cbe9e2-dc41-4bc4-ad1e-dd63ae66237e", "sighting--6e4d44e8-a76f-4915-bea8-c652624e3350", "sighting--d603f85c-1bfc-4553-b140-7bd78537686c", "sighting--26880ad6-7aa5-4475-b4d3-1f88cced1bb9", "sighting--9fce2a47-3cb7-45e8-8e8c-92b0b6bacf00", "sighting--e45e436f-c445-42d6-8809-36c0b8da6ce2", "sighting--0bdcd7fe-c56f-48f2-a387-52046b9fbd6b", "sighting--a564e9c4-ca27-49e9-9cbc-77277e4fdb20", "sighting--ed0f85cd-8890-4f23-ab83-eaba97f5333e", "sighting--3c9f88b2-79a7-4c21-9331-e38676abe0ee", "sighting--338b4c01-4524-4654-a592-806ed1bd02e6", "sighting--78908edb-ba1d-48c1-93e1-7324127121bb", "sighting--e2a88792-be1e-45f0-a60c-72317d046fc8", "sighting--43e47288-fdb4-4c3e-9faf-edaa4b6eeaac", "sighting--f67dd7a6-318c-443f-9ef8-6cf0a6750683", "sighting--bcf3d0a0-9818-4a61-baaf-90dda6f5113e", "sighting--d8841912-45c8-437d-9705-0abf45ca88c7", "sighting--ffb0f769-d388-48ae-821d-a24f48833823", "sighting--4f82a1a0-0375-4800-8279-4037f27db0bf", "sighting--c4d0ebcb-d300-42d1-80e1-2d54abe584b8", "sighting--54de1aee-c782-4e5d-be7b-ec5c9022da2a", "sighting--3c1fc788-07ad-4078-a9f9-0e84ba6ecf7c", "sighting--51e67666-df4d-400b-b1ae-e5224a8230d1", "sighting--bfdf809e-776b-4729-b144-2807b4586a3f", "sighting--86ae274f-92b4-47f0-a706-637cc1429ad0", "sighting--f4165f24-2a19-42aa-9fe2-5402cc01e7be", "sighting--77b108f0-3544-4e5b-91dc-58a01458aef2", "sighting--62c8e2de-f9e3-4049-8fc2-2c0360939277", "sighting--36a9e099-29ab-4985-8f69-4d933402c113", "sighting--6431dd34-8d18-434d-9fb4-ae7c9cbce596", "sighting--78c0cd85-3b9a-43d1-97c0-38c8895bd66a", "sighting--574e3537-6b06-4133-b8cb-cd5469a5844f", "sighting--69b72440-caa7-40aa-b802-aa9d8a32fe5f", "sighting--701e7811-cce9-4bd7-8519-a10d84243f1e", "sighting--14fea11e-b4cc-400f-a538-b48e5d072515", "sighting--1f4da7eb-5a52-4b98-a16b-09da6076a948", "sighting--4d61dc7e-99f8-42a5-92c5-e10ef30e10de", "sighting--fb64546e-74f7-4d7d-9228-29a8db02840f", "sighting--edda6ee9-0cfb-4bbd-b8b0-b98b1937dcc7", "sighting--097dee51-bf26-488e-9434-9e3a47d7987c", "sighting--c01c4616-14f2-4ecf-bec5-723c15b85b0e", "sighting--0578bab1-c342-4b44-bdce-a1606c684c07", "sighting--40d5bef1-7614-40fb-843d-6d208f9fce50", "sighting--3e7c2d3c-0207-4bda-b5d1-425ee6ca906e", "sighting--139823b0-1a68-4070-9cd6-92c52ceeb3b5", "sighting--46fb3b5d-8f1b-4625-9208-558c3062842d", "sighting--e02402a0-c137-4c2a-8188-80292495fd16", "sighting--e857e1c4-969b-4b8c-8e15-fa6048fafae3", "sighting--b383f46f-77e4-439e-85b9-fb8e81227900", "sighting--b3318542-75cc-466e-a3ab-4072905d013c", "sighting--c7ba8f5d-c469-43b6-b090-84e6d4ed0c5d", "sighting--b1e37ed8-be83-43c2-9b20-9980d01be972", "sighting--5e939d36-f934-4174-be7a-662925ecb847", "sighting--0c9c3d50-c396-4be6-a392-561a9d9cf0b4", "sighting--5358b3cb-410b-43fc-be27-267c4a3be301", "sighting--1af6e2e7-af92-4ed5-a159-fa72376ce77e", "sighting--9b99027d-4e6a-48a9-b1df-644e8d113762", "sighting--e71597ab-fde4-4bae-b2eb-57335a4ccece", "sighting--d339ef19-f839-46cc-bc8e-df36e635b86c", "sighting--8f9ae59e-f5ca-4c0f-813d-84a2200144e2", "sighting--8c3dc9c9-f965-4320-9365-bd6494ce5a68", "sighting--ef7977af-d5d0-41e2-9ed3-6e034bb632b2", "sighting--dd21375e-3cee-46a8-a1cf-66f3c3a72070", "sighting--40658129-8caf-4ecb-a116-749d9cb6b182", "sighting--bff7c5f4-9b8f-4665-a88d-e0e1e5083fea", "sighting--db13db74-1814-4106-94dc-bb05dbb976ea", "sighting--964985c1-6487-4511-a28b-3f00126a9a34", "sighting--7afbddf6-902c-45ac-a323-18534ffc6d3c", "sighting--944f8caf-5e00-49e6-ad9b-4bb5e8b1ec97", "sighting--00264f6d-684b-4956-9b41-6b2d53aa8e9c", "sighting--2c3ef945-7eed-4241-aedb-7a348398493d", "sighting--db097c29-5f7f-40da-aae7-ab7ab35bde4d", "sighting--885792cc-4773-492e-a587-dabc5248edaa", "sighting--53547ff5-37c9-4405-8a42-9acf3ac290f8", "sighting--8b8978db-f0d4-4e7f-b0c3-61f215e26be5", "sighting--09eff772-72fe-46e7-91c1-dd9748da9c27", "sighting--492fab21-68aa-4d92-8900-e879a16c7efe", "sighting--4a6117e9-2bef-4080-8b5c-b52789cfcc0f", "sighting--be5c9c44-910b-4f57-be09-fbb83ec7cd3f", "sighting--565a36d0-0a11-48d5-bd30-923d4e23f8ed", "sighting--f047c2a7-f56d-4606-a810-9ba1408a16ff", "sighting--2999ace4-7dff-4eb1-b8eb-626e3c8d4cfb", "sighting--141116c9-bfa6-4c16-be30-4594d2f2e303", "sighting--b75afa0c-5eec-4d43-b871-d10e1a56ce85", "sighting--a7479747-6a7d-4bd9-92a3-3df92b3a4d76", "sighting--26e073d8-64ad-4f41-b42f-ea111727f3b0", "sighting--038feb52-5215-4e28-bc6a-de608b80f6a0", "sighting--646812e2-6ecd-4aa8-89f4-150f012baad2", "sighting--447018a3-c576-4244-a1b8-c74e9227f203", "sighting--4363cdc2-a991-4877-9b72-1047c47a1507", "sighting--ca1c3ba3-aea1-4b57-9aaa-9cdf8a7a48fb", "sighting--3ea500c7-2b75-46ea-980a-84e3adb1e826", "sighting--f7aa2453-d448-4a72-b17a-9b75d757b0b3", "sighting--2dc3c5c2-68f2-469c-af28-01f9737a1a92", "sighting--4bb984e7-43e4-419f-8dbc-69c84b81333d", "sighting--42bff1e7-f3fe-4b62-b8b4-b38ec1e76865", "sighting--6b1a7391-c94b-40c4-bc98-64b9d2729b7d", "sighting--642c4366-e819-4692-8e74-eb381d743884", "sighting--e3dba224-7c96-4177-969e-2ffc326079dd", "sighting--06e70d35-c6cc-4fc9-8035-e05489383881", "sighting--d31386aa-10a5-4412-a35e-c57f6ab0cf96", "sighting--b82a9d90-cb10-4d31-b055-1787747c3d53", "sighting--9ef523cf-f4d8-48d5-b2d8-0e740fc12851", "sighting--4ecbda54-2dc3-40db-b138-d562ec9fb695", "sighting--697d179b-0452-41ff-9f24-fd2a72984473", "sighting--e30ac998-9cb5-4297-8bf1-ef7b7805dbde", "sighting--842cffc7-61e6-4e9e-b8bf-43190fc7e5c7", "sighting--b1fdbf14-8b20-4ce6-9502-8dfcf94c3ebd", "sighting--25df8066-fa5b-437e-8e7d-f5180a8f2dea", "sighting--259a96af-2943-42d5-b0f0-04611fd07334", "sighting--a0520a23-d550-4e4f-9c98-d004b5549297", "sighting--5f8310c1-2cc0-4023-ada1-b764cfe66468", "sighting--598c82a7-341f-48b3-b0ae-62756e657f3a", "sighting--86fb976d-1e09-4e80-afb0-b293f454cbc4", "sighting--e6bc5a83-48c4-427a-9249-6ae612e1a56a", "sighting--ff7aa576-aabc-44eb-ba94-9f23a3688ab5", "sighting--54d2ebdb-dae9-49c3-af3b-1abcf66a043b", "sighting--b5d501b5-beb9-45a0-917e-f42ec81fa6cd", "sighting--a5106872-0339-4a3a-be22-a6e3de43c6ff", "sighting--739f84b4-9593-4489-9cd1-b7f62455ab88", "sighting--68ecb574-e367-4f5b-889d-79a4efb51a81", "sighting--d6196fb9-2724-40d4-93d6-115b44e5c945", "sighting--81981854-268e-4880-ae2b-55466afbb1d8", "sighting--f9042e82-35bd-48e1-b1d3-0363db5a1243", "sighting--93bd8b03-4cf9-4d28-93d2-346e95486f6d", "sighting--cb84f5f3-b526-4bd9-97d2-36025ad415cd", "sighting--2c24a80e-13af-4521-b824-1f94783ca014", "sighting--b57b7cd7-b11a-49d9-bb4f-89ba532b1971", "sighting--6680ea58-db3c-4064-966d-ae15ac57ba6b", "sighting--6377c895-88b3-4332-92bf-b0e6faa869b6", "sighting--2016a129-bc44-484a-b1d4-6eab419ec503", "sighting--e1d0d1a6-3a98-42fe-91cc-89bdeb6b52ca", "sighting--d546d2b5-ff7e-42bb-9a98-bb251c9e1d81", "sighting--b7e046a4-d6a4-4a11-9520-cfbe96cc84ac", "sighting--e8796c98-b3bc-42f0-82e1-1c89e9c6549f", "sighting--406fae40-576f-4150-bbe8-14706a060726", "sighting--afd9e886-d14b-4945-928a-6265d9f886f6", "sighting--8941b87d-4f12-4975-bc90-9e44067eff82", "sighting--53e0f455-53eb-40be-98d7-78b5909f7f3f", "sighting--968147ef-12f6-4698-a3ba-f7541f92810f", "sighting--51f9e1b1-57d6-4ba5-8389-7b19816c9089", "sighting--36f9c730-0a90-4313-9760-8e63f98f1f6a", "sighting--9af483f1-633f-40d9-8af8-dbab988d37e5", "sighting--20cf075f-5532-4918-bcbd-0d90a70bfc75", "sighting--df51b751-fb2b-45e1-bee0-5c81c1430b43", "sighting--0e4b48c0-e18a-42b7-aa8d-002fb0c6ba6c", "sighting--cc454855-5daf-4ce3-a299-e8f4ce756ab9", "sighting--ce72b1fb-28fb-4140-a49f-631837f36480", "sighting--104567c7-2a0a-4b24-b4c3-85d4f37a1a99", "sighting--52cc1022-2685-449a-9871-3c0ef1bf73d3", "sighting--8dbfa60b-950f-45c8-bd67-ac93bf16e161", "sighting--16275d5b-2512-4a5f-b1f9-ae2989881713", "sighting--ad29080b-1d3c-4b24-9c28-32abbe92b3d7", "sighting--d45067d8-45ff-4279-8987-93d20d503f1e", "sighting--e6281bdb-1dd6-4f2d-a315-46bea20e9511", "sighting--b3b749ac-4a12-462a-8f3f-0c46be90c6fd", "sighting--0172b676-4c8a-4b4e-ad78-cf50fe9034c0", "sighting--06190beb-8f43-4aa4-bfb2-d753c0e642cc", "sighting--6fa786b1-cbdb-42d7-9e25-48a88a380798", "sighting--be8213ca-6f1e-4ee8-a47b-47f08b60dad6", "sighting--40e6160a-8b05-4671-bdd9-fd3242ae94cb", "sighting--fdfd115e-2464-4b14-9e26-eb8ade32c122", "sighting--61641595-2b82-472c-9b41-ac27746dbe1b", "sighting--1ae297ac-912a-4f89-b97f-3e2d0e65fed1", "sighting--9d79e860-87bf-4067-a113-69f42159de7e", "sighting--3b84319a-cdb7-4ed0-b4d3-5bd0e3fe8bf5", "sighting--f9a63509-88ff-4af9-84b2-cc6cb5f4fddd", "sighting--3d6d0a64-49ea-4a13-984f-541206eb45c4", "sighting--f94e6e2e-5488-42ff-8a01-c0c945ab7f15", "sighting--319fdb9c-4d90-49e0-913e-cddaa98b6f62", "sighting--ae9dc819-8716-4d0c-9eac-fd8377a52f70", "sighting--595e62de-425c-4fc1-984b-5d122bae6d67", "sighting--729ef884-c832-4547-80fc-61ec49263ad2", "sighting--959713f9-331b-4077-b4af-0ce34d4a1271", "sighting--019fb692-1303-4467-8e3a-67d2580518d3", "sighting--5bc0cba6-0d0d-4214-a89c-1655f5acc103", "sighting--371cb4c6-9952-4d08-a0a6-483eefcf1d2b", "sighting--aaf49798-8b9b-4262-a97d-261daf384514", "sighting--5f0aaddd-7624-4fdf-be6f-98347b02be1a", "sighting--78afece1-96dd-409d-9e7f-10eecc15dbd1", "sighting--e4399662-3a2e-4c3c-a26e-8409c1dbb84a", "sighting--defe8f19-4411-4056-9ace-08ad8276208d", "sighting--4bf6184e-2be4-42e1-b24f-542aa830afe5", "sighting--8a645818-4f01-4b5f-aa74-eabe37ed1c1c", "sighting--19283534-a9b4-4637-8e63-fbd631d7db79", "sighting--eb43f3d6-1592-435c-bef6-3f7c24a536ea", "sighting--954c10b5-10b7-462b-a5ba-947cb2bcef84", "sighting--00f081f4-2721-4780-b4c5-99ee88ed1bb8", "sighting--e63b8c0b-dd7d-439e-822d-1c1870713f5e", "sighting--9ed1726f-ab04-4442-a865-c318c1bc9fd1", "sighting--b983406f-7634-453e-9b31-29f9f34a1056", "sighting--a050577c-e904-4fa4-bcea-e62dabe2f58d", "sighting--4aaa508e-880a-471b-8bd8-f0338917be78", "sighting--a7ea1c53-b0c3-473c-91cf-248cf045ed0d", "sighting--72951f37-1b39-4483-b36e-db3e2802e976", "sighting--a687534a-8541-41c4-b451-d11eb63f8919", "sighting--282794ea-5be0-4c10-906b-ece5cf1f1e59", "sighting--36baffa4-c1eb-4d9c-8410-6b68d1597ae2", "sighting--b111984a-95a5-4f18-9958-f8f2254fe547", "sighting--7634455c-4bc6-498e-92df-48c43f4beea5", "sighting--83984be7-52f0-4bee-befc-9d3a31378d73", "sighting--6a823a2c-0870-44d1-9489-cd85cca66378", "sighting--3ef09e4e-ed3b-4dfb-89d3-f1a2b7b6cd22", "sighting--9b7f9658-e6d5-4f5b-9ca8-d0e6a6f965ba", "sighting--4b52c270-6cda-4e8f-ae0f-e84e7a653298", "sighting--9bb8c828-f035-415b-96b6-26588a83faa8", "sighting--d3861f48-d0bf-4323-b194-5bbf986a12e4", "sighting--1166455b-4e9a-40ff-b4da-0e98527f0a7f", "sighting--b30aab70-2d74-4e22-849c-b7aa7a93d019", "sighting--b9a1b358-62aa-4d8a-8c9b-83d37b32b7f4", "sighting--7334b33d-e99d-4e07-aa28-f1ea76f74b67", "sighting--8860e316-cf08-4f32-b7db-a7d3337daa06", "sighting--80d76b93-403f-4af4-b7bf-a176eb2117d8", "sighting--09496135-1183-49cd-acd5-d1072e11c074", "sighting--a77a4769-57ff-4677-97bc-c55065f2a696", "sighting--30352ad2-1b98-4044-888d-9f770a4b3a46", "sighting--736c7c13-99aa-416e-9174-614f077c3946", "sighting--fe45762c-895c-48de-88aa-743cd6b96767", "sighting--c886fafa-7b5f-4f65-af4f-5cc6462f7f2d", "sighting--80c958aa-2ccc-4568-9ae1-0ea10309bb72", "sighting--560d5209-61d7-4ccd-9c68-b9ccf51f319a", "sighting--68b48cfb-f7c2-4f90-b8b6-ccb39c60cb80", "sighting--923c20c9-6b4e-485f-9278-12f005c3cd14", "sighting--d29ed0a9-b236-4122-a6ad-23df0e7cb828", "sighting--9a080850-7cf9-4ea7-b757-56bf481dcafd", "sighting--71bfcb43-bafc-402a-b25e-b23538c42c89", "sighting--2ca5f052-a184-48bd-86a3-36bd86046a93", "sighting--8edcd139-4d6f-425e-9a68-9ee9706b3114", "sighting--647d8278-0c69-4f0b-afbf-4e5e4c448b65", "sighting--28eacc43-43a5-4bdd-bb0c-59af51cb996c", "sighting--081b7e26-3338-49d3-b5ea-03a2aacd9eea", "sighting--652c5a73-d9cc-4c02-b0fb-970823e4d238", "sighting--8b44b08e-05de-46a2-81a2-4afaf778cfa3", "sighting--089a0699-c548-4993-96e7-dd4dcbf45b5c", "sighting--3b9c762e-67d7-42fb-8434-ab45cdcff6e3", "sighting--28f08b12-1ac3-4af5-adec-af89e0dce37e", "sighting--dac20d10-41c9-4c02-b608-8c2285eb1be9", "sighting--eee56f3c-06ef-4515-8263-4fe35de29517", "sighting--0eb97f27-92df-46f4-bee0-94df89e32608", "sighting--1fe22e59-ff7d-4f26-b73a-002e50c82b87", "sighting--d393e42f-5486-4d5f-8d9c-47daa5e4d77c", "sighting--74ed72d0-f39a-40eb-8e81-a5cc34f596ff", "sighting--17091f26-bd84-42f4-b024-baaf2df89ea0", "sighting--d70d4f16-889a-4ddc-9108-a626390e2326", "sighting--6c69012e-d270-463e-afff-d5015855984f", "sighting--5851714c-af96-435f-9e5a-c666fa90a525", "sighting--47eeee63-49d7-4d57-99b3-1d78bd0f6f2f", "sighting--96da1888-c2c1-46fb-969c-37fe35b279c2", "sighting--b631323e-f11a-40f9-ad0d-5b1e8573ffbd", "sighting--5c3cf8b3-965f-4deb-a6e6-86a7a4a83d41", "sighting--fbded623-b6db-48bf-b1f4-7e4ff36fa817", "sighting--3b7c23ee-c2a2-40e1-ba21-bc9a2dbf7659", "sighting--e3d03bfe-d4a8-4515-b8ff-199b63336a35", "sighting--3ee4dbde-4e5f-4254-b7db-be1fb054d329", "sighting--ac45241e-7ef4-4863-b35a-7ab2e2b38693", "sighting--21ec7bdf-72ed-4c55-a4b8-83ccafd6f9f8", "sighting--56dfc468-8935-4385-ab96-bbd8ee5a1f3b", "sighting--0d8f537f-f9ac-4636-be2d-e75f67c2c2ba", "sighting--4b03ea88-d5e6-4654-86ca-4923e8b81272", "sighting--4b61c688-4e7b-4a5e-9619-b4d374ae2e97", "sighting--32c11bd0-9be9-4583-991f-c5560fdf30a6", "sighting--4ab02375-96be-476d-9553-5f6e02dc509b", "sighting--8685e57b-2190-471e-b838-3322e05a8d47", "sighting--efcfce83-9f59-4c7c-b973-8dbb73df7553", "sighting--bf79c7c7-57a2-465a-b7c4-bff4ac0bdab7", "sighting--662d8f9b-49f6-44ae-9fcd-dd3bf8cfb6eb", "sighting--c13233e2-60fb-413f-986c-5e1cfe9982b6", "sighting--94b26dbf-730c-4ebf-a759-ee9e96324da9", "sighting--c4e6d321-51bb-4541-9868-aa3a485454dd", "sighting--abe0cf1e-3291-4540-a33f-ff40e7377041", "sighting--ce14b9b9-412e-4e37-9578-3d79344de512", "sighting--fc96e38e-17dc-47ad-8ed5-5ff81f2b5152", "sighting--d39d8ba1-6c11-4b2d-9966-82889b7e5d25", "sighting--377234f3-299d-4233-bd5e-ab8795bee03e", "sighting--618c2459-71ac-45ad-aa8f-e86bc818e587", "sighting--c556776c-fcf8-4308-b63f-41fbd1cdaeac", "sighting--c1e62219-9339-4cfa-9eff-19abc700380b", "sighting--0f5a97ad-c862-4410-872f-32b550e06a0d", "sighting--21d25cd6-9da8-4218-8f9b-979ee6ea6b73", "sighting--a72ffaf0-a240-4317-b6d2-a83876531f56", "sighting--a04bfb59-2210-4ccb-9708-e26725c7b4f8", "sighting--b15466f3-7606-4b53-87db-0ad1f52c03fc", "sighting--e26785c7-f2a8-4989-a7a3-4779c53f34e4", "sighting--33bbb95c-334c-4f9d-bf66-22d594236981", "sighting--2463fd24-e761-49b3-baf7-e1794be2c00d", "sighting--10f4ced8-dc6a-46f1-91cb-159633c4368f", "sighting--845617c1-8234-44a8-938e-34f03d1f83a6", "sighting--acaad3ad-0e45-4ba9-849a-a3af84a0faac", "sighting--80b4d19c-4bf7-44d1-a8c6-3bb4fc3c75d3", "sighting--40eff51c-71c8-4dec-bd9c-e3b8477226a6", "sighting--a05eb846-591e-4a5c-93e8-161c11a77e1c", "sighting--6b781474-80a7-413a-90c4-45a268ebae94", "sighting--e3d183b5-d135-4e89-91fc-e297f5105e59", "sighting--594abd8d-49db-4f6d-bcc1-dee9272052c8", "sighting--27b0f9f4-106f-442f-b1ff-7ca784331975", "sighting--ef0f04f8-3459-4364-a353-43a9ff42da16", "sighting--447593b1-4c64-4a89-a170-38dff379279b", "sighting--3cd759e8-26e1-474f-b25e-86289424451b", "sighting--7d5ec762-0ee8-4991-84b9-490d8e967144", "sighting--79fa39a3-a911-41dc-a4a7-2f463e0d7826", "sighting--12177e60-dd99-4f21-aae4-d29fbdbe6d20", "sighting--664dfe86-ec0f-47f3-880f-854a2815b234", "sighting--56438323-a3f7-4def-b6a7-e66f845a1adf", "sighting--b4af376d-de10-4d52-9517-cb4ce6816adf", "sighting--03014b27-8460-49cf-a393-19e40ebe83c9", "sighting--097f85ab-476b-40a8-b6d9-6741b86a68f7", "sighting--fd31881d-bdda-468a-948f-0ec95a8f1dda", "sighting--78b035f1-d255-4e80-881a-ee9b56c86a20", "sighting--faa524c3-92dc-49e1-a517-46a1abde0b50", "sighting--81b981f6-c705-411e-b071-cd0893c770db", "sighting--fb66d4b4-0853-4893-8d33-8151fd3d41d7", "sighting--95cc5ef2-6332-4fb2-a1b0-17ff52684d12", "sighting--6c4f0bb1-2a2a-4531-8971-147cb5390e09", "sighting--4d7fe79f-3fb5-487a-87c2-717b369c30c3", "sighting--866a8c41-59fd-481c-be5a-34d964d7cbfb", "sighting--bdf5ee71-b4d6-4d41-b76a-2f3dfffc3aac", "sighting--63c69a45-3c72-4506-99a2-8f24ba7dc082", "sighting--6ada8e68-7058-4417-a386-f83dc6955561", "sighting--45a23b76-34fe-4aa2-9128-a4a112dc087e", "sighting--30c35796-2831-4c13-87d9-10e26ca6c9aa", "sighting--f699b12f-7c42-4a68-a8f3-7442ce495b25", "sighting--7c786e76-fe67-4246-bd43-33e8e560104e", "sighting--9009e700-a070-4822-963e-2f1e4b0be2ca", "sighting--aa5520ad-2616-42c5-af3b-0691ef9498ba", "sighting--b2fc0bda-4714-4539-a3bd-6e67359c4cd6", "sighting--4a3caa0c-90d8-4c4d-8fbe-b431972e65ea", "sighting--76feb237-aa02-4cb1-9168-e93e3ac4c6fb", "sighting--0aa24b97-8abb-4411-b55f-ca26352c2686", "sighting--c2977eaf-de41-4be2-bac5-d202a3e2a28d", "sighting--9e9857a8-e6c0-41d8-bf47-34b6e507215c", "sighting--547ae882-e2ab-40fb-b3b6-42dd89aa1952", "sighting--cc072b9c-ab09-483e-84c4-f14e166eed24", "sighting--50292fef-6b66-47fb-939d-b5871ae18d1d", "sighting--c719bda8-e51e-421e-a7c1-9f867004c0c6", "sighting--cf5bc69f-5f56-4235-a875-66d0d73c4558", "sighting--61edda0b-b35b-4850-9a33-5c5c22f2932f", "sighting--3cabf2f4-ac39-417c-bb06-7df711abbdbc", "sighting--da7bd4aa-9164-4504-b932-ed86391f5366", "sighting--a847b979-a697-4203-a1f0-72727373351d", "sighting--5f0d0f89-b0f7-4f63-891e-bcecc9c5cfa6", "sighting--c80ed030-4ee2-4200-8982-36cce98823b2", "sighting--0eb79257-91f2-4a51-bf66-8d56231ee259", "sighting--1456e8f5-6414-40db-9d22-e9ba2c0d8551", "sighting--9eda87bd-36a5-469a-8875-b4b5ecabb24d", "sighting--b088c645-bccf-42c4-a275-8046c841fea6", "sighting--16fceefb-1ca3-4aeb-a4b6-677548cbfc88", "sighting--9e0e4072-8ec3-40e4-907a-4be6d1d96647", "sighting--aef42453-dc0f-4a7d-8149-0c8acf4b1336", "sighting--6d177b11-817c-49ca-97da-fb0e29cb3c34", "sighting--64666819-1e75-4916-aa3b-e70791912a2d", "sighting--1b87ab94-a75a-412b-9d8f-59616535f017", "sighting--e1426b6f-d6ac-41c1-8841-f1667c713aac", "sighting--44ccbe2f-656e-46b5-b0d4-0e6c0122a02d", "sighting--1f51b2a2-6f87-4250-9468-fe5d7cadba98", "sighting--3e5af6d6-be33-45f1-af27-28051911f6e1", "sighting--802714fe-ccd3-488a-a956-0498a1d66003", "sighting--1ff47cdb-6d88-4e4e-9b8e-68040da466c2", "sighting--2baadd1c-f175-463e-8d11-a5e5ee8beadf", "sighting--accc50ed-ceaf-4419-9da6-7db14e26a422", "sighting--1d60565d-51b6-4da3-80ea-108b1cd86a92", "sighting--b4b20164-823d-4dd2-96fe-20d3ddbd4db8", "sighting--5a7a4c7a-8a65-41ff-b9aa-ad7f494d2460", "sighting--d910172d-2feb-45f1-bc18-f437db6d3571", "sighting--15b24d98-97b8-4c42-8ea4-cfe1f75e1d58", "sighting--d0bd196d-42c4-4e71-95fb-95c864840ef6", "sighting--5e9fb015-bab0-4176-919a-a46045397ca6", "sighting--2bf29531-6da8-432d-be7f-7f0549f961f9", "sighting--abfd91b8-fa74-434b-ad01-4bf8abaab94a", "sighting--ada22631-be81-42cc-bd22-8621ce8a3236", "sighting--8e8232f1-df72-493e-aee6-408fc8dae976", "sighting--00e16140-8393-4719-87c7-9315819912c3", "sighting--f76c1126-1b79-4eb0-b0ac-282c93c2e548", "sighting--ef6c45d3-8280-407f-8cba-b42f36ab60c9", "sighting--f6e54c85-0ec2-403f-9ad7-c256833a9a52", "sighting--fc8b094c-ea80-4605-a92f-5fa16daf93ad", "sighting--dbaf8961-3199-47a6-936a-68554c15bf12", "sighting--163e4ac8-21af-43f1-8861-a060aa8e801f", "sighting--89455923-96ad-4da7-9671-1d992a42f7be", "sighting--f8049760-3d10-4106-b943-9782337e73e5", "sighting--2e2cb176-85f7-45f0-889c-b78f6cabe17c", "sighting--86a74343-2acb-4d11-8017-673586325994", "sighting--2a084908-d52e-4ff4-aa7b-cb607898c763", "sighting--3466938f-b2b0-4ee8-b306-879084b70839", "sighting--3c880e3a-2e5e-4db5-9fca-a2143b173b32", "sighting--a2b178ac-d500-4e13-9ab1-68ef8039aab6", "sighting--73b653c4-0b66-4132-8d21-b6755d2d2691", "sighting--07fc1483-52ff-49dc-b42c-d835ee5dc183", "sighting--dfc972f9-77cb-4f94-a045-fb740512fbf4", "sighting--1760ad60-7f08-4eda-a34d-432c832a7338", "sighting--7fc964fe-a043-4f98-a118-5cd3516d9925", "sighting--048d6889-8aef-4df8-96a7-4249864412b7", "sighting--72fcbd30-0e06-4379-a9fa-c7528e74353f", "sighting--d12bffac-6513-4bf5-b820-b0dd93dc3bde", "sighting--54d22064-61bd-4259-9489-a2ca420400ec", "sighting--ba73b729-a98b-420c-8374-c6195f3ebfa5", "sighting--e1050a74-69d0-43e4-a473-e7ef34e24ba0", "sighting--45bcf712-faac-4121-b3b9-488c80170454", "sighting--f86f5f5c-409b-4bb6-b198-302652a96132", "sighting--814e7131-bb7c-408a-b422-7af2db4ebfa0", "sighting--d18e22c8-e2e0-4326-9ac8-33d5141ffe49", "sighting--7a663495-02da-464f-b899-f830fe146aeb", "sighting--0fe5d061-0c5a-4df3-a700-2ee20bb09b88", "sighting--adb7f9d2-77c9-45b9-8065-39d80ebb8c45", "sighting--b598b8d3-8bd2-40bf-8015-c926c0e2ab38", "sighting--daa3f20b-a510-4567-9a78-6425ba371e4d", "sighting--a3caac07-b9dc-44c6-b6f2-afc0f1d5b404", "sighting--3a017554-1efe-454b-b777-d85ee5b9b803", "sighting--2b5c1bb9-c470-4917-9ded-3d68f4e4143d", "sighting--6f91a906-4cf9-4e75-9448-6b89e2744956", "sighting--f90e42a7-d0ec-430e-8307-e8a00d199904", "sighting--2e65da6c-8166-4a6a-a0d2-5002e1dd5ba9", "sighting--45449175-b49d-4eed-96d9-84111df2f768", "sighting--a8527420-bb04-4f0a-b7ec-ce28ee23a857", "sighting--57f483f1-c9a9-4390-b23a-6e1b8f282cfd", "sighting--c0713e5b-918f-4cda-b365-165757ba5a79", "sighting--b2b55d49-f64d-49b0-9b52-c8efcbbebcbb", "sighting--6c11772c-cc91-435a-a3c7-8ce8278f9ff7", "sighting--29fc1f32-a0d6-42c0-ac73-1b3eb2a9d998", "sighting--a21744b3-7277-4fda-b384-6c376160c23d", "sighting--1b003924-0847-4382-96ab-acd2d8c0c100", "sighting--93aabaa7-8067-456e-be71-07e03260987c", "sighting--8acdbd47-53a6-49c9-ab3a-15f1aaefe9c8", "sighting--6933ab71-2525-4da7-b8dc-76f9a4dfe986", "sighting--03251507-c8d6-4563-bf99-cdc4f5577ce1", "sighting--29f1faf3-7c1e-4426-864c-a225da244fcf", "sighting--d9fbb0ee-e88e-4320-9889-8cc7224c4771", "sighting--a36bbd31-3e10-49b1-8b15-20a8b45fe3fe", "sighting--e45b7a57-f5d0-41f7-87eb-7aa487ff9091", "sighting--434abff4-b218-48bf-ab23-f8f124b7ac3f", "sighting--fb3e0a3a-a6e3-45cf-ae8d-2e4b5a150ad9", "sighting--ad440599-8b89-441a-bf64-d412825a3db7", "sighting--0cec3272-f983-48d0-9dce-78dc2e57c8cd", "sighting--810054bf-3a85-41be-9891-cb13edcb1474", "sighting--d9762871-7a93-42c8-a362-cf64728b3a23", "sighting--d137ce90-b0eb-4460-88e8-919fa1a5193b", "sighting--926a3b3a-6304-41e6-85a4-cde35a5e19c4", "sighting--42239861-9a90-4853-b586-dcadd681cfa1", "sighting--e5a4e6fa-ba8a-48f1-a7fe-9d5ed4230edb", "sighting--dee7f80b-6f37-4af9-8918-e7630771330a", "sighting--d315ad19-9fae-45a4-89fb-90d866ef4f25", "sighting--edbc0044-5ad4-42bb-a268-c63f88d9d7a9", "sighting--49356cbb-ad74-4d71-b8bd-3804514aec6a", "sighting--2ace2c17-d37b-4c80-b56a-2a62e7ac13ed", "sighting--b4cf5ce6-3128-4446-912b-ab1d20e249a5", "sighting--4e4829de-dee6-437c-a104-d811d68eb009", "sighting--c5d8dac3-9bfa-4ef1-9e9d-e93b22634638", "sighting--50b03888-54c4-4fde-9ae7-786ae43afc0c", "sighting--a658b4fa-8552-439d-be09-33f855525fe3", "sighting--6e2c4847-a26b-4d47-bedb-3230b85354ff", "sighting--dd7b3c07-a489-4bb9-8758-669cdcfdb697", "sighting--65733db6-1147-4822-a548-f1198acf6548", "sighting--65e251d1-3ff5-44e7-ba23-44c17f454e1f", "sighting--7c3589a9-f096-498e-bd15-973487e43a00", "sighting--1ebd30e2-ff13-4550-8e52-f517895cf520", "sighting--77e32e43-3100-4267-ae4e-0f84354f3062", "sighting--9c1d4057-5642-4d53-89c4-d773921e0d50", "sighting--4a92793f-d66b-426c-a0a0-c6af5e158a53", "sighting--8568d65e-ce3b-43e3-88ad-29b8ed4d61bb", "sighting--b957344b-83b9-4e22-889a-201356c5ff23", "sighting--0e2afe81-342f-4e7d-bf4f-d5bb210c3939", "sighting--4deab4bb-e04b-4f9e-9890-7d51cb773a23", "sighting--e78ea8d6-722f-445d-a953-3b4bbf800932", "sighting--2b5b477f-4588-4a2e-bcd4-e5a41dd923ed", "sighting--3927e89a-6193-4e64-99d2-1b79112340c5", "sighting--068f17b0-1a51-48b2-9908-e4788d0a6de2", "sighting--15db64d2-6744-4851-940c-07cd8c1f6e98", "sighting--d111fc56-f9ce-495e-9c95-7c045bd4136c", "sighting--d7fdcd70-80b2-4a11-becc-ea7a22974a8c", "sighting--e6f39729-c549-4e1b-9926-8b15f813c0a3", "sighting--31361763-8b3c-4bbe-bcae-fdc85e5b1112", "sighting--d8eff65f-b207-4cb2-9886-8de5d25cd503", "sighting--f2eedb45-d094-4a1d-b24e-f018c696b329", "sighting--0cda42c8-71bb-4846-84b0-c3d7727969f3", "sighting--142aed12-a46d-4f8a-8191-d6d47b41aba7", "sighting--d06e8684-e850-47f5-88d4-5b06e0ebadb8", "sighting--85bc947c-907a-41df-b3e5-e994688373b2", "sighting--d2e398f7-6fec-4943-badd-bcb94e4585f2", "sighting--f0569fa2-904d-4d45-b156-00243dc64be5", "sighting--8a9da6e4-0e4d-4cdf-a5f6-231058fc7b8b", "sighting--f46dbec3-d4de-46a8-b74c-b37a9f12ef81", "sighting--92aaa682-a369-4b4e-9a45-f64ec2e8023e", "sighting--032b6614-7ceb-43f3-a1b4-8cb850ec952a", "sighting--55e25313-ca63-4626-a05d-4d069d1432e2", "sighting--0d88eb17-543a-4477-b144-24dce844db77", "sighting--88e6889b-7055-4336-a25c-274e92d064f9", "sighting--3e0e687a-f6c6-4ea1-bc08-0fd1b01e050d", "sighting--089ffd1b-2ebc-49fb-915d-915fb9874d5c", "sighting--45a7f7e0-5b8e-41bf-8e47-aeac9496f3ef", "sighting--c0b5b3d1-da3c-481c-99bf-12c27e553bc7", "sighting--ff10c81e-f861-4d44-8e6b-71b941fb72eb", "sighting--65e0b809-c753-43e7-8da9-d61a70177167", "sighting--a14bb38c-d9fe-4526-9df3-05140ed1ffc1", "sighting--3bdded75-98ae-4ea9-b59e-50e546f15de0", "sighting--17ba5213-73e2-4753-81fe-d955866aed94", "sighting--59cf3c9b-bbf6-49e1-995e-d3797aa22fc1", "sighting--7d513c46-965d-40b9-aaed-bedb2989fd4c", "sighting--ae4cc651-54d7-4328-88b8-f519591884b6", "sighting--193b46ec-0288-491c-883e-c5fdc180bc06", "sighting--0ac62f4a-3823-44d3-ad3d-08fdea15d0bc", "sighting--b0489a5e-62d0-49e2-a187-26cba765bf34", "sighting--0d235221-3430-4c9a-8c97-93b73391ebda", "sighting--ff48e07d-6f7c-4466-9256-26d1b27c9e81", "sighting--0cce342b-cb8f-4f76-ad32-04533c0a1f59", "sighting--f2f37b99-13eb-4628-a27d-7dead87fe40f", "sighting--4f32cbf1-8789-49dd-ace2-06056cf05d09", "sighting--0ce83d0f-da25-43c5-b904-b5607d5410fc", "sighting--26e37996-d5ed-4c46-b2a6-063ff9251f2e", "sighting--692d30ec-bf26-423e-96d4-3087d529d272", "sighting--7eaa1c54-d040-49da-a151-a934501ca24e", "sighting--e7713e19-c801-4367-be44-e52261e1061a", "sighting--476ecf77-a4c2-4ed5-9070-82f05519ade6", "sighting--85376b51-ac4d-4088-9960-caaba2c8293e", "sighting--9ecd6490-efa2-4095-9cff-8af858418261", "sighting--55b338ad-dcd0-416e-8d4d-ad6a0a132ca2", "sighting--1d8e9336-be8b-41d9-8ea9-ee386a72769f", "sighting--85bb58c2-6fa1-4843-a2a5-427bd5c8feb9", "sighting--aed58230-0666-4273-af25-f8dc384b519e", "sighting--ac078dc8-f7e9-4235-85fc-9a4bcf180d95", "sighting--54bbcfbc-5967-4303-a39b-3ada31995812", "sighting--65461d50-c578-4150-85ca-65590fd21d8e", "sighting--7823a25d-db29-4720-bbb1-54ce30808c75", "sighting--5e4bd010-f9e3-4e61-ac51-e475b01ac399", "sighting--e1695262-9c06-48fd-b0a5-c3ce20059cbd", "sighting--36951810-30bf-4bb2-9630-4fead7086832", "sighting--8e2d6560-80e9-4dab-948b-fed46b79d441", "sighting--eafcb4f3-d31d-44d1-9afe-8f144cdbac83", "sighting--5e1342e0-6626-45a3-9dd0-6803b2ef62fd", "sighting--dbf171af-0da8-40a7-8e69-38014c680e1e", "sighting--72c0d6d5-f66d-4105-884c-5f720f537084", "sighting--cb16201b-1ad9-4872-a821-3a38cc6cc41e", "sighting--09ca4786-3460-46da-9a64-45f8324b6e2d", "sighting--53622ba9-918e-4350-a930-ebb01fcdd64c", "sighting--4b269720-5dbd-4cd7-8dff-d3e3d27b1bdb", "sighting--f95836c2-98c6-43b7-9b7c-7a6d5621994e", "sighting--648b81ea-03ed-4247-92e5-7c50be85c187", "sighting--2f8a0b9b-9c66-4fc7-a51c-00d77061947c", "sighting--e1653990-803c-4e3b-9af9-71f3c5fdda58", "sighting--55808a50-f566-4d1f-94e4-adfead7f76a7", "sighting--3e241d65-5507-4975-b701-c425f534a84b", "sighting--78bf2fef-59a6-40aa-b849-64a909d0527d", "sighting--74b5cb5e-d1e1-4336-b769-c9854db1f7ff", "sighting--ed168419-1801-4ec4-9f1d-e0ae888b0330", "sighting--66379a94-2a9c-4846-9e0a-8b3f0ecd45ce", "sighting--1f96cfd0-7cf0-4578-846b-970046415eef", "sighting--fe063803-c659-4c87-be16-da4d43bd413b", "sighting--938f7bef-2745-4af2-8926-949bb84433ae", "sighting--94aa1d3f-6aef-4d09-b400-dcfc7b1069ae", "sighting--cd891f35-d0ad-45fb-b355-357d378988d0", "sighting--21ba69c6-72f4-40c4-9c49-cbcf3b3873cd", "sighting--edb25dbc-7a7e-45df-a930-12945f483fd9", "sighting--7e22768f-a53b-44ad-994a-b06a8fc210c7", "sighting--edbadd86-69ba-4153-9a4c-757c4481d7ee", "sighting--b36e266c-770b-4327-8b4c-9aa7598da6af", "sighting--546084d2-f1ac-4b02-ac7b-9a70af9bf97a", "sighting--686adb6e-55b9-4778-b93f-ea1b25478b59", "sighting--acc03439-cc08-472c-a7bb-66f908f76fda", "sighting--79ff693c-da13-403b-8d01-0cc62ea0eadc", "sighting--2a63c3ce-0105-4858-8132-0d8242d4474e", "sighting--9bcda5bb-b804-4bec-93e0-5a6f32405658", "sighting--1b4f2fdf-9265-4d02-bc38-c4cad4bee3ba", "sighting--4a7aeffd-009f-4c80-b573-e85651348902", "sighting--4a3444cd-c8c3-496f-87e6-5318faa44a3b", "sighting--a01bdec0-8439-4120-b311-52d13da3ed20", "sighting--c2a9a19b-5295-44c5-988f-68f9b700cca1", "sighting--6149a186-d2b7-4cbf-a756-79c89248af51", "sighting--cbadd263-89e7-4154-8843-553a9db993c4", "sighting--0f7ac117-f99e-4a46-b29e-1276725d3337", "sighting--a80892a0-9648-4bbf-a5bf-875b6d862e39", "sighting--71a2a843-a17a-4610-9816-d3735dd4c276", "sighting--88612b54-a54e-4634-8287-9ecde4d2e09c", "sighting--b7b9e3c2-6aa8-4513-b907-cea15e047931", "sighting--dcf7e938-80aa-444f-bc77-977f883b4d48", "sighting--95ba9a24-6920-4c97-9366-97a08a1f4d2c", "sighting--bb6c199d-4c7a-43cd-b19b-e4ecbbaa8f1f", "sighting--39b73764-b546-445e-a14d-ccad89ccee44", "sighting--17842df4-45ed-4dc4-9b59-87c5b17371c9", "sighting--aa2ee098-49d5-43fe-9d32-b8e9546912db", "sighting--d48963ba-2773-4a30-b27e-534131551454", "sighting--4ee912c7-8080-4d11-a5c2-2bbb3efc684e", "sighting--397aab3a-85e6-4f06-b3d3-913115d505a8", "sighting--28eaa38b-7c44-4b17-bfa9-432272c21843", "sighting--facd27a5-c439-4de3-9a1a-6cf166f6a33d", "sighting--48e126f0-3ea8-48c9-96ad-795baeedf328", "sighting--2ab8ad02-7512-40b0-8aeb-7772eb8be350", "sighting--3923dd8f-6059-4dd9-a977-df28360fd140", "sighting--afaa97f3-8cee-4105-b353-5f1f6febe3a7", "sighting--6e75ca2a-5702-4f58-ab4b-2647944b5863", "sighting--ceb93350-bde4-4f10-871e-d207109b44e5", "sighting--fd47a30f-49ba-41b3-a062-362467b64980", "sighting--cfacf015-e0d5-4141-9e87-54fb7bc13469", "sighting--aa1e6599-361c-4551-b30c-95d7a57d03dd", "sighting--8da2045a-2f8c-48d5-bc12-f977629de0c2", "sighting--d8626065-2ff1-445d-a80e-ec85da0e15a5", "sighting--dbc848f6-ba7c-48d4-b59f-4dcf8b10dcd3", "sighting--f6946ac6-d439-4511-849c-bb843e5a2938", "sighting--df4981a8-8a73-477f-95a2-aafcc35a2b48", "sighting--46bdea03-01ed-456e-a85d-9a0a1a487d39", "sighting--effceac2-f4ba-4eee-81c3-2b19a9091039", "sighting--f9fe4431-81b4-4568-91cd-6b59db07fe0f", "sighting--03cebaf4-a170-4a30-8c8d-8657fa80cc1e", "sighting--5144618f-d743-4106-b43d-53369768ce62", "sighting--89a2030c-e942-41fe-8462-e77e00d7852f", "sighting--7f2bfda9-6b26-43bc-af21-13c127e9d78b", "sighting--5e977d58-5765-4212-a4eb-770e59af0ade", "sighting--4d5cd164-72b2-4759-8989-2a5c8a42f554", "sighting--6ba4af6e-5024-49bf-893d-428a38ef6b42", "sighting--e35ff1a9-1e64-4c62-84da-a5919d9e97aa", "sighting--735baeb3-11bc-474a-9eb1-f94f291ff011", "sighting--a8563a3e-3d10-40b5-9963-5f00946a684f", "sighting--b9a8507d-cfd8-4af5-9e8b-30678d7e585e", "sighting--47047d93-2245-45a8-9ec0-babac6b7f343", "sighting--84a19ca5-ae30-45fc-8b19-17dbcf788e5f", "sighting--c3406b5c-4365-41db-9c49-a6bcf0542b88", "sighting--dbd5e087-e18d-407c-b315-1e49b10ab644", "sighting--357bc68d-cc45-4ee8-a170-f2262b3fc2f1", "sighting--4b1b4697-2b57-4f48-ae92-7c952d5ac46a", "sighting--09004657-5bb2-4403-9f96-b1f86a503566", "sighting--dba66573-19d5-47f3-8ee4-716288c79fba", "sighting--80efef29-af47-4109-b51c-53f923a618cb", "sighting--338b3ea5-0127-4f6c-88e0-6922e729e915", "sighting--0d28a928-dfd0-4ff3-b1f5-b74882eb8084", "sighting--e13054a7-9326-49ce-bbba-d3d7b67874be", "sighting--1019935b-7eec-4f3b-972a-bb6cea137335", "sighting--6792ae68-061f-4a90-806e-96c2030acc8a", "sighting--6bd080bb-f370-4248-b184-0deb615b61a6", "sighting--04bb5c42-6ac6-4cd4-a009-dc7877507823", "sighting--fe4fdaa6-0418-490c-8a58-92de0330fd20", "sighting--69591fec-66fa-469b-a3b1-5563da99269d", "sighting--c70fa45b-3c44-4ed5-829c-1b6f4d132df8", "sighting--3ff1abab-3c2d-4292-8a8b-f17ff6cef82c", "sighting--80d33eb6-5c3b-4985-aa5d-3b4195392841", "sighting--28383c3e-442c-4420-8170-ec0d8ebb9836", "sighting--7286590e-4d7e-4ebf-8371-70a5c6de333b", "sighting--04f3a2ba-1f95-4727-a855-66da7a477458", "sighting--e0589d89-27d0-4d44-83ae-5c37f818ab26", "sighting--06980656-6e20-4aee-8058-6e8d9ad34751", "sighting--a16e1ec6-6795-467f-a992-278d68497ece", "sighting--2e7d422d-0288-44b1-bc11-0aafc1b84660", "sighting--dc8b561d-057f-49c7-b392-d75410dc8dab", "sighting--62a64b0d-cb06-4fed-b70d-2e8ee92bc589", "sighting--5fa9109a-5031-41e0-b204-0f424f088696", "sighting--8784cd90-0d78-4308-bc4e-18a7deb0a879", "sighting--aada76eb-2517-41d4-8073-4fd83da385ff", "sighting--d9e507c8-f8f7-4c40-993b-d301795cd390", "sighting--b7edc811-9662-4aeb-b56c-1186358fbd86", "sighting--c0238d46-94f5-47a4-bcd1-43ab0a99121f", "sighting--043413da-20cf-434f-a534-36aa5185f9ac", "sighting--43f69e16-e036-4d96-a2d6-a7fb15d3394d", "sighting--be7d14ec-83e3-490a-acec-394ab433f5b1", "sighting--509372d2-31e7-499d-b322-18a676ea8b02", "sighting--5d261dcb-ec35-465a-aed1-a946cb8c78d2", "sighting--9f9ea854-0db3-4431-80e3-1efd2977a506", "sighting--4084f2ce-e16c-4072-9c43-ab23601b3f7f", "sighting--17283ce0-19cc-421e-adf7-4ae282f3d1bf", "sighting--8ca7e8fe-e2b8-4d29-8112-c5aa743b2922", "sighting--00b0ce46-65b4-430a-b724-885dee32c079", "sighting--e2cd2949-8df0-41be-9ca1-7ee418a1d64f", "sighting--3b19f505-5499-4061-854c-9035e21135bc", "sighting--27952607-ee92-47b6-9340-d3c6fee0924a", "sighting--f15ca2fe-3a37-4f8c-a89b-06262c159bae", "sighting--4349840f-afb5-41e2-9e14-f193d8b70a34", "sighting--0d759b29-abfd-4c9f-9483-bb5d535bde32", "sighting--f63487ed-e88a-4b49-9dc3-5c696e68f9f6", "sighting--e5332099-1c27-4a8c-a5f6-e90405542290", "sighting--8c8b43fe-e2c6-4ee5-b9f8-ad4aac956db8", "sighting--6d95e1a1-4cf8-423a-aa94-b512f6a40c2a", "sighting--f86767e8-c608-44e2-8033-46248d715df3", "sighting--b228619c-8d73-49e1-9869-995a01c5f622", "sighting--bd6b80fe-1311-4d00-9a4f-4ce801656b75", "sighting--fe86b9bd-4eb9-4037-b5ff-ce31ecd5fe00", "sighting--c5e0985a-861b-40c9-88d6-874c33bae8c6", "sighting--9b87cbbb-c572-4481-96a7-b89862fe38b4", "sighting--c98454eb-159a-4a28-80a4-e6bd8565e463", "sighting--ad8f4f62-047f-4176-915e-92752f07ae45", "sighting--891a1593-4a54-465e-b321-fec37f7298ba", "sighting--68a6a71d-f8d9-4ca9-8a79-98d2d507b6fc", "sighting--e02ff25f-203d-4dbc-a773-065f93168e00", "sighting--209231c7-15f0-4a1d-ba96-9d099db893f4", "sighting--4d988a42-4465-47e5-9a27-8ba458732d5f", "sighting--232daca3-5e31-4775-b010-2f2121b29d2e", "sighting--1a26b3d7-051b-4ae8-9839-2b862d91b695", "sighting--d0e2c482-f42b-4ec5-acb9-d89ccf5c5f27", "sighting--0d84ade2-3cc8-4fb7-89e3-6cc3bd864402", "sighting--88155504-17e3-4ac3-9412-99286eb3d81c", "sighting--5f1450a2-c8f0-4a80-a90e-be8c09630cec", "sighting--21303e7d-e84b-45cd-9615-988e5c0e5929", "sighting--d2584a5c-28b7-4586-875e-2b16c32f6380", "sighting--9429e869-42c1-4bee-b655-259c784403f4", "sighting--483f42e1-3d01-416e-8c56-fe838ec79593", "sighting--c6dab201-77fb-4747-ad8f-d5c12f7c12e1", "sighting--062d2faf-7f19-4206-865d-a630bc41ef1f", "sighting--57109718-15e9-4ae5-9d0f-ee0f41f9c80c", "sighting--710ac249-11a3-4eaf-a6f8-4c0a51bc285c", "sighting--aa06d7b9-e2fd-4fe5-8529-4fee92e49877", "sighting--f6302146-318b-4297-b39e-5d1b5c616a9b", "sighting--fa874bc7-137b-4119-8975-cc404803b912", "sighting--01dfe5d2-cac0-4930-ad26-e068a629622f", "sighting--95705c5c-a41f-48ab-b493-c706e71aad96", "sighting--f6472b40-9101-43f6-b6e8-9bae666ab31d", "sighting--b1982e9e-981a-433f-8416-e568bba9953e", "sighting--fe5d6258-9841-4bef-a05e-e10d5e7679b5", "sighting--edff61d8-773d-4600-ab58-2ad574f6bdfc", "sighting--a31d15a4-8765-4346-9a73-fae4003395d8", "sighting--0fff1074-4d17-43ab-b5b9-23fdd505e989", "sighting--d05d45ae-1a06-4963-b7e7-56aef459187c", "sighting--a2a6175d-0bc2-485e-b9a7-bd3e40a33f0f", "sighting--6450149f-d4ca-4590-af5b-5d8706bfc45d", "sighting--3ee6cda8-7eaa-4679-80e5-13d5c0a79a8b", "sighting--94a529c4-18ec-404e-9bc8-66e84c6310bf", "sighting--554ef97f-c600-4493-baab-24226536cc23", "sighting--02df4ff9-a926-4383-9d0a-57b4b30a7159", "sighting--f0270792-f39a-4b97-950f-da97da1ba982", "sighting--797773d5-2cf6-4c0a-afa1-b855643fc255", "sighting--831f468c-b8f2-4941-90e4-0a5a1536066e", "sighting--5ee84293-f4be-4f42-ab52-3421d6e4b688", "sighting--9d388153-f39d-4f88-8731-cdfb2ec1c3dc", "sighting--baefff2f-c8d5-405e-a56a-ce7901de5bce", "sighting--2f80c2e1-7289-4df4-a5dd-5d0c962c82f5", "sighting--070b5d93-cb8b-4194-9da7-2b0399fdd213", "sighting--3a31f340-97a6-486a-9e51-83d3d0a21576", "sighting--2b0b95ec-0ed8-472e-b001-490dd6626d58", "sighting--20277a47-cc48-4a70-97e3-983666109e9e", "sighting--bddf73fc-d4ce-4bf9-a001-f5c3e19ab84f", "sighting--95751a7b-2123-4687-8cfb-ff56632da1fc", "sighting--98841a25-33dc-4681-ba4b-dd75a51d134b", "sighting--58e4cd1c-97c9-40a4-b52f-25f353084ab2", "sighting--15f42727-f184-47c7-87ef-055dcffe5d46", "sighting--c3fce4a6-4651-49d8-9fbe-32c5cbd57c1e", "sighting--c571a68d-b642-4178-b5a7-b5af4670d6a9", "sighting--7a38309f-0e6d-4619-bfdd-12b22dd987cc", "sighting--675e732f-1131-40ab-8a87-382b80bc8591", "sighting--5c882664-f175-400c-b7af-c51deb548b79", "sighting--ac7e58cd-05af-4654-9399-9c7af9793f63", "sighting--f55b951e-b751-4417-97f7-122f160405e2", "sighting--a23bef21-117c-49a8-b1ad-3b5615ac5c2d", "sighting--bddb1d77-2035-4cc8-890d-b95cfe49bf17", "sighting--d0b99c92-a27b-42b5-9769-24a8bd02cf3f", "sighting--da8020c7-f82d-41ea-addb-1d61944697f7", "sighting--fef071b8-1b4e-4e2d-8a80-cf75262d53c0", "sighting--08bf7089-1bde-4fa8-95ab-8d9ffb8f406b", "sighting--5a8aa93a-b008-439c-8cf2-dff37e479216", "sighting--be5afba9-62c3-4c8f-8efd-a4526823005c", "sighting--28649e8a-9190-427f-81eb-627c49c2a5c4", "sighting--107b1185-8637-4ef3-bdb6-3c19dd787176", "sighting--52d4494b-9b9f-41a6-bd49-5e4e05a3303c", "sighting--6805ff8f-b374-4c29-a093-cb3e74d15b49", "sighting--50815f1b-4723-498a-af9b-a2fede3fb3ea", "sighting--f2e71f74-4d3b-46ca-b485-22b3420ad4fa", "sighting--2c541892-7c68-4449-81b9-e55eb2e63add", "sighting--88b86763-3dfb-4d38-b898-65d6dc81360c", "sighting--a182dd6a-e1f0-437e-a65b-281e542f25b7", "sighting--66a3c91b-89e9-4744-9ba4-b97a8d83fc20", "sighting--731f0d76-51a0-451e-b60c-28f733b51f8c", "sighting--f0a72fe9-da26-4b7a-af89-b3d345126da1", "sighting--516f0a06-4131-4683-ad99-da21158f798c", "sighting--54a19704-fa90-4f52-8aeb-dd16d5f13b59", "sighting--9c324ba2-c93d-4bb6-8f1e-df9748ca38d5", "sighting--e8486ecb-7dd9-4751-a996-1f221914e359", "sighting--f85b6f92-a874-44da-b7f7-9a03239230c4", "sighting--e804ae27-ac0e-4fcb-8a08-150a9800311e", "sighting--07e00fac-21f1-4e40-a420-d8f276410229", "sighting--419db97a-f698-46f7-a9e7-19cdc6f0aacf", "sighting--b48f02ea-5103-47b4-a124-89698e191883", "sighting--26dfacb5-17c8-4656-8686-20a2d70b1d8e", "sighting--0057b34c-a585-41ca-bb97-3be6a0eb01a6", "sighting--654e9da7-d0db-42d3-bb41-97a39805b645", "sighting--5a6d1860-af53-4df1-8a3f-beb22f8ea34b", "sighting--f681dc6f-8ef5-4403-878f-e425897e880a", "sighting--b132244d-b713-4761-9761-aace17837dc3", "sighting--fd9c9575-3c2b-4958-b7da-5d588cb403ee", "sighting--0ddbc4b5-cd66-4662-a3ad-9e2033d9ce5e", "sighting--d1c99189-59b2-4d87-8579-6ee4c5c55e68", "sighting--41a2bdb3-5976-480c-bb3c-4442ccdbb4f9", "sighting--a1f88690-637d-4edc-b86b-c1b9a6919ba1", "sighting--ef773eeb-9df2-44a6-9ae8-c6b3df110174", "sighting--567f32fb-8939-401a-b381-0c7ba8d6a74f", "sighting--881bfe8a-e371-482b-9a0c-63874d0c4e25", "sighting--6ca2f9fe-9a19-4545-be7b-389a07b044b9", "sighting--469cfa8b-f50b-402a-bbd9-0c6371d8028c", "sighting--2fb515f0-0450-488c-9549-59d29f3f0f57", "sighting--2af0323e-f319-446e-bd25-6401d0ed2796", "sighting--4a77e623-23cc-4156-94f0-4346e8a021d0", "sighting--26da3953-0047-436b-8efe-d6243d6a1046", "sighting--2c4eb972-9dcc-4209-9835-5cebcc983a8c", "sighting--604ced96-0817-47eb-a7ae-400e203a8cf9", "sighting--adf56567-29f5-4d62-b9b0-bab1e31e6e20", "sighting--4e957957-e651-467d-9f25-21ddde96e912", "sighting--620b6855-a545-4cea-98dd-e75383c60f14", "sighting--39c038f5-17d5-4fc5-b806-409cd8096f7f", "sighting--bf3ac1ff-703f-4feb-a1d0-c1b114e53021", "sighting--f22e4972-f18a-4673-8840-a33e86eefa0f", "sighting--42d4e9af-088b-48e7-9fb9-b6c641078ca1", "sighting--5e674966-5f96-4e10-89fe-b833f33142ea", "sighting--46fcce8e-7e56-4075-bd69-77a40b6f5ea8", "sighting--25f07f3e-6002-444a-aa19-9b6667dc6388", "sighting--06059099-be26-44dd-966e-8a145df5fbb3", "sighting--7257b07d-d1cd-4545-8b55-445111e6edda", "sighting--acfbad77-aa09-4e86-8d3a-7e0c1e31e2ef", "sighting--283ac98f-5651-47dc-ba2f-24b1c76eaac4", "sighting--fb02e639-5fb8-4b82-9c1b-ed3ce9b6e134", "sighting--12348e89-0520-475f-9ded-083fab558a1e", "sighting--46b01893-9dec-4533-9e69-b6df1524b693", "sighting--bb000daf-7f07-4efd-b0d1-3e64cac1a9b8", "sighting--76a2c162-64fa-4cb2-b263-a80c094b7dcf", "sighting--2e5823d9-ef2f-485b-84ef-f782418079a3", "sighting--a5e46337-96ff-4a4b-9e39-d976df50858f", "sighting--16bda891-72bb-49ea-8139-27350e16da5f", "sighting--64472364-4e8e-449e-ad0f-1b195ef70c52", "sighting--1dd63d8c-5c43-41f9-81af-bd49c931955b", "sighting--928a60ab-32fa-43d7-bf65-bffa641ad23f", "sighting--a230943d-c998-46c0-afa3-160580ed5c4c", "sighting--a40b9147-02e8-4ade-9ceb-6e198a9f80a4", "sighting--b6f9d735-47da-4257-8a20-d52719f9f057", "sighting--c2fc7b76-fbe4-44c0-9da7-3ddbb4260c1e", "sighting--f0ee332d-4c28-4808-99bf-af3f2a6e9e10", "sighting--b515219f-eac5-442d-899d-3fafe6e3b7f2", "sighting--5584d0c8-1dbe-4c06-8673-87607136d830", "sighting--a5ee84d1-36b4-490a-8c0a-538c6ebc28d4", "sighting--0251a7eb-d96a-4161-b450-e273fedd6efd", "sighting--eb9e367a-c2e3-4a4e-b0fd-57f6c41a8d44", "sighting--2982787d-420f-4c09-9535-d611853fa4f5", "sighting--f9a3338c-989f-4c7b-b663-259544d4de73", "sighting--fc1d2840-47bb-4839-ab35-24adabfcd60e", "sighting--577b5f37-3057-4771-88ff-8400998c7f13", "sighting--5c3f59ca-3c77-49e8-ac62-b4736db80ff5", "sighting--64ccad62-761c-4e0f-81fd-97d2991c6437", "sighting--6e488ba2-43f4-49a2-930d-8b2ff1aee96d", "sighting--d45a2143-ab74-4544-934d-cf7cb93e8e80", "sighting--e8131450-1351-4452-982d-aedb8a0978fe", "sighting--aac677c4-faac-4525-9464-2a9b4014c917", "sighting--7dc2ec85-8dca-43a2-99f4-c4389a082c5d", "sighting--4e2df0f6-64d4-4bb4-a08c-f172ede49c83", "sighting--ca6ae10c-9c78-46e0-9d02-6cb45bfafac8", "sighting--153dca1d-0224-4632-9f02-a6fc1b749282", "sighting--6aac365f-377d-43f7-b860-23fac2edfd32", "sighting--eff17383-4276-40f9-bdf5-b63d94d3911c", "sighting--b04af33c-fb87-4994-a8e3-d05637299acb", "sighting--73a9b383-8517-4ae4-82f7-f50b2913212c", "sighting--80477d78-d12a-4311-9848-b68fea110692", "sighting--46a3d82b-30ed-480b-bbb8-68f9fc21f80c", "sighting--19f8986f-1e5c-4f1d-9282-200af45fb603", "sighting--edc559cc-ad5b-487b-826c-9da056154e4f", "sighting--4bf97d89-5fde-4755-8117-2f05eb5c1bdc", "sighting--d5d583db-bbd4-4bb6-9f20-96e7b91a9d97", "sighting--121d8b0b-8e57-4fa6-a3d9-ba98b882f27a", "sighting--0d923cc9-a1bf-43b7-aa68-9ad370478961", "sighting--111a78d4-547f-4280-ab7e-b5c68f6bee37", "sighting--0d1e8596-15d9-4399-b059-ca6afefa7ceb", "sighting--ddb3be59-cdf9-4ec4-94b3-f42de66486b0", "sighting--b5b50692-5e19-4261-8b61-172c7a6b998a", "sighting--b2134ca2-9b09-4a17-bda7-43f0583a4cff", "sighting--472acbc3-d785-49cb-9877-045dafc8a66e", "sighting--20699231-a7f3-464f-946e-8811d6668e50", "sighting--49e85632-11a3-4db8-86e9-76c47c57d4db", "sighting--817d556c-ff62-4f9b-bbba-9d609a0e7778", "sighting--234b4166-87ab-4685-a938-09550d9a8fd6", "sighting--5e345ae0-2194-4b4e-a054-3588debd2952", "sighting--c77835cf-5984-47e4-8d0c-8b05953d15d1", "sighting--09583e44-68c3-4eb2-ba71-2dd8593fbb69", "sighting--2b7f4c08-0832-4e5a-85ce-1fcadd326aad", "sighting--ea6fefed-ab22-4715-a888-2323dd60affa", "sighting--587f4c92-ab0c-4ccc-b3ed-4fa37349974a", "sighting--738575d7-5960-4c7b-89a2-103691009c8a", "sighting--c0c2f6fc-a099-4f55-a4f6-7f6584706760", "sighting--5d26165b-f345-4abe-9f5c-f6e83bd5b70a", "sighting--c1dafe32-e506-4b18-b385-e75ca9e04ffe", "sighting--87781a26-b990-46bc-add0-9e73736fe317", "sighting--7b051b9b-57ec-43b6-8b3b-d3df78f413ba", "sighting--42988a46-758e-4872-8049-1b974a26ff84", "sighting--d1f78acd-aeeb-4e13-a9fe-603f38b192b3", "sighting--1d8eed19-d482-459f-bfaa-e3bd283c3ff1", "sighting--99874e99-6bc2-42f0-a6ac-d9a353c6f441", "sighting--50363ee6-f5b3-472a-942d-2353309781be", "sighting--bec3dabc-fa0d-47e1-80f3-be3e03d7a3f6", "sighting--5010cb39-bdfb-4055-89f8-494f87cd12b5", "sighting--8e5d7de5-f891-402e-ac65-59b2bab793fe", "sighting--5c5fac4d-9b37-4bcd-a090-4f01caac7b5b", "sighting--34196908-c0f9-4837-897d-110b084aead3", "sighting--be7ec9bf-fc48-4880-af05-c60cc792f9c4", "sighting--bb773500-c123-40fc-b891-0e8b71ee06d1", "sighting--9eb80afa-273d-4479-9556-66ffe7a908a7", "sighting--f56983e4-8100-4fa6-8ff2-7990e0fe8dae", "sighting--e4b59236-606b-4666-b30c-9745de0250c6", "sighting--6fa30597-7be3-4a77-82e7-ef232a306a4c", "sighting--c7884e9f-b686-458e-a9eb-43ed650979f9", "sighting--319a98ab-dfc1-41f7-a00d-6fb3314a5c6d", "sighting--def6423b-7f75-40e5-9a00-38fe6dbc6185", "sighting--49b96728-de77-4354-a23b-c22a8c907896", "sighting--d08a1812-5c5d-4c7f-a0b4-a19e9d48fabe", "sighting--a8f59957-0b76-4d66-adfe-3f9f03613929", "sighting--4164b2a5-c566-4d02-8e29-a05e9b695e9a", "sighting--810dc59f-324a-4ed6-af1f-ce30dcca2eec", "sighting--37b654b6-c657-48dc-8761-1a14487b7bf0", "sighting--28a02cfe-5633-4fad-aad6-80e2fdece6b8", "sighting--873d02fb-8fe0-41b6-b93b-77ac0146a92d", "sighting--04b5a5ca-bb1f-4643-80e7-7ebbc6e8f730", "sighting--6ea291a5-8d73-46a6-bddd-3e59955bbeb4", "sighting--309b49c0-a021-4f1b-a3fa-7ae0b562331b", "sighting--a7c92f8c-84ed-4053-8028-fcf7a7e38350", "sighting--cd85a346-8ad9-4acb-86d4-299fd35e8ec1", "sighting--aa318544-87a2-4bd3-85f4-5ba47c97d68e", "sighting--f077c77f-16cc-4535-9d52-f314b34b9d7d", "sighting--d49b313e-2cea-4229-8899-2a065de38297", "sighting--61def475-cc2e-401a-9f1e-ef22b3c5d037", "sighting--08405783-9201-493a-96d6-f2de8751a685", "sighting--1ba5b03e-39c0-473c-86d1-fa14338a5a08", "sighting--87917aea-2cf1-497e-b035-f5274d751910", "sighting--05dc634a-0d22-4864-a7e4-976d1852bb61", "sighting--a67b34c7-fdf1-44f6-ac9a-b630df433f2f", "sighting--ad41702e-6807-468c-92e7-a2cf6794c3ed", "sighting--8d1227fd-9f50-4fc1-9d78-ae5cdb340f8c", "sighting--c27c9f98-7b5e-496d-92b3-ec70e70123da", "sighting--ae6aa198-ac9a-4044-a5a6-cdfed4c937b6", "sighting--a60abb23-656a-41c2-a21d-1ddd14d0fdcd", "sighting--3b63ea6f-faab-4fb2-869f-9316d91f9906", "sighting--a26beeb4-0dfc-4174-9068-33d2f3b1f51e", "sighting--8b3e9b35-6c84-42b5-a0a6-12c3212be790", "sighting--f0625472-c48b-4e4c-b321-dbd764e930ab", "sighting--522c26e9-8be3-41df-b4d2-3bbfa7ceaa12", "sighting--9cebb01c-b537-4df6-8821-582ea2957773", "sighting--979ab06d-c06a-4272-8b1a-23cc15cff5de", "sighting--9d5aca16-a788-47fc-b139-a2bf958f39a2", "sighting--feaf361f-6535-4787-94b6-1e1506efe67a", "sighting--6db3eb3c-10e4-45e6-8096-a665c046b600", "sighting--27eebd9c-c114-427b-aac1-b6bc2be949e7", "sighting--08f075a5-27c9-4ee9-824a-cce496a1816a", "sighting--e8b0064a-4453-4360-b924-0e86f95a8cb6", "sighting--df70c607-584c-49d9-b6de-2fc6455d3d6a", "sighting--ad16a43c-2974-474a-9e74-f69024d164b4", "sighting--ca6e0ae7-49d6-4a0e-bd09-bc86bc371aee", "sighting--125b9af8-f2ea-45d1-9c76-f134da4484e6", "sighting--28950d68-4398-4b75-b428-be6866fe0ae2", "sighting--778799c3-d77e-48a4-8841-827f5fee48f6", "sighting--525837cb-aeca-4317-855f-0c461ce26adb", "sighting--7149bb50-5d91-4d0f-86e4-aab4f14ec32f", "sighting--b1b7d640-2027-4526-b3ed-fd3b8efcc7f7", "sighting--ebd44346-10dc-45ff-a58c-f26bd0a169c5", "sighting--360cb370-fc3b-4a13-90e4-34454eeff33e", "sighting--9a5685e2-7902-4835-a178-93f302d6dfbe", "sighting--62355270-0cf3-4f1e-b430-ada8f096158b", "sighting--027d7066-9dce-4d88-a9a9-d0dd54977737", "sighting--4379c6a7-e5a5-4c44-9e62-e021be1cbb27", "sighting--495b4d71-a03d-4af6-a0ed-cb4646ec2f82", "sighting--18caa822-c622-4273-9c46-650c1a62179f", "sighting--d350279a-428e-49f0-a310-e39ecfce3712", "sighting--6ee0a239-92b0-400f-bcef-8eed128e9160", "sighting--225fdbc0-b54b-49bc-9601-0d2c446ffd2f", "sighting--fb2203d5-de9c-45d8-94e5-55710466a0dd", "sighting--90ecaf7f-cfe1-4b29-bf29-a1f7434324ce", "sighting--866579bd-c38f-440f-a0ab-5d1b94f45e18", "sighting--487de7d5-4edf-4392-8e19-a1b15879384f", "sighting--66cd5e87-da78-4fde-b84f-42ff64822b48", "sighting--1ecf92c8-a7e9-4b29-b16f-1ae3790461f0", "sighting--6b2b9658-aa22-4333-bbe9-f1b2cf58fac4", "sighting--0f248cf9-7a15-4c09-911a-d5516fd9c0df", "sighting--3e34918b-526f-40e7-821c-0f07b83bdbc5", "sighting--dafb3e48-4983-44ae-af94-b51636308617", "sighting--32fca718-71e4-4f6b-bdfb-af3801b3148d", "sighting--a7d49d2b-3bd0-4b9a-8fa1-6a67831b11ff", "sighting--bdaeb131-d5aa-420e-8852-f9cb65e984bd", "sighting--8a5064c3-1d7a-4c09-928c-38b176a2c4c2", "sighting--fdd81a65-9893-4074-9f19-cf1655391893", "sighting--e37e385a-5701-4915-afcf-985b1856aa90", "sighting--8faf2cb8-a17e-4cf1-9d1b-37ce97b0805b", "sighting--51c9352f-3e74-4303-a878-bb81a8a25f99", "sighting--945f19c1-844a-4a4c-a115-e8f502ac789c", "sighting--3e7d7daf-4799-417d-b18b-2285b03e8223", "sighting--98cd0e46-3d21-493d-acc2-a8736204d125", "sighting--4d3b8abc-9e45-49b0-9eaa-a66b588e4398", "sighting--301d791a-b316-4d21-aa99-82886148fc17", "sighting--48511658-0f69-436b-a2b7-833d0c11c20e", "sighting--917d1bdb-2eee-492d-9ada-3db3a8ad9eee", "sighting--e9f89942-ae77-4166-9579-1dfd348f9d9d", "sighting--80d4d76e-8b64-4131-926d-7dfeb84f70ee", "sighting--e457ee83-75f3-433b-9eaf-c2b605e95741", "sighting--43e57ef8-9ef5-4eae-811e-473698e837bb", "sighting--96a848a7-5be2-46b6-b64c-e505d25eed4b", "sighting--8f9735a1-4943-4990-8b7c-3fe323b1b755", "sighting--3f51c1ea-809a-469a-ad45-191afa4d13cf", "sighting--43ce1b26-5580-4e00-9edd-16aabf480009", "sighting--bdc1d46b-1cd6-4768-ade8-8a973fc705b1", "sighting--493b223c-d6e2-4e20-be4d-7d107e043262", "sighting--dab77ed3-d0d3-4ebd-8593-097683b84eb9", "sighting--6939383e-e896-446b-b669-eb332d8622e2", "sighting--5b8a7188-3e2a-4469-8f4c-9fda748af341", "sighting--fb28928b-bc14-41e6-b1e6-eba9ebb3d146", "sighting--74e58c15-8172-4ad6-a6d5-b2c7cceb771d", "sighting--13325177-e658-4e9f-8a66-485176576b09", "sighting--6dc201b7-e699-4bf2-adff-b9d4e7796d8b", "sighting--9b64208c-4e36-4000-928a-9d39e8ee86c7", "sighting--ba0d2584-b924-4429-a1e0-7af1e69a5c15", "sighting--18e58403-8d3d-451d-b052-d712600913bd", "sighting--dd9b9ad4-03e2-427b-a3ff-b942e6acb3ba", "sighting--6164aa22-53a1-436d-87c9-c98840835deb", "sighting--438b4259-ee14-413d-a1a6-2cd134bc9921", "sighting--a6c62e4b-b1f3-4ebb-b11d-25d97c255fb7", "sighting--adc97e07-d3ab-4613-a399-2ab652ec4b49", "sighting--3c7be91c-e430-408a-a976-cbcfeffd706a", "sighting--144d10ae-3c18-4382-a458-6c8355f28085", "sighting--9f241e8e-b63e-4d9b-88b3-ca7070084e00", "sighting--f941fcd9-29ba-447e-81bd-cf627b77d623", "sighting--ff915046-901c-4664-91c8-ca67f6810c9b", "sighting--28ae33b3-fbd7-47d9-897b-d52f743bf361", "sighting--274ffbca-3e83-45cf-aac5-396eafa7744a", "sighting--3377d539-b8a6-4b69-807a-e68bd97f8b38", "sighting--56c62373-d3d6-4d1c-83b3-10483aa2b169", "sighting--d20390c8-2106-499c-828f-347d08494641", "sighting--b5218acb-4457-407b-a98a-f8477371dc30", "sighting--5b1a7e61-b137-4b18-a022-48c9bcc97279", "sighting--216eb7b5-7b5b-4d64-931e-c19fdbb5c528", "sighting--0fbc3f52-827c-4ed4-9565-6b1d9a20b7c9", "sighting--4213114a-41cf-4e52-b72b-64cc52463726", "sighting--4c96605a-7ce3-4f3f-8c4c-2b88349ad460", "sighting--e73d8533-4827-4045-b73e-f50c54f44f7b", "sighting--150adbd6-3d7b-4997-8ac9-19d072c890be", "sighting--c94db4ac-89a0-4821-a161-4ec5c2bc0f4c", "sighting--6a027646-763e-4b75-b73a-a10d2ad1f954", "sighting--cac9dc08-5e28-4d48-84ce-07c1383c7b8a", "sighting--a4ad7cc2-5f3f-4354-80e8-a40b26120e9a", "sighting--2798c7a4-c9d0-4622-8b87-adaf50fd41e2", "sighting--89924ba6-2bd5-4636-992d-444cf0445eb4", "sighting--c16d4a5a-c356-4428-9e4f-0e82fd694948", "sighting--b1a70d21-4ee1-45b0-a071-c2c17d921c14", "sighting--d0e6e606-c7e2-4403-8f3e-e7d91b8d2380", "sighting--219012d8-ccce-4919-8f33-ba8b069bc301", "sighting--b921617b-641a-44fa-b98a-182c127dba20", "sighting--5da5688a-8f69-4841-8f75-70c776faca32", "sighting--6a2c10dc-222a-47e4-b00b-f947dff66676", "sighting--124d1ca0-3599-41cb-b7b5-695738a3b159", "sighting--04d96d1f-6258-47cb-8985-ede000d23cab", "sighting--7f9b7bc9-b071-4a72-8389-e9c5aa226a82", "sighting--daf2580d-a378-405c-97f5-38c19af8ed11", "sighting--a3edcaf1-25ce-41bc-a935-eff536953ef2", "sighting--f2a5f36d-fd41-4308-b12b-85973a087286", "sighting--316504ce-6071-488b-8e2c-bcb125116a97", "sighting--d105b6fe-9908-447a-bb14-c64a815226a6", "sighting--edcad8ed-4482-40fe-983e-0dae0a184489", "sighting--8493bc83-70ae-4812-846d-d85cc7269f2c", "sighting--5293dd08-de71-4955-ab02-8d70bfcd50ac", "sighting--e9c33c6c-8c03-4da6-9d01-44e02540128a", "sighting--c208cc96-f45f-4eb6-8531-839ec5e124cc", "sighting--75eef5f1-ac90-40b5-b843-93155b950a2b", "sighting--f54578d3-7174-401c-a0d5-c116806acfc6", "sighting--ec3459ba-b500-4970-9685-b6b736b47b01", "sighting--f46c2b01-69c8-4740-bbda-0e4dc41ed7d8", "sighting--4cb2ad01-3f77-4901-9467-2e74b55824b8", "sighting--d12d0523-1b92-465a-a252-634584cb8e55", "sighting--9dacf0f3-9a90-481e-a8f4-28ca05e7239b", "sighting--3d640711-74a7-4489-9cc3-0c06ad5b6463", "sighting--25a6d390-3c31-4e79-bb3c-44248bb87b78", "sighting--5e77623f-8289-4c96-ba24-8c01fa9a2c2c", "sighting--2a20c36d-1fb2-45d7-9c82-439a0fa5453c", "sighting--0b68e1e8-e68d-40f8-a44b-b1604a9b7ede", "sighting--2d6bc017-2a65-49a9-b4ce-05667fd230c9", "sighting--b79b84c4-2e59-42d2-924a-29d8da94895b", "sighting--f66b7cf8-54bb-4b7a-bf32-5e6a94ea30a6", "sighting--cad45365-5a13-4f85-9a5b-383df711385b", "sighting--2ab95206-5d07-4464-b435-677bc5cd25ff", "sighting--cb23c143-d2d7-47a6-abfa-2aa00d6cefaa", "sighting--8dcdf848-8813-4df0-af79-5a1ba6f62a4d", "sighting--7c554b05-6bb6-4763-a6b0-b2c4a32a68f4", "sighting--38a82293-13f0-4ef8-b975-65433655b12c", "sighting--276d9b64-1a75-47c0-bfba-51149ddaab66", "sighting--ca3c8388-e47c-453f-ac21-b137690fd3b9", "sighting--389e9c7c-0cc7-480c-b3ab-d73f24a5fb02", "sighting--91ea0059-1b86-4f4c-a24b-705fb1e4dc34", "sighting--29df607a-7e74-4971-97fe-94feb885e2d2", "sighting--b9b63791-3c8a-4cb2-94c6-c5ab845c292b", "sighting--3b75c0cc-55fa-4162-ba55-e85469d25ac1", "sighting--edd3640e-b755-4d2e-ab3a-f74c9677592e", "sighting--d6d213b5-c3b8-401a-86aa-f5f19330a606", "sighting--5141b339-cb93-47c9-83b1-d48c3f26ce14", "sighting--200dd3b3-c3dc-4850-9362-8a19cec7479a", "sighting--23e46163-cab5-4fdb-9af0-6bbbedb3fb4f", "sighting--03ecb2cc-fd82-438f-abf5-dcfad9023a9e", "sighting--5b235adf-43cf-4bc7-82fc-08b91e63d411", "sighting--ac87db44-6604-4b9e-ae27-c5b3760a215a", "sighting--70da0d70-5ba8-4b36-b70b-6a89248d30fb", "sighting--b60061b6-bedd-41f1-8bac-b4c1fb4ac1aa", "sighting--da3d7d52-6d98-4a72-843f-2a25c11fbc9a", "sighting--66efbcc5-ac5d-4dc1-801f-b9e8619fcff3", "sighting--32b5345e-5e8d-4f60-acba-fa507e5d960e", "sighting--a3730843-e4ca-4778-bf7e-56206c727c2e", "sighting--91e5ce32-d7c7-4d79-8be0-8cad7382140a", "sighting--fc0e8568-edb6-49e5-bb33-c027cc8a84ee", "sighting--bc41ffb4-27b5-461e-b7f4-679a4ac34491", "sighting--d3510ce6-a9e5-402b-952e-8df8f9f0d42e", "sighting--9281f906-f3f3-44a4-98c1-a247c73ba983", "sighting--142d03f3-93ad-4511-b74a-db1e5ec3acea", "sighting--4b61e7cd-89af-40c2-927c-deed89c34425", "sighting--a35dc305-5c76-4776-919b-18435d8c2603", "sighting--891082e1-3f8b-4f5b-87f9-211288f9992e", "sighting--8e0130e5-6ddb-4388-81b4-dfc8fcea37cc", "sighting--acacc26b-b42f-4ea2-bae8-0da8ae52edf1", "sighting--329c7f1d-e4f4-40a9-9d89-0ae8c58a9fc8", "sighting--2e282983-d61d-4aee-8d37-59ef686080fa", "sighting--0f221b05-a277-4694-9e94-fa786497f983", "sighting--fa706231-572a-4225-8559-20b99cf2d36c", "sighting--6b4045a4-f582-4bd0-84c9-99f51c9538a6", "sighting--a1c5aec6-7aad-4f1a-af22-db5a12efbc5d", "sighting--abc1c64d-9cc2-4f15-9a1b-887b7d2ede47", "sighting--e393c3b4-e911-4c5f-82ff-ab4528bb37e8", "sighting--8350cd70-32af-46c4-89e2-bff85f24a411", "sighting--49940e16-2884-4eec-a606-f840f9da2289", "sighting--8ea9528f-8c03-4205-8275-d56a62b20932", "sighting--4c36eb83-4bb3-421c-adc7-692348f24a59", "sighting--f9ee3fbe-09a0-48bf-9662-2337f8226a90", "sighting--2e8f10b2-7e96-4642-a22d-135ac394b907", "sighting--2a470ea7-0f16-4d55-9589-d81b3b92b3bb", "sighting--bdb87779-56b4-4309-81e9-72187f2f912c", "sighting--d4198647-c627-4eef-856e-2272623b8b60", "sighting--9abcc6b9-2583-431c-afa2-c882c477000d", "sighting--9bd4df2f-7a95-4653-9b3d-97c6b14e733e", "sighting--69bf1df4-094c-45dd-8df9-c00c5547b80c", "sighting--325ac39d-92d2-4c88-8ff1-eb20a1b6ec7f", "sighting--6c9a727d-59c3-4e17-bca6-e267a1e54332", "sighting--7d8c60c2-d0b8-4366-8541-0b7dcfb43ce3", "sighting--d8de252f-c5d4-4cd1-9f2f-72af455c5e06", "sighting--25c61fe4-a209-484e-b3e5-018b8ed9dcfd", "sighting--7e8e36cb-7b1c-4d89-8b7b-3d18e35b9c16", "sighting--2ec0ca82-5589-4dae-b8fd-6bfe94df8f06", "sighting--c5178540-a94e-435b-b8f9-4c5400c50bfa", "sighting--0fad06c9-12f3-4755-a939-1fee4ba85271", "sighting--40159910-c05c-4ee2-b29c-23de5b69793f", "sighting--9a3517f2-6e55-494e-923d-0117d82a6302", "sighting--61744ce6-1ef4-462e-9a6f-614bbd0de616", "sighting--1c7275a8-7622-4842-8bf9-ab561590b774", "sighting--db62766a-8cb8-435a-9a2a-2e3e76528ad4", "sighting--3383f25d-7ac4-457f-b738-d57abbac1312", "sighting--ba561b75-b206-441d-b73a-fbf123d883c5", "sighting--81fae7c4-20ed-4e54-bae9-d80ba4ee868c", "sighting--034fe75c-4004-4b4b-8ef2-86fecd0b4c2d", "sighting--2763a604-7204-475d-94d0-9f10398d3cde", "sighting--e028bcbd-47ac-4689-919a-91281c50c266", "sighting--c0fd14f3-51cc-4119-b159-3ae96caf531e", "sighting--2b6748fc-12f7-4b55-a63c-f4bac7f14f94", "sighting--e832dd2b-ee94-4910-b542-56bbf2085ae4", "sighting--108b5fd4-ba50-41f0-801e-445668c0198e", "sighting--1334abce-3860-4dfb-88e9-15175aa0599a", "sighting--0745b986-dc0c-4c60-85e9-67cfab40cef1", "sighting--86116a2c-6eab-4f4f-8f97-f7c764f877a2", "sighting--bab9d6de-55a7-4597-99fd-d4782c288597", "sighting--4b1cadd4-f75c-490b-9c36-e36ac2cd1982", "sighting--c6928796-9c47-4402-bfb1-44f4b5427684", "sighting--8c2eefaa-0f46-4315-9b3d-2d8712dd438a", "sighting--006bde26-0ee2-4209-a5b7-235c8aae0b9c", "sighting--54e2a247-cdb1-4f47-97fc-438e7b36b4d1", "sighting--6e18bdec-2c7e-4956-b50a-4617e674c751", "sighting--17b9ff14-e941-4d8f-acc9-cb75276ce689", "sighting--2151b5e8-d39b-41b3-a33a-7bf4ee010156", "sighting--834bb170-2964-4efa-9194-11c375c5cdb9", "sighting--d772fb83-77b2-4e41-bdcc-8c62e0f02921", "sighting--2519a52a-a7c2-48f2-9291-5be9ebc25374", "sighting--57a91c81-e535-44b2-a56d-7c7bd0631b49", "sighting--c00b7c4c-a0bc-4bfa-a94f-53ed17ff5c14", "sighting--faa41b43-8711-49b4-b21a-06aef54a329e", "sighting--8744057a-404d-4e64-b637-24c70e042ed5", "sighting--d754230f-54cb-44dc-a129-e2dd2baed0a1", "sighting--c4958abe-4113-4c77-9c5b-b2100af8f7fa", "sighting--48dbbf5c-a8a4-4a1d-bb2e-5a601f5764ec", "sighting--9d7ca0af-318f-4f0c-9a83-0ba104618c9a", "sighting--6d03f67d-906e-47cc-ad55-31c11b200aa3", "sighting--3de73598-6d1f-4716-b93b-efb59c53c3b6", "sighting--49b51e8c-c9cc-4654-9847-cda049d262e2", "sighting--7b128949-8fcd-461c-a7a7-699d90ba084a", "sighting--718353c9-92b6-4036-b63b-8e75164b5064", "sighting--2e7042a9-7b67-471e-82ad-228e82b15895", "sighting--5b69bc9c-60ee-4bdf-a58f-e09056fbece8", "sighting--c8bc281a-8259-432f-99c8-efadf7ceb51b", "sighting--710529a8-b182-4b74-9926-0fcdf9f7c29e", "sighting--1a54bfe9-8d76-4fe1-aa4b-f26a4b5e4e81", "sighting--77b327e7-5f3a-4f9e-901c-f67f003a6b9d", "sighting--f93fda42-7d90-4c95-9a9e-0f7c9a630862", "sighting--5476ab5b-0f6b-4e0f-b49a-9ed12a3514a8", "sighting--acfcca9a-66ef-497d-872c-2737c515e50e", "sighting--b43ab08e-99a7-4937-9633-c1a168ad527c", "sighting--53500659-6408-4842-abc2-0da2601603d1", "sighting--b3914edb-62ba-478d-b055-a7ba861c2208", "sighting--98f23174-dcc6-4884-bc40-a83213603c22", "sighting--ab95fba5-3193-4f5a-a529-0e2450c8d6ed", "sighting--5ab9dce4-901c-45ff-8991-b60130a0ddb1", "sighting--bab431f0-2c17-4c4f-9d02-8a7cf37f769b", "sighting--bfff2a5e-f352-4d85-988d-0eece71b4320", "sighting--4522afbe-e866-4e85-994a-cdf6a461cfc5", "sighting--89a45072-c89d-4630-89db-1a11c99843f0", "sighting--0ae96b16-967b-42ad-9024-fb8abee08352", "sighting--a0328033-69a4-4f3d-8a28-24f20dcbfb33", "sighting--bda1d3d1-3443-475d-a52c-21a84b5fc45c", "sighting--5ffff5e9-32c3-41d1-98da-03cfbfc18f5f", "sighting--cc74f7aa-1299-4d2e-97e7-74dc8f5e1da1", "sighting--e486005a-1e9e-463e-853d-71c37aea20c4", "sighting--d7716645-6957-4643-83a1-2ebd7c357615", "sighting--8aaa90c1-6247-4618-838e-415691e83c09", "sighting--a2b84269-eaea-4be2-8627-c2799844a70c", "sighting--d07dce3c-c212-4997-9b98-f8d76e662e31", "sighting--b29c57a6-98af-4043-9a14-d3e9eab6cd03", "sighting--0a78419e-0e0a-46b7-89ac-89858825c3e0", "sighting--869d7754-8fc2-4e02-985e-54817740049c", "sighting--ffdadbd1-97be-45d1-841e-80b7a0cb37ad", "sighting--b882e779-acf9-42f9-b149-5248a7a93103", "sighting--84cd49af-93f2-4081-a13e-accb8d852de5", "sighting--8f28012b-5275-4aa9-81b5-934664893804", "sighting--00566c3f-d166-4799-90a8-dd53dff14a6e", "sighting--9856a628-9d5b-4562-b32e-8f1aa4770726", "sighting--c85d1c20-20bc-499d-bb86-f43ea2149937", "sighting--a285c4a4-781b-4fad-9605-dd1869c3d30f", "sighting--a3e5e436-6c9e-4021-80c9-b5b9d5cca309", "sighting--68bc5530-5c50-441a-bdb7-b82b4b225f9b", "sighting--6ad2b8dc-8afd-4423-ac42-f074e356a178", "sighting--73dc2a04-fedd-4cc6-bc5b-2c76c1b77ee4", "sighting--aa68d8d2-369d-4c42-8ddc-b1d3572af403", "sighting--3dcc126d-97d7-4fe8-9bed-525af2e3d934", "sighting--8a7f2676-6202-4710-9034-c265f65921e9", "sighting--3e096406-f399-4564-97d6-66c1d2888c15", "sighting--d7469c34-89ef-4cd6-914b-3891a22a32aa", "sighting--a09bf92d-6c53-48ff-ba68-a56e212b8938", "sighting--31461340-5d25-4634-a947-e327e05307ef", "sighting--001898e7-3a2e-4b4f-8c4b-58f1b359ea1b", "sighting--768bf484-1c2a-4124-943d-262012bc2b9e", "sighting--b8d7fc0d-3e61-43f0-aa98-f1b0a7d60877", "sighting--cf5551da-a5a6-480f-89bd-f1012e9a3b9c", "sighting--9280eeb2-0645-4aa8-9660-5029128fbf1f", "sighting--d2d64d9e-7685-433b-8bd1-b0f83778037d", "sighting--ba94c346-5f63-4b74-9a72-be6afe4a47c7", "sighting--ebf8193a-12bf-42d0-863a-482f03f18fd8", "sighting--e0f89632-85b9-400a-8b58-d9243f7e72ec", "sighting--f47676fa-8693-40ed-9392-b1f7c42791a2", "sighting--9ca68646-ab52-4d2b-8eb9-daf80717aa0c", "sighting--64792a9d-685c-4b0d-b50a-b5621a8e3ef2", "sighting--304e159f-127f-4379-8740-a29efd6ee474", "sighting--50068bc8-8378-47e3-8795-40358b787dd0", "sighting--ae7d888d-480d-4541-be11-6565e6d76343", "sighting--e1b48800-d536-478b-8882-e7bcc2cf6f50", "sighting--90b24bea-d24a-417a-8ce1-cea63b0412c6", "sighting--7519992d-f8b9-48ac-b718-eafc9f634118", "sighting--a1c4f32b-d781-42e5-871e-99ea3a6eb47c", "sighting--e1e464f4-9f3b-4daf-8401-520206159ca8", "sighting--986fc48d-caf7-49ac-9fa2-cf2ef724d3e5", "sighting--c4a75967-2754-4c8f-98cb-22df10c71d7c", "sighting--38bb8a1d-d812-4ebe-aa13-5c83a0e72a12", "sighting--431c0c44-811b-4052-9469-ddd52cdfa746", "sighting--1c167753-306f-4809-8be6-acdade701efc", "sighting--43bd2722-b89b-4507-9e01-5b1c1bf7201a", "sighting--ca67a665-ddbe-4ec3-96be-4b7035141f16", "sighting--bc487525-a328-4cee-b270-fcf338c85bc4", "sighting--470fde19-b3fd-4219-a0c1-0218b21efd3c", "sighting--2f2cfa17-e658-42ce-a610-6f6a2a7fb544", "sighting--fecf8f27-9ec7-46b1-b461-31eee6f4e7fc", "sighting--9de10a60-5452-47b4-88d6-5abecf4d842b", "sighting--8ac848b2-4f3b-4a13-ac49-aeb65400b3d9", "sighting--c43cd860-c1ee-455c-b6e2-c9d6fe00b505", "sighting--a24998e1-f685-41da-a18b-653f3a957573", "sighting--499404df-b3dd-4390-99b7-d7a677c68e88", "sighting--481ce069-8985-405c-85a0-4ad4ab62a39f", "sighting--49a8318e-0c47-4f35-bd95-b8dbb035ccb4", "sighting--5527397c-ab0d-4e23-a129-1f0377357a77", "sighting--e6579879-e350-4d80-8b51-ebd7315890c0", "sighting--72db837e-bc73-4acd-b446-3888489b4ae4", "sighting--a10027c9-3754-4553-9655-819dcd7daca9", "sighting--11cf4c5b-54ee-4313-b09a-373de41697aa", "sighting--f3365e79-0a38-4dad-bc80-cb24bc89ade4", "sighting--999b12f5-51cd-4f60-8f35-215929e60b72", "sighting--bb0853a4-f0bb-42e4-9db8-368695065a9e", "sighting--84169d50-65f8-4ce2-9c23-aa06863c64c5", "sighting--1f866b70-ac31-4d00-bdc6-209d9ca9632e", "sighting--97edc66f-a8b7-4add-84e5-49c1d1cd7b2f", "sighting--c8b6d844-8fe8-49dc-89c7-c39458ac2fee", "sighting--ffb9eb26-8fdc-4031-bbea-53b0fed3d86c", "sighting--48cedfa1-4686-47d5-bbdc-03b5357df557", "sighting--a690de7d-d40c-40da-aaed-bfaa35d147b9", "sighting--c99dea33-26c4-41e8-82db-53302399f705", "sighting--58c1da0a-7048-4212-b656-ca0bde3ed9e4", "sighting--c5033698-7bf8-404d-bd8d-f79083e664b6", "sighting--9bd13197-7aef-47b9-bffe-2e9b8cb7cdd9", "sighting--d5487cca-9d67-4d48-ae07-ca1a9484498a", "sighting--d47c2c45-ce95-4b66-b883-d8697b801ab4", "sighting--8fe1660f-1065-456d-ad49-d8321d7b8674", "sighting--e756bd9d-96a0-4fd9-8368-f8fed16f2665", "sighting--31d6d7a6-669a-4dd9-b143-9da4f071265f", "sighting--02f35a2f-1598-45f3-828f-186a69952aec", "sighting--a1479ec1-6073-499c-ae6e-cf80069e0131", "sighting--ca99a6f6-a7eb-4f4e-9c01-28fd78d5ca3a", "sighting--300c158f-d729-426f-95be-5df1974d30f9", "sighting--9876dd31-d464-4d62-aaf6-7f6d86f97e27", "sighting--5d16f361-d128-428f-8c1f-2015b67db378", "sighting--872748c9-a2fd-469f-b9ae-4ac9e8b6c208", "sighting--f06ddfbf-4647-4547-bc74-62f6bdb34a94", "sighting--52ba34d2-6e19-4899-bbd0-e9902e3ef987", "sighting--f4bded2a-1ae9-4a0c-bb5d-d6ce1884053e", "sighting--b16225b5-fceb-4577-9172-e1ef18684559", "sighting--890a7043-8c72-41ce-a1e6-abe2c1a7d504", "sighting--dc1f563a-99cb-4927-8a5a-8ba7991c4f70", "sighting--95a8cd54-62fc-4ea5-944f-408cd0f5e337", "sighting--24b0ae46-1e10-42f5-94be-d92684f90eb0", "sighting--d09d51ef-dd6c-4bcd-85d5-252b06f0b065", "sighting--72c3e6fe-23d7-4d36-a53e-9d1f0b71769a", "sighting--6472ac7a-1663-4d55-90b6-ab74045503cf", "sighting--eabc786e-d254-406f-a9ce-7bd04bb94efe", "sighting--d0aa97e8-2887-47d1-a761-9e151dec1a61", "sighting--7b717c80-dfac-4481-bd95-96b9382efe5d", "sighting--78638de8-df17-49d3-b8a0-ee13d7acec21", "sighting--79bc5018-2bff-4a4b-9445-6caaddcf6b9f", "sighting--cf87953b-e719-438d-995e-cb2afe76b61d", "sighting--d05b803f-cc2a-4164-a128-f11692a5c493", "sighting--dfcc51f3-f70e-4d92-ad4b-1bdc112d0975", "sighting--f68aebb1-e767-4483-a4a0-728ad977d11c", "sighting--3802f27d-8d3c-4b5b-bc0f-d227922d6b60", "sighting--482b9fbe-2624-4ff7-8742-f70b1c534e60", "sighting--ca78c420-cfc9-4b6e-ba6e-17d879a4e268", "sighting--42e949bb-e3a1-40e5-974c-5b9fa5009add", "sighting--99fbf75e-1bbe-4b12-bfbb-4e623dab96b3", "sighting--32687166-0fe6-4d51-a632-8061075324f8", "sighting--ec7f8167-b725-483e-b4eb-ac58c3b511ff", "sighting--add173f7-66bc-4df4-a530-767861e7c723", "sighting--5764e997-019c-45aa-a402-8ed8925e42bd", "sighting--9a4d1a3f-9170-45fb-b326-63c2c526815e", "sighting--5aa60bbc-38bb-4544-9da0-cc57c9cb51b4", "sighting--4d470289-4401-4a4a-bf0b-57faae14bcff", "sighting--a5df3649-13d4-4a82-904e-03c9821746f2", "sighting--7bf0990c-8a6d-49c3-9129-6ea8702c04ac", "sighting--a1132807-c14a-4e5a-ab24-d9bbd5348aca", "sighting--ef335c6a-61e3-4422-9be0-c4d27c9567f2", "sighting--d4cd6ce7-d61b-4f99-a413-90c89e2d661c", "sighting--6194a835-1739-4c3e-adb6-5ae4786a1f96", "sighting--dd2dff3c-819f-4396-9cf8-2a35d3248886", "sighting--c6aedb34-acb3-4205-9e24-3f0cd74ccea0", "sighting--82df4593-655f-4784-baba-34d30db21a8c", "sighting--6678387a-2dde-4a70-a4b6-75b5a5ddb74b", "sighting--3df5befe-896a-4065-8287-661e279c6bd8", "sighting--bb981c3c-6dad-4599-b34c-141f961cf948", "sighting--643788ad-d866-473d-8fd1-e5104ded340c", "sighting--5fd6dbac-06c7-4a1a-aa86-b58854744c0d", "sighting--2764e5fd-e0b4-4fdd-8005-f00bd1a9ca70", "sighting--81923178-d177-48c7-93d7-d4d268b86202", "sighting--adff4973-e8bb-43ca-a066-0343367fc94a", "sighting--fe2eb3de-709b-46b4-999c-8098430fc084", "sighting--7f3174c8-5354-4183-9758-a1b2e657b283", "sighting--33da7118-c770-45d9-a39b-ff68d4899193", "sighting--6b4bcf74-b51c-483c-bff1-cf697d07f88f", "sighting--52955839-8a08-471f-b5cd-210bff3da593", "sighting--95ccae0e-ee43-4643-99c5-4cc0e6d58e44", "sighting--0d910abd-fc18-4d88-b5a0-d5710f9e9785", "sighting--f0605ebc-9aca-4133-9b79-aad4c31f75be", "sighting--e30d3846-7147-4f34-9164-dc62ee9886bc", "sighting--b117c154-f702-4756-a7ae-4d9767199f5b", "sighting--257a8726-c474-422e-8f21-faca5affb6ec", "sighting--bbed1460-c962-43f0-b444-164379b6f63f", "sighting--a377e641-b997-4a21-9784-f5a6e939bc44", "sighting--8aa74116-4282-4139-87cb-8575d8095bcf", "sighting--24d7f8a2-fec3-4997-8df3-4b6510fd656a", "sighting--cf60abbe-905c-4cb9-9299-b7e26e142e88", "sighting--1a19785d-87bc-4ea7-8b40-882732dce0a1", "sighting--336cba45-b9a6-4c3a-acfb-1843afd2a0a6", "sighting--503b8346-a24f-46fc-b665-f6de3437f7ce", "sighting--d28210bd-a829-4e86-8652-170e37f4e7db", "sighting--3c0b0b27-406b-4be4-821e-2f279d9582d9", "sighting--ae52698c-976d-47a4-a722-90d5bb6ea347", "sighting--e3227aff-9487-4e8a-9668-c3432a7663ac", "sighting--e6b44e7d-8e21-4066-ab0e-48de6d084f50", "sighting--0469257b-d229-4ceb-abe3-75926f997002", "sighting--99a55a7b-34b2-4d31-a0dc-11e5217e268a", "sighting--eacbf829-081d-4b66-89ce-bf1e9c13755e", "sighting--35ae9f85-0a88-463e-878a-541dca7792ae", "sighting--cd27c3a0-4922-439e-8bc9-c35794f8a067", "sighting--101a300c-85a6-4012-bb75-0e31cc47d969", "sighting--4a232774-add8-477e-b3da-70dca2ef0a2c", "sighting--c3b54d7a-b290-43dd-bcf6-1c108fa60df2", "sighting--fe6b28ae-c60b-47d3-972b-ffed6391650b", "sighting--8727b1f4-a3dc-4483-8478-ea236eca194e", "sighting--b9568fc2-b932-4ccd-ad9e-35d29d33cdf2", "sighting--96fca4da-a1e7-41a1-818b-5ca698cc7d44", "sighting--ee715672-3009-444c-be71-e980d6b8be66", "sighting--b80b9e59-f8a9-4c45-836d-d04c29c52149", "sighting--cb70eed0-0fd3-4e87-a773-96ad85079b96", "sighting--beb9c853-fd84-4d07-bbe7-c4f7e4093e7c", "sighting--c959ef45-c96e-4c9a-99b8-11fc3a4c2132", "sighting--10a0855b-c27e-4aee-a8dd-3c0d3fbc93a3", "sighting--77fea747-8ca2-4a08-ba16-29d6b3449d7a", "sighting--9f421f32-b567-4455-bb8b-70a0f3eb2d22", "sighting--116d4d97-6c21-4e74-8a80-b1dac0d2ff09", "sighting--6a5f342a-a26b-466a-bcd1-62e7e6e48802", "sighting--40cb3b1b-e3a6-4aa8-8893-87c59ee68975", "sighting--9332c36c-d3e8-4aed-817f-181ee66aa1e2", "sighting--d288f9bc-5117-4365-a417-c41ebe14f663", "sighting--4cb82a0a-7d1e-4bd6-95e1-846d461cb40f", "sighting--ea271103-1ea6-4101-b7cc-15d0bd4dcdd2", "sighting--1beb9182-0631-4bfb-8fff-5e344a27fc27", "sighting--77fbe2f6-09b7-4e04-af1e-b35f8fe50fdb", "sighting--8713f9e3-938f-4253-9c82-46bc7ee4d3dd", "sighting--337fccca-602c-4ef0-96cd-cd7315761255", "sighting--084708fa-acc3-436c-a2e2-b40edcc81314", "sighting--349e9f7a-5c8f-4aa0-b5b6-8e522b42037e", "sighting--9b221248-4877-4223-8bfa-37be36d7744c", "sighting--302dc27a-e7d6-483d-a2fd-e3bc55dcd1d4", "sighting--deb6d0c9-1572-4469-a49f-609267d3a53c", "sighting--dabac597-0c24-49d7-a9de-d37ef75a475f", "sighting--fe428ecd-9d2f-4485-aa0a-38e821835460", "sighting--c3e0b9a5-3940-4a06-b644-e764e022db55", "sighting--a6715ce6-2c8e-4575-be49-6254fb1b0ec7", "sighting--75768c95-a284-4c9d-9e69-f5047c912e46", "sighting--fe6efc63-94bf-4741-bce6-d2dedf249b94", "sighting--c91d5d9a-33e0-4b1b-823a-47861bbf9255", "sighting--ece1d586-11c2-4c79-a078-14980c62186c", "sighting--c75ec50b-a5b0-4324-9ba6-3b2adc13eaf2", "sighting--1322b3c2-39a8-44f3-8dcb-1a19439b1385", "sighting--1b95b552-b230-4f5d-a69e-c85228c0acb6", "sighting--712e2b1f-8fd1-47f9-ac26-db8544744d02", "sighting--a35f81da-6bd5-469f-95f4-95b4b748e97d", "sighting--e4ab9e65-2ae4-44e8-8b3e-1aaa15772ac1", "sighting--5bedbd94-757f-4a03-aeb2-b15a47a0fec9", "sighting--5be0a9e8-e039-4732-b11d-c6ee5a0132f0", "sighting--be1c4865-716d-4a63-a571-ae8742fca54c", "sighting--251fc71b-61ff-419d-8002-00f037ee871d", "sighting--1dba5ee0-198a-41e5-850d-91f0fb4425e4", "sighting--1cfc8c82-17d9-4faf-ad8b-47da39a8a88f", "sighting--97b645ab-e941-412e-84f2-2307e02161a5", "sighting--f8b6dab5-29bb-43b1-b630-dfa529c70e1c", "sighting--52dfd8c8-2985-4295-a7db-014114990626", "sighting--88ed7c7b-4096-42e9-9b6b-144e5b0b86ff", "sighting--c5275fbf-c80f-40a4-9a19-083456a89fb1", "sighting--cebdc13b-d966-4704-b50a-a03b26d2aab5", "sighting--104281ab-4ed0-4d48-8a33-81470598f9af", "sighting--28ee5e29-0025-4eb4-bfbf-4c175b21428b", "sighting--b5800df6-eb68-4f74-9734-78faac476285", "sighting--af6f2f5a-9ab4-48f0-800d-db9c06606795", "sighting--19b0df76-7f4a-4c86-b7ef-d9849c4cd4cd", "sighting--4e74aac0-eb5f-4dd8-8c85-6566dffafef1", "sighting--214aa609-c5aa-489d-97bc-fbab97213e08", "sighting--30c47db3-1cc8-4362-9781-42057ebb57c4", "sighting--ca4d1fcd-692a-47d6-a147-0a98977698ef", "sighting--9f68f655-846d-401f-b5ce-4c68f9ec436b", "sighting--d0ae3307-f0e7-4a36-b6e0-091497f58717", "sighting--09fb66f6-d4bb-44c5-99d8-f8845f4f0415", "sighting--d4fbb526-c397-4fd1-b736-9eb394801e52", "sighting--caf7fe20-21be-42e6-9fc2-751d8b30e7e1", "sighting--daaf2874-b11f-420a-ad90-9b2f76181029", "sighting--ab673c2f-baf1-4f83-a1f9-caecd888725b", "sighting--b66b3c55-f291-479c-a941-94999702432d", "sighting--d30e43b2-4297-4370-94c7-8a6d294efb4b", "sighting--f12beaa4-1603-4e0c-941a-50f235122010", "sighting--e86438ae-057c-4ef1-95fa-6eefedc6f1ef", "sighting--696f2372-6a41-4539-990f-33a65c1e88bd", "sighting--18775143-4cca-4ed8-89f8-9367b1a58f51", "sighting--f2229102-6d77-484e-b265-b131e245a5b4", "sighting--7bd24ed3-135f-4b16-ae3d-ff6938148c1e", "sighting--d48ed5cd-efaa-4242-973a-a19638b749e9", "sighting--a2efcddc-b58d-42d0-9976-8985236a8765", "sighting--e4af7ce8-9916-4d14-be76-1300271f05d9", "sighting--1c4df2c8-b099-4f68-bb41-9928815763d1", "sighting--217880ff-e1d7-4120-b2b7-482ddf31f09d", "sighting--714bb9e4-2ed8-46a0-ad3b-704d1fa71344", "sighting--6199ad91-6c2f-4d0a-80bb-39ec60559bc8", "sighting--41556590-a39f-4d25-bdae-d0ff9593a5e2", "sighting--052dc969-54ad-405b-b864-8f729c98b073", "sighting--ee6ca169-275a-4b30-9673-5d52a444ce2a", "sighting--50ec44f6-83a8-4597-8a61-73d26110d130", "sighting--3f466842-f7da-453a-a1b2-c67ecfe3208e", "sighting--7481a165-4ef8-40ac-afab-9f1318760eb0", "sighting--206932c4-35ef-4815-bc67-71dab1d609ee", "sighting--e3432f5f-39e2-499b-b274-66beab172d35", "sighting--8c255a9a-7944-48a8-a40d-0e742bcb8e9d", "sighting--8989a9fd-789b-413e-ba47-8a9d53506508", "sighting--77e27513-f9bd-4200-9830-5a76df75c612", "sighting--bc3e1afd-f427-495e-ba94-8819483d0f7c", "sighting--b19cf431-1c03-4b69-a1e1-25e0645677ab", "sighting--1c27f0b6-49bb-43c8-8533-79a34eff4460", "sighting--f5ac531f-e891-48cb-a930-5d296614c8da", "sighting--5b3c004d-e662-4fc0-991d-06ef8cedd07c", "sighting--b5eb92ff-2d4a-4552-9e55-8ed96ec27a41", "sighting--ef3ea83b-2207-4c8a-93fc-67f50d0fbee8", "sighting--d885e182-5ace-4a88-aadf-f1e0bd9c4723", "sighting--848db38a-f8af-4172-8730-c94be502aa2e", "sighting--067439e2-6536-4357-897c-0715589d9cbd", "sighting--f34ee2b1-4d56-4a56-b7f2-fd943fb45ff6", "sighting--05e0ad90-4b5c-4120-85c9-cf05af1d02d1", "sighting--9ecc19d7-8d5c-4208-aa8a-bb8ad1d833e0", "sighting--c1f6a143-38c0-4a6d-b623-6d065a6c310b", "sighting--122883a5-21cc-4652-8883-8202ca76036f", "sighting--eec44516-6b42-4593-bad2-f35c066763d4", "sighting--cd0462ea-eed2-473f-a0b5-fc3683925c67", "sighting--9ec61e4b-9f56-438f-aaf5-1b065a3338d9", "sighting--7bcdb22a-6bfe-4c71-9ee4-4467ea88d443", "sighting--af8a1898-953b-4f30-b980-0437b7ea5f75", "sighting--49f4ccbe-f3c3-415a-a578-8fb21c60b6a3", "sighting--d932e5c8-1ce6-4dc1-b014-e1d0f68773c3", "sighting--d7262f60-801b-4b52-9907-d458c87b1026", "sighting--6dcfa958-10f8-4cc3-a748-6f8dd6a71452", "sighting--0dffa9ca-e35e-4e50-9bf1-e755511ef4b0", "sighting--6e129bea-ed97-43e8-9b1c-031fa0b4fc8b", "sighting--3ca3f450-ca6e-4678-88de-5b65e15ba82c", "sighting--fb06360d-0d95-4339-9a52-bd4c78df217c", "sighting--79de0b30-f52b-4123-b311-555224bd9ee2", "sighting--0849d7ad-ccaa-42e8-9b6f-4c5e0ccaf98a", "sighting--3f32fd66-381c-48d5-8b4e-e127ca8d2bed", "sighting--8fbb3786-d314-4343-88e0-63e0972488ca", "sighting--7e730685-68ef-4414-a6f4-80d5b905dad2", "sighting--a716bb9b-6c1d-4f2e-bb56-2cf0291e4482", "sighting--6f8f612a-3e0c-45d1-a497-92cb36d19e24", "sighting--36fc23b7-ff08-4eba-8bd3-6e8448ad15bf", "sighting--bd6879e5-fd73-4f5b-bebc-9a85745bff2c", "sighting--3b86a86d-feaa-4850-97b2-ee1a2af5df6e", "sighting--d0962597-f999-494b-a398-be81e430dd1b", "sighting--ed596f2d-f2c2-452d-90ba-50dba39b01cc", "sighting--ceb74008-f077-42cf-8fef-1f65ae1d18b6", "sighting--de301505-665c-4bfc-a62d-5712ea7d68ea", "sighting--3bf1b80a-ae36-4b93-a719-81a999720cbb", "sighting--2994494f-0e55-4a41-ad6c-4e7250afdad3", "sighting--049aa1ba-dbbb-4aea-928f-fd6690450497", "sighting--036f8ec5-690c-4387-8320-4a3b4190d0de", "sighting--984c2f88-2f50-429b-becb-659d78f4ce9b", "sighting--c3043a38-365f-40a3-95b1-6e3050f5543b", "sighting--4302f7cc-87f9-4aa1-bcff-3b38f8348f11", "sighting--41334556-472a-480f-8760-8f76259398df", "sighting--ed8b92dc-0491-49c6-9dd5-d9534e3ff87e", "sighting--e43b22c4-fe93-40dc-8b66-9ac75056d189", "sighting--47802ec4-13f9-4e7f-ac3d-d1450d1ba245", "sighting--51e3e99d-12a6-41cb-bb2d-331e6d06da67", "sighting--db2695ba-da41-4a0a-9dda-c8ffb8fcdf22", "sighting--1df199e5-2e03-44e7-8800-d34a7f33f082", "sighting--8599e1da-acfe-4b4b-ace7-21b1c6c2f4bd", "sighting--363084f9-04d7-4a90-9b40-e58656baaf3a", "sighting--0a31291e-e36c-40f6-beee-5b55fbc48516", "sighting--026b2133-ab35-4c9b-9320-132189099b02", "sighting--930861e6-4806-46c3-af67-f79854328d58", "sighting--4181c92e-3b52-46b4-a92f-0116ba6a741e", "sighting--b45623c6-6630-41a8-86d4-709acff7c00b", "sighting--cb949130-a144-49e8-b85f-e9ad8b804a62", "sighting--737b0dee-d814-4d9b-9f3c-d4bbb5b26183", "sighting--3848767d-fd66-4b8b-a504-2631dedafc96", "sighting--dcd76faa-ffe4-4175-bb47-7d591484146c", "sighting--36d7cd54-dea7-46f0-9282-2592674ae2b8", "sighting--a0a83fb6-303a-4949-9966-6c826b84d64c", "sighting--075f3dda-0e6d-42a7-871f-06f16213e283", "sighting--e2bc57da-2003-4b66-96e8-5c0731ba0e79", "sighting--0877acef-f676-4bf2-93cd-bf5ba8ccf8b6", "sighting--c0f04945-7249-4edd-964a-d64f01a16219", "sighting--b7397a32-2691-477c-afcf-2d5707165f70", "sighting--e90ff83e-9247-4767-9f63-0f73a927c3da", "sighting--7c84666c-5e91-4c70-87d9-739e1b48a5dc", "sighting--24d7c93b-67cc-4e2d-a324-c17d484f2979", "sighting--c28dc732-95db-4ace-962a-08b496420ff9", "sighting--9b09ef93-a1aa-4c1d-aa62-0de23e7f0f8d", "sighting--0d14f486-4b5c-44a3-892e-2cf0fc68ff78", "sighting--39ae34d4-b758-43df-b12e-dc8e1839e60f", "sighting--e8cbb7ff-3862-4138-bf2c-f884e35215b7", "sighting--5301f045-7175-49be-bf94-0efc69b2736a", "sighting--934415a2-1ad9-44ca-861b-8053ea8f1244", "sighting--591caf82-99a3-4e9d-8d60-48195de197c6", "sighting--d2a809a5-d105-4d85-9971-2ab3321b401c", "sighting--1b8903a3-ad26-4940-995c-d392eae72b81", "sighting--2e4fa4c6-1f7d-4c27-b3c7-50796e0a02df", "sighting--168a3b00-3bfe-47fa-ae45-de095a0f5dd2", "sighting--3fb72055-4a2b-4e50-870a-6644b0e3956d", "sighting--054c489a-5875-423f-a446-b401cac304fc", "sighting--33a24012-4ee5-4607-9f1e-33127371b53e", "sighting--04368fc6-a8bc-4c4a-b3cd-cf71c2fa69a8", "sighting--aa99d1e0-ee0b-4794-8142-8580e112b5f6", "sighting--0992e1f0-2d3d-4dd9-8a49-a2004b819473", "sighting--023a58af-ceed-4437-afce-7950574a414f", "sighting--79e66ec3-0d7d-49c4-aeaf-fbd45d3a94af", "sighting--361b6667-9fa1-4673-ba5d-65c473d003d9", "sighting--5dc3a5a2-f0e6-41cd-877e-fdc12b7e7934", "sighting--8b9dee8d-4a8a-4260-be2c-1a6fd59d82bc", "sighting--4e9f188a-9cd1-48c2-9e35-438a0494d4c1", "sighting--bcc9b5ac-9903-486c-8eda-a2690bc1821b", "sighting--600e3702-361a-4949-bc9c-2c58d11d6c11", "sighting--03b04d60-d0dc-4d15-8c3c-13c33c800f50", "sighting--2daf1a9d-888b-4833-9e66-61fca90b9ab1", "sighting--85a10ee3-825e-44ca-9b0a-19ec3ae9358e", "sighting--4c62bb50-626c-4831-9663-a1ded0f3839c", "sighting--0f2c7e41-5367-4ee3-8fc5-8e1a85938657", "sighting--0017fec2-adf9-44d2-84d3-26d340542f3a", "sighting--c5ac219c-2dd1-4fb5-8041-a5e1ad061b33", "sighting--6e67fc5b-a1f9-4852-8b5d-59a95e44e4fc", "sighting--676ce17d-9b12-4b17-9ffb-4b9c88db31dc", "sighting--0051d176-6c08-4381-aec2-5eb16f023eae", "sighting--cd9d6cb1-475c-499a-99ae-13cd9c53c21c", "sighting--daf6f3d5-fbb8-42e1-adfa-a4a923ac98cf", "sighting--eeaa7465-2905-44f5-bb02-a1ca9f223578", "sighting--75ebca80-25be-449f-a4be-c954127506c8", "sighting--007fce27-e74e-4672-93d4-71600c321e7e", "sighting--be5f6dea-ef49-4f72-b2dd-e842f637ba5d", "sighting--52255473-3d73-42d3-8361-973281e5d335", "sighting--e5594b5d-5658-474f-b262-c94499d4bfdd", "sighting--dfba527f-c2e9-4786-a37f-9e4dc4dffb05", "sighting--4d0c8d16-e97b-4d33-8caa-da025fdb9892", "sighting--e7b838f6-3944-4c1a-8833-f4ed3fcf5cde", "sighting--f7223994-3dc3-4a6f-b115-2b5a2089fc54", "sighting--2424f993-fc47-4489-b45c-3e1950d42a01", "sighting--24eb2006-5db6-49e0-b885-8ad120edb1e3", "sighting--d461ccc5-68c8-4434-a242-7ebd578618a7", "sighting--cbee275f-be3d-4e91-b554-149e085094c1", "sighting--67fcd0d0-87e0-41a1-8a37-93728e717850", "sighting--cc776446-fa2f-4b1a-b18a-749ea5dd95ff", "sighting--cf122ce8-f0dd-4dd0-9314-50c02c90f5ef", "sighting--348efd1b-e9f5-40f4-8d94-429260b11a16", "sighting--19ecd9f7-fe23-4e58-a0fd-c7154f209eef", "sighting--65527418-1593-44af-b378-8bc03811fc8e", "sighting--1647c5db-009c-4e87-8210-1a155ecf026c", "sighting--49c54e33-31cd-4efa-8087-e8b0597d31d3", "sighting--08885f2a-0180-4973-9897-ad6f72cb62a6", "sighting--59f48573-99fa-47bf-9e97-788ce89b19e7", "sighting--2cdfc8c5-ddea-4894-b613-87079daf36ed", "sighting--29fc5193-3c18-4b57-9bb0-bb9247613e5b", "sighting--3af5c27c-76a3-41a6-874f-721bc21b9b7b", "sighting--07df0702-8c11-4b74-ba20-9ee91b380386", "sighting--3d87c3b2-a52d-4112-a4f0-36f1860e647f", "sighting--38211952-3479-4936-9ea4-93ae319b0f3b", "sighting--4aa52ed0-cacb-4af0-8caf-dd35385ca1ab", "sighting--f6df49ad-c29e-44e8-a36a-f6a41e37588b", "sighting--e0f4066d-9360-4d8b-abfe-e3fd18dcdcb8", "sighting--c8bddc3d-d980-4f56-9a7f-37178e96b59c", "sighting--a1bdf921-0ae0-4e61-a9eb-6267780123d3", "sighting--0bd1f378-cc71-4884-a497-85019e4908fc", "sighting--c42ad32b-c1e2-4d1a-a79a-0d77aacd54be", "sighting--ea09c010-081b-4e56-9f8a-7f2576648d54", "sighting--18673589-ce75-46db-a445-d21f2a61955c", "sighting--1a0154a6-abe1-45d8-b536-353ebe5b6655", "sighting--b8332054-3007-43a3-b93d-d766a4eecb5a", "sighting--c2847ccb-1c1d-4d29-96e4-ffc0d8d0e4d5", "sighting--963b9cca-dd02-4d2e-971c-ecd917c71c49", "sighting--9749154c-c48c-4a5a-bd42-444d1ec58bbd", "sighting--e5221d42-38bf-4c4b-af82-131dafc9e228", "sighting--1efa5f99-5d47-45a1-92d7-112915b67c82", "sighting--26af4f30-e486-42aa-a949-9ec11ef49944", "sighting--b3183f50-5657-433a-8148-d5a0fbfa9163", "sighting--4b6e4662-fe4d-4b0e-a473-35c1584a7fd5", "sighting--7d68f993-cb36-4795-94ab-0a0d6b0308e4", "sighting--c79b5d02-bb08-4852-b10a-0d1643a1ff2c", "sighting--2869f891-7a3d-448a-9026-c8716d37b26e", "sighting--a682dc54-52e8-403a-b5c7-1371d0e3f2c9", "sighting--0dae4ede-7e5c-4969-8ca4-936560b10767", "sighting--a4a5ffbf-c0b3-4ac6-8380-0f5d260a335d", "sighting--6ecd3d99-d0c1-43c1-bbf8-ab4fb216f3d3", "sighting--7da4ee25-4af5-4dc1-88e5-2361418d2d2e", "sighting--9729632f-2401-4ae6-ad35-83d3f9331239", "sighting--e94df496-f229-49df-b9ad-fa05579ce264", "sighting--dddb008f-c711-4f9a-84f6-8d9e2f3666d7", "sighting--a76d01af-3034-4560-9a6f-e879c808473a", "sighting--431b8617-acc9-4612-8d0c-b2f1f740b5e7", "sighting--60a6e2c2-d124-4548-a59e-e327169735aa", "sighting--7e15d3d7-cfc0-42ca-b1c1-ca863d5e35fa", "sighting--ca79e083-5a27-4859-a1d1-9d7e5d78b0df", "sighting--6a04e593-498d-4dae-a914-a55e6f2c013e", "sighting--3743c48b-5577-4712-8da1-9352ca4f6eba", "sighting--36cc63ae-3c9b-4498-8826-fb70271372b9", "sighting--c5c8db3a-12c2-4d31-ac91-c11b602925a5", "sighting--c2ec9ded-f640-466c-9a20-5dc4e2add8f7", "sighting--601a3f86-9028-4a0f-8d5d-cdcbf954ed84", "sighting--2864c9c6-3801-40bb-b646-e128cc1b485e", "sighting--6675b61d-e1d3-485b-b70c-f5c105c4e366", "sighting--60adc9e0-00df-41dc-a041-98a33d5e619a", "sighting--a1f49168-f48e-4770-b8b0-0d109109abc7", "sighting--f4ea1d4a-b2f1-40c9-acc2-8cf1166148c9", "sighting--393e7745-b219-4909-97b3-fd26d463e8be", "sighting--c2be2e5b-6757-49bf-9d98-41c74de5ba64", "sighting--1f9ad116-5b4a-4920-8ea1-c5ca486e034e", "sighting--fda6ad36-0dcf-4695-ba14-a21dff7af07a", "sighting--caa85689-a445-41a2-939e-1c3f028e304d", "sighting--aa8591b6-ea05-4d2a-869b-3df434f3f8ab", "sighting--be5861a9-4cf2-4ad7-949e-e6c1ed09b433", "sighting--d240f969-c0f2-4069-9795-782da7b9edfa", "sighting--398b1434-9b0a-4bdf-9232-c9c1db779606", "sighting--f696b390-812d-49de-a7a4-3e12a57c32f1", "sighting--78a5c9d5-5207-40a3-80aa-d7c2a7d8ab0b", "sighting--188352ea-8401-49a3-ade1-05212ae8d779", "sighting--9a48033a-dea6-403e-800c-dfc140c6cdd4", "sighting--14f20215-6e1d-4456-9f67-560ddf72b19c", "sighting--8d079b50-20c9-42d7-955a-9b7d5063ae80", "sighting--9d0aad59-6a69-4837-accd-a9b8aa5e9924", "sighting--34dbd023-b477-46b2-aaa1-3c75aa8c4679", "sighting--b81b9308-74cb-4e83-8171-09dbe96358a5", "sighting--be80bd35-0838-4914-a908-43f5e0960cc4", "sighting--36a21421-c3d1-4ab3-991a-a70f182277ec", "sighting--03d2f827-f57f-4292-884e-980f8bbe03df", "sighting--7cf91c89-62a0-45e7-a2bd-05d3111d7d41", "sighting--642fe8f4-e198-49ad-84b1-678a6b472fc5", "sighting--51de0e13-e94d-4bfd-bc49-1c56113541a6", "sighting--41315ed2-530c-4cfd-8ccd-6b25d97767f3", "sighting--e0270fe7-9630-4a44-b98d-c011a0968c3c", "sighting--adbfa309-2785-4b1c-95fd-b03d73d39ad6", "sighting--67ec30fa-f713-4f8a-8891-767dfe545020", "sighting--d6368385-eb38-4627-b9e0-9a1c0c9df110", "sighting--e1c5b72c-3601-473f-a50e-70f46d61e148", "sighting--1cf97886-3b15-42b5-bdc7-c7db09159005", "sighting--e166a099-cce1-4df5-966a-a053f254a9ad", "sighting--e4829efd-6e23-4467-9785-22000fbba8d4", "sighting--dd0f7390-06ef-4f36-a6c5-8a90cf415ead", "sighting--33048c9b-a5f1-4a7d-8562-46e9b54bb70c", "sighting--48e44a7d-b29a-4f51-8ed6-9dc29620fe52", "sighting--3ca4aa6a-4c59-45cd-a920-3b82db6b6f98", "sighting--b56d29e7-c2a7-4d42-a26c-29b5314503bd", "sighting--94921b09-a456-4619-9bbd-65408933397a", "sighting--67dbb016-393c-4ccd-8be2-b5c6be97ec7c", "sighting--bb7a640c-b31a-44ff-b1b7-542240407298", "sighting--256fbc08-b3c4-4bdd-a2f1-a86cd696242f", "sighting--51fa3160-7dd6-4777-892b-b682041e1a36", "sighting--d2a6673f-e453-40d4-83c3-f2b8f5df3953", "sighting--6d60c294-77a4-4581-b94f-e587c2d98763", "sighting--331e9506-5bff-4065-b3f7-2ffa24be553c", "sighting--861bb64d-2c90-405a-ad7e-3778fa99309b", "sighting--3989daf9-f832-4bd6-807d-870690c101ea", "sighting--8379def4-db50-4eeb-8af6-60ca152204b7", "sighting--bba093b9-4ba2-47a5-a799-c74c184ff227", "sighting--683432d7-c286-4c5b-b10f-bad5b642ac1e", "sighting--62ca038d-5a26-4b2a-9cb6-04436e11a3d5", "sighting--30221e44-c429-489f-9d9b-edbedcbf4baf", "sighting--4afd00b7-2ec7-4847-a1db-9f7e87f682ad", "sighting--9ca76fed-0d3b-4f95-964f-61ed75f3a6f5", "sighting--57333d75-f296-4c90-b285-eba9eb018ddf", "sighting--69853a85-2d8c-4589-95d3-fb075d17f0d2", "sighting--75b924f9-22ea-412a-a642-e344f0fcc21e", "sighting--fdc48119-b367-449f-a34d-b67253d1ce2d", "sighting--2395115e-12cd-4265-b65b-afa72bdae9d0", "sighting--57df5dbf-b0e0-45e2-834c-6fa752eea0a7", "sighting--8ee1751f-ad31-42e0-96e2-c07dfd8b622d", "sighting--50599685-832b-4ad5-a09b-906549a509bc", "sighting--e4f91af1-85dc-4a9c-8825-db94270cd6eb", "sighting--42e772a1-9c00-4167-81ad-6220a92551ae", "sighting--fd817907-a873-4504-97fe-0a15c77522ff", "sighting--f915e092-2725-4804-828c-e58e63b9d76b", "sighting--dc5eaefa-c03c-4f59-bf76-4098e0cb9627", "sighting--479ebae1-c1be-4ea1-88d9-828dbd506849", "sighting--33fe2cd4-6f18-4c1c-aadf-d6e5277e2143", "sighting--be7babeb-691d-43fe-9731-a64eb33163fd", "sighting--8c3ae167-90cf-4b35-b88a-46506dade3e1", "sighting--de100926-ae15-4382-8437-97400e859697", "sighting--8f748bc3-a1f2-4026-9589-6a82d1721bc5", "sighting--e6193293-893a-467f-9209-a6cfbd13b691", "sighting--3d54f7a4-caae-4674-b5ff-72f1bc48e49f", "sighting--63c63ed7-0a89-4c52-9468-4d0bcce34d3c", "sighting--58149c95-6aa2-4321-8029-dafe6396c352", "sighting--7d62998b-107b-47fb-b885-cdb194694870", "sighting--4ba2b476-ba59-4d8f-a611-f4f1290ac23a", "sighting--299a03c9-199c-4116-a412-8517c8052d9e", "sighting--efa9eff7-b1e3-409a-b984-ec8c28ce20ff", "sighting--5eae8111-26bd-4aae-ac75-db49ec139ba5", "sighting--7c524ca3-34ba-478a-b5c7-d6db03fd4bb3", "sighting--d673defb-d364-4b4d-9236-c583bafcbeb9", "sighting--d8a9068d-921b-4fb9-aa74-abb94fcfe490", "sighting--faad494b-5c9b-4d96-939f-73ae6dade046", "sighting--9053b013-be07-42cc-983a-2e545ab2693f", "sighting--cef7515e-67c5-4ce6-b635-96f83e0cbca3", "sighting--40310362-5e43-4132-823f-aeecf99f9b4e", "sighting--c0d4aa6f-342f-4640-b878-726459de32ff", "sighting--54c3d02e-b05d-4cfa-a887-3f8ecc892939", "sighting--b85db06b-016c-4fc2-adbe-a3c55575bc89", "sighting--790d3edf-2c2c-4a5e-995f-7d3f0c98540c", "sighting--f2ca7006-d3d7-433c-a224-ef2f2903227d", "sighting--ad30a8d1-d8a4-4ddf-a681-ecc1f88b4bb5", "sighting--ceaae133-0d2f-48e3-a22d-eaf0a0b3915d", "sighting--0340f14a-2ab3-4cb8-acca-eb38ffe7ec7a", "sighting--baa9eff6-300f-4a5f-a18e-2c4fa96495de", "sighting--63464cd3-b5a8-4be7-81dd-f9fc68358770", "sighting--9b9e2e59-1653-412b-a51e-0f9013424d43", "sighting--cecffe97-1377-4ef6-91fc-fcecd7913a79", "sighting--945e099b-f676-49b5-a8db-3ec5a30a5b0d", "sighting--6f54ee26-2e20-42b6-bac8-998fca94e837", "sighting--382c2f31-87d2-4e18-9693-44853b18ad1a", "sighting--8b94f1a6-5da7-4ba7-9cde-3c52baf03b8f", "sighting--10a16d49-df29-4f12-96e6-a04130b35f5d", "sighting--c8cb87d2-cdba-47c9-a2a8-6727b58ee9d1", "sighting--867fa066-ae7d-42fb-b774-cec93c43acb2", "sighting--2fe3d51d-0076-4024-b0e9-c9df038fbd7f", "sighting--a8dcac3d-9a60-4b4b-8d01-db1ba22367a3", "sighting--b763e6fc-a10c-4c43-afd3-85b44f82cdd3", "sighting--c11c93d3-0923-44ac-924f-0d9fc16b01d3", "sighting--17e07b5d-7d05-4781-895c-9bb7a605f42a", "sighting--0dbe08be-4d16-4d94-a525-08c09342349e", "sighting--26aee0e7-3a3a-4aa6-a588-ce83f44fb20e", "sighting--caba9b40-2fc8-4d99-943c-d77686064353", "sighting--67483021-1179-49e8-97b6-3eac16af0754", "sighting--f34c352a-9732-4222-a7ae-2d9af1e8c8de", "sighting--56b68c8e-1459-4af2-a690-97a4f22b1914", "sighting--0df6c7b7-ec11-4502-82b7-0beafe4581f0", "sighting--880adffc-fa5c-47aa-a468-810d3469b790", "sighting--43537d26-4aa4-4557-81aa-e7b04d9c51f8", "sighting--90cfe8d3-b55a-435f-9f4a-6c6dcbd7b69a", "sighting--9fb13e40-b6ce-46e5-ab9e-78e9c85aff93", "sighting--f85c544f-11b8-4ecd-a60e-79f10bdfc53a", "sighting--4a1f2652-22fb-496e-bceb-0b225b1dfd6a", "sighting--7b79c334-13d2-4827-86d0-d4c0b9253aaf", "sighting--6e5f3e34-33fd-401d-85a8-a13fa95c66ef", "sighting--88726268-ed49-4341-9b14-5df43266af6e", "sighting--dd7ac102-3cae-42a8-a7bd-ffe7a554bd1c", "sighting--68b21261-0591-464b-87fc-059bc60728a1", "sighting--739a21e1-7a18-4a13-9f11-42884824dea7", "sighting--942d9490-16f1-4f28-b7d4-972bad0df868", "sighting--44d21969-11fd-4465-a3b0-892b5cab7caf", "sighting--f61e2df9-38aa-4959-9910-b97c4976c0bb", "sighting--9cfc5d55-9f9e-4cb7-afa8-99dff24fbf26", "sighting--e0bc1b79-54fe-47a0-9ee3-8f30d7caa5b5", "sighting--ecc015b6-23a6-4f00-8d11-0de4ea050e16", "sighting--1d1e6a99-2e4f-4fb5-99a2-d90e44bb9f9f", "sighting--5c76091b-e11b-4e53-8e5a-a05853288903", "sighting--ff354a3c-ad0e-4a25-9c0a-b6a7ecd6dc31", "sighting--e09dd231-c336-45f8-a8c0-96d08734d89f", "sighting--2259a86e-316e-4d99-8d97-e2a95845c179", "sighting--508e6675-9134-4c5c-900b-636fb87419be", "sighting--c6e4c59a-6621-43b9-845b-3d30def9614d", "sighting--0e98e19e-8bca-4fef-818d-6a7428ec457e", "sighting--99c1781b-cd00-44a1-af6c-9d2023e12f7a", "sighting--adb56e8d-3d9d-4769-b20c-6fa3770b96f6", "sighting--84664b6b-d6b7-4d2a-a861-17caa98f18ac", "sighting--53154359-fdcf-476b-8843-13b8ad68dd4f", "sighting--e14e84e5-8fa5-4521-a561-ff9288cbc1e1", "sighting--f763d030-308d-47b1-bbb2-0f2e648a5109", "sighting--36046615-5d50-46ae-96c4-3707998de7bf", "sighting--a65be9ac-316c-485b-a543-fd06188df2fc", "sighting--d3fdbea0-104a-4807-9eb5-f574b9bea857", "sighting--103e3559-e56b-4265-8826-d4c2c6c7dac0", "sighting--15c72f17-463f-4a8d-819b-858bbf982dc9", "sighting--2e7a67d1-7f8f-43a5-bbf9-365a63ef13de", "sighting--bef96570-3945-4b4d-b7c0-7cbcfed51afe", "sighting--7866c61a-1196-4220-9bc9-334b398f6639", "sighting--eebdd360-1f64-43e7-9b76-206ea8a7322e", "sighting--1647a811-5cf4-4238-8289-f351d12c210d", "sighting--9e523240-3e40-4a05-afc4-16f194ea9314", "sighting--adae33f4-a809-400a-b845-c6fe94874940", "sighting--1cd2a276-69bb-4776-9b85-68c667910d0a", "sighting--0fa44dd8-f55b-4621-b974-94d9f58f582d", "sighting--dd9e2ee6-69c1-4546-bdef-1d5230a32ccd", "sighting--2047c01e-1676-4f88-842e-712e3070cc0c", "sighting--aa367ba1-a934-437f-b91f-c2d28e37da8c", "sighting--c6f2fd29-7a7c-46a5-88e7-2019227097ef", "sighting--b94b1c4a-358a-47d9-9e31-a6ce712d58a5", "sighting--7cbc1142-3d31-470f-bc7e-72808805114c", "sighting--89dd6e56-c60d-47d8-93d5-dbb8cdd4ff49", "sighting--bdcfe2e5-a54a-49e5-8b3b-c57f6b09df6f", "sighting--c36c6b24-f3b5-4c3e-b1d2-bad96c36d22b", "sighting--72033b21-c788-4a27-b619-349f98ff3244", "sighting--43fdf9ce-3280-4961-b7d5-3598e1e34850", "sighting--0932c1b6-34e0-4a6a-95b1-6f28943c9722", "sighting--0883ddac-a3cc-4e04-a6d9-06f31c2170a4", "sighting--b975001b-f009-4008-80fc-d9580550c487", "sighting--02e989b4-6e64-495a-b1bb-6e0e41be097c", "sighting--935e1844-b461-45b7-9f62-7786d143632c", "sighting--9ce31410-42a2-4316-a698-100f8308ad27", "sighting--32fb5957-c3ee-4205-b632-b5c341b04fee", "sighting--92077efb-d12f-48e7-be55-f31ed3fc5730", "sighting--2e6077a7-ddcd-46a1-8658-53295704bab2", "sighting--8e1ff3ad-dc6b-462f-b54a-f77b1635297f", "sighting--85d07c59-b16f-4720-91f2-1b50551a2f20", "sighting--63de6b5a-91a4-46ee-ba07-b47c5f71a5de", "sighting--673b2719-11de-40a9-886e-6fd41e9a9722", "sighting--98f37128-dbb1-49e5-8310-9452fc0c9240", "sighting--ae756e61-8dd7-492d-9373-348b7d84c012", "sighting--51a7904b-b91f-4936-848b-fcc0ce9c64f9", "sighting--e92a242f-9890-494c-b8ce-92b6f9ead94f", "sighting--8ae25e01-9e5c-4820-939c-7cf90d01dbc3", "sighting--2a2c11b7-d291-4263-80fc-ee22f105322d", "sighting--91327305-c4fb-41b3-8727-89b2c1c0dc55", "sighting--6093a828-76ed-4631-9f21-f4d349286b92", "sighting--26b0abb5-8915-4b01-af48-34b47c44223c", "sighting--e71c0fe1-cb1b-46ba-8c76-be07d152258b", "sighting--a757b72d-7a50-448a-8ebd-c79871eea3ba", "sighting--c6f85e3a-795e-4488-ab97-f92253489411", "sighting--40ab6bdc-7c42-4b8e-9907-9c4457c3728d", "sighting--48e4c1ef-f2c2-4b77-99af-adb2f0cf6519", "sighting--56660170-099d-4e3c-b3a3-eacc856ebb71", "sighting--9d02abd3-e2db-4c43-b89e-de605ea6b1f3", "sighting--95f8e895-9afe-4aea-944a-0e26bfde1c6c", "sighting--9b0b3c48-084c-4b41-a66b-298dc9b76a9e", "sighting--03625fc0-734e-4551-8461-0168ce845a9a", "sighting--ff4540a7-2022-414a-805d-e75f56dc360f", "sighting--cad2a55f-affc-446c-a659-e693871fc8e1", "sighting--532a9f6a-16a8-4b34-bfa9-003f9f350866", "sighting--3cca6f18-837d-49c1-a8cd-cc57f0ce451b", "sighting--d0ff386d-f171-4736-88b0-bd9b0f060431", "sighting--2a27a19a-418a-4d0d-bcc0-c2f7628a5fe9", "sighting--35eeada9-4f94-4f30-b3eb-2aa866d0b10c", "sighting--032b5cd0-7ba0-4f66-add0-981a6288270b", "sighting--8f0320db-9dbe-452a-b1a2-4f4da963afb3", "sighting--a5f80f1c-1837-48b3-8ed9-dea8248d9a12", "sighting--6e1f6a68-5f3a-49b1-a1f3-eaf526316603", "sighting--829012bd-dbd4-4539-96ed-ef5fe974be73", "sighting--7125b3f5-a9ec-4dbd-8da3-13f2fefddde4", "sighting--47fc9742-5140-493f-9124-195c3deb7161", "sighting--476ab179-6fc0-4fec-a53d-8fbf37fb4650", "sighting--61b3d00c-b9ff-4803-87f2-977c25d1d1ea", "sighting--9f304c3b-26b8-44b4-aaac-64d1bd8e77f0", "sighting--39b00b4e-a11e-42a3-91ac-063ffe6a2761", "sighting--57254ccc-4a02-468a-b69f-682c7d52e143", "sighting--42542b73-dfbb-4cbf-a191-3f70b16782a1", "sighting--4678d42a-f932-4a00-ae11-f308c8a74303", "sighting--3d14aebb-97bc-411f-89f9-abf3e3a1cc97", "sighting--f142e3e8-9e65-42de-a0d5-3cf1a6067266", "sighting--2104a447-0490-4de4-93e7-05c0da5b32da", "sighting--f0aba4fa-8177-432c-84fd-5328f6ecc95e", "sighting--678afa45-8ac3-4146-8a3e-dd8b0ac8fd5c", "sighting--9489545a-44ef-4363-b981-0c2ffd1a1ce3", "sighting--568c286e-111c-4127-83cf-7d2503360d2a", "sighting--e5ccf4ad-3697-48d6-af41-ba9ba2c59b3c", "sighting--85362c71-42e0-4839-8821-046c482a08d7", "sighting--64e81c59-e02f-4046-a7d8-f4b3366ae32f", "sighting--e9106526-7e1f-4c3b-aef4-baedd4d51108", "sighting--a9b18b4d-2ff2-4cd6-a583-76ce0b2cf9ff", "sighting--0a897e73-5dc0-4bf9-8f84-f3f828e16409", "sighting--63b42188-4e8e-4160-b5ff-4692476de3b9", "sighting--73de6744-ab50-4538-a733-81e1b1f3cbfe", "sighting--ba9ae1a7-a995-4a16-975f-12bd1634176c", "sighting--c7eb54b9-dc52-45a5-93e6-1bf80b7dd73e", "sighting--b3b2b8d4-cdb9-4e5f-806e-f03602286912", "sighting--cb79dbe7-ee72-45c5-8eec-eb13ff6fbf68", "sighting--b729a4b4-32ee-4c01-b14f-800b21f4dc13", "sighting--87334861-9018-42b2-a3d2-da8b39a45393", "sighting--428cb944-75a6-4c99-b941-d0615355b197", "sighting--1b8f0941-32dd-43b0-89b1-2e323b7c5a32", "sighting--196b4db2-57dc-4fe6-a9f1-7b19ea1e69d9", "sighting--6ba19301-983f-4d98-af72-1b54e4ae2968", "sighting--fdb4de7c-b7ed-4219-a03c-7e9c8ca3a053", "sighting--ed1c1567-0bec-4c29-a9b4-d7606b3a1a47", "sighting--1308c388-1189-4fc1-9226-a484b6c3bca4", "sighting--e0bb5faf-fde4-4648-980d-020ee8e6cbc5", "sighting--69bb4b0b-70a1-49b3-859c-8d376e5a2716", "sighting--11492b28-cb74-4503-b0bc-f8d44ac3083c", "sighting--d3c8b1e3-0b29-4d33-acdb-0f339a597a77", "sighting--913eda75-616c-4cf1-82ae-2c930de69368", "sighting--5de57d3f-84f1-424b-b5ee-a7e4d7355faa", "sighting--ec9410d0-4218-432d-9ef6-142e3c172027", "sighting--bea40329-359b-4ded-88aa-b22f89442029", "sighting--bd19202a-0b8b-4ba6-b8c5-d22b9ffd81c3", "sighting--1cf089fb-705a-41a1-b835-eb23027a3cb2", "sighting--bd0a308b-ab02-4775-8ec7-8e6f9263b1ed", "sighting--2352d8aa-556c-41cb-a089-41c044b54541", "sighting--8e21c529-d711-4e4b-942b-6e1c4553764d", "sighting--552c7863-1d2e-4c24-8bc3-2ee46850e4c5", "sighting--f527d90b-a6c6-46c2-8bf0-eb217f4007c5", "sighting--5496d7a2-557c-408e-b6bb-e31e2fd1877d", "sighting--15e19519-325e-4383-9070-400a29884cd1", "sighting--9599addb-0d0a-4f77-8aa9-4d1778086297", "sighting--ad9917af-a7c7-49ef-8651-48f8125d8e4c", "sighting--b9e7596a-6762-468f-ba73-75f73a1d78fb", "sighting--522b95d3-8e7d-4feb-84bb-c6ecef8faef0", "sighting--d84bf066-7ca1-4152-b7ed-95fd73a07eef", "sighting--04051504-e97a-4015-80c2-dd1a79612cb5", "sighting--25f97ec2-bf3a-4d29-bdb3-06b033bd7252", "sighting--ada7313d-b8b7-42d6-9db6-c3e8a98705ca", "sighting--76c2c66f-b0eb-47f8-8c25-16faeb8d09d8", "sighting--f2a7967f-5971-44bc-b64d-8da48a8ea853", "sighting--a228830b-dc97-42de-9d97-5d2261bae33d", "sighting--224d3764-dd73-4aab-9c33-bffa914b104c", "sighting--74c9f0d5-c8a1-4a8b-882c-71dc00dff4f0", "sighting--7fd4afa1-8133-47fe-9ad1-f29e5360a155", "sighting--e03c99a1-0366-4b3c-9d5d-d7513d7524d6", "sighting--088266a3-c471-4233-80f1-3d8a81f67f62", "sighting--bbc70056-2b98-472f-90bc-03dcbaf65c66", "sighting--b8726f05-65c0-4448-92d5-17c18dfea3ab", "sighting--6df4693b-3744-43d4-9d90-a7dc1076460d", "sighting--f026b0c8-8d64-4f7c-80f1-9862bc42c2b0", "sighting--1b90b090-6b7c-46ec-bcb4-7f83c3ad675e", "sighting--19b1f4cb-2a04-4b56-9836-96630d0c6107", "sighting--35564c9d-9f5b-4210-b82b-ddba459b75d4", "sighting--1723fbac-8ff1-44f5-97ca-dcfe25840a8c", "sighting--1bb27cf8-25b3-4616-ba43-7117907ab482", "sighting--ab38b3be-8fc2-4a28-8197-4fb5026e7a18", "sighting--7639f9f7-eb51-479e-9998-8bc87d92881e", "sighting--16a9ecad-425e-4998-93ee-11405e337cee", "sighting--02b15dcf-0e2f-473b-bfca-933ecacb4172", "sighting--3981e105-298b-4ece-99c7-75742915d32b", "sighting--29254ffa-fb2d-461b-b5f6-b7da70b023b6", "sighting--802bb68f-4bc7-43cd-8458-8287a51a2ca8", "sighting--27786628-090d-4aa0-abca-971d79449d66", "sighting--255ec1fa-1dd7-4bc0-9bbb-e95a1f455b3e", "sighting--e675233a-319e-4632-a17a-e77ec36f5845", "sighting--119ad9f2-64db-4189-946e-f4ca592276ab", "sighting--2b341a2b-b8fe-4386-9589-73e096af159f", "sighting--6809f8ba-92c5-4816-86ab-f44ab4e1e35e", "sighting--b3906736-d209-4df0-aa1d-bd56d4446375", "sighting--2d97e62f-aec2-4395-84dc-10567f10f4ac", "sighting--b90cbd2e-90da-412b-9459-375362c4a941", "sighting--92814765-fc0c-4c9d-9696-0c2b19ead7f7", "sighting--c948f285-61b7-4c43-ab69-fbf23be9d272", "sighting--0f59faef-fd0d-4463-982b-a70fd37be399", "sighting--d6cdc743-8404-4efd-9cfe-0fcfa8c56760", "sighting--bbfea8fe-ad1d-4cee-9347-18056bfa8443", "sighting--936a50a5-c31e-4e51-9567-94422ca0af77", "sighting--2a163d1e-ffe8-441e-9899-b730993e3dce", "sighting--a00128c3-007b-4529-891b-e6cb2420d54c", "sighting--1e0281a9-58f2-4825-b782-9935eeeeb524", "sighting--79de79fe-5dab-4b2b-a925-550031bc9924", "sighting--965eb2fb-7cdf-41e2-bff8-a54c2fe9de68", "sighting--e19d0a92-9747-4454-aac9-5432a8a47f2f", "sighting--72e2a4cc-d231-493c-aef1-48eee3fd3fd2", "sighting--9668aea7-6480-47bb-abb2-3160d5adc1fb", "sighting--3d43a58a-214a-45d2-9a63-44ae8c632f48", "sighting--210599f8-7206-40b1-80da-67faa975c1af", "sighting--d4cae31d-2736-4585-b1dd-c2712a5feb82", "sighting--018b6f32-ad9d-4b80-94c0-b4ba6d671ea5", "sighting--0a589c25-02dc-476f-b90e-eead925005ab", "sighting--f922579d-b75c-4b07-bda2-9fa3402c9bbc", "sighting--542772e5-abfb-4310-b373-b9df7de694cb", "sighting--9c73ebf2-75ea-4630-9104-dfe42f9dd836", "sighting--969a41e8-06e2-4f7f-b486-2af734ec4eaa", "sighting--87fa1204-f3f6-4449-9e55-53e91f696d6d", "sighting--ececb3ed-12da-42fe-8499-57c4c6fd1f41", "sighting--66b29101-daf9-4924-9b17-38c232c7887d", "sighting--50cb296e-bf2c-4f76-8911-cccc1d44625c", "sighting--22763c44-9e84-474e-9460-da04c26f023c", "sighting--6de9df36-bfd9-4919-9587-7e1ea2c69545", "sighting--f601599c-22d2-4320-91af-3679ed110227", "sighting--688acf2d-5a8f-440c-9573-24c0ec403b3e", "sighting--790f4715-7584-4683-b2fc-6f7b6032a466", "sighting--e254e0ac-8647-4bcf-9d45-bfd480f487f6", "sighting--2725c4ce-4f30-4437-89d6-324fa46d102f", "sighting--f144b5d4-321a-4e82-b96b-51f9b9a72a00", "sighting--0a1fa1d2-660b-490d-9792-d08641c2e9b3", "sighting--c17f521d-a30e-4062-a754-a57b6e5986e5", "sighting--ef21a7c7-57cd-42e4-9727-a3009b8f94ad", "sighting--148694e3-b1f5-4442-b2f1-acbabf7e9d0c", "sighting--594f759b-6201-4a07-9b1e-9d721a508978", "sighting--99d8ae8b-887c-43c0-9402-48b47867f2b5", "sighting--0db526f6-bc8d-4c33-88ac-23cd88e5fbf1", "sighting--79174e02-0b1a-4ff3-8ff7-def3daf95676", "sighting--0b8379d2-36a1-4874-acdf-b36aeb01e641", "sighting--6dfc4fd6-250f-49e3-886b-cf104ede0b17", "sighting--e5cf0ab1-a259-45dc-9edf-a5cd7da70d25", "sighting--7a2e5807-8197-4b50-9b1e-60b6e4b4b89c", "sighting--b2a8f600-b92e-4881-8682-e653841d5f42", "sighting--8309fb55-cd9f-4258-8bbc-447a57cefc9c", "sighting--c1d5a983-475d-4561-8434-87e1ac06ff6e", "sighting--b950fb0f-f75c-4d34-9408-a62fac514e36", "sighting--40f11fd9-4434-4162-bed4-47bb39b4c6b0", "sighting--d3e2b5ec-a4e1-4e9c-abd2-183cd234840d", "sighting--82fb6e2d-172a-494a-9166-83897f395f77", "sighting--c975bc6b-2fd1-4969-8d0b-3223b564bd5c", "sighting--ab736cac-383f-4a28-a917-de7c47d34065", "sighting--30211a87-1a40-46c1-a63d-4d99591ea7d0", "sighting--c20d989d-3e2c-4eda-bc8a-ecab2f152b82", "sighting--4afd8edc-1c91-48e7-9ec4-e7d532608a8a", "sighting--6bf4f894-670d-458a-ab85-dc29b5e037e3", "sighting--51c01750-2b4a-4925-b019-b18b538afa70", "sighting--e676ee58-39a0-4e29-a17e-2f46da038282", "sighting--8d40f1a4-f6c8-42ae-8f46-a6b5a9b0aed2", "sighting--6ff45bee-dc39-47fb-bbb7-b0ea61ae6a54", "sighting--f02837c9-0ea4-4ec3-a843-45f86ff0eb55", "sighting--890c5fcb-7c34-4034-b326-4d851ec5b51b", "sighting--52816a93-8d0d-4a40-b80f-a41196d3be86", "sighting--2d928408-d078-4072-aed9-cb5d6a2571ff", "sighting--322edf56-77eb-46c2-bacc-034cd8693865", "sighting--5b2e2098-02ed-4647-b66f-ef42b96c95b9", "sighting--172a778f-d54b-4af6-8eec-41f0e0945cc9", "sighting--8cf619ce-51e3-4446-9c71-c3bfdbfc458d", "sighting--b86e8fa6-bf32-4f1d-bff9-82a5771a5904", "sighting--b927dbd7-82a9-4b5f-adf4-7ae888fc1495", "sighting--fd753e75-f53a-4d12-ad8b-93ac3ed666bb", "sighting--81b35f6e-b3f1-4937-b873-c5f95b136026", "sighting--9fbf115f-ed30-40b3-b8a7-21328106a08e", "sighting--4497da31-0833-4479-8166-1f4d2eff3a73", "sighting--d0a04e4e-128c-437c-8031-713e772a13b4", "sighting--e1549826-fe93-4e7c-9ba1-4c8c0727da81", "sighting--46171d29-f610-4073-8ddd-54b3f0eabbf1", "sighting--2ca634e2-fa6f-4b34-848b-88d76b337bd3", "sighting--b50bd7ab-ca17-4374-86df-2a30e27a1e85", "sighting--5b440934-1d9a-475b-9130-8c6e077bed53", "sighting--a27ffba3-169b-491b-8de7-ab2f460fcd9d", "sighting--179633a7-3a11-4d22-9b44-b22a32872725", "sighting--c57c6f52-c13a-4467-9338-c45551d1e9d6", "sighting--5cdefd24-a0f8-456a-b02f-740057e9beff", "sighting--b2719737-4c7b-47db-a0d1-d3374ca2fa46", "sighting--811ac901-995b-4719-a226-2ecc4b19c1d7", "sighting--26d906da-638e-428d-a07f-07174722a764", "sighting--9bf9bc11-c8be-4ce3-bc5d-f0efff7db643", "sighting--c3ff7d02-c298-4601-8977-0135f3a01826", "sighting--8c901b7e-3e31-466f-96bf-21600aa4456d", "sighting--f2948d7c-fe1d-4139-a87e-540ea4dbb81d", "sighting--3ebe851b-d3d9-4d60-b128-50eda462ce97", "sighting--b9120e7a-7e9d-4996-8a40-2f990a71252c", "sighting--84f1d52e-1bff-4fec-8b44-67856c7066c6", "sighting--11e87fec-65b3-4004-99e0-66a7d8824c42", "sighting--e6bedeb2-fdc5-4007-9422-beffe38f7052", "sighting--9ef8e56b-da63-450d-9070-a8a512a06fb0", "sighting--f3164a35-ec35-41e8-8f64-196562ebc99b", "sighting--bfcf4dd5-e340-4f05-bfd4-0e70cec3d7ca", "sighting--f44cfe24-badb-47b2-835b-b2b3a6dfcb80", "sighting--5ed82792-8c71-48bd-b6e7-fc5757d5ce46", "sighting--ed47d105-d754-4528-9b2d-f51ac2274b91", "sighting--0054adf2-384f-4e0f-98f2-acfe37524457", "sighting--5dd0bd7a-aeba-4b58-85d5-6303a4f2566f", "sighting--01753f32-cd82-4800-bc21-6b3d27a465d6", "sighting--fa1eada8-d7b3-4a97-a052-3643c5a3d538", "sighting--f5e10eac-74bd-4adb-93b0-44d1644ef4ce", "sighting--5e3036df-5df2-47ad-93c9-afd2cc86d3e3", "sighting--61d26782-8252-4cfb-9385-662753ded355", "sighting--093571c9-9532-4382-832f-8545905443d4", "sighting--2d8b6c00-58e2-48b8-8a18-b1283f7739ab", "sighting--c1d59fe0-673c-4bef-8664-96a971c520ac", "sighting--b25456c8-49a8-423f-9d78-c9fca1ad5f67", "sighting--27c0a2e8-d9de-42fd-9bee-517a6d82d391", "sighting--d8e559f6-d1dc-4c27-bea1-5d217e300862", "sighting--33223d46-4fe7-42f5-a2f6-e32794402e98", "sighting--0f4d0728-b206-4a7e-b89e-7b1259c06a59", "sighting--8fca88c0-dedf-4413-9043-dca70f131252", "sighting--7254f963-aa37-4d5a-842f-3ea5b2335bf2", "sighting--e86f4266-e514-4867-8fd9-d7723d0931ca", "sighting--0a08680b-282f-48c3-9e4c-6c28934ec809", "sighting--93766ad7-8acd-4338-bb0d-969a721ac20d", "sighting--ea6365f0-e71e-4cff-bfae-fce175e4f982", "sighting--01ec6ef5-acc7-4cdb-ac99-5ec86f7bd699", "sighting--7e90bb36-cd6c-40e1-8c96-dbe622c8f814", "sighting--40429cc2-0412-463c-9f82-d52be114b09b", "sighting--bcc4555e-0be7-4cf3-a57a-8733a57bb12e", "sighting--e8787aff-14ef-4aa4-aa01-799f9966d4dd", "sighting--445e6edb-efd8-449e-b220-de9bc74dc4c7", "sighting--fb2eedab-2f45-48a4-a089-636608b304a1", "sighting--9ed996d5-0b6a-4d44-842a-35157e50be54", "sighting--82eb3d54-ad4d-4217-9fc9-e63621ae813d", "sighting--10634a3d-895f-4341-b856-c8c9104de86c", "sighting--0e96f3fc-b1c8-4674-9395-09de75ee0d1e", "sighting--5d9a2e42-255b-4206-a1b2-0e5f213ac855", "sighting--3f95cd66-f1bf-4137-b975-a20330c27e45", "sighting--abfe0c23-d6c6-4636-9f43-4b9acb55f967", "sighting--2d6dbe0b-3e7b-4bc8-934f-ac56b148f463", "sighting--47a7ec1c-10b4-47dd-b0c6-c64b7c8a92fe", "sighting--7ef10543-742c-40ad-a9a7-7fae1831c7d4", "sighting--be34bdf1-35e5-4171-a8e0-31ea553ebbed", "sighting--3a2148c0-8374-4a8d-aa19-a28395f01455", "sighting--1fea461b-1e58-46b4-8200-bc4e8bfea190", "sighting--27204c15-f3a0-4fdb-bdde-c35a8a383cb2", "sighting--9a411c40-8033-40c7-988b-4fe43646074a", "sighting--72074c61-617a-4b34-939d-dbdf0d2a4fc7", "sighting--b49f0906-6aed-40ea-829e-5fe4bc82fb2e", "sighting--7ace2c6c-d357-4e68-b37d-a21b1876e759", "sighting--dcfb1ac3-689c-4d2a-aec6-169b07020f5c", "sighting--fd02ef08-80d2-4abb-95d5-9390d3224924", "sighting--8e823b5a-38b9-4a04-a457-4d095d2d9942", "sighting--17cab54c-2865-4edd-bb16-f04fcdfa0134", "sighting--6af4c553-a05c-404c-a662-540c979ee724", "sighting--b5792d9d-3480-4cf9-a395-ff083fd6e348", "sighting--bf7489ce-d39f-43c6-9bdb-d26dc665ef60", "sighting--c06b6700-4571-4806-a6a7-1cc1352c0d65", "sighting--2ed75390-e6fa-4cda-8dad-8747fffb0eec", "sighting--54d72d8f-f567-4425-a34a-cafca8fb2959", "sighting--075fd4f8-ec68-47ac-9fdf-4d1f763b1ecc", "sighting--4b570e1c-d92d-4a64-bb61-5753049b80ca", "sighting--f869f2ff-76d9-4b51-ac0e-74055b4ff0e0", "sighting--c91f4691-4b12-4b3e-90f9-d89fe49cc4d7", "sighting--9fd72f8e-ce3c-4bbd-9439-1eff937b06ae", "sighting--f8004df7-baf1-4dec-9bef-a244a91e9c16", "sighting--3bddb83b-c3f9-4701-a4e2-8d7c73f2705a", "sighting--3659ef5a-9012-42b5-a0a7-b2f04b974d53", "sighting--b2568267-3f00-4318-ae5a-1fb6405e5cfc", "sighting--6b9c7e3a-ed99-48f3-9b7c-38d46b41af49", "sighting--fd1ae6f1-c115-4022-8726-db9d811c42b3", "sighting--853df134-03d7-46b6-ac21-33b7af8ac145", "sighting--52c29330-96b4-4f7e-bff8-b1b898acc151", "sighting--0ebdc6fc-8bfe-4d0c-a06e-4fb42c156623", "sighting--8116d86f-b3f6-4ba5-abfd-1e46a38b5fb7", "sighting--903027b5-6c27-4188-b2a3-ed2e9d7f9a7e", "sighting--a425083d-f655-4dee-8c3a-3633458e62d1", "sighting--3bc77ced-8c51-4bdf-85fe-f4180fea3388", "sighting--1c140f19-b559-4f10-aee3-966f59d74d82", "sighting--b6855a4d-3ee3-4111-a3f6-c258796487c6", "sighting--d127abcf-4f70-4fa1-ac2d-e307d81370a7", "sighting--215e1f9d-a3cc-4ad1-840c-2a89cefc25c3", "sighting--7b379ac3-880b-48b6-b639-fcec5549c6ac", "sighting--70c18064-6678-4e5b-ac60-fd77d7b8f345", "sighting--21abe16a-d182-4647-b61d-5e122b5ef0e4", "sighting--689fcd16-244b-4f5a-a0de-e42d00d92452", "sighting--aca112a2-f751-4887-b260-3d065d69b3c3", "sighting--6735d2a2-9f8a-4990-b396-49fe11e1015b", "sighting--c21ff0d0-b006-432b-b86d-a35c79a7b5e5", "sighting--55c709b0-c247-46e7-84bd-ac9fd097e774", "sighting--75ee9d67-877f-42b2-9a8d-ce4b35a88882", "sighting--bbcb9d51-5b06-4fa4-bbc3-41051fbd10d5", "sighting--a49ad331-dfc2-4f3c-816a-7edb35e3a93b", "sighting--67e04716-544b-4fb0-a15e-a367a8bb136c", "sighting--ccb03cd6-2a99-428a-9ed9-4659c28eba5c", "sighting--5558afc1-e4f8-4059-9bb6-314f4f5b0de5", "sighting--9f8fa068-4004-4ef3-b4fa-36cf77ef5b87", "sighting--312e4c63-2c53-43c2-9980-132c4b4fa8db", "sighting--787d7881-fe73-4fb7-b996-3e224a486e0e", "sighting--cf31f188-7dca-48c9-980c-c0dfab6dd40c", "sighting--5cd43372-dc93-4d17-8bc7-870e2767e55a", "sighting--2b25da2e-dd38-4516-b50a-52c5c236fe74", "sighting--57344f08-5dd0-4193-ba73-0270cc3be8d2", "sighting--1544b421-95ea-422c-8352-afbfd19b6c9f", "sighting--cd7675ce-e1c9-44f8-8dea-bcc8c60aaa12", "sighting--993a5053-23f2-4018-b0f8-a6a71145215b", "sighting--95665bda-91f9-4537-8ef8-cb643a6765a1", "sighting--d0365bea-c696-4100-bc93-f1fccc21ffde", "sighting--57741fef-8433-40c0-a152-dd3edd0e76d4", "sighting--f5afa284-6411-44bc-94e0-0551e66247c3", "sighting--38e95636-4668-40ab-822e-223d199d9738", "sighting--75c42758-c1b0-4912-b7ad-457db562a25f", "sighting--c4c57e3e-b25e-4c01-9bb2-f10d53256613", "sighting--efdb4538-1175-40d0-b0c7-5d90a143ec16", "sighting--8f528853-512e-47f8-b73e-e4cefc3d32a7", "sighting--ef43a9c1-8d67-433c-b2b8-d6c4fe7bb5ae", "sighting--98830c1b-8cab-441f-a3f1-50c8b19d474c", "sighting--268a1808-aea8-422b-869e-d7bfa359a18a", "sighting--89188ed2-fd22-4a41-bde0-b719530178f4", "sighting--17a29e71-e9cb-45f3-a8cb-807b1f093301", "sighting--aa78ce9f-1731-4860-89d0-9d864f021c41", "sighting--273d40b0-5769-46e8-ba9a-dbd242f89c13", "sighting--a11c5c95-f1cf-4b30-b73b-3bdcf9919244", "sighting--b849bc23-9144-4f2a-9dd0-ea7d12b0400b", "sighting--ccf42959-7af3-43be-b357-f76c99dba1c8", "sighting--b7c1c606-4790-4e11-9461-26fea060bc47", "sighting--59c3cd3f-6a83-4950-867a-683b7f8b98cd", "sighting--eacda33c-a7b5-4ac0-b546-b0e302dfdbb7", "sighting--5fa04780-c517-49ff-b7cb-65061ed83ca6", "sighting--debf0d66-0546-4bd9-b282-7a71bbd04971", "sighting--c53972d4-a7f8-45e7-b085-8753ef579e40", "sighting--b84f7f60-dcb6-494a-9819-145c53df2096", "sighting--923fb458-2952-46fb-9fe4-3d147c3e951e", "sighting--3c72043d-30fa-46a9-b411-fe4586077d8a", "sighting--58f17e29-6074-495d-b1d0-5356724e2219", "sighting--a2e7fcd6-4d4d-474f-892a-280c0d1692fb", "sighting--318c6f1d-0a51-4647-bd0b-022006e73082", "sighting--fcff3675-9570-4714-8f66-41500541f0f8", "sighting--8da0495f-3ae3-414e-bc13-833d5ea58801", "sighting--8381aa41-fe6b-48f9-b5d8-8f1cdb70896b", "sighting--7210dd0b-2f18-4eda-83ba-c53b6cff458c", "sighting--b1157b90-bee0-4b8c-9fda-a926d42f9f85", "sighting--e10c4960-77f8-41a5-a6c3-58a41a4ef911", "sighting--c5bdd5b5-1261-4168-bf62-9d2741ed4c75", "sighting--b39c5c93-4f1f-4b69-9fcc-ce2f00860a70", "sighting--5a4592ac-b995-4559-ab67-c3c9c4d0ef41", "sighting--47bdad9e-ffc6-47d2-9a79-22f16488b4f9", "sighting--9913444b-fdd6-4726-ad20-1ca955f2432c", "sighting--138be1b1-8d63-482a-b44e-d5ff697490e1", "sighting--3b64fc46-1f36-4c33-b30b-eaa8c6da9a61", "sighting--a6a2efdf-5663-4138-b1c2-092e1180ddd3", "sighting--f704ed06-3eb3-4dcb-8f7e-9d11efbdd5b8", "sighting--7e473d4a-5f83-471f-9b18-e3312b602ab7", "sighting--1d699886-cf52-43d5-a6c8-ceceeee9a64a", "sighting--288ee844-6763-43a4-a1b3-87dde9de78d1", "sighting--9ba8d5a7-f8a7-4486-931e-e022453496ce", "sighting--61f61ec6-32ab-422b-87c7-1e69f5becad4", "sighting--4a72c35b-ac46-4b53-b43b-8890bcd54c48", "sighting--cc9cb7ad-0b95-4fc6-9ef4-4a060dfbd6b0", "sighting--4d3ed2e3-5816-4a5e-a15d-463e8a0fc902", "sighting--4417b93d-efde-4359-9844-844b57927562", "sighting--198dab92-3538-448b-b404-ba94bb0f520e", "sighting--19e1070b-6004-42e7-ae2e-ef883055c4c5", "sighting--e24dac25-645d-479f-bab7-7466c4e76fb2", "sighting--a073275f-e591-477d-a74e-f3b7de06e681", "sighting--d75f8ba0-cf3d-4045-b553-49dbcdf42422", "sighting--cee3fd8b-8468-4690-92d2-a94a59ec5e16", "sighting--aa0d6502-2b0e-406a-abe5-b095709bb8bc", "sighting--be0d76ed-4540-4597-8cfc-e72f538bc09d", "sighting--09fe1b11-753a-4d0d-a6c5-dd66a8d849f9", "sighting--5947ca3a-8d4f-40f9-a1ff-5fd4bb97bce7", "sighting--a39ac719-7f84-4c94-b1d5-8fcb6680b515", "sighting--8b66bc9b-4e2b-4618-b996-00809d31e3f5", "sighting--a2d847bc-3e2c-427b-835a-c3d210104d19", "sighting--9b2f675c-b376-41fa-8ce2-853508fca162", "sighting--be750361-fbf3-4e31-86c3-7d78ff96c912", "sighting--cb1da4d3-0f9f-439c-bfb9-f39dfdc9662b", "sighting--37642cc0-3345-44f9-852a-eb0abc5d74d6", "sighting--172c748e-fe24-4d5e-bea3-d6f1a26a11af", "sighting--fdf9afd0-7956-4ea4-877c-c2f673059987", "sighting--f5887712-91ff-4aa5-a4d7-d1ddd92333ca", "sighting--82671143-f549-4efe-9dcd-9849c14577e5", "sighting--16d4880e-eadc-4cb2-9cc8-18b31e9c1b35", "sighting--e93c7726-d52a-46fa-915d-f6d8cc425a0c", "sighting--66b20c22-f0ac-48e8-bc60-fd0079d9c1ad", "sighting--c36e845d-cdf0-44a3-85df-6dd98b85de61", "sighting--56c78e0b-71b0-41b3-87f8-220be9004cae", "sighting--0b0da56b-04bf-4b80-8284-49b35557fb5f", "sighting--64b4c171-6dd2-47f8-b07c-99ceef701b44", "sighting--4c59bbc8-cd46-46da-85fc-a30802f8e5fb", "sighting--4e9adfa5-705b-4ce8-b54f-8ec512991fc3", "sighting--142ab7d5-b7ec-48b2-946a-469145f4eac9", "sighting--ccfc6da5-0e7c-428c-b54c-99a16a7dcbb7", "sighting--01bfad96-265d-473a-bac1-302690ff9441", "sighting--7b87a714-3d6a-44e2-8a0b-9cbdc21808f9", "sighting--dec54e61-697c-425b-b2cf-9af5fc7f8382", "sighting--61de3c1f-6d1d-4446-8104-ba46a209f2fe", "sighting--137f82ec-db15-4815-a299-7dd4c6edde87", "sighting--335db6c9-82ad-4cd1-a310-c62756cb1bef", "sighting--e51ad3f3-32aa-407b-92d8-864606fff4e4", "sighting--1420d1f3-e551-4737-99bf-7e46f950c7bd", "sighting--94862cd8-9e12-4fde-861c-da3665db3451", "sighting--ad58c5e9-5814-4e33-a2cc-cad219c27ea5", "sighting--8e3a1eed-8ede-4e50-8e9c-c7cbf9f52b45", "sighting--00e35e33-3f2a-46a2-8a81-d7818880a0d1", "sighting--dff6bc13-ae00-4b1e-baea-557185d08275", "sighting--ddcd5497-de61-4876-a28e-3dfcc1183691", "sighting--822cce39-2459-430c-a9cc-5782d90d0bbe", "sighting--827746fc-9aa6-4e66-9d66-63e2ece3f253", "sighting--a2d3e25f-f361-49d0-af36-411bf5dd8e21", "sighting--faf0db29-a78d-4d9e-bfec-167848e1d13d", "sighting--53c45590-b714-44dd-bdcd-e2da89b9e80e", "sighting--5753ccd0-562a-4056-bf12-7eaf489e55e4", "sighting--7171ea0c-ba98-4a1d-8505-adee322dd87b", "sighting--2400f5a3-732e-454b-9d33-db21700fed98", "sighting--bac821a8-5110-4ec5-8107-81f8d5f17bc8", "sighting--0c184041-c552-4f9c-b941-b9b340ad664c", "sighting--d9cf7b61-6837-4168-840a-b981b169a350", "sighting--a7f7aefd-c6ec-47f6-9128-ffa00e15d560", "sighting--acbbe68e-1e6b-468a-a534-f7984d01ae23", "sighting--d97bbb2c-6d2c-4040-b090-9be300dee8ce", "sighting--3a3640f5-c5ad-490f-b7aa-65f853f1232c", "sighting--6329303b-65be-4897-b838-4c328fef54f6", "sighting--cfa25eb5-d766-4129-a459-d9ee839df868", "sighting--7ecfcb0f-e934-4d66-bd11-4d047b588e38", "sighting--15107c73-be99-4f83-bf92-bc0cb2f0d623", "sighting--cb333de9-0606-4f77-a5e6-33e6207a4b21", "sighting--7b9c37c2-7729-4d9d-a48b-d93699d4aae9", "sighting--3e257e5b-3bd3-4144-a593-8c95c19d08e3", "sighting--a0b1a005-a96e-4955-b219-ca14405b31f8", "sighting--30b31e1c-3fa3-4da9-b7d1-60cd2463fb56", "sighting--2aac5d46-c9ea-4ed8-b61a-89d5a21cef42", "sighting--171be41c-28f2-45a1-a1f0-2d5758d4baeb", "sighting--cdabdada-0e7d-4a86-81d1-bb6c67c9d1f4", "sighting--62f471c1-5c59-404e-811e-dbbec2e03ef3", "sighting--d361b631-e4a0-4bf2-a7c0-e163928a6ea2", "sighting--ada3340b-63e4-4a1a-8eb1-579885bb30e2", "sighting--12872b8a-3eb6-4f5f-b2bc-17ab8e58070e", "sighting--c8e24249-3cd2-4efb-b0d4-2bc03b633f65", "sighting--c5f32433-aa00-4630-bce6-d3b204d6cebe", "sighting--9dea587c-5553-4282-83e4-bbeffe823917", "sighting--5c49989d-d089-4de1-9798-991a701b2313", "sighting--f2dd40d5-99a8-47c0-a154-8ba413583a40", "sighting--f74dbd86-dc19-48ca-b160-3a8e5649af52", "sighting--8a42c30a-cc4e-40d6-8891-82b9f4e69e75", "sighting--7a24f6c6-5528-483d-944d-0192abd9d3cf", "sighting--5a5cdfc7-9c2c-40b7-a52e-c80b225cded2", "sighting--fc3d698e-d9e3-4656-a452-12081fe04196", "sighting--89f7de8c-5529-4d90-b61b-2487b1452f12", "sighting--a71674a0-d078-4d32-af88-650e3616cc9b", "sighting--9dfa1bdf-afce-4849-9caf-43dd13fc5a54", "sighting--56903256-2357-4d75-8166-541cc294c1b2", "sighting--8d314d83-9afc-4833-b21b-92e56c66a15d", "sighting--3e1fdb7f-4829-488f-acca-706f31d04809", "sighting--68c70f9e-5242-463d-9839-0036170d5fef", "sighting--5682674e-c9fa-42a0-b34e-7ee14553928e", "sighting--ea14b14c-61e9-4a45-b30b-a6c94f75c454", "sighting--9da3ae9f-68bd-4518-b716-5984b2641b40", "sighting--cc656a47-f6f8-4e91-844d-84bc60f45802", "sighting--0cb7fe64-1450-4407-b465-9f8c95684447", "sighting--5b578d3e-af81-4f33-a47f-bf6f68f5d2eb", "sighting--8c264d7e-a83a-4a44-b4ec-47e4f019a772", "sighting--91d654e4-2d6a-489b-83cf-cb1117678665", "sighting--c0ce807e-a53c-4980-9b9e-d5d8d0929a3f", "sighting--ca97cedc-b3a0-4b07-b762-5dee4b956fb0", "sighting--baf36dca-9f5a-40da-8ab7-98e365ef4d62", "sighting--cd0f5640-3a3d-4f30-8b95-5817c98683cd", "sighting--edc24ba6-b84b-4a83-b324-bfb963fba781", "sighting--1b073db0-6607-4a18-9592-f9f978ec8ee2", "sighting--ba5872ba-4173-4db4-b636-960324d75303", "sighting--560bb369-7cb0-4c5a-b681-637b1705e700", "sighting--5d076e86-dd46-49b3-a68a-64f0f1104fb5", "sighting--257e5d0f-eb33-4375-85a5-59ab6d869b75", "sighting--1633030c-c4a4-46f1-b6d4-3e38d8053dd6", "sighting--665c1ce8-495a-4096-962e-12e20f271eca", "sighting--c8e2a48b-cc3f-4fab-b7be-ba686a2bd8fe", "sighting--043412f2-60ad-4607-929c-da4b21a3f3b5", "sighting--58108960-29f5-46d3-aaca-6ebdbd38842f", "sighting--ee354a97-7de1-426e-811a-4463d1ccd026", "sighting--9e9fe4c6-1b22-4992-8884-4f6ddf7d5e26", "sighting--86dd1686-0ab8-4538-a266-890d33815395", "sighting--79355f2d-89c0-42fe-9f8f-cedb579cfd36", "sighting--fb27c5d5-c1c0-49ba-acef-d3a5d4c315a2", "sighting--94f8f5f8-84e0-4646-bd09-84abfcb5f335", "sighting--ba16db69-63b6-4049-a3ef-c9510c45517c", "sighting--8ef5b658-5c6c-4373-9425-1173771c68bf", "sighting--6df9d414-0e27-45ee-82bd-90e15fcecc8d", "sighting--85130f0b-2256-4aa6-b1e8-a9d00a1b749f", "sighting--4387c1b4-a879-4d46-a58f-5385fb59aa0b", "sighting--7a182353-1a2c-4993-a188-e6a0dcd31797", "sighting--3a52f4b9-3370-4c6c-9d4a-d15924dbcd99", "sighting--0f7fe67c-a781-4c5a-bc26-8175f2816eff", "sighting--9e9b3432-4bb0-4b8f-86f3-905487f3c906", "sighting--5a65bf78-3087-4479-8a4b-e0d0ffab7c99", "sighting--ff8b8080-426b-4f7e-8d94-ece4b631447b", "sighting--6b632c54-6cfa-4118-bb40-3b8a2f64b19b", "sighting--047c8e31-b272-4f82-94e0-2413d6239c49", "sighting--9933a652-3f2c-421e-be45-430023341095", "sighting--2c7d610b-136c-464a-8758-0afd097e3c95", "sighting--4365724e-2b5f-40bc-b385-29abfcd14e7d", "sighting--a7de18fc-6579-434f-b78a-c7d7c270d230", "sighting--01dda7fb-1460-45c6-8437-73e987e456f0", "sighting--df915f90-f3ca-40e3-9ff1-4c70cd4c3f0b", "sighting--f7ea4a71-5a71-4a21-a1bf-c8c5dd055478", "sighting--77f55d2a-ed8d-4ba3-af14-9c7321fdeed8", "sighting--ca6b0ee9-5e98-416e-9c54-dc11602534d8", "sighting--5437927d-11f6-4904-bbda-59ffa3eaf130", "sighting--355727cb-1ae6-4017-abdf-40b4b440eea1", "sighting--f424e87f-5cdc-476a-87cb-6d29252d9737", "sighting--3b7b15ee-14d5-4f12-9cbc-3ee49836132a", "sighting--d492f9e4-2f0a-4095-ba7c-3658e3a7f856", "sighting--9c675b1b-d06b-4c38-b34c-516ec99a2d83", "sighting--0b547783-fa4e-4cbe-ba31-fb92ad413f2f", "sighting--92ef5171-c622-46f1-bb19-231a9d394d3f", "sighting--7ad72dcb-196c-4e9b-b4c8-426be3babfd3", "sighting--b152be09-dde0-433e-959f-c95085413cac", "sighting--38bf5e03-741b-41a6-8c34-b8a85bcd55c8", "sighting--b48207a3-0d60-497a-b403-9b7161c22013", "sighting--62f43298-17b2-434f-bbf5-7fdedb863ebf", "sighting--d871dfad-be43-4d47-8907-0e4c4e9204db", "sighting--a0171561-7409-4b06-af8b-4c3149dd307d", "sighting--a7dd2fee-5539-4053-9491-13e0c85fac2f", "sighting--6da179a6-2b62-4613-97f8-492e2f3c8817", "sighting--cce76f47-934c-4a5c-84d6-27d6363c66bf", "sighting--1e5abe6f-a5d7-4af1-8720-ed9674a63107", "sighting--b28ca0fe-f276-47a3-b9d5-dd74bc5fe560", "sighting--417da505-ab2a-4aa5-af99-8ff02555e9b8", "sighting--039e4bb0-5219-4382-b38a-53277800d3af", "sighting--c4622015-3fe1-4bc5-8e9d-dc3d65d421b4", "sighting--8668befb-1534-4909-84fa-24c2105ae398", "sighting--1373202f-fe59-4248-93a5-cc2619603102", "sighting--8d55b1ea-9f09-4b0d-9ee5-9c73a4fdd1a8", "sighting--69b59f9d-05e7-46b3-96ea-33d556049856", "sighting--783f0c57-2293-40d1-ac7c-ed42aea08844", "sighting--0f113914-be65-4804-9171-42b515b9036c", "sighting--6bf16bf5-f166-42d6-97a9-008c124da945", "sighting--e8d6545c-0fb7-4c14-a0ab-f704924c49d4", "sighting--4730e9d4-f559-46c1-ba60-49438788d0df", "sighting--68ae353c-f47e-46ab-a402-7868fdb2600e", "sighting--35f2fc45-0eb6-4198-91b8-2aec71980b3c", "sighting--4a1232ce-0a4b-4a09-beee-94db522870f0", "sighting--55710160-8c48-4468-99aa-6ae3a65c7de9", "sighting--c569cce9-ff1b-4f06-ad22-e1d4ec9646f0", "sighting--629601dd-cc40-4043-91ff-1da0d7aa9936", "sighting--51fa0527-5d4a-4c86-8f86-7a7376333505", "sighting--c29a71a3-259d-4952-8a89-03b77dbacb86", "sighting--93652e41-cfb3-4688-8ca1-d0bfcd85d681", "sighting--f1eb4110-6607-4beb-94b7-8c6cdb6d7361", "sighting--78e169c0-562b-4f5d-a7dd-f3f635b4e956", "sighting--0bd0e225-d4a3-4c84-96c0-326986d1725b", "sighting--6142a849-9da4-4c28-8259-b40aec551235", "sighting--dda69960-4ba1-40bf-9292-b6343e9cd517", "sighting--27a0a034-dc75-4fcf-9cc1-08ab54ba7f5d", "sighting--056c64c6-1b8a-4c5e-a88f-99c85cd32029", "sighting--107afcee-58b2-4ad1-8dc1-fafb729989ff", "sighting--dc9ce194-e322-4972-968c-7787da1c0f01", "sighting--22d2197b-e081-4e64-8330-f99704d61fcb", "sighting--24a2a144-055d-49d8-9bd0-36320d44217a", "sighting--a968f3fd-cf57-4745-9ae6-44ae3bb2a0ef", "sighting--adcf357d-93e5-407b-a05e-b92c2420df9c", "sighting--84712ca2-65f2-499a-8eb8-d0a3241a3c33", "sighting--be3a12ce-4391-4031-b229-dafd20d3948f", "sighting--8af567cd-e0b4-4f11-acec-a1d2ba3532e5", "sighting--d3858c76-ea2d-4ccc-bb02-f8b4c8681101", "sighting--29202bde-c508-4c3b-aeb8-1aa7486bb714", "sighting--4e1aaf61-ba0f-430d-9a2d-ad19e40981ca", "sighting--30c54d2a-075c-4c39-9ae2-cd469e4e80a2", "sighting--6a79c039-8213-409f-91fc-7a7cf5a89f8a", "sighting--e61dd391-a5be-4ccb-977a-73acb7d80800", "sighting--ab8bf37a-549e-481d-a830-4ab18266c583", "sighting--518e1dd3-3a48-436e-8064-9fd220a1a43f", "sighting--3cf8901f-4d00-4d55-a200-267963329381", "sighting--e12e8acd-d346-4a65-936b-e07d548f5bba", "sighting--87f45a7f-d626-49ba-8746-481f32b76252", "sighting--ea20000b-aa2f-46fa-be51-462257d2d272", "sighting--f3db7687-76fb-44d3-8c0f-8ef43587869e", "sighting--c5ad641d-2f75-4be6-84e1-9e6d132beee8", "sighting--dc3ea677-e31c-425e-8fc4-bf1a0d405c23", "sighting--9f5750e9-37fc-47ff-9387-c59db6211258", "sighting--9b3118f9-192f-4985-ae96-165dd0d1eddb", "sighting--5d4bd9eb-8b4e-4c7d-a3bc-46dbfa4bba53", "sighting--68d2df1c-c255-4023-b78b-8efcb3578166", "sighting--789b642c-fdd6-4831-8acf-fed41380c930", "sighting--ecb061fe-7e9b-4ce2-b8e6-4fea3579422b", "sighting--d4f97fdf-4615-4153-a716-e1264ede0cb6", "sighting--5e2256c0-1847-44f6-b280-ed836b24ec8b", "sighting--373439fc-7669-4117-a514-55929773bbc0", "sighting--b59fee0e-41d1-4d20-a10f-0dbf9a46eefc", "sighting--b7672b6c-3749-4213-adad-f7acc92328cd", "sighting--3e39906b-8c2d-430a-8ce9-fc5e936aab87", "sighting--90ffbd6a-f19a-411f-a5c4-9c1ae10d532b", "sighting--8e34598f-e1ab-4727-97cd-899f6e5517e6", "sighting--c719452a-858e-440b-bd9b-24e0d504d323", "sighting--13376113-9c74-4b11-8fef-c6860963155d", "sighting--12ab22db-d2c7-43c8-bf9d-c0996ab9fe1f", "sighting--938b6071-ed00-463c-a97c-a5b2e6c7d2d3", "sighting--ae13d731-540b-4bbe-a9b9-010d86aa93b8", "sighting--5565bd93-0068-4972-9c08-7ee587076742", "sighting--0dcba878-0dc3-4aad-b627-cb2fdb47f8f9", "sighting--c05fcfa2-0581-4fbc-8bbc-5fca2386554b", "sighting--1550a212-67b4-4506-99a2-7018d913c47e", "sighting--553fa3c6-f005-4992-8157-0fb853643ed2", "sighting--1b5a2a80-827b-4e18-ad9b-d90430707460", "sighting--e3764d84-a732-4ec7-ad79-64c57870b1ca", "sighting--778e26c7-d247-4966-8e79-109d3c869f91", "sighting--001e8da8-fc22-4d88-b161-dddfa480f5a5", "sighting--a96c0b50-dcd3-4f28-9514-761b4ab24db1", "sighting--21120d37-1ca3-4778-869c-1d3a93dee19b", "sighting--8d3b3fb3-ed9e-49dc-a2a6-80a4ada44352", "sighting--82559d26-ba90-45cd-bfac-2adc0527c635", "sighting--213240fa-fe39-42db-8c99-8610278dcb78", "sighting--abb7a87b-9b79-4df9-91cf-66d067a047df", "sighting--24997104-3c9f-44bc-9a54-98bd9d1ce117", "sighting--9febda25-84ef-42c0-bdaa-afca5ee56840", "sighting--c3bcca66-b6ae-45fb-aa7b-f133017beff3", "sighting--d933e999-07d1-4b9e-9526-073fa961c86f", "sighting--e6addbca-520f-419e-bbaa-304371efc798", "sighting--3af91fd8-4e91-41e3-b57b-d44c3f53efdf", "sighting--f4e70de2-31ca-44d6-a81e-6d1643e7a756", "sighting--93fd226b-b8a7-403c-9965-9880f161a9ba", "sighting--95d1d613-2c2e-4561-93d6-b69fd644c800", "sighting--8a2e0ad2-9de7-4925-bedd-2067ed3944ae", "sighting--9d606b1b-adaa-407c-b135-6903730bd289", "sighting--ece3952a-963c-4c50-ae84-eeb7897b499a", "sighting--0e256b79-fadc-4845-a8ad-94f757825ac3", "sighting--66e69557-0b00-475f-b677-7b3220f0bf51", "sighting--2889718e-97d9-44d0-9f7c-a7349f87d97e", "sighting--222f667e-66fa-4b50-85c3-753fcf5ad6c6", "sighting--6fdd812e-ac00-4ca9-bb3b-179f104b5683", "sighting--b4597fa6-4f8a-4b27-a79e-b5d211018e1a", "sighting--81d80e93-4b2c-4b6b-8eeb-27d14085c002", "sighting--8f5af82d-4a48-40ad-abfc-9dc66ad8073f", "sighting--3146ebca-ef67-4f55-82d5-ad20799f43b5", "sighting--b50336a8-0155-495f-9da5-9c3c7062fc81", "sighting--d4c96e83-7d5e-4c54-9dfe-49b92586a643", "sighting--4e4e5ac5-4f32-43ab-9f3e-50511627974c", "sighting--f1c115d3-3791-4588-bdc9-7821c1da8521", "sighting--88c4e859-897b-4adb-b105-eeeb3163780b", "sighting--988fcd72-0add-4bd2-b695-da25d18d2320", "sighting--1259fbc7-892e-4768-a22e-097907af114a", "sighting--d2e88e4c-60c5-44d5-ad7d-2caad09f70b2", "sighting--41506417-61e0-4612-a31b-ba7eb97dbe79", "sighting--c0dd1bff-fd48-4645-b7b0-e5841d113745", "sighting--8e6a9bbb-23c2-4a85-8bdd-9d3f4be7b726", "sighting--6c8dfdc6-f401-4fba-a2b6-d4359997fe63", "sighting--8b0ebd98-4627-4cc2-8bc3-ee70bace78ff", "sighting--53e15138-f395-42a3-be6a-b5264c602dc1", "sighting--5632daf3-1926-4b6a-9c33-20606b204b87", "sighting--3d6f76c3-1602-4a3c-8148-56cbb71acc53", "sighting--c068989c-f19f-4c20-8cfd-29f69135eb4a", "sighting--d4a2fa0e-19cf-47a5-91d5-f30fee1b2395", "sighting--cfd0848c-ef65-431b-94dc-5000d1765178", "sighting--186ef83e-d312-41aa-8315-700b96c210b3", "sighting--f6ddbc6b-0eeb-4e0a-a3e6-8454dbdb4e54", "sighting--74fa7b04-6b47-4d8c-8508-d3ffacf595ce", "sighting--13e27375-b885-4e92-acc7-9030919fdc9d", "sighting--cc6b6232-4343-47e7-9bf7-37e6a51da365", "sighting--7e654776-a04d-469a-b7fa-bea530d07e60", "sighting--a5b85afe-95ab-4f2b-a214-78897c9f37eb", "sighting--2eda6906-0473-4668-a88f-aca06756285e", "sighting--431ae4b5-efcf-4799-9cf7-e7eb980154d3", "sighting--b5ad0cc7-f06f-4a86-892b-50ac88d6cf9e", "sighting--f7d814cf-f13d-4fcf-bea6-89f8912043bf", "sighting--09549e54-3137-48dc-8970-1cd8efc2a0ff", "sighting--b4d34e70-a823-471c-8d8a-b183f7d31f61", "sighting--d5dbc36d-867a-496c-aff1-953bb522b0ac", "sighting--29f01ecc-787f-4388-af50-ee64e96badf0", "sighting--64e453bf-1b6b-4f94-92a2-e4a18cb0a5df", "sighting--7383108b-d37a-4f0c-b051-ad07fd1b8207", "sighting--73a1ceb9-452f-482c-b953-a0ab132490f0", "sighting--79a36dcf-7fbe-4d22-9b0a-8c1884ff63bc", "sighting--9193af8c-7423-4a0b-9b6c-860581dd5c78", "sighting--9d941e30-3c1e-4e5f-bf07-1e28a00864c5", "sighting--09228961-0084-4d3b-83cb-eeb790bd74aa", "sighting--9c1dfe32-f190-4565-88ea-21ab6606de02", "sighting--c397304d-85da-4465-aa62-670928ee1dc5", "sighting--48c19f02-709e-4494-b1d2-74869aed215c", "sighting--8312433d-5e1d-4cbc-ae87-5b83bc55a9f8", "sighting--4421d783-1dba-4969-bf24-de954d4a9f04", "sighting--45460922-c787-4926-8ef7-3fbe50d45e8e", "sighting--83708e97-2f14-4c4e-bde8-dffefa50e976", "sighting--3dbade3b-47ef-47fc-ad27-17b0e58efba9", "sighting--eadcd099-8753-4e46-8904-16c9c65d8e29", "sighting--6f83ea36-b69d-4989-bea8-4f56bfd677ec", "sighting--5a7d4593-a7c1-44a7-bbdb-4fcd007703c8", "sighting--032fd57b-9aea-403e-a453-1a10d601e3b3", "sighting--b0aac9a4-b43c-4dfd-b2e1-b8e9f8855a72", "sighting--f7de4068-3310-4b13-8eff-d3ec52c33417", "sighting--9eae735c-293a-43f4-9bce-526875b00f71", "sighting--82ba4a5c-5a72-4863-9e04-921308cf95ce", "sighting--4b145976-61c8-47eb-a7b9-e1cb2dd8ef03", "sighting--1ce1abbf-b718-4b29-b79d-40bd71a2dd0d", "sighting--b0be129c-79ab-4e7f-bcc5-94bcfbe61578", "sighting--70177786-c012-4dbd-8f68-3ee8ef53f7cf", "sighting--b6c30bcf-73cf-4570-89c2-ce00ab855161", "sighting--1650b9a3-c22b-4303-9aa1-b5d07a0bab3f", "sighting--5f19e04f-568b-4fc3-bddc-3c839c9b1552", "sighting--ce43cbd2-5e28-4f11-a293-eec1c803fd8c", "sighting--e017b956-ae01-4f92-b431-b3dcee4f4a63", "sighting--f6b50eb7-9fcf-4d66-9f9b-9edb30feed1c", "sighting--390c6705-3585-4add-a962-1448e8e6084a", "sighting--1e9b9629-a24f-42a1-aa9a-c6e0254119a4", "sighting--38415a82-4497-448c-ac4c-e7df84f1e858", "sighting--0c068f00-db49-4213-8eab-171003e21f74", "sighting--4b1b07c5-d058-4cdb-93d9-db3fe5e8d08d", "sighting--09567593-0314-488e-a932-5d8b20675e25", "sighting--d205f30e-5066-4d09-9e61-c7401e2854aa", "sighting--600a0c6a-87f7-4ce1-9ae4-b3eecb504658", "sighting--26b9f87b-d1b8-4b46-ab77-1020e60c383e", "sighting--bd64764a-5c55-4aa5-aedb-e8a14eaf4911", "sighting--71c213e3-d633-47b5-bb71-7b36f5b438b6", "sighting--96a66b48-71a0-4c8c-8bef-69b015cf2b85", "sighting--69f2916f-02bd-40f9-a140-3947e3a730a4", "sighting--42aef362-fd88-4424-97fc-51ec285da2ad", "sighting--3df927e7-2589-4c5e-9298-13beb44f9062", "sighting--4440ee99-f4f2-431b-95aa-b1d3db46902d", "sighting--9fb79be5-0b02-43b9-a77a-4d172ae5be38", "sighting--d9adb197-4b53-40a6-947d-aec953a0e163", "sighting--e0667d53-af20-4a8d-b400-063a691dbb80", "sighting--7e30cb32-6fa5-41e2-967a-7e94bdffb6ef", "sighting--bf93d3c3-3008-4ae2-a515-9073459285e4", "sighting--2f2e5757-68e8-4d43-9ff9-fcfa1a130e10", "sighting--387c549e-ceba-4454-afc9-96ce91c7425e", "sighting--f71469b0-680e-42ee-9e5c-565a4f3f92c1", "sighting--b0576811-a080-44cb-b484-b4cc86452371", "sighting--5aa4320c-4b5c-4fbe-97cd-9b902ac2a328", "sighting--42ec3cda-5b14-4a03-b20b-be1d33daf192", "sighting--3262b6a3-dbb5-49d9-909f-a7ada0609539", "sighting--a0bebe82-6877-496b-b4bc-a55be187cecd", "sighting--3c4e850e-76a4-4073-9a37-59490c1ee541", "sighting--b7c2a073-3d77-493e-8347-501e2149edd8", "sighting--5441df08-1b44-4d6d-87d9-72d9b52128cf", "sighting--ccd9ee0c-4aa4-468f-91c7-287957bd631f", "sighting--b1cac976-b53f-4103-8e41-596f8e44e81d", "sighting--b96cfe19-4979-4ce0-8478-acd618392ad5", "sighting--6a6002d8-a1a9-40e0-8ea1-62d7cb639ba6", "sighting--643e9f01-444a-4006-b0d8-038132c86b40", "sighting--aaf37431-bf0a-498d-8b3c-38464d9bc33b", "sighting--1fd78321-93b1-4faf-814b-2e64aa8c6977", "sighting--3709dbbd-dde0-4972-9673-3e8a562af8e0", "sighting--26a858c7-9ae6-466b-95c6-e38f7ed80d89", "sighting--6c8fc232-8dfb-44c6-a130-44bcfc7a3abd", "sighting--7afc5089-4eb3-41f0-b930-f96e732df3d1", "sighting--e83fc353-ba22-4ba5-93ad-01ad020f431d", "sighting--129c01d2-fee3-4cc3-b942-7932e9115d46", "sighting--4c9305fb-6168-4edb-9a21-f697e68cb089", "sighting--3aeb2586-a15d-48f1-87af-5c0732b4c6df", "sighting--7057ea14-7223-4965-aaff-c033d1c9391e", "sighting--46265a53-d52f-44e3-b989-f1dec4afc16e", "sighting--9538619d-9f22-449f-83a4-150bce3498d7", "sighting--da150300-1c6c-4401-b220-920ebb31c36f", "sighting--3de7b4fd-e792-4ea9-82f6-f12aae85c216", "sighting--297013ba-6101-43ef-8036-145f2bcf5f97", "sighting--28e2f925-9a98-4afa-8478-a76a4d445737", "sighting--ba45f253-114e-419c-b911-fb8821923107", "sighting--0fa0511a-ab0f-4fbe-80de-bbcbf66b6399", "sighting--0dabb367-0aba-4d57-882a-4a06a8e88c1b", "sighting--fda6b767-1c67-47e5-9d67-85eb63dbb3c1", "sighting--50d040ef-97df-4c20-b9ec-7e79e2eec696", "sighting--c2a6bd8f-a773-4770-ae17-de34edb1bdda", "sighting--8c67ad04-d28f-46c9-8b11-34d0a5f0a60a", "sighting--c3cc21a2-de3a-4264-83e8-75fbc0805045", "sighting--1d74a5f5-ca98-4446-9443-f83ddb5a179e", "sighting--ca058c9c-7c1c-4882-9eae-ea61b371a6db", "sighting--33a4a2f0-e4df-4b25-b4c3-55a1e50a4e5f", "sighting--83367c8c-b49d-473f-b018-195e0883c82a", "sighting--b6f24724-5b45-4e7c-bdbd-79f4d30bb171", "sighting--e86b043a-0d80-4372-a525-d0ee9a654e25", "sighting--4a658c70-38b1-40cf-97b9-8a45bd394842", "sighting--d30ce2a8-0680-4010-a946-55568952b6e9", "sighting--eaa5aa6d-0dea-4aa0-b633-002cb2f5a063", "sighting--95605b32-6cee-4186-8d06-9f6f203cc84a", "sighting--59590579-008a-4395-ad85-6b0b1dcf293c", "sighting--8c3bedb6-19c9-4453-b6e3-7fddc1f66d35", "sighting--69fb23ad-0c28-4ace-af21-12d997f98965", "sighting--8498416e-2ca5-4be6-8b30-7f18058b9f7f", "sighting--ccb1e64f-0727-463e-99cf-c6b5d529e9a7", "sighting--89a722cb-fc5d-4e81-8e2f-69f748162511", "sighting--9a2be24b-d463-4d15-a9a1-cf3d1ecab43f", "sighting--e379d0b2-0a63-4ff9-b6c3-3be8fa186ec6", "sighting--e166b1ba-f00f-4fc4-a74d-9441b7ba85bb", "sighting--8676b5fc-0693-4bee-b455-f79ddecf96f5", "sighting--f4cd1954-d372-4ede-9361-b43a300c998e", "sighting--18b81763-6e6a-40e3-987c-ceed3c051687", "sighting--69c0f351-ceb4-408d-ae5a-713ec433a415", "sighting--13ec1dcb-f652-4ce3-9c34-677a00fe9bff", "sighting--ab8cbf65-84f7-468a-9343-200923421790", "sighting--20d4b959-5f0d-4418-900f-11300e360285", "sighting--e93a37ee-eb81-42b6-a9c0-d7ac888c41d7", "sighting--fcc11b92-94fa-4734-ac37-5b164f018fb5", "sighting--492cf8c1-44b9-45a4-a293-bcfe2d327801", "sighting--49a5ea6c-ecc2-47c9-87b2-479a67f9f702", "sighting--56d11ba7-630e-412b-9121-845b86cd254f", "sighting--c41a8a5f-07d0-48a2-9a9b-25d62a9a2b99", "sighting--b6d239dd-0b1c-4f26-8bfe-4fffeb40f6c0", "sighting--36fb6212-571d-44e9-8d54-f3b87cfaa5bc", "sighting--a47702d9-879e-41ca-9816-50c7e648e360", "sighting--0a210436-a6cc-4f96-aa54-db6bdbcbd58e", "sighting--42dffffd-202d-406b-b46f-dd01f3167f06", "sighting--6fc6fdd1-9133-4235-b099-800310241aed", "sighting--251ccb52-4c99-4064-ad54-0afa77940b64", "sighting--1d34467f-b057-4f3e-a7dc-85e545bcb330", "sighting--c186a1d2-7caa-4c8b-a556-18bbe58e53b0", "sighting--46774436-e67d-4b9a-8d79-8ac27bc01d32", "sighting--0d62b236-24b1-478e-8d33-36ab52651677", "sighting--7df68301-41e6-4560-88bf-94a7282f3c81", "sighting--a2bcff03-f5a9-44bf-8b25-b34150c51eff", "sighting--bb0c3cc7-cccf-4349-9d86-0388f18036a2", "sighting--792ad0f6-7e65-4bdb-a8dc-3a1949d6adff", "sighting--1c0a77d9-c261-43ec-82b1-a561cbc8566d", "sighting--38724cdf-40c1-43ca-8d25-717dc66cfae4", "sighting--ffc5b768-9c28-4a7c-8426-02d4baa50060", "sighting--a84ff7e6-868a-47ae-b3b4-dfe41484cada", "sighting--e979c8b6-e8d3-4bf2-868d-8001cbb80f1e", "sighting--ce741ed9-1503-49b7-8844-74f9bafc088c", "sighting--5fb3b3ea-f272-4b20-9da1-a57505e86f72", "sighting--2621145e-a53d-48e4-8192-54b6f977054e", "sighting--934b99aa-88f5-491f-b981-9485be9a1944", "sighting--5213c4cb-d251-44b3-b2a8-46c91136345e", "sighting--2d2db423-f4e5-463f-9fe7-148ebc101c10", "sighting--99f5abf9-230f-453a-8420-0524df0a04c3", "sighting--1f55628e-9ff3-47e3-bb6b-b8fa4bece04d", "sighting--f548cb8b-ca75-4840-935c-37929190d6e1", "sighting--dbc50933-6590-4050-b9e7-934a5f46d38d", "sighting--77ced8d7-aabd-4e57-b13f-bf190f87ea85", "sighting--8d06be62-6b10-40ad-a829-a8e19df7c7b0", "sighting--2513f785-1a10-4276-875c-f023e9bb9ebe", "sighting--16aa632d-962a-464d-9ecc-0615452e7fc3", "sighting--f5e9c261-6c28-4e40-a4b1-8003efd3ab60", "sighting--f209748e-ab4e-467d-b0e8-94789901fbbb", "sighting--d09841a4-20c3-4b7d-bc91-9621d59993fb", "sighting--70b5107d-fd28-4797-84f0-6eb259c1e95c", "sighting--735976dc-19fa-4e18-bebc-fc5cf251034d", "sighting--7fa7db55-57da-46d1-954b-b2d9a02a5fac", "sighting--87f0e81b-7db1-46dd-99c3-f1620eb2e67d", "sighting--22ea4ff3-3399-487c-8f2b-9f02b9485850", "sighting--8c0ced1a-8abd-470c-8a37-3d721d3f2373", "sighting--1c9a7e24-3b1b-446f-be5a-1d2b08621ab6", "sighting--64197bb8-16f8-4ae5-b58f-847abb762bf7", "sighting--6a507f95-d883-4943-bc0f-5399621e7cc2", "sighting--5c385d21-41ce-4689-a17e-e569029ef148", "sighting--d142c3cc-da75-4363-af31-906143d003c7", "sighting--9e742184-3b93-482f-ab26-ce94d9c4c19b", "sighting--abbccae2-ef82-4a04-9dfa-3ec7910c41f7", "sighting--7bfac4b7-ca7d-4713-bff5-da1ca139ea8a", "sighting--7438da08-ae35-47d6-a032-d9fe30067fd1", "sighting--e0428c73-7c2a-4291-901c-03b4412c8394", "sighting--038164ab-0a5e-4948-b28f-962638c3dd87", "sighting--9c7fb6ed-bd72-428e-9a96-8631be0beac5", "sighting--c98a9e54-e107-490b-9faa-96922f35b7d3", "sighting--6b4e6e3c-f6e2-467e-b448-85b37847ef49", "sighting--3277fc9e-aef2-4c43-a2fd-8a244e129805", "sighting--0ed5e3b8-5877-410d-90d5-0ffd2b36f2fa", "sighting--852595e7-8c38-4eab-8c7d-5184f0a70405", "sighting--a9dfe550-26fc-497c-aea6-578c7619209c", "sighting--b16cd928-5a7a-4352-b8e2-ed9a9bd7d917", "sighting--94f17782-6e46-4bf1-8252-fe1ec3a52471", "sighting--358ce4a1-a67c-413b-a48a-af9656e4e447", "sighting--b0568fc1-2d04-4e03-907a-b40e7c094618", "sighting--f3fa5008-4722-40bb-be63-e3ad8f6d7fe9", "sighting--98b7fde0-eea2-4415-94a1-2e751619a76d", "sighting--5eb5e97f-72f9-4267-a1aa-7d94c644ded5", "sighting--4873813f-080a-4994-8cfd-7f5d5d56fbbd", "sighting--4c582136-4b34-43d4-ac63-dca69235a8a3", "sighting--64fd26e8-a1ed-4f96-b930-3e987e28de75", "sighting--5e97cba1-dd11-4505-b232-427bfb9f1953", "sighting--eebba5ce-d34f-4045-8341-4e44b88a1510", "sighting--4ee236f2-3d1f-42fe-b6b6-f1ca75858ad4", "sighting--9e28efdd-16ae-4b2f-a2c9-99ee4d49d354", "sighting--6944da9a-20af-4865-b3d7-febf66f59c31", "sighting--d9e26721-6235-4e34-a2e2-569a652a7938", "sighting--865ab658-b005-406b-99b9-9e52a0616047", "sighting--9751c763-16e3-420d-a824-8120304c488a", "sighting--173f2055-cf7d-448a-8412-7eee3fa95611", "sighting--b99ef155-59f9-4ed7-a468-a6f461ed4c65", "sighting--e184b323-23da-47df-b6c8-6a8efb7f6ece", "sighting--79bf885f-a60c-4948-b9e3-ef54df3dd878", "sighting--91800542-47bf-4686-80a3-57e29cd6939f", "sighting--8b5e07b9-9261-47f5-b456-2f272a761bca", "sighting--e5a5fcb8-1cae-468c-9e1e-72619fbd8914", "sighting--3450a6f1-8181-4a30-ade1-307bbf4c3388", "sighting--237671b9-caee-4d09-9c38-668d570afed8", "sighting--c08d6cec-d39d-4e08-afa3-b727b9e38565", "sighting--d36d6415-dbb1-4803-8c71-d7ecd68ca896", "sighting--0f698c7c-4479-40c1-b089-f0f597298db3", "sighting--72f04eef-5b34-41ee-b5bb-1ca845abc5c6", "sighting--5c847f46-ba8a-49a4-83f4-c2fd391a850a", "sighting--f33a3a28-069d-4503-abd3-4979233a9587", "sighting--01b472ee-f694-47cf-b28c-994abe196e03", "sighting--736be6d3-ed1a-46c2-a090-e8e4b2950b72", "sighting--4e6b4d5b-48e6-4cc1-80b7-bc3b18c3101a", "sighting--2f9cb708-6fc0-46e3-b423-0e37fec81d06", "sighting--e8bfabc2-866d-4920-b022-1c1ccef4f542", "sighting--79ae4e1d-46de-40cb-aacc-b3601b3794cc", "sighting--26f1786d-0b6a-4d5e-89d5-941bd154e05b", "sighting--3a2f8447-d505-4b09-8503-974e76ab4c5c", "sighting--3ca5d69f-74b0-4aed-b14d-96d004703080", "sighting--494eea5f-52f4-4deb-a72e-f8d978ce62c3", "sighting--2eacdbe3-9738-45ee-a3e4-6be107ae245e", "sighting--2ea03ac6-f32c-428d-9a58-948ff17d05f6", "sighting--a02521b3-4676-431b-9b02-23d512400ef9", "sighting--a258e135-c672-46e8-8bb0-f8cd4572c1ef", "sighting--b64bf919-fd01-4fbe-9194-9cd804bc3b5e", "sighting--2e09730c-15c9-4790-87b6-e6f417b87c9e", "sighting--b88ee2eb-8307-47f4-b58f-dcae90dc55d2", "sighting--ac10db84-406a-4cc6-8f56-8cccd70efccf", "sighting--fbd787e8-2119-4989-b2e0-d6a4df97f43a", "sighting--dde74585-0e28-4486-aa6d-660c9b160dd0", "sighting--934c575e-b8dd-4ef0-b8d4-2a2d3a0f66fa", "sighting--0bfc7428-d838-4a70-9af8-38c3843a0d6c", "sighting--6669279d-73e9-49fa-a9b4-03419f440a57", "sighting--cf863e2c-b750-4dc5-a622-9aa1e9ad69e3", "sighting--4e1ca764-ddbe-4177-aec8-a7cab07b95c8", "sighting--a9a9c8b1-6fb9-4cd1-944a-fe9c1bda73a2", "sighting--e1028448-3eb8-4a21-ad73-0ca9607b486d", "sighting--c222f465-81eb-4fed-95d5-690b2752e89d", "sighting--5134ca33-d899-4dfc-9ea0-05b999448134", "sighting--fee90390-60a7-47a6-8806-b046b78f9f96", "sighting--46a12306-4ae0-4502-b05c-78f11851a7a0", "sighting--1c0c472e-a501-447f-a1c4-1c9097c2171d", "sighting--1a0f4c31-1ab2-4b16-a2d6-432d6beaad37", "sighting--e8c49b17-cc9e-4df3-88af-ef2440459031", "sighting--d57cf4b5-18ac-4514-8866-447c682309c9", "sighting--ed407b9b-4ec1-48de-98b0-07f77d61bd13", "sighting--688a97e0-9695-4c62-9e87-4e4e5bbefdc4", "sighting--f3b8f7ea-7a3a-4a7f-951a-04f7d32fed4d", "sighting--1e545424-d604-4860-b93e-a83a8e28bd60", "sighting--ec16aba4-ca74-4d10-9de8-a303ab632476", "sighting--6c65c35e-99c8-41d8-a77f-5e73578c306b", "sighting--53847122-2240-4b2d-9e83-cc7184227585", "sighting--6be07ad3-0706-444f-9f45-cb896c4ba694", "sighting--3db4717f-3b3d-48c0-acbc-ecda900427aa", "sighting--d95414da-3354-4442-9a40-50858437ebcf", "sighting--93d8c01d-05b5-4f2d-ace4-1ae17b5a161d", "sighting--0d564fbe-6460-44ad-8ba5-2ff4fa7de20e", "sighting--0d87edbd-b55b-45a5-8bfd-4fd81b090271", "sighting--116807f7-d077-4398-868a-24ab98ff2c72", "sighting--6c3e452b-53f0-41b2-a84f-d77b472b2dbf", "sighting--df23da46-df31-442a-9aa1-b4d09ff7401c", "sighting--c7c37058-d727-46b3-b817-f7d2092b24b9", "sighting--e6e9b2be-1749-4823-8e6c-6687db7d93db", "sighting--8e9a3ed2-29e2-4fb8-9756-469f3cf34e4a", "sighting--42488cf8-cfaa-4654-a4d2-e40fcc823548", "sighting--db630cf5-b267-49ef-a06a-61134218254e", "sighting--0a5be17b-409e-4cb5-90a7-4ab30168972b", "sighting--964ca755-72a1-43c7-8cc2-92245f2d394e", "sighting--98149db1-1ada-45fd-8726-0afa1becd93d", "sighting--554c5854-4303-4746-8ef7-09e632cde53f", "sighting--5ef2b964-09d1-4521-87f2-953d5d40b42e", "sighting--21901955-ef3b-49ec-8e24-3b4189b2bf4b", "sighting--9b762701-9d02-4adf-9dc7-a25f5e03462c", "sighting--75e23bb6-2ef6-49ff-861b-9dd7bd601dcd", "sighting--5165edfd-6f3f-4451-a1fd-838d64883b35", "sighting--d84a8243-db0b-4116-8f2d-16a40237aebc", "sighting--6ef2b555-2847-4eb9-b566-be135b775e22", "sighting--824f7080-72ce-45b2-a159-050cd38c1de5", "sighting--711251d8-cacf-4acd-aa59-1fbd9ea0180e", "sighting--3c42df9e-1dca-4e91-ac16-e3368ab5532e", "sighting--384495f3-0739-4bd1-9be3-2622981e6d9c", "sighting--bdb3c158-02d5-4676-bed0-b6a68d13171a", "sighting--53a03ee7-ae36-4902-a7d9-44dee47fbb0a", "sighting--c4716da6-3c2e-4259-ba81-05d05fa7b69c", "sighting--9eba6581-ef6a-4cf5-8781-68d3e8fd751c", "sighting--2fbd6429-902a-4a16-ad33-b9737a83351b", "sighting--a5d8ad86-241e-4870-9532-9bf8b411adaf", "sighting--fc458a26-9c09-4651-a08b-d79317899907", "sighting--1fad72d5-8547-45ad-acc3-be7894f47f42", "sighting--7257ebaa-a0d1-4426-a8b7-5a75cf814154", "sighting--90920389-e2ea-4dc7-922c-2de063c55267", "sighting--cc87b8eb-541d-40a3-aaa8-02869cbc7e86", "sighting--1265cc65-7a18-41db-a63b-961b1ab91e0d", "sighting--6880409c-681c-42af-bc80-109ca02e94f6", "sighting--b5f3e1c1-13b4-47d8-95fb-3f136e1df043", "sighting--78cfd091-f705-4205-9d23-758b460740c9", "sighting--ac3ef3be-b793-4bd8-a011-2511e938c6ec", "sighting--cb0bb747-fec6-4d2a-9836-3ede6aed96ce", "sighting--51cbd290-7a58-4790-be80-592bc3d8908f", "sighting--d40c6212-d7c4-4fb5-953f-fb546920f2b4", "sighting--071ee850-5ef6-4247-a8d0-28aebdf372ce", "sighting--113d1198-36d9-4271-b1f1-69984649bcd7", "sighting--6bdaa3e6-215e-493b-bb56-accc809d4f86", "sighting--fd16b80c-a7d0-47b4-8cd7-d16caa878df2", "sighting--04b4e44c-f70a-4e7c-9021-d9bc3bd48b3a", "sighting--740aafe3-b542-476a-98ab-6be248005249", "sighting--fd05eddd-f548-49cd-a3f6-9b3497a8380e", "sighting--9eeb8e4c-0bcc-4a90-bc03-0d912460415b", "sighting--f5677351-8ffe-4054-88c8-c3d443ab8699", "sighting--2389de02-25f7-4583-998a-2cfc8d57cf5f", "sighting--8c7a689b-059d-454a-84d3-4fc654a20a4b", "sighting--503e5d74-0424-4317-a338-6644724e45c6", "sighting--927c8ef0-3403-4686-87c6-c2e32e60cfcc", "sighting--074c2ba5-360f-46ae-a708-a022c4d578c7", "sighting--3763e519-4df2-464a-9d9f-fa542808f122", "sighting--fc752425-f7af-4f8a-a1f8-62f08e6c0a00", "sighting--39735a2b-805d-466e-b238-a7bf8f216e80", "sighting--b8b1a2c0-dd7a-4faa-aff0-60f4d78789a7", "sighting--d38b5cb3-241b-4675-964b-0a87679f472c", "sighting--ea955aa0-1874-41a4-8466-6d183d25800c", "sighting--07737db5-2ee0-458e-8c16-b6bd04093a1a", "sighting--3823c622-35e2-48ab-8cee-8e498817e096", "sighting--f6e57105-1a19-4ba0-bd3b-53b0275cd86d", "sighting--6442ee20-92f3-4ca0-a45d-14b8c7373e7e", "sighting--7d563e0d-7eb4-4081-a812-8d2b31d9d63d", "sighting--b4e59ba5-fb46-4de1-9c38-fe726b766b40", "sighting--68457084-3b18-4331-8131-ba957401d5dc", "sighting--38612e78-ba4d-4701-a201-bc6e2b9aaf8d", "sighting--11d69a58-f76b-4846-8392-b8267c1d3097", "sighting--8e586137-c17e-447e-a7f0-852f12ebeaac", "sighting--87d7784d-db9a-42b0-bd9f-b715e721bd1b", "sighting--1dd2fdec-61d0-4164-bb40-5f032f41de21", "sighting--8c9cc509-6fc4-4ed4-84ad-ad36691c639f", "sighting--304979fc-c46a-441a-9551-67a82885f2e5", "sighting--899e99fa-df7a-4583-beb6-b051da09aead", "sighting--608204f6-32e9-4232-ada1-a7a84a9116ed", "sighting--60561f4f-c83d-40a4-ad20-a1828720bfa5", "sighting--34aafcaf-23ad-49c5-9edb-5af19771f4c9", "sighting--00f1099c-4c46-48c6-9f38-788700133db7", "sighting--7148ac21-f23a-4fb3-8321-ece9e6e3c198", "sighting--e62521da-0299-47ff-8c61-2fafeaa7a51c", "sighting--72178d48-43a0-4588-a9a3-87d6a0c8ba6a", "sighting--041c4414-284e-4ec6-8dcc-20146f9221db", "sighting--c0833c6a-a76b-49b9-9446-bc40ef2f88da", "sighting--f0d26703-38c2-4fe5-a0bd-d23c01e5297a", "sighting--12bfd7c2-3e82-4d30-a1b7-29cbf3d0843a", "sighting--08783d81-3153-4249-8f69-146858f4c10f", "sighting--a269e5c4-11d4-4149-97f8-52b88f062caa", "sighting--ee9a9dc4-6d31-49d6-8f4c-a012e5f81771", "sighting--07830505-6477-43e5-b56e-322d2e3587f9", "sighting--97e0a173-954e-4c34-bcb3-dd4d6c78f646", "sighting--43323d8e-71b7-4cff-8b33-726cd0069336", "sighting--bd345cd5-8710-4c5e-a70a-0e785a1430e8", "sighting--04637acd-b9e2-4383-a157-9d36f5963bdf", "sighting--ad4d9833-2571-4a8f-96a3-85f1cc97e48a", "sighting--3b66d9e2-cf9d-4985-b1b4-b97d050083f9", "sighting--1dc44839-0cdb-430e-a2e2-a58e2c9fea89", "sighting--839763fb-7a99-4da2-89ed-1563f1c2d73b", "sighting--7f224c16-9d23-4c19-a022-e80e5852e646", "sighting--12400b0f-b984-45cf-bd84-27a8812d2669", "sighting--7810d669-2b70-4f21-adce-61420c7fefa2", "sighting--4bb4f5d1-2527-4d5e-8fda-423c3c18d5b4", "sighting--cb5416b0-5d34-480c-9efc-ca296a76ba76", "sighting--f3138af2-252e-452f-88b0-4f6c8decf7d8", "sighting--8202ce8a-f085-429e-850f-d0514fa3a954", "sighting--fff2d673-4ee0-49fd-8bbe-0fbb648c52fc", "sighting--939630dd-ec95-40f1-93f4-b7ad30ba0f48", "sighting--7f91a072-0ed8-41b2-88f5-f11856b7b9f7", "sighting--7fb62d43-fe93-4fbb-b534-d78d530167e6", "sighting--8a63bcc3-4b72-48e5-8f4f-de4984d20ca8", "sighting--cfc472e6-4aae-4db7-b346-82208f349607", "sighting--f3beb83b-f241-44a7-ab6c-23782a20002f", "sighting--31266414-c594-4ed8-ad76-ad0b1af65edc", "sighting--afb613f2-4a70-4f96-83f1-cefe9aa48f39", "sighting--acc8a4e8-72c5-4637-8b23-917b924a308f", "sighting--d9969f3a-aaa4-46d6-b8b1-69f98b76b4f1", "sighting--3031a067-2e8f-478b-a7b4-e0c144e65253", "sighting--f643f789-4c4c-4bed-9197-2e34fae837ad", "sighting--e8b13084-f5e7-406b-a2f6-f7383e76f600", "sighting--41c0be1c-0856-4960-9fd5-d68093906c20", "sighting--ecc6e6aa-63e3-42f7-adf2-41a1c363d2ab", "sighting--19f44d37-5e74-4b79-a161-db7afd571ef2", "sighting--4c073ef1-47e7-401a-9531-e9f43a32cac0", "sighting--e95ed72d-9e02-489d-b365-c3d008c457ab", "sighting--1304e4bb-70c4-4116-9177-4dddc0020eb8", "sighting--d032fb9d-babb-4d20-9e7e-329d142cf336", "sighting--a5966d84-da12-4dd7-a329-2b8e4af2f75d", "sighting--dc44face-588d-4c2f-9150-5c8600732fd1", "sighting--d81adb9c-49eb-411f-afa3-5a0f38b46834", "sighting--b6cb47e4-c14f-4963-bedc-40805e80e666", "sighting--c38bc39e-22bc-43d3-9c6d-3aa69959ef7a", "sighting--908c3783-9783-48a4-9c19-cc699c8e45cc", "sighting--fdc301fe-476e-426b-8b43-881edbd7ec97", "sighting--89cf14a3-761d-4e59-82cc-2c47ec800b7f", "sighting--a8fa1cd9-d960-4dba-a3dd-f6195e7805c1", "sighting--029aeaf2-4cba-4d98-96ad-1254828750bf", "sighting--de220c6f-af5e-4de4-b3fc-987ea9f7b3de", "sighting--4a765807-0c35-4930-847f-6e2e5080861c", "sighting--f1fbc375-eac6-407c-887d-41acbe44dce6", "sighting--0e8d0e08-eba5-4261-a5e2-9059807c4a59", "sighting--81132b8b-aaf2-4f8b-b879-996d154eaee4", "sighting--3c244b1c-74e2-46e8-a6d6-8c2a51e1a5a9", "sighting--93e97952-1000-4f60-8fd2-53f01d8d36c7", "sighting--c75d1538-9c89-4a90-b085-8cce0bb4b769", "sighting--90c01482-b9a0-48f2-a117-c58a04ca9eb0", "sighting--79c1d5c3-e930-4b0b-99d5-4373f60157d3", "sighting--7507b845-752c-42fe-8403-76ba1718a50e", "sighting--7f243f63-f179-4a5c-847d-72bf57b8d763", "sighting--3132c3e2-1df7-46c8-8cac-c14e99194592", "sighting--8163b771-3272-4273-ac39-d7cdc52b68c5", "sighting--1fe972b5-80d1-4763-aee9-5b1349827c3b", "sighting--ddaf4095-ee13-4df5-8482-f8905ab0a267", "sighting--0fe895c6-c004-4749-9471-03abd7a5a697", "sighting--9edd54f7-faca-42b5-b738-04e53f394fc7", "sighting--f4f06b4a-a23a-4962-912b-4f763dc2ca32", "sighting--825f34e9-0ca5-44ba-a7d6-bf26d1286e0e", "sighting--afac3ed5-50f1-4817-b985-734e1c97d215", "sighting--cbd55769-9056-4104-ad47-116b8e6eacb0", "sighting--41a556d2-106f-4edd-91d5-a4697a80a405", "sighting--0061c10b-73b9-4356-92c0-a66b8c8c4f02", "sighting--c8771307-fe5d-45a7-97b2-a411441a982a", "sighting--be680cf9-658d-409b-a439-65f572d5b554", "sighting--0d323daa-268e-4b13-b0cf-04c29f99a2c5", "sighting--ebec5ce7-2910-41d1-8746-8d0e3cfc9ea1", "sighting--65508839-2fe9-4434-ac7d-c80e1f4f4c9b", "sighting--2b9d36ff-bafb-4ffe-be41-a779ab8ee394", "sighting--edac7b57-ac0f-41c0-b649-2b3107902246", "sighting--e99ab251-65b4-4393-842e-d5001d640120", "sighting--e0ef6de9-a325-4d4a-adc2-7a597512310b", "sighting--86fa1bfb-0537-469b-8030-83f94ba15085", "sighting--31754fc4-dcea-432e-9bc4-68e7733a86ce", "sighting--24cc16a7-528f-49cf-9e17-8d867534c195", "sighting--587c0f03-9d82-4a00-b022-84a206d72958", "sighting--8ca79971-f342-48a5-a42e-4bd458ba2daa", "sighting--8cbd2e9e-9113-4479-8bab-f19a058d91b6", "sighting--1a37f62b-ddd2-48c3-84f0-1faeb5c0d7c2", "sighting--1c3223fe-78d9-4da1-99ac-d1c72645d42a", "sighting--6286c5af-801c-48fc-9eac-2349f578ee64", "sighting--92fa20c8-080e-4ea2-b95c-f4b876117065", "sighting--465a514e-843c-4918-85a8-75fa0de0137b", "sighting--ebd15fcc-24f6-433c-9284-20409d3f969a", "sighting--6c2de351-d00f-4ed7-890d-4a73bb2296e7", "sighting--0100d5f5-87b7-4994-b599-9cc6f47b79de", "sighting--2453d99a-3028-48e4-b293-6a5132e39f07", "sighting--2626cb99-959f-41ff-afa6-b50f0ed07470", "sighting--52d5d4f7-14c2-4c71-becb-107cf62c181c", "sighting--420bc32b-68c9-4267-a81d-55bc7102bd0f", "sighting--80a6f4f6-4c0b-4eb2-9fc7-78c11045cdf3", "sighting--83387a2a-cead-4dc1-ac6a-d61e01754b7b", "sighting--eddb4341-e72e-478a-ab04-ee23a90d0bca", "sighting--db5cb1b6-c947-4c87-a1a5-eb251c94c79e", "sighting--89d4308a-0982-48f8-9676-0c026557ae6c", "sighting--5eab856c-943b-465d-ab90-f875dd263ef1", "sighting--2637674a-696a-4a40-bd61-3c27b4880061", "sighting--1770e2e3-8714-4302-84e1-388ea499e78e", "sighting--6ab687ff-7c84-4d73-bb9d-8fa70edde50f", "sighting--8321ab8d-c463-45f0-a9b3-d30edd31d826", "sighting--b2634b26-d6dd-4a6f-8a67-8fcbbf49a94a", "sighting--7d85e339-c833-432a-a5c2-3c6d2da1ad31", "sighting--9ee341b4-7b75-4a6a-bcc8-5191c8a516a5", "sighting--da857653-445c-4c1f-9935-a3014884db93", "sighting--e9f871f6-44c3-4e91-9971-3637dbe3852b", "sighting--0fd5a25f-d42e-4668-af03-5292b972c598", "sighting--0639321b-3274-4fdb-bf51-e6c51c8e7822", "sighting--2ec4ae1d-e868-4074-bf25-c2cd09f990cb", "sighting--038c1784-399e-454a-820d-6fe942393852", "sighting--49ccbf7f-9317-4d80-b93d-56dacb9e84c8", "sighting--19e82da8-43c9-4cff-ac9a-97a60421b355", "sighting--64d446da-6e0c-427b-a13e-34680dbc3ade", "sighting--8ae02956-c7af-47d7-8b47-1ed633a8c805", "sighting--98fce686-68ba-4bcd-9f00-04453e4131af", "sighting--9b8a73a8-f94d-4059-91d4-e88680261185", "sighting--38c736b6-cee7-4004-8759-e0e3c3d41ba6", "sighting--294aa60f-856f-48bb-9125-ac7b3055656d", "sighting--39f2692e-238e-4f01-8532-f0b78f2c4c76", "sighting--fc8a8f5b-0052-4231-a37c-e84d85fbc76e", "sighting--afbf4d39-1ebb-4cda-a9d6-73ca7b7b72ba", "sighting--31d082f8-2a94-4be3-a57b-4b8d82b383ac", "sighting--ca0c6612-18b6-4c23-a688-1d23b898f1f6", "sighting--e33ffeb1-d11f-467d-97ba-75fa5081bb08", "sighting--1959d1be-e2b8-4628-9080-1e6943121074", "sighting--034b8ef3-5b14-4583-86c2-5b19466a99db", "sighting--8ce82ba6-1e86-4d8f-961f-8347d25843a0", "sighting--bf441667-409b-41dc-abd6-f47fa024e87e", "sighting--0b5a02a3-026c-48d5-8aaf-5b806338f23a", "sighting--f2aebe26-7a72-4345-9552-f4dd0d2b36be", "sighting--7b548980-55a3-40d5-8528-ed60ee281003", "sighting--02e8c7d6-7f98-4b49-a561-70c1179d7c2f", "sighting--70d857ed-ae02-4552-a7c5-2aa13ff29332", "sighting--fc0b4d4a-28af-4553-9b5d-0842b5c0d475", "sighting--5552eecd-20a4-4db4-8b44-89a45a342c4b", "sighting--fd2abe05-b4d8-483b-bc07-4148de226672", "sighting--5be88bb2-d65f-4ce2-8c1a-d2d2c85a3987", "sighting--48965e10-a25d-4c71-bd54-b98ded19ed1c", "sighting--b703c9c0-1c3d-4e24-b630-02dd0ac5a39d", "sighting--328c017d-ff96-4c7e-b6e2-2576ed39ca98", "sighting--1506099c-4666-4066-8905-aab10f82a5cb", "sighting--740a99cc-12f6-486e-a4b0-0d0f89b1102a", "sighting--860c3e6d-e9d4-4d36-9243-4b25d9c55934", "sighting--34884eec-b63c-4679-9e5f-4a039dfe6a07", "sighting--c71d451a-152c-4e5e-8135-838dbb4a1827", "sighting--d819c283-62ba-49f8-9d81-1cfe513b024d", "sighting--c0cee43a-b10f-417e-aaac-a36defe2acf1", "sighting--5ffd525e-d9da-42ce-b96f-134122af1ed8", "sighting--bd9f5fd1-7512-42ff-98bb-f455d8c389de", "sighting--37e6b392-8882-4fc1-adf7-10b4e3c35b50", "sighting--d2f57fa8-d5d2-468f-a9c4-52c3c3310607", "sighting--7fb687f1-c21a-4e02-a13d-63c42c87a52a", "sighting--1168c5eb-739a-46b2-9bad-927fff46710d", "sighting--ec96004a-6036-46b0-aec1-03c7eeaee915", "sighting--1a9c87d1-cbed-4850-a430-8961a7502831", "sighting--aa8b2535-a80e-446a-85b7-6f7b526657b7", "sighting--bb8d6c47-f3db-43ac-816e-8e15b572d476", "sighting--29c8fc67-831a-4bd8-ac1e-7db8eebeafae", "sighting--5a910f6b-2bb2-48f3-b477-37d559f7fcc5", "sighting--bbc615a8-a79a-4007-aa31-7081ffdbb5af", "sighting--dcd7a264-dffe-4b42-9e83-3420b2d0fda6", "sighting--1ebb9a95-ade3-498d-bfb6-11752c5a8e29", "sighting--a2b0740c-9fb0-4adc-8d07-70e947a4f173", "sighting--5e3c2236-48d6-40d9-90ae-7296004bd64c", "sighting--0857d472-2da5-4681-bd58-7cdf4dbfa9e2", "sighting--e659010b-6d87-4a5d-bf83-85c0d3b72a9a", "sighting--8e9ee993-c77a-456c-98e2-7c7b0bb95969", "sighting--7b2f31c2-b215-4201-90aa-40a3ddca97b5", "sighting--5f66659a-79bf-4fd6-a798-653aad56623a", "sighting--9f090a0a-f738-4bf5-a7dd-e62e9ba3f760", "sighting--22181500-4dbd-4ef9-a872-057b2fe14f31", "sighting--f5cbbb07-1e97-4fbd-80e5-54d2b5d064fc", "sighting--cb3296d8-6cbd-4ec1-916b-b1b192db9b29", "sighting--6298dee1-240a-4803-a6b8-5fa433f593cd", "sighting--7cb258a4-1f94-4ca1-b5f2-9f6d69a5854f", "sighting--1249091e-d01a-4438-988d-fa5c97a188f9", "sighting--cc183721-596c-42fc-b071-63294e01be81", "sighting--414a7b02-1a5c-433b-9873-fc9ec7fc10d3", "sighting--5746be72-5d11-4dbc-a5da-6bc2877b7970", "sighting--1d43207d-b63e-4d26-b622-d8be5b745702", "sighting--f80630ca-e486-401e-bb38-e747f81eeb35", "sighting--10d89cc4-7ba6-485c-a581-72b1c7e7aa75", "sighting--5e163ae4-89d5-4ef6-b57f-f988814e4136", "sighting--f4890920-8740-4176-baf4-a5a3952b3510", "sighting--3cf2c434-5d4f-4cab-be4a-9e8885111e7e", "sighting--441aa47f-f0f7-48e9-9045-6a930732100e", "sighting--c99cc722-8570-436e-9bd4-a3273b7347f7", "sighting--c5e5b678-6e3e-451e-a548-dc0980a39fb4", "sighting--89375f7c-f2ee-404a-ad14-f9c0f5e629aa", "sighting--fd357728-f1a2-4ff9-a35c-782a1d578ad8", "sighting--dedcfc9c-a1ca-4932-8fc2-cd9ff83cabbe", "sighting--7a844866-33b9-44e3-8a13-39fd012fdd0b", "sighting--5856539d-46ac-47cd-8674-da4adafa075f", "sighting--f29b8795-9479-41a3-a470-74d566cc6e0c", "sighting--2f79e15c-4ee2-4c88-9c0c-7b7b2f4967ec", "sighting--050a3507-7be2-48e2-a5ca-dca472bb60d0", "sighting--8c18491a-e3cb-4948-82ad-810109cf6689", "sighting--6a78173d-a1dc-4704-b581-2b38ae24186f", "sighting--64231d9f-66d1-4ba7-9193-712bb6695acb", "sighting--6b596437-0c84-478d-8179-df0a045c8b34", "sighting--18e2b490-4a45-45c6-8de4-756d1a9e96a5", "sighting--df8ecdf1-7a46-4b28-a807-4b6c4788b968", "sighting--f6883a5a-7711-482d-9336-4ea3d6428805", "sighting--00ba6fbb-bf95-489c-954a-d95c0d253603", "sighting--4a36c2e0-18a9-4b31-b134-b24df440adc8", "sighting--fbf163c7-e200-4f49-9f4d-a8b833a0dd1d", "sighting--4ff7b7af-26bc-471b-8fdd-cff70d966b81", "sighting--a8e119de-a8c0-4da2-bbbf-31e48b4b7ce1", "sighting--01552241-1a41-4d79-8225-372fd1ab9a97", "sighting--886104cc-802c-46d9-8cd8-717376484334", "sighting--444949ae-5faf-49b6-89e4-13c20084cfe7", "sighting--2bde0632-d3e0-444b-af20-c6b4c5dbfeda", "sighting--1b5d8492-a71b-430e-b028-41ba1edc6c26", "sighting--fd666fd3-7c08-47e8-86f7-409a63a4bbfa", "sighting--126133e4-6811-40bc-9143-bfb54b070a70", "sighting--97529175-93ae-43cc-8226-58f960d294b7", "sighting--ffc5e37f-bb80-4c48-a441-8fdcabf41368", "sighting--63a1159b-7441-4714-8f63-966f1da07230", "sighting--31637b01-6c6f-4a6d-a433-b570b7702b32", "sighting--24fc9c6f-0dbc-4918-9885-fde8441f0fa4", "sighting--6086b17a-e17b-407a-a969-90a6eb630e72", "sighting--172a351e-c8dc-48ab-8016-d813ebf1c669", "sighting--acefa686-d019-49e1-a00c-578c64286a40", "sighting--9f4f2c6c-b903-437a-8ea6-669da802aeb6", "sighting--c89cfaaf-b213-4fee-af80-26f512ed16f4", "sighting--400d7e2c-40ff-45e8-9a42-17f3da681f76", "sighting--6ffb3913-afa4-49ec-851e-a675023ce49a", "sighting--c9f26503-01ff-4f03-9c24-f9b0ad39ebd2", "sighting--4d9756ac-a10e-4501-98fb-227b7f22e5f6", "sighting--ba93fce6-9042-41e2-bbfe-79e83f58a130", "sighting--bb3d793c-36b0-4e7e-ab59-f368722bb0fc", "sighting--9a8cc202-7ede-46d7-87ec-4e6cc8427fb9", "sighting--3c51acf0-9722-4041-8a37-00715a657f72", "sighting--bbd2b699-60f6-4bd6-add8-35167ab51366", "sighting--9a4b093e-64b8-479c-96ff-41ca22fc9dce", "sighting--32a9b058-3bc2-4e72-b7d1-5cf146e49acc", "sighting--f7aec52f-7db7-4e34-9878-b4fe91c9e4ca", "sighting--4a5b91c2-7494-4d36-9562-f649d960c270", "sighting--ac77f05f-b3d9-4ac9-991e-6d81b586c36b", "sighting--51071c65-43f4-4ea0-9824-546fcb0cc315", "sighting--66fb3a8f-d34a-4e12-a204-824b067d7dc9", "sighting--37fae1a1-8a07-47af-871a-36b737d193e4", "sighting--7a5e3250-e651-4967-877e-78a885183c5e", "sighting--0381ef0a-e852-4856-b326-caf5a7d565ee", "sighting--5db7b2a8-17de-4429-b866-c4b731ef2271", "sighting--9cc8cee4-ffeb-4150-8f88-cf165b0251e3", "sighting--cc9205fa-85e2-4de0-a4c2-2c75b01c9af5", "sighting--6ea31bff-bd78-479e-ae79-6aaa0087ff14", "sighting--4b188705-2549-45ba-80f2-6c94e57d224c", "sighting--c022b105-668b-4fea-844d-e78041aead9b", "sighting--82442c7f-a71f-421a-8e75-60a9ce8e80ca", "sighting--ef5d2d5f-aa20-4835-a161-996973e84dd4", "sighting--5219f36b-49b2-43eb-9991-0c72b7f90835", "sighting--74a3de95-66be-48c1-a47a-64cd1a0bdd57", "sighting--6ef2427b-8b80-4198-bf0f-94cfd6d22db9", "sighting--599533dd-36e3-4828-80d0-a634b7c58511", "sighting--eb0e6657-1dae-459f-b9b5-0634b53c6654", "sighting--a52c2b5f-b670-414f-aaed-21a95da7281d", "sighting--1cbccf2b-160a-4f4d-b298-0f3a7809c4fd", "sighting--3022b234-ab93-48f5-a3e7-22b6f27b4cd3", "sighting--ae650e2c-6532-491e-bcde-62f7b58edab9", "sighting--097b958d-8855-496b-bdfa-ae868167774c", "sighting--7b67ee6d-66c7-485e-bf8d-ec0627b01f5f", "sighting--b4ade364-8f87-4e8b-a959-9a0f4bd25a7d", "sighting--b9166623-562a-4bdb-bb29-99ae231780b7", "sighting--3f89f5f3-0e7b-4b02-8153-a1b8d854c854", "sighting--d8155d43-3ca5-4c6a-b3c3-570cd2e5ab20", "sighting--973cc1b0-3c8c-40d7-866f-b41499a5a9d1", "sighting--023d6678-812d-4876-b0c2-8225201f2385", "sighting--bc8133bc-ace7-4ed9-997b-aba9f40538ec", "sighting--b9e7172c-fa7a-4c60-9d96-1fbabaca6888", "sighting--b95b4d02-6f8f-4fbf-aec9-7704c132208f", "sighting--b487acaf-cbef-4619-9ea8-d1445688bf5d", "sighting--16d036b0-22b4-49b4-af3f-68a9b422e29a", "sighting--97f1d619-6b12-42cf-b063-607621d0af7b", "sighting--3f91f5b9-5476-4742-bac4-5e801a2f4c81", "sighting--f71ca54e-c072-446b-97e9-49f1c115256c", "sighting--3ce6080a-95b9-41bd-bf09-fb2d8a2d2dcc", "sighting--081ba245-e531-43ed-beb2-eff01e60ec46", "sighting--895110df-e076-48d5-8ed7-626792a7b752", "sighting--e28bc864-1466-4ba6-b840-450af189f051", "sighting--246d1e7f-0d39-41ef-bf17-d6c87c96e5de", "sighting--0e25534d-4266-4e93-a695-2a5e6e4299be", "sighting--109aefb4-6abc-4967-a695-b12a6217bfcf", "sighting--748dc015-5e47-455e-b757-b9ebeb2cf622", "sighting--9992ce76-6c2f-4e0f-abef-e219e14ca603", "sighting--2ccae805-cb7a-4343-b563-6065ce336f12", "sighting--076ae021-7130-4010-a8eb-15647ec08059", "sighting--4f6d8ab2-b9e7-4fae-b8e5-5b266c09f606", "sighting--5c7570b5-99ee-4ccf-b45e-8126ae7283d4", "sighting--9ee51cfa-fd6e-4305-a7eb-954f4ed12450", "sighting--90a8a2dd-b9af-4fa7-9ee1-b4d1bb13b5d2", "sighting--e3ee0a65-47d7-45e1-a777-08da08173603", "sighting--6ac6adb5-0925-4325-92e6-df37c67a1c05", "sighting--89513ff8-e57c-4adc-891b-6c5ade3c0380", "sighting--f5721011-42f0-449f-99c6-b8177d92fb09", "sighting--b3e66d28-cba9-440d-a38c-75c1cdc9c43d", "sighting--47f26290-64ed-4f70-af4d-26bd5bcb60dd", "sighting--e65146c8-803f-45e0-9d48-089e7a2ce274", "sighting--9a9f0a7e-c567-4eff-9b14-287223fe11e4", "sighting--f94e634f-77b5-4979-a08e-282b78579d40", "sighting--cf297fad-ec83-4624-be85-38446314849e", "sighting--9d22bd83-4504-4ed9-bf9a-e711f34560f7", "sighting--8d4ea206-2860-43e8-bc64-936d3436eade", "sighting--15ae0c3b-7c07-44df-ba65-2ece33c3ee33", "sighting--1d3bb73c-7e98-4793-ba57-7beb9820678f", "sighting--fd8b4368-d66c-431d-a419-d7cba0390ad0", "sighting--7024b746-33af-4040-b10b-3bd30386c336", "sighting--431f42ee-6730-4e60-9696-438081ab625f", "sighting--c6018d28-d245-41e9-beae-7d7e77a5c937", "sighting--b9066b10-3d28-4c75-8914-f47c0cb242a5", "sighting--bf9504c5-885e-41e1-b357-f237e2da7df5", "sighting--ffd488b8-4b5a-43e0-8c56-a8a316994bab", "sighting--b9402b7c-854d-4280-bed7-af11161da65f", "sighting--06f823e3-08bc-48b1-9377-c07e8f4e7a06", "sighting--7a7e3b18-7eb7-4a96-89a8-2f6f1ca67bd9", "sighting--3d6c0909-4bb8-4ddf-9cee-0a256fe04521", "sighting--2248abdb-aad0-4656-a540-5a9cef74df3e", "sighting--46dd7f76-f828-447c-b872-fd1a8aea302f", "sighting--5f2cd95b-ff92-48b7-a68f-3b94020e6f8a", "sighting--fd4a66b0-936b-45b8-8fe1-dee9fb9b92d8", "sighting--e4d1cebe-d002-48bb-a688-5d54845715c4", "sighting--500ac4a1-0889-4f4f-afa8-9244dc029342", "sighting--bf1ba3bf-5d53-4a58-b7d0-ff21f4be7efe", "sighting--0506cabe-13b5-4091-90d7-161d97bdf3fe", "sighting--ec4233b3-87b9-4f91-9f2a-4d6b73c3261c", "sighting--c94a87f8-c954-41e8-8a66-fb18fb92bbb7", "sighting--2934221a-30fb-4f1c-b34f-abaff3a932e4", "sighting--46b25f49-486a-4750-8f2a-9230b839f4a9", "sighting--94aa1edf-c54d-4c97-a220-c554ade172c6", "sighting--29d9099a-cb1c-4517-bb86-3da32b4bb583", "sighting--d2860302-059b-4efe-bd41-9db2639daa31", "sighting--75128903-d2a7-4cf6-9056-e7d3e9c000aa", "sighting--e4c478c6-e1cd-4e99-a089-20535f7f7c33", "sighting--47dfdbcc-1b41-4d89-b22c-62762c681ea1", "sighting--b7e7488b-bd88-4def-be24-b0c1e7337147", "sighting--4740e7f9-8e91-4f9c-b62d-ac95fcac9bc5", "sighting--d166cde6-26a5-48d2-a6f5-af676437a8a4", "sighting--9158fa19-2763-4107-a13c-5cc604f1794a", "sighting--0eaf91e5-2611-4425-8d9c-b908f90f5228", "sighting--089521a5-2325-46f3-b56f-43434517b54f", "sighting--3ecff49b-fee9-4188-b892-ddb656072c18", "sighting--852edac7-75cf-4f46-8fd9-12c6f56cb14c", "sighting--06d275d0-69d1-4732-b553-16ec2d752e95", "sighting--23870911-abe0-43dd-b771-72600f61d563", "sighting--76c401d1-bd30-4668-929a-b3e038ad0c91", "sighting--57b95a08-4e60-4ca9-8e9a-29c9cbd20923", "sighting--72028055-825a-42a5-8869-c8978027bd5d", "sighting--a21f6c70-48dd-458f-9e69-f99bb6a6b5b1", "sighting--4eece2d0-28b7-4363-83f9-53fa68d906ae", "sighting--d9790001-18f6-4bfd-9e8d-b25d8bdc1d7e", "sighting--20a0aa2f-3930-4359-abbc-7cd244b046e1", "sighting--de1d8cc5-d3f0-4ff7-a800-1beb46d4b60b", "sighting--823cd719-2dcb-42c9-950e-78795ae62d68", "sighting--eecdc510-0b87-4f3d-aab0-0a2594c17815", "sighting--23710ab1-eb12-4945-976d-6f0e66d51bcd", "sighting--9aac5d6f-3822-4ae7-b559-2e4187ef3b1b", "sighting--f83ecd1f-623e-4946-b03e-d8d5fe5411f6", "sighting--8227b4bb-65dc-4c2d-bf5d-67e4ebbb90a8", "sighting--1d456354-beba-45c7-84d3-79eb431d0ce7", "sighting--6d637f39-d625-4a1a-a434-a0cb2fbf3391", "sighting--5d78cbf7-7ba7-4b31-8a3b-934d8f425443", "sighting--b2c950b8-68c4-47e5-9c80-2a6dcc823d15", "sighting--c500101d-5317-4177-b6d3-e0ec6e5495e3", "sighting--c499c1a7-0d38-4d3b-a731-ccc3f9b4b4f6", "sighting--faef12a6-2cf3-4817-b30d-f2d7dd3af01a", "sighting--c8cfd3fa-885b-42a0-8a84-228ef833c5b5", "sighting--1eb61ea0-b991-49a3-aa8f-241ace8fcf4e", "sighting--1162b21e-c36f-48af-9e33-ce99affdf0b6", "sighting--e3841de7-c6bc-491e-897c-0aea9ce4f3b3", "sighting--5790b99f-0d99-482b-957d-f494f6937ba7", "sighting--5491b63b-a87f-4bd9-8800-440a77009d3f", "sighting--576c297c-dfa8-4d85-8227-79240cabdf11", "sighting--3f538079-a0f0-4a63-9b48-abaad94519d9", "sighting--d418cadb-5943-45f3-8305-34a60fb16f64", "sighting--722e6b67-b80f-4625-84d1-4519a3fd085f", "sighting--40dcbbb0-3446-470c-9f77-e3d28db13256", "sighting--0d4ad136-d9f6-4e0b-a91b-9b4d8a0a01fb", "sighting--11fd60b1-7d60-4691-a91e-9b1e1c44b835", "sighting--96b97c2b-fa41-4263-8e6d-a53d52bc1cff", "sighting--ff6747b7-175c-4ffa-a31d-2b130653c66b", "sighting--6862c714-c247-4189-b5d1-05b458ea629f", "sighting--15e274ee-f785-4a56-89bb-3a2316ead76b", "sighting--af520883-fa0e-4bf4-ae3e-2e7e0dfc6b20", "sighting--122ee9f5-45b9-41ee-94a9-cf22e292d26b", "sighting--9638915f-51eb-4a07-bced-eb791c8910d9", "sighting--169ba744-b7a3-420f-82ca-1dd49217017a", "sighting--5dfd5f62-64a6-4432-adcf-4dada67af140", "sighting--4f598ec0-5897-4d50-bf0f-8be3bb2e7bad", "sighting--80b1bcb5-f148-4acf-962c-5c771e342631", "sighting--e218b725-e06b-4a72-8a09-6566ffbc6453", "sighting--f7593345-0fd9-4f11-8681-1c66b5595feb", "sighting--08ab632d-7f97-4953-b40e-7c8260d1bca3", "sighting--eb7c138e-11ca-4692-83e3-ffd3b80516f8", "sighting--fa73c5aa-1e4e-4d0f-8771-b09f8543aacf", "sighting--6faad825-7b4c-43b8-b16c-8523f50c4c2d", "sighting--1b4329fd-2b57-4254-81b6-bc9b6766f2e0", "sighting--c9d77150-955e-4137-b43e-f8ca90d49742", "sighting--e6b7abf4-2db7-45d6-a338-0ba31d325ad6", "sighting--66b9c020-8db2-4453-9cb2-48d93b500cc6", "sighting--31244c48-00c8-47aa-bbd6-80339e8bf84f", "sighting--e14b528c-8731-49bf-b477-cc96f207b6d3", "sighting--a7fec636-8d14-4ed1-861d-c6fd37f74bd2", "sighting--53c7365b-9097-4cea-aa1e-91eb671b9aef", "sighting--73d1f4e9-5cbb-46bd-ace9-ada178218871", "sighting--e33ec900-7c88-4ced-bb93-a70ca9b0c385", "sighting--b8e786b2-f2f7-481e-92ac-8c4024117079", "sighting--8e57225b-3a80-499e-97ec-5b9a4f3b927e", "sighting--16497236-2d2e-41d9-aec6-0fc9decad15e", "sighting--99534f06-4126-4ec8-b491-52ded56ebccf", "sighting--7ef2cacb-3cda-4b96-a820-409db802d10c", "sighting--43389f09-ced7-4ac5-9b08-b899a8ef0cbb", "sighting--bb35c052-7b71-4ef5-95a9-e75d95bfd268", "sighting--35758b79-7733-4b4e-abcb-7005461f2cf8", "sighting--616490c8-5e9b-481a-996a-9df3baca7ae1", "sighting--0e871010-f3c0-478e-815e-dd249854ed6b", "sighting--c3fda58d-2d9d-4779-ad70-612872431fe6", "sighting--e2175976-43e1-4563-bd65-ee009952d492", "sighting--6ce7cd00-750f-4fe2-b172-e77e0c283ee2", "sighting--e6d2c582-8e6c-434a-8a5d-612f27e09c58", "sighting--0b678416-b150-41b1-8557-f1df84b8d113", "sighting--a2d66153-6dde-4fef-8d9f-0153468b7d33", "sighting--808ef296-8a8c-4384-b497-2ba6d51ebec7", "sighting--70959b5e-28ef-434a-b110-38d835ca3ae2", "sighting--84b2a2dc-70df-42ef-abdb-cba1b3fc446e", "sighting--bfd0cba4-1da7-41d6-8975-5ba92bbd4487", "sighting--769d1e6f-eb29-4b4c-8603-a0d4eece684f", "sighting--c3ea2949-6d88-4f68-8159-159ad9667f27", "sighting--fdbfb195-b4ec-4342-8638-046ca26e4ab7", "sighting--65b40c34-9021-4f2f-b2a4-d9c5dd8f37c4", "sighting--30903e75-1bc2-45e2-82f7-c809bab519e2", "sighting--be4fccec-e1c6-4d6b-b195-9a6db2ace700", "sighting--8e5b1b55-3dcb-4de3-b7bf-3e1b9a4406f7", "sighting--dd8d7c4a-ca88-4901-a3da-58d3ea75184d", "sighting--d2dae494-6f8a-49b3-bcca-cdd3de30b175", "sighting--6fdca5ed-e05b-4868-8f38-3afd537f06c0", "sighting--758d7b41-60ba-42cb-88b2-f7a6f4ce59d0", "sighting--74f2ac7f-bdb5-4dd4-8a24-2cee46498df6", "sighting--34d1cce6-133d-4325-bb5e-08b40a52f46d", "sighting--54ddd3f9-3fe8-40bd-b2c3-cf8996c0bd55", "sighting--dbf64fc7-9530-4f50-8939-04a1bd11bd31", "sighting--aa061ce8-cef1-4425-9089-42c7e222ee29", "sighting--544d6b7b-f739-4f13-a472-3cc5f8aea6be", "sighting--ca262bc3-c3b2-41b8-b436-d5b27ce3b7a7", "sighting--1ffb3f2e-8804-44bc-85a2-b0dac04e32d6", "sighting--092b7c32-3c7b-4d3c-8377-13fb6507a4c6", "sighting--db7c5caf-762e-400c-8a7c-52375639ee29", "sighting--91254e25-f0be-464e-a2a7-5041b3e1e961", "sighting--c69371f5-c7d1-41f1-b882-423e09f79633", "sighting--995b6d9d-42e1-48aa-80a9-c39c86aba471", "sighting--dd6fbb93-cdd4-41be-af0f-13b02eeb4cbd", "sighting--96bbead0-2c40-49e3-a603-d7d036fb0b32", "sighting--47553f16-458e-4e21-bc26-4ae6aa638192", "sighting--70a269c8-d239-4d54-be42-772ee5baa926", "sighting--b718d0bc-70b0-4133-abef-2cb12b53136a", "sighting--d6eddb05-c99e-4f27-b2bf-b7d9761233ec", "sighting--3846212a-0faa-46d7-9fa5-da40fdc072b4", "sighting--190064d1-e478-4ed3-ad5d-5f9a20fcc6a2", "sighting--f7d7f935-3108-4ec9-a8d3-132fc2539f58", "sighting--93754f97-0bd9-44e3-8783-837f8401c922", "sighting--0ca19cba-badf-4f52-b5fe-94526dfab88c", "sighting--71253b7f-34ad-44e5-9be7-c4403ad8f972", "sighting--cba3081a-e2a4-48d3-99df-b99fec0b68a7", "sighting--a603cd1b-0b37-4642-8735-d34575021d5f", "sighting--d8870315-8954-4bfe-ac5e-24f4c4f2618b", "sighting--a7965c8a-e143-4f3e-930d-25b7bcb1fe99", "sighting--13f1f32a-8659-4c0f-a8e4-dc53b81100b4", "sighting--8986e820-3852-4d6d-9b17-c327a7d7bd47", "sighting--d9f9810b-734e-4c77-87a5-38ef3235a29e", "sighting--40769236-d236-407c-86c5-778a94e6bb27", "sighting--f7da03ed-ba49-427c-acf1-3444dd0c208d", "sighting--28652209-4209-4bc8-85ce-e5a92ff935f3", "sighting--67c4e6c5-d87b-4d96-af4f-855e0e3e84b9", "sighting--1a5470bc-4783-45fc-b1da-f5c2be640d37", "sighting--20953360-9b7c-4199-b3b5-8d58eb5bc27e", "sighting--817149ae-3b72-4ccd-a410-d5af4fec54dd", "sighting--50210645-636c-4a2e-8882-ba563d74b077", "sighting--8eb7219b-b0ee-4574-8bc3-fc298e8c18f7", "sighting--06188892-550e-4ee5-b293-e08a4bd8028e", "sighting--8f5ea210-a295-4156-8fd6-659f8802ff0b", "sighting--e8714225-f1bb-4122-81f8-70347c441b6b", "sighting--97eeeb4d-def5-4213-9e90-f2d56eb3675f", "sighting--1ea70b6e-9cff-421e-bbff-7123f5d4488c", "sighting--a2a3451c-c9df-4517-96b4-be4b73095bc5", "sighting--d6235334-7af4-46e9-93b5-f044c5a31ab7", "sighting--3bc751d2-0fe4-4c83-9b9d-10b461e25f01", "sighting--a1aff7b7-2a76-4744-a794-a63138b69797", "sighting--cf20a8ec-24f8-4dfc-982f-541b26e68c86", "sighting--a185b5aa-30af-4ad1-8c29-70c2738e4100", "sighting--1bf15236-d45f-4a5a-94d0-8d19da0d9619", "sighting--944c56fa-8643-4d11-9c78-7c8626a0e7f4", "sighting--f65754e8-5309-41f4-852f-e0b82dd7b269", "sighting--301a69c0-d82b-4afb-b291-34890818642c", "sighting--de304934-4d53-4374-b477-406f57eb1d14", "sighting--e81d59d9-8160-4536-981e-4f88e7395d9e", "sighting--b285c82f-dfbc-4f77-98c2-edca32773001", "sighting--e83ba6a6-6506-4995-8883-3892ce1ff495", "sighting--15c9c26e-9959-4c31-9f07-531ae0362e5b", "sighting--d37d20e2-172f-4413-8455-24fc8c647ce3", "sighting--43615527-156e-4b28-9359-340f9f203cc5", "sighting--6eeb3ab2-9258-42ae-987c-97ec8dbc2a6d", "sighting--fecf794f-67c0-4648-9d5f-0f0d7d3946db", "sighting--4bfaabff-3381-4242-b272-a1ea3087d4b8", "sighting--d4d1fb35-e684-4cbe-98e7-0e20f87cfa41", "sighting--329da9f6-b29f-4bf3-b220-9d828d9dcd95", "sighting--6649cf81-868a-4638-9374-60f80ae7ef14", "sighting--436f3df3-f262-44f9-8235-cfdd4ff9ebbe", "sighting--e8893bb7-226f-4c71-a9fd-06a7b3126dec", "sighting--160e67e6-9f06-4895-b0b2-91192f635cde", "sighting--f9771702-2cee-468a-bb80-bf1ecc2f8014", "sighting--348394df-187a-4a96-bb02-181772d70cc9", "sighting--aa3095f8-5725-495c-b52b-64e86983f68e", "sighting--00bf74ce-7393-421a-bd54-506d0be52ef3", "sighting--492e0ab9-8265-4b56-869c-e5294de42b27", "sighting--2ecaf75f-a364-40f3-b27d-6ba5662ccfed", "sighting--43d930c7-2ea9-44db-962c-cb3f15e5871b", "sighting--513a8f17-c9e5-45d1-9abb-39049a1eeea7", "sighting--1b802ccc-35bf-4a51-88a3-646ee1b3e9e5", "sighting--3562f375-51a4-41f3-9b38-15db92af2e1a", "sighting--7c74f8a4-a986-41e7-986b-75ef7b87566f", "sighting--ee9fa3d7-bb97-479b-85b8-3042a66c5c54", "sighting--c4d8f83e-5cff-4e66-9162-39bfa56524d5", "sighting--e81a9b89-53f9-438e-8174-923865dabedd", "sighting--a4eac996-e5d0-40c4-8fda-d9d18da1ffee", "sighting--866864b5-395e-4fb5-a56f-19542e4f1931", "sighting--cdef6095-c426-4f58-81ab-bd99d9efffcf", "sighting--364bcaf4-c222-4468-ba71-512214b6a144", "sighting--673dc17c-4b08-48ce-babc-379da219575f", "sighting--7b02aa35-e894-4846-8193-c7876bb402ff", "sighting--0a431580-2ef7-4783-9bab-e6bfb6dd5331", "sighting--8688329a-6d73-4974-a028-26d86f24ebdc", "sighting--4141dfc1-9f26-4ec8-b931-297120606c46", "sighting--1a09faf4-016e-4166-bca6-f95ce8bb7b95", "sighting--4d5d7cb5-c1b7-4d16-be89-7398689121ee", "sighting--417c2a69-49e7-4b2b-959a-4549c0c9d6f0", "sighting--4b53e14a-a5aa-4b10-8112-fca598804c34", "sighting--288cce42-c0b2-41b5-b232-bde1b515012c", "sighting--31d0fbb1-806b-4b39-aa1d-779e09bdab19", "sighting--5fc41f2e-329a-4c51-a850-935fab3c470c", "sighting--638260e1-3a08-4d76-afef-99bc103ec7b2", "sighting--bf2df86c-c0da-458c-894e-c4f37ce3e48b", "sighting--955bfb4d-f288-4ecc-821d-67456e5ff167", "sighting--28cfdf62-3c23-4eb8-8f49-53beac1d7fdb", "sighting--9546ebc3-ac7f-45ad-9f2e-be3eba1ea1bb", "sighting--07f0e1de-521e-4e24-a54a-4383b890944c", "sighting--69099754-6250-400c-908d-75c4aae390ff", "sighting--6f455592-3416-4030-ab60-8294d931996b", "sighting--a037292c-8880-441a-b9ed-32dd9031bf24", "sighting--bebcf05c-c870-4c29-963f-21887d5ecf34", "sighting--c5be8668-1cf6-4420-a7cf-d71ef97f542f", "sighting--36d24023-427d-4e8d-bf4c-0ba0488db5b6", "sighting--f38b96ee-5aab-4e42-bfd6-2a7c4c820dfe", "sighting--1b0ccda4-067a-4ba3-878d-3e5070ebfd5a", "sighting--3c09e14c-700b-496b-981e-ab5dff553b7b", "sighting--1db7ca10-bfb9-4e33-9bde-729194ec535b", "sighting--c55771f6-cecf-4306-9886-f6d64c8225e3", "sighting--e1adbd5e-392b-4fc4-96f9-900939283b20", "sighting--67e97045-1712-412b-9a19-902ba3913e7d", "sighting--9ec7cfe0-18fe-4b98-892f-2af6e539fd66", "sighting--c5027b25-d06c-42a7-a1ac-d3f6a66463bd", "sighting--1c0bfb9e-c710-4135-a402-b0c0293a517e", "sighting--4d69f99b-b124-4abd-b37d-1959557660de", "sighting--c8d468e2-d88e-462c-aee0-543c2920d566", "sighting--f916e439-db13-4944-a5f6-0cc64d797fb7", "sighting--6dc374f4-3d8f-426b-bfcc-c8b049b3c6b3", "sighting--460ec52f-2cd3-47f9-a635-10f21cdf4633", "sighting--68f9baa8-f3ae-41aa-9e37-7b3001523628", "sighting--39d5446a-a596-422c-b5f3-b60b43283ced", "sighting--860f8d5a-c153-42ac-a9c4-ea27663c6bb4", "sighting--f526b7cb-dbfe-444f-b2be-e7163cabc0d4", "sighting--e638e53a-69ec-4d15-bb26-93d1d2b8b44f", "sighting--99207e63-b98b-48e2-80ea-a839415ae7b2", "sighting--68c551d5-a9fd-4622-ad0d-1a90f4bdeb9a", "sighting--2c873c6a-fb1a-4980-a307-0e199001f03b", "sighting--9afc3ea8-64d2-40f7-b29f-e1da798ffb3d", "sighting--e4965c20-7d09-4d03-9fee-2ce2b644cd04", "sighting--a93308c0-1062-459e-9e6f-838a1a5e70fc", "sighting--83b638ce-8e73-4f79-b175-e67740925a6d", "sighting--d86c8554-e2c4-491f-9efc-73c5acd7bb7b", "sighting--bdda48ed-1f75-498a-be80-686bddb8c922", "sighting--f83d3e18-eaa8-4e76-be3c-64bf4d99e528", "sighting--12dad0e2-4467-4523-882b-36cedc041a12", "sighting--7822a762-af37-4217-a2b5-505a9b7e3467", "sighting--31088ea9-8394-4949-b15e-59f7f734e664", "sighting--dabe12ee-cdef-47ef-ba56-79f2292cc217", "sighting--e2515ab9-a31e-4693-adb8-e9131b9acd8d", "sighting--7dfe20c5-d1da-4194-bfbd-515064c05db3", "sighting--8877ca36-b8c1-4713-ba1e-ccc3347ed493", "sighting--a6387224-dd1f-4550-9106-ebe49044e458", "sighting--9ea07938-e65e-4104-8ad3-05a177ada560", "sighting--063faee4-1e7c-415b-af1a-88560186e84c", "sighting--1f7bb930-36ae-4f81-a1fc-6f7e83227b12", "sighting--3a687512-f82a-446f-a4a0-b1ee74493ee8", "sighting--bdabd569-436e-40be-bada-7b8337077de2", "sighting--bbfd79bc-23d2-468a-a756-defd8239c374", "sighting--20aef6d4-11a8-4558-b815-f20301c513f9", "sighting--3ddf5e41-668b-4008-bb78-f601a2816b80", "sighting--e8cb970f-bedd-4ac3-9db0-6f294503c6be", "sighting--f2ef7ad9-5383-4db4-8f5f-fd25b73c07db", "sighting--bd5bd912-8b4a-4f7c-9d7a-1c4dc65229f4", "sighting--cad74fcd-7905-44de-a0c8-ef48f0e90669", "sighting--0689c931-5f9b-4264-adf3-c482a8396b55", "sighting--a1fc415e-a578-462e-a1d6-5019404f7fd6", "sighting--47228e04-67c1-48e9-9628-11743739ffa6", "sighting--125666fb-2598-4371-a2e5-222c4ac1ef77", "sighting--dcfb7c6f-0a33-430c-a2d5-d9ce0fac0ab1", "sighting--cd221f90-4702-4e5c-acb9-9b69a45f8036", "sighting--0e9425e4-c6ca-45ae-b900-e9d7f0b3fb43", "sighting--cf20191f-6cb8-49bb-b77f-8647eb273c02", "sighting--85132a2a-5e00-4b9b-8db2-9021d68f94d4", "sighting--a4ba1b97-592c-4b64-8b9a-a61cc052ba45", "sighting--2c65fe75-c90d-410b-8fde-52692b4ac30e", "sighting--f735f41d-5211-4e40-876f-4e1676ebdf5b", "sighting--01b7ba4a-9dd2-4377-893b-2f45f86670c0", "sighting--82106af9-1abd-4410-a143-144a181fa2d6", "sighting--7796a0f5-9aa7-40ae-8090-10d81a499245", "sighting--6743cb74-e0de-4754-8422-35d5dd9f24c2", "sighting--fd6efa58-bc88-4b8e-a13b-e411a9023573", "sighting--30679554-8d80-401a-89a6-7f27b6ba0da1", "sighting--b7e3840b-be69-4575-bc3d-fefd99ea770a", "sighting--15feede9-f15e-4db4-ae48-c7505f00e7d7", "sighting--a205b2cf-f726-434d-a936-ef2e281ff202", "sighting--b94d7dd0-05bf-4674-9306-899284994d5d", "sighting--7384bef8-05e3-4a88-b26c-55d71fbd7ff4", "sighting--ec0a9aec-208b-40c4-8cdf-8ddd6a71478a", "sighting--fd05150e-acf4-49a3-8425-1331b382db99", "sighting--4d14fc37-6000-472a-b8cd-c2ee13f7c570", "sighting--b84c283e-ec56-467f-a9fc-4e52d13e825d", "sighting--296aeb10-2a5f-481e-8934-231157336df6", "sighting--206bffa0-0f92-4da1-9366-02cdd2a6dc51", "sighting--baa05033-b122-40a4-8b1a-a0835a6d8af2", "sighting--ef29923e-c0a1-4875-a274-3289c64b2b1f", "sighting--05850ce1-1d88-4225-ae36-7b6c15da2b49", "sighting--0e0a524a-0657-4d79-8df5-59f833415aad", "sighting--5a4993f0-a948-423c-9738-dc5a4e41179f", "sighting--d55dbf23-4bbe-4247-bb3d-5dd64a27b177", "sighting--a21aec4a-e793-409f-a2d1-7ea75eda8237", "sighting--aa2836cb-6385-4508-895e-c6feb7b13cb1", "sighting--cb3740d4-bc0a-472a-9f58-be2c49e00e65", "sighting--ed0a0309-f42c-4187-8c8e-30981685885d", "sighting--0e59a5fa-1ea2-4f14-b5a6-118869bedbd1", "sighting--e9c68cbd-c46a-457f-97e8-43e09495a135", "sighting--0706f74e-66e1-4efe-857f-67b66a62e457", "sighting--f98b1d27-467a-4908-b699-df0d99e40f53", "sighting--803bef21-3292-4daf-b01f-ecb8c6e62ca0", "sighting--cd192659-2ef5-4ae9-9bf8-9d79205df540", "sighting--40d6e997-2198-40d8-a312-eb9882ae6432", "sighting--a7c534af-51e0-42e9-a44d-e8023ec49a0f", "sighting--f300eb92-b71f-4b86-b6b7-7b02ab4e3040", "sighting--b4902455-7558-4df7-b6ad-f3bc55d7099e", "sighting--399964d0-5e08-4e5f-82a5-e66440fc0ed2", "sighting--621bc4a1-c18e-49c8-9d40-3179ea631e17", "sighting--d254625c-db4f-48e7-a380-27dbb5904983", "sighting--666d3cee-ba2c-42ab-b196-9d1094301352", "sighting--bf332481-e3a2-4aac-97e0-2dc2497f170d", "sighting--dfdb4847-21bb-4f9e-ac80-5810c8b6dc0d", "sighting--4b3924be-e86e-43f1-ad6d-b69620b77ca0", "sighting--2a1aa6fd-327f-437a-a1ca-a90b8a8cbda5", "sighting--34349375-a510-4bde-bf55-fc52bf4b9121", "sighting--9e6bd529-2070-4ecd-a595-f1a9f6b0e2c6", "sighting--f88812e5-2377-48b2-8f11-d2c5d734bdef", "sighting--d1b1facc-36e2-4069-aa99-44f9751380c9", "sighting--f3603f1f-65c7-4024-8a84-40fd8436bfca", "sighting--a1fd89f3-1422-43cf-a7f9-3fec35c40f19", "sighting--7d61c2a3-03ea-42b6-b9a9-342f510f3377", "sighting--2e4950ba-47e5-4f4c-b9e8-69445b949f4e", "sighting--17574225-2cdc-4d18-af7a-257da796396a", "sighting--c95bdcbe-0fa9-4db0-a165-f4d87dad4b41", "sighting--cd977ca8-da45-450d-9f3a-ee3752f394ae", "sighting--6b64a050-2797-40ce-9fda-74fbb244147d", "sighting--90a1f4cf-1993-4ffd-af38-e49de5751565", "sighting--c0ee1524-315f-47bb-98f9-e6003b74e107", "sighting--8c4603bd-847c-47a7-a61d-99f286e3fcfa", "sighting--5322a3d7-de37-4a81-b85a-de13923b67ec", "sighting--a6113840-78b7-470b-929c-1c72253ad55f", "sighting--a3be4591-4b9b-47a7-8db6-813dde69e7d6", "sighting--4aa920aa-7a4c-4748-9870-a452567174c3", "sighting--77b78a0a-9510-41fa-bc9d-3e1c6b0b996e", "sighting--e21d6ae5-616e-4724-8121-db36dc50be03", "sighting--bfbea4a7-69b3-4ba4-916d-d3df080eb6d3", "sighting--e3e66ad6-91e8-4e95-97a9-0c5145a59a4c", "sighting--2b47caa5-14cc-4bca-831e-17394707484b", "sighting--fbf746dd-3286-4ccd-a3f5-562089ca6dc9", "sighting--d6ea3b3f-da9e-42b3-9501-62cd4885b101", "sighting--4509219a-e033-4c96-b3d4-638e410226d7", "sighting--cc4811fc-e298-467b-8b6f-3830d21725da", "sighting--1fd8ff88-4309-4925-b905-2802109ab5f0", "sighting--de3f6ed4-49b0-4553-b4cf-31379d2b744b", "sighting--144f317c-8d31-46b6-bb99-2f7b698f902d", "sighting--334acee6-d9dd-4802-8365-7d68acf8fa3e", "sighting--f107e71d-0958-48a3-b4f8-9b9d19dbb390", "sighting--aaf0db3b-bc34-406c-94ec-0c1f151c449a", "sighting--22133bb8-22e1-4690-af96-122542b555fc", "sighting--04bbef3f-c676-4711-8adb-cf099ad43201", "sighting--2cbf11bb-db35-47b7-a25a-5fef1caa548c", "sighting--49e8dec8-bba7-4744-a355-d1ce2e531d02", "sighting--6a567c27-8e07-4975-88e4-6ce69436e534", "sighting--7ce4441b-dec6-45c2-878c-825f063c955a", "sighting--8c4a0676-948f-4710-8a02-008d7a69220f", "sighting--8a098871-7845-4021-b638-bcf00d0db4b3", "sighting--0b9b5e50-37ca-40e8-8345-bd7979fdef50", "sighting--dc17ee51-dca4-40d3-aa70-3170f2d8448d", "sighting--a11d6d98-cacc-478c-8e45-26a5342fd436", "sighting--e2a1ef27-997d-481c-b6b3-7e389929ec41", "sighting--0197d8e8-0c71-4e78-a7af-b695578120bd", "sighting--e7d7ba52-104c-4376-a2dd-a4af1a4e5b1f", "sighting--cec5bcde-adbc-4c48-be18-0702c4a4f6c6", "sighting--444eb262-131c-4808-abb0-2f1d902f6cb9", "sighting--a5c51b1d-45dc-4d86-9fa5-a6b187ef36cf", "sighting--47707e1d-a84d-42c7-91a5-4eee5a0f8473", "sighting--ac869ce6-76fc-4475-9078-df3d224de1e6", "sighting--ad654ec1-5952-47a1-b473-ec73c632d163", "sighting--fa6bbf26-0e62-4f0c-9990-57d91c48ac0a", "sighting--902a4e8b-bad6-4268-a2c6-ae7e6266d0c3", "sighting--79306918-bcc1-4876-90b5-c10d84c83ce5", "sighting--7adee8b0-7473-45cb-b3a9-a46be92dc3c8", "sighting--65d7ac05-3042-430c-a50f-4e79a1d7f282", "sighting--f83baab1-4afe-4275-a386-131f60808893", "sighting--77795a6d-dbc3-4d7b-8907-4af126b76dcb", "sighting--81d07425-176f-4c6e-8e17-23762981793e", "sighting--5171bad1-52ec-4ee6-88f9-f11047dbcaa7", "sighting--38ab2d50-a170-4813-a6c0-ca7e2bdd3743", "sighting--9831265a-a964-40fe-94c7-eb0644d479da", "sighting--1cd9f8bf-0f54-43ae-916b-ac0b0e2b7a15", "sighting--3e9b0eb0-e273-4a37-b1eb-b8728accb166", "sighting--3747bd36-8a3c-4ff1-9b37-e08af62dbc0b", "sighting--2b967b87-d4fd-4e02-b5d0-b5f9b2da91d1", "sighting--b5df8846-8f8c-4ef1-8ca0-81754e1903cb", "sighting--1b91ab1f-a11e-4aed-bbc9-f6600ec045ec", "sighting--e7bb3903-0019-49e2-afe8-2b88e76638a3", "sighting--314f429d-2e6f-4e9e-9bdb-f459cd0489a9", "sighting--937ac077-6de3-4233-b54f-1a9a2634b932", "sighting--258d28e7-145c-4d07-87c8-5f06ee63cc39", "sighting--4f37b62a-3ffa-45da-a2bd-c523a5eb6806", "sighting--00022ba0-b841-46e0-a694-ccc4cf67257b", "sighting--45df4149-26a5-49e7-973a-533086759124", "sighting--dd6fbc85-2362-4bf1-b117-01ff3a07768a", "sighting--9fdbb5aa-cab3-4e21-bbdc-b2ad87441925", "sighting--93f12a11-5f7c-42bf-be4d-ab7821f7bae4", "sighting--f0ca30dc-a94d-412c-b94a-2abfcce3ee93", "sighting--48d6fa52-2f83-48b0-9967-89de7e483fd9", "sighting--28af273d-2fec-49fc-add2-3dcb2393ae29", "sighting--242aceec-fdae-4ce8-98e6-30a3b3b255e8", "sighting--1d4cda6c-a637-4a11-b0d9-16aeba8b4d4c", "sighting--68ed786b-852a-4523-bc47-07c8a3914844", "sighting--87f5fab6-5b50-44fd-8324-029de8d025e2", "sighting--7e77cd2f-dd94-40a1-897c-f82a1467356b", "sighting--2f59b602-2c97-40c1-a440-150040aac7a5", "sighting--2c7de2d6-ff6e-45ad-9a2f-16ae9dae34bc", "sighting--918e14a6-7391-46dc-ad6c-96378cbc50ad", "sighting--e466f091-c6ec-417d-a629-114ca4ef2bfc", "sighting--0e38437f-9e35-4527-925f-4558177e6bd0", "sighting--045e80a9-0312-4cfd-894a-06fd9ccef776", "sighting--aec31097-3228-4a23-bab5-23a5eea775b8", "sighting--04255700-6252-423c-831d-16fe1b229728", "sighting--c2f6d987-be60-4cbb-b211-30e59ea20e99", "sighting--082c02d9-a3d5-4206-964a-274fc3708bbd", "sighting--b2417d2a-2822-434c-9cb6-2837bcf252e9", "sighting--c4223499-da21-4ff1-8c14-73808c0b359a", "sighting--d8e2c8ae-3a7e-4181-b4a9-c2f2cbbc7a43", "sighting--5853cb7d-892a-4a2f-ae1f-362b22e01d81", "sighting--2d73d5f5-0bdd-4f04-abed-0159e10acc88", "sighting--e37ed281-35d8-4a22-9531-5ddd78f5e3a5", "sighting--415a11cd-4011-4c55-b2ff-3af3ddc03bdf", "sighting--3a125578-bdc1-480e-bfa1-7b9d878788b8", "sighting--0ebf4385-05bb-47a2-9872-a4d9baec0cfb", "sighting--d2884cfc-ee8d-4d06-9ea7-536f32baf5df", "sighting--2d2045a7-ba70-4c5a-9626-293ec233a3b9", "sighting--ba698497-3106-4d1f-99ea-d5c587637dc2", "sighting--0cfe9e8a-70c1-4543-8977-93fbc2652574", "sighting--9486051c-1e94-49cd-98d1-9729c3faff9a", "sighting--a143fc1d-5b1e-46a6-a538-1c31acf4ce0c", "sighting--43fb71bf-0011-4644-966e-e3385fc1ce64", "sighting--94d78977-6209-4b11-a4ad-f9b81cc993b6", "sighting--a82ecfca-e235-409b-ae38-28d93542d79b", "sighting--cf96b2a2-c971-49d3-b62a-89f575bf3a64", "sighting--e391cfb4-cf93-4751-8649-626e88a20602", "sighting--104c44fb-a7a2-4685-a8c8-5b723ca249ed", "sighting--70892395-d87e-40df-a9e2-948109e48747", "sighting--e610ada0-3f54-403d-a2ff-3b2a2e389d5d", "sighting--9cf6213a-2a04-4b5e-88bd-146d0bdaf29d", "sighting--efd46e42-40b8-431a-9264-67334f52b867", "sighting--1b26c390-7d82-44e9-9504-ee83a3f9433e", "sighting--a3db9813-e8bd-4d26-90fd-8affb592ea39", "sighting--847ea08e-7c2e-42ff-a302-0dee9f748ee6", "sighting--93774b76-d2f7-469d-9e48-3a4384fbdb64", "sighting--bad0a284-0d46-4da7-b2bb-bda46faf1bf0", "sighting--867b2bb6-adf8-4562-b306-ca0edf147bc7", "sighting--a5cb4916-39c6-426a-97b3-baab5365dabe", "sighting--7b6f2c58-5945-4415-bea5-228da6d0aa84", "sighting--d50f9f45-c868-4aff-a553-7d8230096bec", "sighting--01441e08-2768-4be9-a8f9-3b1823b222d3", "sighting--4a448bd6-61c0-49a0-89dd-c2b388d23b01", "sighting--3a9c8a84-fd1e-4e30-8b11-d9be0073760c", "sighting--2ae55ec4-da61-4c10-9016-b065d52d75bf", "sighting--6d032fc4-a8c1-4b72-8b94-bfcd3fb84f40", "sighting--936ac52c-ccd8-4cb1-b68c-f4d7912c41ce", "sighting--6b65e2cc-880a-4116-9f5e-5ef3bae5ae8c", "sighting--4b2863f1-9b0b-42a4-9f2c-0cb97ba4057f", "sighting--6efbcafd-92fa-48b8-899c-793850e87903", "sighting--c6e79844-d81b-487c-8620-2fcec622b3de", "sighting--e8073b47-aea2-4c76-ad7b-06b9b4fb6abe", "sighting--48fccb9e-bcda-4499-831a-b16b81c0f5bf", "sighting--fb09b42f-84dd-45fa-a4ff-edf1a445bcc4", "sighting--11eb25ab-eebf-4b51-b927-0f1a084bb6b0", "sighting--f23064fc-5e3e-4df7-9a02-dc79c70440b9", "sighting--a956c781-5663-48be-af6a-e05157e76575", "sighting--3a245008-0788-4500-b613-11d2a4a223c4", "sighting--9c698a53-8a71-4e2e-be98-52b52adac031", "sighting--5cea761b-143f-47c9-93b0-31f55008f844", "sighting--886ec18f-9339-406b-8bc8-ae6362541473", "sighting--87674700-c04d-486f-b24d-b29100212f77", "sighting--b5692feb-a813-4b81-abb5-9cd40f3a9c22", "sighting--96e81240-35b7-48b1-8cbf-16a64824c614", "sighting--438eb9a2-4e7b-4d9e-a85c-cd88db1ad075", "sighting--19a5a8ca-ce10-48a3-996f-dd78516f73ed", "sighting--f5b7ce5f-0924-4abd-8b89-dc11eede5869", "sighting--e840a1b1-a5e5-4c2d-a400-7497c59d7f7e", "sighting--68cdae8e-121d-460a-8c4f-158582b3feef", "sighting--3cf11339-61bb-447b-a9e4-66567d4aaafa", "sighting--da9d70f4-2c65-44be-8823-646890bcf0fc", "sighting--cbf7d384-3026-4caf-aee8-3491254e1365", "sighting--077549f3-4685-49f5-8b62-0b15b22c4f7a", "sighting--1ab504c6-d218-46e0-82f2-8fbb79c23a4d", "sighting--8c611d04-a37b-4d94-9bbb-e0cbc4df3252", "sighting--dd222213-71f0-4f75-8864-cb521c5d0ae3", "sighting--23b7f012-7121-403d-9699-e65b070f956e", "sighting--c0f65797-13e4-4bb6-b2a7-43a76daff515", "sighting--1e9f8dcf-d37d-4e36-9ac5-612bfcaa5531", "sighting--5eb1e72e-c452-4963-9bb7-964e2d678382", "sighting--4651e216-4df3-4f4b-80de-b4c9ab833b85", "sighting--6efed3a0-1b2e-43bc-9338-75bf869d304a", "sighting--09eea22e-65f5-44da-ab9f-0c293d7b534d", "sighting--99f49cdc-b93e-4a81-a91a-7ed50145ae11", "sighting--c8f69cca-4a43-4c63-b38b-3a0a38d08924", "sighting--cc23b2ee-6b47-4dbc-b09a-8f8c2488ebbb", "sighting--32b7f041-e119-4e32-af73-253a83460190", "sighting--54fb179b-03b9-4838-af53-2374e5663780", "sighting--457115b2-fec3-46b8-a8e7-fd7b2e078759", "sighting--3c5345da-b118-483b-ad6a-f643c19bf62b", "sighting--fe2ed679-cd20-47a7-a79d-5a3113c0c8fe", "sighting--45378a05-8a91-4c63-b0fb-24890110a4ac", "sighting--55b09622-5fed-43a6-a99d-e2fecb644504", "sighting--4e5cad2e-70e9-4d49-a3a0-eda639129b8c", "sighting--adf411c7-9fce-4b8b-8a36-c50b3c661596", "sighting--aac28c15-ff81-4afd-9b0f-8ba95f40334b", "sighting--714825ed-23c3-475a-bce2-29883b5ab3d0", "sighting--e8f95ac4-d8f7-44e8-a780-54775fe22199", "sighting--b744946d-0553-461c-b886-1d23c08f120a", "sighting--8e01cae3-ed7a-4b6a-9dff-26de15ceb5bb", "sighting--3fedc2c4-d1b1-461b-a740-f60c727682a1", "sighting--a411ba8e-65f9-4e87-8e45-f9422fc9cf26", "sighting--870f2d6b-bad6-41e7-ba7a-053a27371268", "sighting--78223e88-bfe0-43ee-a75b-a82ea944a898", "sighting--8332f514-6806-45bd-8f55-ae306aff0e43", "sighting--49506c62-dc13-4088-841b-daee39b21d58", "sighting--8b9f5a8e-6174-4d61-ad07-46d3eb4045ad", "sighting--2efe43e3-d854-4af8-b000-5804e0c6bd45", "sighting--d849921e-13b1-4f2c-bb89-bc827ec882a1", "sighting--de352683-65c6-449a-960c-50298fd3765e", "sighting--fb38d405-29e4-490d-a2e4-8f126abc27f9", "sighting--b0ed088f-449c-45ed-981a-debf7ca12c05", "sighting--9aaa84e1-6da6-4dcc-a88d-4f922612d282", "sighting--0114a83e-9c46-41b4-a749-166c49c38d73", "sighting--d60309ef-1996-4a9e-8e0b-80983bc9e846", "sighting--c8a820d2-44d9-489a-a1eb-4ff43f4300ff", "sighting--4240ad1c-391f-423d-8532-eaf0093f809d", "sighting--ce69b5a6-8cd6-42cd-9293-63a1f06da8ff", "sighting--2da19d0c-1b7e-4749-bdb4-f9ca33b8dab4", "sighting--aaa7056d-d07c-49ec-aaf9-93a74a55572d", "sighting--07b8659b-2d00-46b0-8448-5d7cf0ba8146", "sighting--1f17e57d-49d1-4220-b5a7-50aec3f47633", "sighting--56c7f2ce-20c7-4307-bc7b-442daaedd27a", "sighting--eb856ed2-da32-41eb-89b0-b65cec4cf5a0", "sighting--87ba846f-c14b-4ba1-aa5e-6bcf84acec88", "sighting--9fe1a40c-a60d-4370-9582-f85bcb06bd5e", "sighting--e4809894-ad40-4f64-998e-8990237bcfdc", "sighting--b89bc141-8c51-444d-bf38-b571122abb3c", "sighting--945d1b20-860d-4cad-abb1-13afef2bb302", "sighting--0f97160b-66dd-4abf-a18a-89d44d07014c", "sighting--177d7e4f-d2db-4946-a958-0aa89ae9f3a3", "sighting--b575074d-0b22-4bde-890d-d80775582f8a", "sighting--c4c1c9bf-6514-437d-839f-32c9daeaaa98", "sighting--09e905b2-4387-433e-9e28-f2f2ed11f764", "sighting--bf4f9379-8d11-45f3-ad23-711ac5403832", "sighting--9b6ef0e0-5cc8-4fc7-b8f8-d8d8c445cb74", "sighting--9aba9bb7-955d-4903-a9e6-ea6d4c733e45", "sighting--d7393845-bfa9-40b8-9a86-0b03c5db26f9", "sighting--bbbd1120-5c22-4672-9f9a-e9f24274ada9", "sighting--4e8b46c0-cbad-4e8c-acdc-25e41371da50", "sighting--33baa23e-7328-4c27-a5ab-02602725474f", "sighting--7fcb9aed-ed5b-45a1-83ab-a5e92595a44d", "sighting--3f2df5c7-3016-4f94-b8d6-f3bd0426f2b9", "sighting--e9e47057-d1bb-45fa-b998-cf3d75592f60", "sighting--2dc445b7-70e0-45de-9926-cb6605cb46d4", "sighting--64019bb1-f3c6-431f-95a9-0619540227b9", "sighting--de8d6a80-025e-4947-b268-cb80c3420d93", "sighting--654550fe-e4f0-4289-bb25-2e99581bfc6e", "sighting--e3fdfd2b-65d4-4b15-a6c6-d8abfb82d85e", "sighting--bb3a0238-cf9f-42ea-b6dc-1659ef312aa9", "sighting--bdb11d40-b699-415a-8cc7-e245bf70b89d", "sighting--8e79669f-b8a8-4e8c-b525-dfdb90e3abf8", "sighting--0ea1d999-d9a6-469c-8681-d8f3237a96cf", "sighting--0052936c-9c7f-4f9e-809c-6914059c286a", "sighting--7ffd45c7-6bbe-4588-a913-ba48f27686ad", "sighting--811f096c-76aa-4d20-97ae-3e428ba813de", "sighting--1ddf8624-8198-4e18-ab2e-2b0dfeab6e03", "sighting--faa6e92c-c4b8-4fbe-83f7-86b5b844de78", "sighting--88306428-00c2-4a76-a7ce-e96b6deef217", "sighting--59a391ad-bc68-43fe-9095-ad99ce24ebd9", "sighting--9597e39b-0165-4502-8f59-144851984116", "sighting--db218ea8-75d8-40c8-8382-da159185018f", "sighting--98922f1e-e098-4d01-8871-7ea1c8cdc8b1", "sighting--0609fcb0-9067-44c8-828d-8cd656d565a6", "sighting--51113154-f063-46e9-b16f-c0fba1f479ed", "sighting--30574542-b7ee-41b8-81e4-6d1279cd0321", "sighting--8c1de89f-9f60-4b34-99a0-660be5b93e3a", "sighting--3037e985-b43b-4ba0-8fbf-b767d1c3d0a9", "sighting--6b5f6801-6f60-49eb-a0a7-9535436a92a8", "sighting--b3c66efd-3678-4779-9f68-dc2a3bd175cb", "sighting--aa2621a5-01d0-4d7f-a24b-5368d74b608b", "sighting--bfe29ea3-a35c-485b-b057-96b9ad71069b", "sighting--7ba32671-671c-43dd-b701-fa14c3b8e248", "sighting--6de1bd3f-b091-42d2-9e0b-06178d6a49a4", "sighting--aaa4f64b-c1cd-44f0-b69e-83a91217706f", "sighting--343b1ca0-047a-41cf-88f2-2d7efa9aa09c", "sighting--73386baf-ab86-4b56-9952-4040f2ea7cbe", "sighting--f24a5223-410b-4c4c-9c63-1cf8db644f17", "sighting--3b833a38-a1d2-4b53-b425-6ae0a74a240d", "sighting--025ff166-2f5b-4d6c-b1c6-b9286abb0a22", "sighting--90784ba5-177a-4387-a8ec-2d8a23e47d87", "sighting--b0b34580-9fe5-4294-95f5-2ab82f9b3382", "sighting--ab988500-0cd0-48c4-9466-e6e1c3e45a26", "sighting--538aee72-8d5d-4c1c-bb34-8a0c0e1b32f0", "sighting--f58a25b6-6fe2-4cf9-ae23-a1ec0c4c8089", "sighting--8d95a980-7840-4281-99dd-ffbb905e8901", "sighting--15fbe882-ab7e-43d4-abea-d31e8b6fd642", "sighting--81ee7641-4c91-491b-966f-d0627674b49a", "sighting--455d613c-916e-404c-ab67-c5101ba16ffc", "sighting--adb62151-9557-4ef9-a099-648d3b3800e7", "sighting--c16078e5-7198-4a73-a205-37963f9282a6", "sighting--250acf78-94dd-43b4-b9ff-614ba9568ada", "sighting--926d2978-1820-4566-a5b1-7aa9d5d9c807", "sighting--8b3c78c7-d628-4a08-9816-29183583e0a3", "sighting--caece2c2-a325-46ec-a269-1dfb89a5232d", "sighting--1065e769-0a8b-47e4-a88d-839bb14ee727", "sighting--0370df9a-5227-4cc9-b184-4db248132030", "sighting--61eb94fe-f19a-4ada-ad38-c0c267c2ed5c", "sighting--41415128-84c9-4ac0-831b-0f2232e1e0c6", "sighting--4a601432-8d75-4d27-81fc-f32da0191c9c", "sighting--b2e28295-df28-4eca-aac7-e8e1597dbb43", "sighting--e1247caa-fdba-4f7a-aee5-3ca174e92ed0", "sighting--e7a3290f-5db2-4567-be45-091ef9204664", "sighting--60331e18-cbfa-43eb-be9e-0bbc436e0c30", "sighting--01f6f277-c272-45d2-bb09-3146d8d7f6cb", "sighting--b0e374bc-77a1-4865-a62f-705b2bcdceac", "sighting--fb29e46e-4e23-47eb-8414-8d77d51f2dfb", "sighting--a49f0637-340f-4d92-9241-e622b136a03f", "sighting--85985f1a-2b81-4d6d-9e65-f8201ea32ebc", "sighting--15311d6f-917b-4487-a524-74cf66222ae9", "sighting--4a98c63a-6420-4df9-bfa8-36e0eeae0b40", "sighting--65045f58-7d16-4304-81a4-28f2b97dbbfc", "sighting--79c81d94-4d8a-43b8-8c3a-1780f95a938b", "sighting--6ac26d1b-62cb-455b-953a-ec11580eab13", "sighting--b039f5a8-eb79-4b35-96b7-5613008dac16", "sighting--ccd89ae8-1048-4a7d-8be9-d0f7a70d74be", "sighting--21f10582-1278-450e-99fc-8542262f1502", "sighting--1627eb92-b4a9-4796-9b50-1b5a5bc12b88", "sighting--5b746218-e365-4af0-bd80-12bbdc3228ef", "sighting--51c71174-92f7-49fd-ae00-525a20513440", "sighting--796f03ad-36d2-4e1d-8c61-57e4634295eb", "sighting--e2b24fa1-59dc-41eb-b12f-4f55df0b32d1", "sighting--1fed2d58-8b28-41eb-acf7-a744327443c3", "sighting--ab100d7d-cb60-4b8f-ba61-96480d96c35f", "sighting--9d477106-c77a-4ea3-808c-5436bcbd1451", "sighting--b7129489-f7c7-4e5d-8c79-e0d0a3d06d65", "sighting--67d8226e-e237-4de7-9b67-5511bd4a1034", "sighting--5a30672a-121b-43b9-a86d-586c050fb69b", "sighting--a5b467db-adb5-4179-bfad-f18d5ddc8d0b", "sighting--c6b2587c-778a-45d8-b780-dfb457a26fa1", "sighting--eaff7ba9-457f-41d4-a17b-8ad4e62dfa63", "sighting--0f13e285-0449-4754-be05-b6e95e086da7", "sighting--e88ab517-362b-42c0-89dd-60517a032b77", "sighting--b181f0f5-aef7-41be-ac5a-f9039d9e740c", "sighting--eceedda8-e487-4bb9-9d2f-90fb3da01f05", "sighting--b6fc44be-571b-4223-89e6-a7f5b3feecba", "sighting--d4e318de-31ed-4a55-a101-1d956884f7da", "sighting--83cf832a-cc75-48a0-80f4-14927fd7ccff", "sighting--6868fe8b-eec2-4f72-bbba-591029914590", "sighting--750b914f-9e2f-4288-a243-780a7a769fa4", "sighting--47c33df4-2f77-4180-9975-696ef6bfa167", "sighting--c4ea09dc-b945-4f51-85de-2b593b1c7355", "sighting--085cd9a7-31cc-4687-b70b-a1aa46a940ed", "sighting--bae860c9-f6f4-4b69-bbbf-cdbd2ad7bbca", "sighting--067b6f40-93e8-4e93-9908-a475975b7072", "sighting--105f5e96-66c7-40d2-bebe-82486a1169e8", "sighting--27823576-5ed8-4be3-8802-b3d5315d2f82", "sighting--3231f655-9719-4d2d-a76b-6b9e9ff3977c", "sighting--4d456310-ffbb-4ff3-8485-d5477636ae87", "sighting--e748e472-12d1-4967-960c-9e61b79b2ea7", "sighting--ddfea890-af44-4c65-8b59-064727ec71b5", "sighting--052fc200-b75d-4365-b071-959518f8e44e", "sighting--c058a5c3-d374-4b62-b398-cb77ca0c4966", "sighting--5fc8f8b6-9d88-4b6a-a4a3-20d2e342ab5f", "sighting--d4a15720-195d-4023-ac44-d5413d393725", "sighting--6074a068-6cb5-457c-a23f-d9be1fa9fcb1", "sighting--ad3ffd8d-d95b-4e08-b2a5-98bf698cbd3e", "sighting--f124b5e8-8875-49f2-8595-05107d084cac", "sighting--32f9587a-8068-44ad-9352-19a664012512", "sighting--4d61723f-77f7-4ec9-a6a4-e39130388bc1", "sighting--c986092f-9bd2-4d12-9232-38510cce416b", "sighting--a7d89c14-f3f2-4f33-85dd-68e099c35c91", "sighting--57b697f4-fe55-4aef-b3f2-145036d9ff7a", "sighting--a28c81c4-748d-4527-9ec1-bd0533d6f9c6", "sighting--202cb37c-d725-4540-b2f2-8bcedbf1b32e", "sighting--aadeb5b9-b284-4999-9566-f219cb02d2dd", "sighting--d4d47ebc-7709-49fd-bb5f-f1b39ee8bb83", "sighting--d83f6c37-adab-4b27-a101-7461345a3948", "sighting--0b6f00b9-aeb8-4bb8-b560-3c7ed13df67d", "sighting--d590dfd4-e88a-4513-8753-061859c62daf", "sighting--eef805ad-d114-4524-b39e-84d6b4806219", "sighting--26e33f0d-2dc3-4805-a13c-048a10d5e0e0", "sighting--f2bf9b77-e529-4020-bde4-e8f2aef99429", "sighting--5928fcf6-36dc-4763-be5a-b1f6a753f97b", "sighting--eadd2a40-639a-4657-94e3-10fb4e57ff68", "sighting--16318381-5943-4fe5-8fcf-85fa9e129658", "sighting--386c897d-ba22-4f12-89bc-66863896fda8", "sighting--bdf7e51a-9668-47c4-b4e1-989aeb49003c", "sighting--bd99e157-6ad0-48c6-9864-62f23e3494b2", "sighting--d9b5bfd1-963b-4b9d-bb0d-99d2f9ed3752", "sighting--182ac015-55df-4946-90d1-f1eb72348b95", "sighting--dfd15fbe-71aa-4251-bd84-636345491338", "sighting--9a4186df-4b41-412a-94b3-758b60c0a846", "sighting--83ccb86d-7a3d-4d4c-a7d0-92db278998bd", "sighting--49d6ef56-933c-42ba-85fd-ebef051aa483", "sighting--0775493f-2a90-4cb0-b0bb-73a4b36b6e4e", "sighting--84a5b5d9-3e4c-43f7-a6af-7c3e8dc53dfd", "sighting--0580621a-d9e0-4562-a47d-c8655c17f012", "sighting--db93e107-e4f1-4b88-ae24-4e9811572815", "sighting--130e998d-9fcb-4898-9d0c-bfad12b3ec07", "sighting--2e10a0c1-29f5-4ded-a98f-8f4299af26d8", "sighting--f1f00245-e069-4e0c-b7a8-999001e0d28f", "sighting--78e16eb0-8679-4ee3-9eeb-ca5e5cf941fc", "sighting--0538494b-d004-49c6-8614-aa04cb23f381", "sighting--f3df4eb2-66d9-4d0c-89be-799b0b7cf54d", "sighting--3f89f941-2f4e-4cea-a990-4a8d3a00c4f0", "sighting--809aa24c-6dcc-4cad-a9fc-a15e1427b4cd", "sighting--5ed4d1ea-9e95-485c-997f-a52e527e1b1d", "sighting--23cc8b1c-01be-424c-87c3-55f8447f1521", "sighting--f9360d00-d5ea-489a-8cf0-0b9b48bdf806", "sighting--e248804f-0ec5-4737-ae0c-41f3d84d35d5", "sighting--f4044046-5800-41ee-94ee-0a3563af2676", "sighting--ed66691c-8dc6-456f-80d2-404d435cdb13", "sighting--3ea41feb-a1df-410e-be21-5d3f94892d92", "sighting--ce104db4-cfc0-48dd-af68-333b2b829d04", "sighting--3aee8a0d-5c9b-4de6-9a71-af34ffe5b44d", "sighting--303f79e7-21dc-4f7d-b02c-ef606244f5a3", "sighting--e52ef89a-942e-4b05-8025-03ab399afabd", "sighting--36ef6205-22d8-4ae9-a737-9fffc0f800c9", "sighting--c23970ec-c00c-4009-8f7b-a5a245c13b6e", "sighting--4cea0771-4675-4ac3-a865-252661219081", "sighting--b76f6086-72a8-4b3f-800c-36549c82b63d", "sighting--7a1c97ea-60e6-4f84-973e-24e9eca9ed71", "sighting--ec26bee5-cdce-4eb0-9a61-15def65aa675", "sighting--5cf5ce17-eb70-4362-a696-e36f403b167b", "sighting--d9974e79-6361-40d0-b02c-1673c801e2e1", "sighting--837103bf-24cd-4d59-8246-85ac7a487c3e", "sighting--1788c29f-b3a3-45f0-bc5b-12eed386fd3e", "sighting--052c7aa0-9a29-4dda-8302-15d945774e6f", "sighting--138bdeac-2550-4aa7-8248-cbaf9959ba89", "sighting--df60f29b-eb65-4b7e-b68c-4be268f03e4d", "sighting--d518caa0-8c68-483e-a7e7-43e406fcca83", "sighting--d6269680-e873-4ad9-a021-232b8bd85c01", "sighting--e03e7c3d-94d9-4d80-8234-a8e42bea12f0", "sighting--a6a68e39-9c71-46d6-a8e2-94bcb4234136", "sighting--444c7ac2-f3b6-41b7-8be4-525efd9c07f8", "sighting--58eabc1e-2f88-44dd-b75f-f3d568f5521c", "sighting--fd86b479-88af-4927-8981-ec7acaf02443", "sighting--8ec5eda3-60e0-4317-a9b4-b275ad4aaea1", "sighting--eb7ca9be-7abb-4b0a-b10d-1b770caf19b6", "sighting--c14de343-f645-4fec-978f-9ecf98910603", "sighting--90f6b599-b638-4cd1-bba1-a65c3bbd17b0", "sighting--0bd7c791-25c4-4b59-9ef0-acf83546f49e", "sighting--ba81e7f0-c471-4421-99e7-a4e3b6480baa", "sighting--25bd5c2b-bd88-4dfa-9e85-f747efcc494f", "sighting--36c1be87-2dc0-45c5-b396-edc261d93736", "sighting--62f364bc-663e-4e9b-b6ab-94353b0861ea", "sighting--c179ccf4-1d0a-4e52-b2ff-ad82bcfa5b94", "sighting--69d99b42-c707-4146-9ed8-d160fcfabe18", "sighting--c3b9aaae-71a3-47ee-8b79-dff3bcb99b87", "sighting--219ccc52-1ae5-43b0-b25c-c28c4105d7c8", "sighting--93f43bf7-be37-4531-b474-1275c2b410b5", "sighting--cdebfca0-60b5-4c47-9f24-6d49bde39fe0", "sighting--05635da2-5ff1-4553-94fc-de53e545a402", "sighting--b5c333bd-74eb-4324-8e51-17bc16ed7f88", "sighting--bd813cb7-7add-4776-8b36-11e294279e03", "sighting--614ea620-69c2-4815-af17-92f9f693496e", "sighting--20421ce3-2fbf-42b8-8140-dadc62d3b6f3", "sighting--a3613f43-ce84-4c48-aebc-cfc087527209", "sighting--d492f4c8-0734-4103-8df9-b382e723c67e", "sighting--667b27f4-b8d3-4bb3-b889-cd2d6f4f14d8", "sighting--750d0958-4285-4126-ac29-eb67635107e3", "sighting--8c21c78f-23c6-4499-9e13-4a964fd01fe2", "sighting--f87eb1ca-0d27-4add-b8be-33d08fe18e38", "sighting--9fd415c3-b962-4c24-acfc-32eb5d533605", "sighting--5de56364-644c-4bf0-9fec-255fcca05301", "sighting--8bb96534-bc95-4de7-9c13-527b28b4055e", "sighting--40ee2006-02e6-40c8-bac1-14d83b654827", "sighting--46654bc8-69ad-41ca-983e-2102a73a19b4", "sighting--51df460a-2962-415b-95d1-2b86797e3aeb", "sighting--1cf17468-9634-4a2e-a964-c71ad28f55ad", "sighting--ef02be19-31c1-4320-b619-7b7dce753b70", "sighting--efa46d0c-f4fa-4f32-8386-7a5b24de3284", "sighting--a0c14d54-9e75-4870-8a9f-50dd643f75c1", "sighting--cb6f7a4e-9ec7-41c9-b078-63fb87aa70e9", "sighting--4fb9ed41-2f7a-4aa9-bbde-890069fab842", "sighting--0df2acbd-d57e-4652-93f9-48d78e15388e", "sighting--8661bf1b-21d4-4b06-8ab8-f0c71868fd4b", "sighting--1b2fee2d-cece-4145-a83b-bab0bd191258", "sighting--ccc02f9b-ab52-4243-bf1d-1a6282e1fcd9", "sighting--288e9a52-fa4d-4a38-bf04-a9b08b5e2cda", "sighting--f2977b40-443e-4a48-a208-b4be497a7c55", "sighting--74562474-4767-43c4-b469-e7ba10a6f3e7", "sighting--0083a4dd-0182-4b19-b9dc-85e36cefc102", "sighting--265befc5-6d52-4396-8804-1a37662b26b9", "sighting--4268dae1-713f-4356-b49d-22c832287652", "sighting--89339fbf-ec82-4c90-862b-244fb5b09a8d", "sighting--dc6f1b29-c4cf-4225-a857-a8cfabca3902", "sighting--70777397-20d6-40c6-aa76-12fbe8ba997b", "sighting--dcfb334c-8afe-426a-87cd-b40c9aa0e3c7", "sighting--b95ef306-c8ac-4d01-b7ea-bcd9c3c0e795", "sighting--1a9d24aa-c75b-4599-9759-044182076adf", "sighting--883d94ce-2841-4bf1-8f01-30d48609e130", "sighting--19347393-490c-41e3-9eed-14b0db6e8940", "sighting--251ff16f-bf48-4fd7-b47d-abee50f14f39", "sighting--9d760811-b124-4df9-a21e-bc4e3f4064b4", "sighting--4a256e52-7a6c-48de-a183-221ae105e906", "sighting--3a58237b-690c-4deb-9085-ff21017e5cdc", "sighting--26f84aa6-fa46-40dc-871a-c9c6afe6b138", "sighting--f53bf6db-95d7-47fa-a7a4-c3f0270ae6d7", "sighting--32e1e9fe-ba9a-4227-8fb3-b52870f34b50", "sighting--33ba843a-ea31-4ce0-bb1a-3ab1577bbb86", "sighting--932d93ed-9fa8-4234-b5d5-9048377d2c48", "sighting--2f51b31a-6b84-42f9-b247-fb2331b86f90", "sighting--ba73d15f-e2dc-4ffe-ad7d-3e0c7d6e6956", "sighting--0c46261a-114b-4ece-b48b-7840cc7d0c46", "sighting--27233f2b-9c25-40f6-9f81-e222a34ae405", "sighting--0d9f3944-933a-44f2-85b8-29507cacc7d4", "sighting--3473f904-3113-413c-a2c5-e6693b902af2", "sighting--1e255ba8-27b6-4506-b483-e65de72d4157", "sighting--ea042ac8-f136-486b-bcb7-4ad4ac6efe33", "sighting--ee2278f7-4e1b-4501-9829-7dbb68f2b9c8", "sighting--26de688b-691e-4b2b-a111-93e22be3147a", "sighting--4087b89e-1ffc-4af5-b505-6983797ff838", "sighting--a50a97df-0390-4103-afde-c003abe950d3", "sighting--89329f70-4447-4007-9466-fdd696b4f6ad", "sighting--63695314-420a-4287-9456-776de974d4de", "sighting--4df9ab2e-a550-4135-8c13-62daf3e15542", "sighting--d44752aa-d8be-4c40-bb72-de9699f2af14", "sighting--e550279c-47ad-453e-8ebc-777499cd200b", "sighting--cc086610-9084-4c77-8f01-dee20faeb5f1", "sighting--d5b4608a-ae60-488e-846a-712f3f519562", "sighting--e7efb6f0-9ce6-4326-8ff5-1c578d77169e", "sighting--7338e7cd-6da3-4504-89c6-3bcad4480d9e", "sighting--0941eac6-13d6-4944-bbc4-625a4e51f68c", "sighting--13c3668e-9daf-42d7-81c6-02c857a7d682", "sighting--721ec0b4-780f-42fa-b2e5-94f21b429dcb", "sighting--43cbad9b-378c-4f5f-82ff-b6cc2dab0692", "sighting--f593e391-455b-4032-8890-91c8965511e5", "sighting--a6a1c238-4561-4122-8cfa-b07727f2cd8a", "sighting--a64ba7dd-71a7-4f21-b67b-293e26332aae", "sighting--bd799b92-9fb7-4140-a9d1-fd95fd525947", "sighting--50c8e9dc-12e3-4391-a11c-677ca984a2ba", "sighting--230d14f7-bb3a-496f-a176-01071e5e10dd", "sighting--e25f897e-ac7d-49cd-bf84-dfac1dc5c184", "sighting--9ce36b38-d97b-4789-ae09-4c9ec15103da", "sighting--0d342ad8-6080-4ffa-884b-79033ea433e7", "sighting--35b7ad3a-908d-4cf5-b66e-0c5b8d980be8", "sighting--795d6d77-2503-4e92-a5a8-f3d7491190dc", "sighting--5227faf7-5f70-4239-9c6c-a9394542637b", "sighting--d0d2158e-762f-49fe-9375-3eea0e70c79a", "sighting--fc3e4506-4e0e-49d6-a071-98dfacee20a1", "sighting--da7bbb79-92c3-4204-84d7-66fce5a074d1", "sighting--057a67f9-f436-42d5-9e63-ce2d771bab0b", "sighting--a08def38-cb6b-4562-aadb-7f1779947f34", "sighting--e650f47b-2a5a-4a86-91a8-b268acf3c2d9", "sighting--9226463f-ba17-4509-a904-8154fef86b62", "sighting--36a1532a-e5d7-4f73-b335-5c3851176f58", "sighting--be4b5b38-779d-4075-8c36-a53cb82cab97", "sighting--456fb031-f817-4fec-96f8-39a5d37725b7", "sighting--f8b9502f-7fdc-4037-8722-e28929469868", "sighting--e368f973-6ce8-4809-9f31-4bc0f52115a4", "sighting--c4af14f8-1dd6-47cd-b56c-6291b612236b", "sighting--89690ae6-723c-4a58-993d-520ede3a67f3", "sighting--5eca4bed-81dc-4df0-9bad-cdc260e8328d", "sighting--f96f8a91-759c-4b53-a35f-884161f04bc3", "sighting--10183263-61bd-4326-9792-bbc1ecc904f6", "sighting--cb22ca13-c257-46c1-87c6-ab3645adf577", "sighting--766cfde3-8a1b-4ad7-b43f-8347b9bd5c29", "sighting--be47a663-127f-4cd2-9809-042cf9223f79", "sighting--65412055-3850-4c86-8482-6cec9352eca3", "sighting--c6039eb3-87bb-48ae-9815-3f88df10e980", "sighting--d07c3191-6009-4d35-95a3-979b6ee0597a", "sighting--cee24e6c-feb8-4388-93a0-3cc782e27a96", "sighting--a84b56ab-c3b2-465c-91e8-556a91abde8f", "sighting--068ccee3-899d-4ac8-9a4a-0c4d6bb37e58", "sighting--b3259404-77f5-4e0f-be15-652ecffe7864", "sighting--6c2f10f4-6aef-4d88-8299-6099629c16ce", "sighting--2d940d28-ec83-4a28-a6f1-efa4c76f1fbd", "sighting--ea6a1dee-3969-4a12-ae7f-8ee6015cf64c", "sighting--9c343e84-73bb-4240-a05b-d168722fd9a1", "sighting--52bf39f6-ef04-4744-b9a1-43cff7fe930b", "sighting--2f8353ba-2a7e-4f57-99d6-eb1f4d1d29ba", "sighting--6352e29f-d1df-449d-a9db-423dfb51df62", "sighting--27928d96-c737-4dfb-8e51-92d7f260621b", "sighting--c041a1a1-4724-44a0-9529-b70c1c9532b1", "sighting--874fbf48-da10-4bb5-8b6a-e8df5028872b", "sighting--8fd58acb-2ed0-4285-9a35-a8450914e983", "sighting--983694e4-f1d2-4952-ba12-169079a9ae07", "sighting--c268e95c-c9aa-4c6a-8a2c-860850457300", "sighting--ee17181f-e062-42e3-9b69-41bcdffca52d", "sighting--8fbb5ec8-afef-4372-b486-beaf5d46c602", "sighting--ddc63ba0-eee9-4e71-a34c-5b3216b7f167", "sighting--a9917c2b-e465-44cb-a065-df09cf6311bf", "sighting--7e89e48d-158e-47cf-a07e-9f075ee15d92", "sighting--fe2458ee-55ef-4a98-9bd4-b10800cc2d31", "sighting--80e89e49-3ecf-4f8b-a148-dfe90a17dbf1", "sighting--8f832c00-2dd0-49bc-a6da-1e7ecb915f2b", "sighting--dbf76371-efa5-4d5e-be55-0086748271a3", "sighting--29af9f95-e325-4f20-8740-c5631cf63277", "sighting--f4e1dbce-b483-417a-92f3-1016b713e465", "sighting--04eef432-9c60-4b24-9b13-83e8c41f8b4e", "sighting--5fd226ba-df7b-4d0d-b0af-fd8132a001ce", "sighting--0d62d944-f676-4ed3-89e9-79cfcc0af936", "sighting--e4ed8fb7-fe7c-4183-bc49-a359e68b45a8", "sighting--3abe2e04-6d14-4590-827c-d8352718a7c1", "sighting--f4a16a3e-e10c-4418-83a9-272d8bcb4ffd", "sighting--9cdc6864-43e6-4c67-811a-39e0a6eb052a", "sighting--f3aae2dd-7b2d-4f56-b504-61f8de3ed756", "sighting--f727af07-fad3-40c8-a6a4-7409927b90a3", "sighting--d0002fb9-e824-4c64-9b43-d08625cb9b54", "sighting--790332dc-49c1-4b9c-b0ef-56b49dfc175d", "sighting--2f5532ba-80bb-4578-a047-9af1077b5be6", "sighting--9524d2b2-6c0d-4d3e-8494-7d658f615f13", "sighting--0821c1ec-fbf5-48a9-93e6-bc249e091f1f", "sighting--28f9286b-9e93-42e2-9bfe-48e5ea9bb345", "sighting--40cd1dcd-9e56-4482-930f-f080b2825a74", "sighting--18598be3-c73c-4769-ac6d-108d084affaf", "sighting--a9b3e3e5-4ab9-4d39-97fd-551dd6cbfd01", "sighting--d167cf97-79fb-42c7-8793-2d95c6c0a3ab", "sighting--0cd2888e-fff0-432b-85d7-240c2bc6ccd6", "sighting--c95f6cba-d5cb-4c7e-a639-9bef153e1eae", "sighting--ff217c2f-e836-467e-a1c8-2d9b5216b512", "sighting--5254c9fe-437f-4eb2-b476-f8f6f8260b2a", "sighting--9b6dc69a-013b-4483-ae28-ef1b654773a8", "sighting--cc21f8c9-a1ea-4ee4-8eb9-b1f5796fe2e8", "sighting--db49168a-7176-4e47-895c-f8e04132f0f1", "sighting--e27fcee2-5469-4378-b814-a2d42b1cd4f6", "sighting--d68a4bb5-9883-4fcf-a84b-7e1342adb1c5", "sighting--c371f57d-289f-43bb-aa29-afe4923cf0fc", "sighting--792d9f7a-7382-4f49-82b9-a86486ac3a3d", "sighting--d83ee62f-87ee-4726-b2f1-e244315619f5", "sighting--72ead35f-d4b4-40e2-b21c-e88b63743512", "sighting--46e07cf9-30f9-4856-a066-a1c2393b87ab", "sighting--d73c2ef5-b304-45ad-8dc5-6d0010c85e52", "sighting--aa0ea282-52aa-449a-befe-74c10020b702", "sighting--8fb88cbb-a1a6-4cf7-8b32-6a579243f248", "sighting--8d3f86b8-5146-4cb7-a7c5-1d6391fa10b1", "sighting--d0dec6e7-dd5c-479b-a664-4326e8adf374", "sighting--b28a357f-a498-4318-94c1-35ecc7ad49c7", "sighting--67c47d10-9f84-45a2-9268-39f5f0e1545d", "sighting--0b349503-ff32-47d2-8225-78b76e10d13f", "sighting--cb5d6106-1dfd-42e5-a2f2-0e337dcc0dd9", "sighting--c4824ee1-589a-4cf3-9a41-55d529dda22f", "sighting--23f3e98d-fe41-4b2e-b3c6-bb8c2d30c5aa", "sighting--796f6813-dcf6-47f7-8ec4-157d4af0047d", "sighting--e74be2d8-f017-4d2d-86c9-344d64cf2d91", "sighting--107a765f-f015-4d7b-acb5-6e7715e2a94c", "sighting--e8846dc5-96e4-450f-998e-1810d0aca083", "sighting--4dd721fa-0c50-466b-a2aa-4f83362640c0", "sighting--525c52e8-3f9c-4ef8-bb10-a3f2751d368f", "sighting--6010f99a-4447-458c-906e-33ff6b4cf960", "sighting--9a1a91ff-6514-447e-9cb6-65835d906953", "sighting--09179032-46c6-4627-b2eb-ee59b2b85f3b", "sighting--a2339f0e-1c1c-4778-a4dc-c85f28daba31", "sighting--a83d1a7b-f229-4e84-b0ba-70899da08c3f", "sighting--506aebfa-158d-4848-a5a0-a547a30aa55d", "sighting--3d8fa899-2c6f-45af-9f0d-c81581bc0db0", "sighting--9779aa24-2034-4d35-81eb-0afca3942478", "sighting--e4fbc985-1185-46d2-8053-a04bced4eeb5", "sighting--fad1700e-0f89-41bf-8506-96adf4789fe5", "sighting--88e23b99-c1ce-497b-979e-fdabe1d5fd6d", "sighting--01e4e000-9310-493f-8a75-a558c76c623b", "sighting--e3263386-b38d-494d-a499-6f8dd5cae611", "sighting--ded3bcdb-0dc0-4e1c-9d96-2120b9b40633", "sighting--19d4a4d0-1300-45b6-9174-1eb2ef674297", "sighting--93261482-ab97-44e9-bd20-0fa858a1e186", "sighting--753c1112-93da-41fc-b3b3-e08f3c79a5df", "sighting--f9120aee-0f1a-461d-8877-639ab4270cc3", "sighting--4ebba24b-4156-4608-b8e7-1f79cc7bc71d", "sighting--2fabadcb-dda7-4204-ba56-ff87490db2fb", "sighting--eff3663d-2e50-4d72-86b6-88f5d9daaddd", "sighting--6293ab72-3cf1-48f8-b8b8-93ed27b3ed96", "sighting--282d5c93-2114-4b08-b616-10a10a4b120d", "sighting--e53036d9-7d66-4a7e-9bda-ca9bd89e76e0", "sighting--1220ff4f-8e83-4735-8cc7-880c575b9a70", "sighting--9dc3c837-0aae-4591-a411-5053aeacc02e", "sighting--f9d6f998-deb7-41b0-8c95-743b04af54eb", "sighting--1451a233-f311-4f5b-b7a5-19dd815b03cf", "sighting--73c18a10-d5f5-4d96-9203-68004b9d36c0", "sighting--99109f21-406c-44e1-9a90-c6c8d36df0e8", "sighting--10c3ba8d-417a-4549-8f70-d56295bb65fc", "sighting--5b417dfe-a235-44a1-af88-83cd18060c5a", "sighting--6ec5c2b0-ca6e-4284-96ff-2f9e98af3659", "sighting--bd8eb320-6384-4e49-8395-60134a30f252", "sighting--abfbcd27-7822-4fdd-ae3c-e892c52216de", "sighting--66969502-1aa9-4143-b759-fb9979c6de7b", "sighting--6a971fa3-7cbf-4ae4-9b7b-5a4195f987aa", "sighting--b52b16b9-ecf2-4835-a1c1-545aa274a24b", "sighting--a2b0dd3d-0833-4fb9-a563-1ae932170ef9", "sighting--3789064d-8791-4c0a-8962-f0ce2bbaff79", "sighting--d057ff60-6e9f-48a2-95a7-b652c1b83d5f", "sighting--2fe1fbeb-a52c-48f9-ad19-7a087abc1596", "sighting--ad4459db-89d5-49ff-b0ea-029989028155", "sighting--eb6bd974-d990-450b-8024-8cd6766751ac", "sighting--8aa482c6-411a-4739-b6d0-2a385c34eb59", "sighting--66ba3475-ed3c-42f9-a8dd-e550f6c36823", "sighting--29d03d42-2399-427a-913e-6283f00d53dd", "sighting--b2e5433e-636d-4621-b3e5-2d0cf1e92b20", "sighting--aeb14c16-f5e7-4477-b486-6c4898005a6b", "sighting--9e0fa83f-61eb-49ff-8890-9e041d5d33cc", "sighting--650c0683-9c8e-48de-abda-8bc0b5e4c697", "sighting--85b0ba9e-fd9d-425b-8eb5-53b41b124e73", "sighting--e041c947-9540-49e2-8079-103485dc29bb", "sighting--30e8fdeb-90d2-4696-89a2-e464e959ffeb", "sighting--323eb180-61d9-4538-b81e-6456805c4831", "sighting--452367f2-822b-4c72-93dc-29d62352ec0b", "sighting--e1d826cd-b5ac-4ab4-ab68-294a128cc5e5", "sighting--aba22847-6339-4c45-a7c3-505f32e24a51", "sighting--651645ff-3948-428c-b6be-7044a2d18783", "sighting--c628039d-e9ff-4c9b-bcdf-900280b168ff", "sighting--29a9df36-aa8a-488a-b16a-04c63a27df00", "sighting--49a1b6c2-6f3c-4d06-8b3f-b0ada4d525d4", "sighting--cff8ed55-a137-471d-bc14-6cabffbf5abc", "sighting--9d071f11-964e-4b90-ac3f-96daf6b323ae", "sighting--2f69205a-5910-4f3d-8a4a-519c3d6fdf77", "sighting--f03330ad-9b24-4a5d-a406-bf68256f14d4", "sighting--58e3512e-fbe4-4616-8111-5ef405e44e86", "sighting--854d1b2b-4bb9-4797-a13d-19b0104c4c36", "sighting--986760c8-3c7a-4ffd-821b-b78c9d5b4839", "sighting--21a07419-a94a-4d89-aaf9-0bbeb88e4f4c", "sighting--b0d896f5-231f-4de9-8ff5-4f49793b4d8d", "sighting--1dbd4560-4f7b-449b-b6ff-8a6d0b262767", "sighting--76aeb673-53c3-4e19-b926-a099e6cc1d71", "sighting--1af6990b-7174-4743-98ae-2bdc923d2c97", "sighting--35e410ac-efa9-4f63-b581-d8f44f265198", "sighting--22fdacd1-f7df-4a9d-ba8a-b9ca0238b85f", "sighting--9b027f54-1220-4e5c-a247-8b1fcaacaaa0", "sighting--561d2b1d-0ba3-497f-a9cc-63a61ecfbdc1", "sighting--97f0d3b0-75da-42e0-9802-19b9086c6e19", "sighting--8d32e501-7199-4da4-abc9-00f77d9daa20", "sighting--6e9d50ed-2ae9-43a8-89cb-6b489d1a0c3d", "sighting--e9be05fc-288f-4fc3-853c-c8a3bbbf629a", "sighting--f48ffe7a-8e43-4bf6-92bb-b82e9e816fe3", "sighting--29af3170-8fe0-4262-8140-08d0e4ac78e5", "sighting--ca167f2e-cb83-4c5a-becc-2fe2db239740", "sighting--4639e75f-5590-4ffd-b0b9-0797399121f7", "sighting--73bd44f2-9465-4730-a8a2-a95fd67490d4", "sighting--ef2d20ac-cb33-463d-b83b-c3cb09fd24ad", "sighting--2768c8ab-9e2e-4274-b474-5ea9cfcdf930", "sighting--68669b21-7c21-4672-a003-a67621c1e49c", "sighting--d409293e-efd8-4a48-9d2a-14db54196429", "sighting--f29fda9c-ea33-4b0e-a21c-0a432f9e5386", "sighting--b56485f7-a254-43b1-914c-af9e61e1cc92", "sighting--9b141ea4-627b-4153-a77f-41b251e095d5", "sighting--aeab70e3-f41b-4f7d-a40d-0e22594611b9", "sighting--2499a693-fcd4-4459-8e5e-b35c1b5a7c1d", "sighting--c1297148-11c3-4755-b638-ff1e522c25da", "sighting--6d75483b-4ead-41a8-aa10-047abfd81a38", "sighting--5b8067ba-414d-43e9-95e9-fa923a6eefa2", "sighting--5eda3fe9-6fe8-4b73-8799-1870f6c59dde", "sighting--186f6ff8-d949-47de-b9e6-69cfbf17942d", "sighting--3c965777-b46c-4e4b-bc6d-ed7fb3a9f588", "sighting--579b2cb5-8a80-4b2d-8d63-d413a0070aed", "sighting--349e9333-b3dc-4f35-8737-7d5b7f235169", "sighting--a66081f0-4ba1-4d21-b4cd-65c8d15a382c", "sighting--ac641cc6-70d6-4d69-be66-ad0551c14a14", "sighting--2128771d-055f-4629-894e-9a1d099c90b6", "sighting--bf5f1845-059b-481e-814e-2b9cb5d0a588", "sighting--e6148951-9310-4a45-8eee-13b46c1c2c8d", "sighting--f5894c99-0846-4a7a-9ca7-b744e86f22b3", "sighting--b9970bb0-c51e-4513-afdd-207529669876", "sighting--6750d0b2-7ce8-4e88-9fc2-17cc4b4070e9", "sighting--69d8f9ec-00be-481a-8155-060186bbc721", "sighting--02a8d6ab-1813-4600-8cf3-54b48a4b3d39", "sighting--96d61554-298c-41d8-b6a9-8070d359ce5a", "sighting--a1a551fc-c9aa-4553-9b2d-9cb226e74b37", "sighting--deceaa4b-a10c-4417-8daa-0d865c83e94e", "sighting--8802b40c-50ef-4e67-b96b-411fa1b6a4c2", "sighting--8873f291-4bfc-49db-b3f4-2766c7858dba", "sighting--3eb8c7ca-60a3-4775-870c-2111e296e4d2", "sighting--83bfeea9-b284-4694-9ab8-14915fceecc4", "sighting--45b9a700-00f3-40aa-8eae-34ea08d4d622", "sighting--66f8d709-0ec0-4da1-bcb0-899102548e51", "sighting--9bc26b90-bbca-4c43-a570-f7dec05f0a1c", "sighting--9021209f-6b95-4281-a3fa-f979c247e35d", "sighting--9b8b5350-7fea-4a6a-9b2e-db3c95613f8e", "sighting--cdac3a60-739d-47bc-9467-9d9e56748c71", "sighting--ebfdc8f5-e3c1-466f-9538-1e013b09e257", "sighting--a29a5c61-f73d-4037-9e60-3f1c38a27576", "sighting--cdc3cfce-ddae-4b8c-9058-2628d61d8cb2", "sighting--6797a89f-a9e6-4945-8208-041873ad9f9c", "sighting--9ce15dcc-130f-492d-97a6-ea246eec9dd1", "sighting--19abc3ad-2f1c-4c28-9391-47bef81a320c", "sighting--467be6ab-f517-4424-b6aa-fb7e039e9372", "sighting--e5625cda-9209-4655-be16-ba9c47e6cf0f", "sighting--93a0faa3-0b8a-498d-a1c4-464aa95e232f", "sighting--cafe0e8b-eac2-49d1-8c1e-709a87832a58", "sighting--6cc3e01b-5c88-423a-a02a-f0ffa0efec8b", "sighting--1d68a1f2-033f-44fa-99aa-51ff5bb41140", "sighting--de2c3ed9-d38f-406f-a624-cc5ca7c69c3d", "sighting--95e8c8ba-0ab7-451e-bd4e-9ec6acdf70a5", "sighting--721062b6-0b4f-4d73-a963-2c2e2e6ca42a", "sighting--b0074b97-b619-4581-a715-6afda22a104c", "sighting--8bbcacc8-f76c-42c8-8352-5925dfe0b3df", "sighting--8285bfab-0ee4-480c-9e20-fff6ae7ec11d", "sighting--4d87d91d-48d9-42b3-ace7-53ee5cdca4ee", "sighting--50f1ab93-4588-416c-96a5-70d2839c637f", "sighting--54e5a3d9-8fa6-471d-b337-7325f342a9f7", "sighting--1bfac6f2-48c8-4832-a647-6b67a49be634", "sighting--3ab4e173-c67d-4093-bbbb-eff9a2837eb4", "sighting--6689c5b4-99e5-4cca-b95b-3b9935f249d5", "sighting--32116234-d7ab-423c-940d-7c5e58b9b47f", "sighting--7431c942-a93f-46b8-adb2-f74d23e827e6", "sighting--44020b86-3e38-4d6e-b45e-3768a5009927", "sighting--58e63755-4d7f-401f-a433-082998aba3ba", "sighting--259d2346-ff9a-44f3-b575-bae84b090436", "sighting--7c24c3b6-5df5-4924-8fc6-d68c96df8f3b", "sighting--ad931362-f96c-4e9b-a53e-20101ebd2a76", "sighting--c4228f3d-a42c-4dad-aa44-ee2f3c25d529", "sighting--b060790a-abac-43c5-848e-ff8f0b3b0d2c", "sighting--ac016783-b137-45bc-be98-e0cbaf22b26e", "sighting--d9ae65c6-9602-4c37-9238-e9036f12d953", "sighting--f4b11fb3-1b93-4b64-8399-db79786f806c", "sighting--d0f14da2-f5db-4272-89bf-d0768544f735", "sighting--d2a35fa8-7222-476f-b868-164d9d75be76", "sighting--b9e8b6c2-6924-4bbc-aaad-d39fc1d5bb7c", "sighting--b07707ad-d543-4277-b8c4-ac33b08c01b1", "sighting--0776ce7b-9416-4d89-a6e1-cb960053fd40", "sighting--00e38737-76fb-4271-ac5f-0fa4feb9a8a5", "sighting--5cdd1ba4-2c25-49bd-b607-080f2ef7fac9", "sighting--e1e18ac8-c695-4c9b-be9b-97623397f2af", "sighting--58435fe9-a4f5-441b-b7ae-558f43f4f901", "sighting--e997111c-6c39-4a38-bd07-a88a61167ecd", "sighting--2aeb0e80-c026-434f-9575-5663d3c026b0", "sighting--9ef8cc0b-be8e-43d4-8ad0-4b4b5c4efac6", "sighting--04a06d3f-1a80-4818-b926-efadef26ec4d", "sighting--2df87e0a-56aa-4a98-8d1b-9ac903e5fb8d", "sighting--915186e2-6bdf-4e80-9798-2a8dc2cae07f", "sighting--7e597e98-cc46-48fb-94a9-7c056fb1f6cc", "sighting--dc871d7a-1eb7-4abb-bac4-52554a7cb685", "sighting--5c1f6bc7-3317-4d5c-9be4-6237bb77164c", "sighting--d4be56b1-f82f-42fa-ac58-be43af86d64b", "sighting--a25f58f8-fc40-45f8-9154-444a929d3dc0", "sighting--7bb4c13a-77aa-4f1c-9100-1059da73692e", "sighting--e97b9e33-6245-4d70-93ae-4f55df6cc6e7", "sighting--afc6209b-eb20-4d30-b777-5ef0f4a3a53d", "sighting--d5941303-ba30-43c2-9f89-3c71b1380834", "sighting--69d5ac11-97b5-47df-a64c-4f011fd10fb2", "sighting--3a7c05a8-e570-4dd4-8e5c-8b58adfd0324", "sighting--f40eb44e-4b21-4bf2-a8ca-8a91e11258f0", "sighting--074706e6-9152-4269-a757-4846906152ae", "sighting--5d197e2f-21ff-4a11-856d-30c5730b01f0", "sighting--a4c22cd1-8f73-4ab8-ab41-cdc46f3c5a77", "sighting--65ca8cab-2af8-40d4-8dc2-b7ced87cb013", "sighting--d35fb56a-ee47-43a3-ae6f-6955249d0c68", "sighting--c214c984-0b80-4267-9e2f-acdae80ab7f9", "sighting--1c8255d5-19db-4e3b-bd23-54bc23c96f1f", "sighting--61851acb-37d5-47dc-af38-2cd5f1fcbdb1", "sighting--d3279235-7069-44ba-92c6-d0cf7251e4ed", "sighting--9e033d36-f171-4699-b3c3-deebdfbc022f", "sighting--c5e648c8-31a7-4233-8f53-fc542bfb223f", "sighting--0d98b6b8-1b6e-40c3-b4e4-2bd766e1f709", "sighting--a4263494-30f1-4b04-b315-970d22cebfa6", "sighting--365c52cc-4473-4587-97b2-f264a68bd00b", "sighting--422634e5-8f8d-4ea0-8de7-6f975196404c", "sighting--363582eb-0d5e-46b5-b8c9-8cd77993c52c", "sighting--865d2844-9073-4434-ade9-90e4a808dc93", "sighting--0f950306-a226-409c-a57b-4ac5a6b18844", "sighting--f5918a70-9a26-4e02-bf29-4607c5dfe22c", "sighting--6b6f37f5-b696-400b-8f2b-10c1c8a698c6", "sighting--3d4cbc2d-d134-4d28-a8e4-9911cf56a9af", "sighting--0d863016-52b5-4c6d-badb-47b67a11d5e6", "sighting--9459550d-a802-4da7-b534-cd5f5d856486", "sighting--759a35b9-0c8d-42aa-acd5-ab08f5fa5c67", "sighting--2e64c32d-3b6c-4a85-8b76-c9029b02b988", "sighting--e4e12f48-503e-47ae-aed1-684c288bdd51", "sighting--e934b9e8-b144-406d-855c-e083de3458b5", "sighting--f4bda2ae-724d-446d-9d28-303bd2223bd1", "sighting--2e31b199-619a-4027-8653-a927790fd2a3", "sighting--578ec1ec-2eb3-4475-b042-8c0bf01cf2cb", "sighting--bc82d6ae-3c4d-4e6f-87c2-2a1741ce7b7c", "sighting--273eecf9-e552-4413-9111-d8e33876a6cb", "sighting--95120680-064b-49c1-aa2a-52181a57901d", "sighting--d6627e50-e727-48cf-acde-6ac04da4b5da", "sighting--7aee00b6-81dd-4a2f-bb3b-5770e2190ae1", "sighting--4644ba89-b2ea-4222-aae1-fc59e2cf60a1", "sighting--670d06a1-ad41-4f5c-a82a-ac3bfc07716e", "sighting--8ad18d7d-af09-4884-a8a8-16e5805b847d", "sighting--354ff941-59e5-480f-9cc7-62e0d620e0fa", "sighting--881488f5-c572-4e1e-aee1-3220d353fbcd", "sighting--9c143e12-bf97-45ad-91c5-63b1c3875223", "sighting--fc9467a8-ab9c-480b-8849-388fc4cca5d3", "sighting--df4c7064-9444-469a-8e15-8eb5ef849499", "sighting--dd3d51dd-350c-4713-b4cd-6d0b303ea75d", "sighting--af21c8c0-d543-42a5-ac9a-5d1f9bb5fa3c", "sighting--6d6d80db-c14a-4cc6-b12e-7f13ce066c64", "sighting--b229650b-3241-4a65-8469-2d8ad0b5b7e4", "sighting--c455536a-f934-46d2-bc5c-ce0a5de3796b", "sighting--0e8196db-a5e8-435b-8959-0ea08b692922", "sighting--41cf3d91-0de8-4eaf-9e19-f9145f3c8f70", "sighting--6cf1309d-3cc1-4d5d-b68c-8a3848992957", "sighting--ac0f6305-f3d8-4749-b38b-977a4c82edc7", "sighting--087b7889-cefb-400b-8854-21a236ed6c0f", "sighting--320657f3-36f7-4b95-9f98-ebd3ca5132ba", "sighting--835f80e2-5458-4d28-82aa-ad42777d9c0c", "sighting--eddeaea0-6730-4a13-8b5e-cde3761e81e9", "sighting--e5d1992b-07b4-4675-83fe-73c55b8e4278", "sighting--2d4d36ac-db63-455b-82b4-f704f12db9c5", "sighting--f3057196-773a-4b4f-82f9-a563c62ab41f", "sighting--fd229e61-5b08-416f-8711-7c598660247d", "sighting--65102793-d63f-4e4c-8d7e-6360307e882d", "sighting--c9f8cd49-6310-4220-bab6-80e94a349c5a", "sighting--0affe891-d020-4fbc-b951-fdb8135d4bbd", "sighting--26bba2f9-0540-4405-83b2-f8a0a2e5d519", "sighting--e610fd08-a5e1-41b4-ae75-d27e532af22b", "sighting--25b3ea50-0f53-4a0a-876f-42795baaa9bf", "sighting--c1a826ae-cc8e-477e-81b3-e5e2a4c79280", "sighting--075343f9-0900-43a8-b2b4-9ea6c14a1e4c", "sighting--42e3bdcc-98a8-4b1b-9694-c0aee1e9bc48", "sighting--3d48ce82-72da-4ee6-9032-3a4e668b5767", "sighting--87a27723-7f2b-4023-a124-263d174fe690", "sighting--3477ce8a-cf9b-4952-b350-f226a9d12069", "sighting--97932603-52b2-44ed-860d-5891a197a0ae", "sighting--6274a949-61ab-4e7a-8ad0-b27bc4c694d8", "sighting--6d9204a0-ddb8-49cb-87d4-f94b68bf6141", "sighting--e90af309-950f-4f31-b6b2-746ed3085888", "sighting--e63a6e4b-4d2c-4d09-a7a0-409068066cdb", "sighting--9ddc210d-928d-4b6c-bd1f-3fc0a7025561", "sighting--f434251b-552b-40f3-b88b-1c09146f71a2", "sighting--6ebd0e4f-bdb6-400e-b9f4-21a55810f39f", "sighting--3b1ccef1-61a5-425d-9b0c-9ae6b22b6a7b", "sighting--43a23b80-3fa4-4a7e-91a5-b8d12acab935", "sighting--f034bbe2-cfd3-4eef-998b-335c768a3182", "sighting--e801bf5e-edfb-49ba-bfe6-24def5fcccf0", "sighting--edc3f06a-4b8d-4ab3-9e3e-c320fe6cea05", "sighting--c64ceee8-210a-4b53-85ab-8529dd71a559", "sighting--9fd8f129-e865-4d55-b350-c23c1a5255df", "sighting--014467f7-123a-47e0-a3ef-ead7d32d9d42", "sighting--6113f644-db36-4acb-9a0a-67726fa66485", "sighting--865d3dcc-36ed-46cf-9c19-2cb8b95ed9c7", "sighting--3d1749bb-002d-4c4f-bd63-7d9ba938f256", "sighting--bdbb7a66-5e94-4a72-a041-73c6504ff45c", "sighting--b7da3e38-b297-4cac-af9b-0e4987746c85", "sighting--6778215d-2f51-48b5-9de6-b4369da3390f", "sighting--9b240b23-323b-4c12-b259-b16095bc8bef", "sighting--2d5e0ffa-28d2-4b3f-b981-2f257bb9aa23", "sighting--13c9b581-aeef-45f3-b959-0736f4b42d09", "sighting--4816a1ab-e9ba-448f-a530-2ce4ed3f8ea8", "sighting--2f1a22e0-f332-4baf-9f51-107d1bc29a79", "sighting--00b548f4-9bb3-4cb3-96bf-070323d1ea98", "sighting--918e51f0-fbd8-41f4-a911-28ea0921d266", "sighting--9afb121e-dc21-4ea8-b8f9-8f27e0a14b0b", "sighting--f557d69c-f6a4-4377-b526-efb3cac0483d", "sighting--c0db459c-fccb-4dfc-bd39-ded7ac2f0bb5", "sighting--fe3b3cc6-e9d1-4ed3-a474-7065ca89df21", "sighting--0ca5d288-298e-4d75-ad63-1ec473604953", "sighting--d9e24977-4d86-4ca4-95fc-70a6c9c9016e", "sighting--377509da-1777-48a6-9cd8-f90cdc800387", "sighting--a1563060-e930-4cd7-8b35-33667cb0fbec", "sighting--89634582-0b98-4db1-959c-ee751918c316", "sighting--b8098454-d17f-46fc-b45f-8ae2cef4b366", "sighting--23e7249c-429f-4317-92b7-20d585632fff", "sighting--b7a5258c-56bc-4167-89e8-af0658c1d45b", "sighting--a635d23b-8374-435b-a23f-db5648ad5b25", "sighting--22d9df7d-5a08-4d1b-b4e6-1867805e79fc", "sighting--255e2026-8d68-4688-8e41-3ce8778fa98e", "sighting--b4c8f611-7176-424a-a8a2-d3b8a04d1702", "sighting--1fb217ee-67f5-4d5c-b9e7-e0633e9d5a30", "sighting--28bca4e7-834a-4dc3-9cde-42f6839c29ba", "sighting--fbf0f3e4-33b0-4054-8bc9-037f8b256fb3", "sighting--e08fa851-75b7-4942-9096-ed37fc4f7bec", "sighting--4dce6a36-cb08-457d-a984-7ea9990c7880", "sighting--a0345c9d-53af-491d-a016-da76f64733fb", "sighting--683d4795-797b-4595-8ae9-b63153531498", "sighting--30b228e1-3c6c-4f67-b858-d9e2aacefb59", "sighting--7121c70b-336f-47ae-8068-40b4b23c9b8f", "sighting--af096fb9-b8c0-4c26-a259-b02f3792d9a5", "sighting--90c6b36f-1da9-44a6-a0ee-07ea2bc048c3", "sighting--e94566d8-2312-44cd-97db-df11e7d4221b", "sighting--07586578-52c3-480f-b2d1-76523e5d409b", "sighting--0446711b-7526-4d45-b68c-5a244bd329a6", "sighting--6db3339d-ad5e-4f70-bb10-50dbfbd32f07", "sighting--ebb67903-bc8d-4758-8442-3f72bc314af2", "sighting--85ce5739-6dec-4f88-b7bb-a1b8d51d28ec", "sighting--01ff3146-20f1-47b5-beed-2329c0827c0b", "sighting--be16648e-c2d0-4d09-98a0-ae312b775cba", "sighting--c9a13e7e-a8d1-4d08-849d-cf8dc743b415", "sighting--f64411bf-3906-4f98-9388-2c3374b26ccc", "sighting--63750608-6962-49c6-86bc-886039e6a0c6", "sighting--429ea354-7277-4da5-a07d-d3d0eb0fe5af", "sighting--1135e870-b481-4e32-a9c6-d469bc06ea3c", "sighting--f24e7c01-1737-4388-ae91-910bfc6ea7bf", "sighting--d9081d1b-1c10-4ad2-989e-0a5decd9c008", "sighting--90b9c80d-f289-4a80-bdb8-9f54c9b4585c", "sighting--09a158e4-dd0e-4221-9176-d910ace0b6d9", "sighting--40c614ba-e99f-475f-9ae1-16d30acf6840", "sighting--e9d33227-c65c-4dde-9e3a-ef2ad38b733a", "sighting--08d2f043-e5f7-4376-9eaf-085f3e701bd0", "sighting--94b438d5-3e4c-4a13-8b8f-601747719079", "sighting--c36b6361-bb41-44d1-8400-3bbe785b0122", "sighting--d7cbfe4b-11f2-4914-a213-1b96b7a98230", "sighting--e3a7660f-1242-40a6-9158-41bdc5ae56ec", "sighting--bc63e03b-fe58-4ba7-9acf-be37d5097e68", "sighting--7783114c-6509-4d17-a13e-cc1611227738", "sighting--e4b32b61-2fdd-4b14-8997-6fc84f91edea", "sighting--abdf5f5c-6713-4403-9fa5-009869639703", "sighting--06b7d7f3-4339-4973-b73f-4915282988de", "sighting--8e55def1-a9a1-490f-8eab-1dad341cf966", "sighting--ef1bb276-4f37-4d4d-a701-f0adfd4eedea", "sighting--28c993e4-da71-422f-9595-2637970c0058", "sighting--980b9fe4-d246-4ef5-a21a-f6af792b66dd", "sighting--8f964445-61f7-451d-890a-0181c12f42f9", "sighting--46ea69b9-1105-4499-aa67-0984b349c9b0", "sighting--84defe8e-85d9-49c9-8d01-e8283b654187", "sighting--0b8fa16b-5fca-4fb5-bf82-241588563425", "sighting--e5d8a43a-a830-48f6-ad94-b6275d34148d", "sighting--707d8c4d-170a-4b49-adef-feefc523ff0a", "sighting--2f9561ae-c58e-4961-8a5c-c436f8ca0828", "sighting--8c71f75d-da47-49ed-850d-cd878c2adc4b", "sighting--d9dba146-7d2c-4137-b9b5-76ecbdc90692", "sighting--31fecd3f-fa08-4f07-a3ff-bbbbe2331772", "sighting--7b0cb780-0691-4822-b144-8ff2765d4901", "sighting--b9608670-77ef-40fb-a9bd-42ed25004389", "sighting--80094b6d-61d1-4fda-8857-6876f9b11e00", "sighting--6810b8f9-20d9-46d1-89a8-93128bf5004a", "sighting--166b5ff5-1886-4f36-888b-c18f139c57cc", "sighting--b957462e-0ebc-42d4-90e2-664cd3f9ed2c", "sighting--a37f0d58-7338-465a-9119-44d009da9267", "sighting--21c4c0e8-ee2b-4008-a127-dfc6243e9066", "sighting--ddb68a87-d333-4556-b362-03413a553840", "sighting--835bbaaf-2ff9-4655-8afd-65feb269e7d9", "sighting--6e48c5a3-5592-46ec-ac62-9a7a9b9821fb", "sighting--dde0225a-db53-404a-af47-7c66c871af12", "sighting--47d7f4cd-e308-4344-a369-147be8c6e1d0", "sighting--ed048514-1495-40fe-8fed-652e28eb983d", "sighting--1368e651-9ccb-494a-9fe2-d7b1dec43107", "sighting--63865ac6-752d-4207-98b7-38b3bbc10fda", "sighting--98440e51-0610-4ee5-8e41-2b8ec9d37b8b", "sighting--d73acb7d-6f63-4cec-84c6-edffd941b432", "sighting--27cb7b83-4ba7-44a4-a675-0706e864d1ad", "sighting--e7cede2c-ec43-415d-97b0-8eaaee79ddcd", "sighting--c0412489-db89-4889-b352-5a59101d6ebf", "sighting--626018bb-17c4-4e27-9956-9ef264aaf3dd", "sighting--c73a62c4-80b8-4ba5-87bf-5cd8df8c4d20", "sighting--33f8540b-1b4d-44da-847c-219944c227f8", "sighting--8c08595a-b713-4675-ae3c-9129e3a77b3a", "sighting--199a2ff8-8fce-4d8c-abfb-b0ab86f9de83", "sighting--17da15bf-3b53-4f30-adfc-2e72e240c86e", "sighting--3f3fb054-a1dd-4171-a89e-d747ae52a63a", "sighting--90084db3-2dc2-462c-8f28-3558d854cc31", "sighting--0400cd48-b48a-4d4a-992a-dadf7c8ed596", "sighting--7af19589-638b-4ac5-9ccf-7c954d1c68c5", "sighting--c862a83b-51bd-45a2-b802-b8b4343f63df", "sighting--d42d4740-aad9-44d2-9ff3-7b22424970e0", "sighting--1887e7a9-653e-4701-abb6-a7a215062965", "sighting--c615adca-fce6-475d-a453-d631e1cd28d3", "sighting--2bab38a3-69d4-425b-b3b3-afda3acc9a45", "sighting--2d52637f-1bb4-4795-86be-225d63c42fba", "sighting--c9e2d17f-2639-4905-a81f-12d80ba94fee", "sighting--e3a56d07-ae2e-448c-88d4-e4987eb1f8e3", "sighting--78559452-1c42-4c52-bdda-19e9e7de897b", "sighting--8b049e22-46f3-4196-b535-863599a81a4b", "sighting--5a5f3d8a-7174-4fc0-976d-e07cfb4d9569", "sighting--9671c8f3-3418-4c76-88b1-842c9b448972", "sighting--0506e3a1-82ad-4f59-a2a2-0f6daa973ce4", "sighting--1c939d9a-7bf3-41dc-b1fd-e3e7d7bf6790", "sighting--2cf8e586-1b73-40b9-98d0-f75c8c8933cc", "sighting--5a96a5d2-0a2a-4ece-a480-13596c95c535", "sighting--fcbf21cc-3b81-499f-9f5c-b2e9266e27aa", "sighting--ba4b18cf-5536-4330-b5e6-fa17bcdcb4db", "sighting--b356e010-1353-4162-98a9-c4252271eb4f", "sighting--b8e72752-0b11-42e3-ac7e-6518fd7562b0", "sighting--e9f42439-ef6e-4301-b258-35851b309dd1", "sighting--cc524134-fd8e-4623-bd44-e3ded54dabf6", "sighting--4622d0a2-68d4-4a33-a2d0-0582b08cf2fe", "sighting--aabba350-86f3-48b3-b166-989ff56a8352", "sighting--1a40b940-aebc-46e2-98cf-e796dd29af62", "sighting--acffb5e6-b0e4-4c36-b1a4-d65c6db15913", "sighting--17332b8c-e802-4abb-964c-3d5e0a2d9fa2", "sighting--6f27da67-f07a-454b-8895-b4fb41ca5070", "sighting--251e7bf1-c9fd-41c7-8af0-59ef62e1f8f8", "sighting--a225b7c1-c080-4d18-8136-2d10ca48487e", "sighting--6a703eeb-f347-4912-8c1f-a812d9fad0c4", "sighting--863e42d9-d1a0-42d3-918a-81641f92c6dc", "sighting--8cd8fb8c-521e-40ef-b4fb-1ebf19ea653f", "sighting--a19b8cb3-ad2f-424a-a5e9-53ccbf03df8f", "sighting--570ccd4a-0ad6-432e-bc6d-09d2a0e63bdf", "sighting--0f4b4697-1d2c-4464-9c25-4b75f1ca4733", "sighting--31bb8383-c4d3-403d-9ec7-f92b21feaaae", "sighting--c0f3adea-febe-4b52-b8b3-78c61e516727", "sighting--ac4f8de1-7344-4076-99d5-91c9e1a0cc73", "sighting--86f39a96-97f9-4398-a5d1-8f54036f34c6", "sighting--c9fc907a-31e8-4d4e-b1ad-64d48fb57cd5", "sighting--0c12b2df-b194-49b6-99d9-ea7bf77506aa", "sighting--8f43e323-6813-4498-a0ab-5f2c54d7688b", "sighting--70ceaba9-214e-4c52-9919-89f5b4042e61", "sighting--cb8c0c6b-b587-4a16-9322-23b5565cab78", "sighting--cf49c811-4153-4400-b853-03a0fa00ced3", "sighting--84e449c2-f04c-4265-a4aa-c01cf83e406a", "sighting--a4527af2-3c88-44e4-822d-327377decc5b", "sighting--ca636840-2e89-4bbb-9f91-c3c0f741d3de", "sighting--f04885d3-c3f4-4c3a-ad78-2a34ce3cd223", "sighting--b206f908-33d0-4e9f-9402-6b1cf24555e6", "sighting--5728e1d6-3d95-4261-b785-d8624468b56a", "sighting--9b1510f7-5a6b-458a-957c-3c0923ebf487", "sighting--0a6af360-d6f4-4e5a-9ff5-e4bda8d48690", "sighting--a514c321-9211-4b3c-9af1-738b49ecebd7", "sighting--3b3abc07-dcce-48d0-8d37-0d24e46b8d86", "sighting--1e660322-2c38-4d84-ab48-dc7a79c4d20a", "sighting--950c13c8-7db4-4f66-b66a-5fabdc312d0c", "sighting--88c4042e-14fa-4c7f-b36b-b4d6deb3973e", "sighting--a2c8bebf-e04b-4fe0-88b3-987b3e0f8f91", "sighting--acf31235-a03a-4adb-a420-6512286261ea", "sighting--3ade0e61-22e6-44cd-a2a4-1883579a8e03", "sighting--51a533ca-733a-4d90-b8f4-0e91c47bfa0a", "sighting--8fd727b4-c10a-4ca8-9644-4992aa0d235d", "sighting--4ce1a1b5-38ef-4d0f-9c18-66ad5e9f13ab", "sighting--b73ef533-d6c7-48dc-9d85-5f753b88165b", "sighting--bac5d32b-0f44-4c45-9f90-61a79dabde30", "sighting--a61e019c-1404-488f-88c4-c1d27239d1e5", "sighting--befaba36-ec63-44fc-88ed-dd662957691f", "sighting--35367dad-4e63-4a8d-ba84-16e445944ae3", "sighting--a4a4a67f-9722-4b6b-8c66-2fc7591985bc", "sighting--b4fee0f9-a219-49e1-a8a4-03e9c7b1ef4b", "sighting--738979cc-1f34-45c2-94ea-3b71b235c4e2", "sighting--40848bab-b788-4758-91d8-9dc14c98707b", "sighting--d758d690-8a25-40cb-8798-e2d634d4eb1f", "sighting--ce64982a-39fb-4e87-9ff8-c881d3535353", "sighting--c37fdcb2-1b4c-4469-b451-11db872af689", "sighting--204cb043-9f32-483a-a858-21dcf573ba67", "sighting--bce510bd-f8ad-4fac-8221-885529d58152", "sighting--50ceae85-57dd-49d0-8067-5b4e960d65b7", "sighting--0a93516d-696e-454e-ac51-d11283d2f491", "sighting--6ee125e8-2144-4129-9269-4d3aed87e518", "sighting--3ecb6fd3-520f-46d1-b78f-035e5bf51bdb", "sighting--e9dd5abd-44b4-4c80-83fe-128d56cbe2e1", "sighting--e44dff5e-cfa5-4400-b521-50ea8b9ba841", "sighting--d1f291ae-1576-4c25-8b46-e2de1a3e3e13", "sighting--cc60182d-a03f-4016-84a0-b2360700f127", "sighting--92ec25ad-c95d-49a6-a7f7-269c4188c603", "sighting--bbec4c0e-c2ac-4caf-9519-4e5ecf71ec19", "sighting--babd084f-88c1-4725-8e30-2654657ee51b", "sighting--ce257c2c-58c9-446f-8400-ecaae2d3b5d1", "sighting--3e421673-0da2-4530-9db5-65f14a849148", "sighting--a48f5eda-7668-438a-b153-5aa5035cf89f", "sighting--fd87bc97-85c2-4532-8ace-14b0d310ebe0", "sighting--67b2545b-1b33-4a23-9568-70a9bb90d33d", "sighting--221f8eb9-a983-4874-8a7c-333cc4059572", "sighting--6bdea50f-3073-42e6-b711-1ef154efa64a", "sighting--9d206084-36ee-4ba5-9213-64a0f077db8b", "sighting--87a32774-f19d-433d-9221-1fa49ad4d9c9", "sighting--aa1e0f0d-3c26-4c48-b64a-86fb583537e2", "sighting--337647f3-69fc-45a5-80fa-d666f745f050", "sighting--d5159fb5-59d3-4c60-a889-c89118e5a400", "sighting--944ea30a-0ac2-4a9e-932d-2133a0da8ad7", "sighting--030058d0-a087-4ad6-9251-d89fff1a5a9b", "sighting--de800457-d476-4d06-9e5c-8adeda9f2a32", "sighting--4839802b-d3d2-448a-8dc3-bbfc553d32d4", "sighting--d6b26f93-bc94-42b5-964d-b38436a7f1a1", "sighting--6b704153-1002-416d-9fa4-efa0b8e0cea3", "sighting--b5300b20-df80-45e2-a5eb-52ba12d28d24", "sighting--a695aa1f-28ba-4b9c-acdf-a32d9625e335", "sighting--43dc1eec-9162-4b19-ae8b-b70e27ddd403", "sighting--5daa41a0-2893-4e34-bb5b-6cc92b3b9c64", "sighting--80cd6099-afe5-40cc-832e-eab7441c311b", "sighting--d0373553-b487-4a5e-a700-02705c370ae7", "sighting--326c0ee4-7dfe-4a5a-ac7b-d7f6c56f1230", "sighting--72a11b9e-449a-4030-af12-39102dc4135a", "sighting--9f89eabf-f1e5-4ba0-846b-5deeb5ec0229", "sighting--3639c7a5-4076-4869-aa2e-d8a99ee5f0ad", "sighting--79aaadaa-295c-4590-983c-31f259cf5077", "sighting--3fbacce8-73c4-4924-be3b-39e4c5875f1a", "sighting--c783909b-8ece-4b60-9eca-720c7593297e", "sighting--db95c6ab-888a-4d41-a5ca-36cf534d6548", "sighting--bfe95849-318a-4513-8882-6ad07fe72b43", "sighting--69178272-6d36-41d6-8a3e-8f7da46bf8f4", "sighting--64b0b688-8428-4730-80b9-0a35201601d7", "sighting--4d41d13d-675f-41bc-9db8-56fe452005ce", "sighting--0ad56665-5c08-448e-bc62-db1b1e701c7c", "sighting--1ca0eb41-e9d2-47a9-88d8-d97b5ae7f36c", "sighting--3a9b56e6-9e3f-44af-9c10-8165df7a1aac", "sighting--3581739e-dd7b-43bb-8d3b-1c34ff2b6cc7", "sighting--2b530e57-8ed6-47e4-b663-b26091bcc65e", "sighting--9c724269-6b02-48ad-8849-c9c1c4235659", "sighting--c0d55ee7-1e62-4486-b5fb-36447b6b24c1", "sighting--f8c1431b-c592-4b66-a7f8-8270647c59ea", "sighting--ed7de188-eedb-45d6-b33c-12d3c1e6fbee", "sighting--fc05ab19-b9de-429a-8cba-336a63b5af55", "sighting--fd469fd1-d312-46f1-8c5f-60676c35bf1d", "sighting--9c5c8745-608d-4df5-b5f3-c70e792b7514", "sighting--4728e670-f6d4-4448-92fb-d691233435fc", "sighting--4fe4efe0-bf1d-44b2-8557-7219af163f1c", "sighting--06bf40af-907d-4405-9f86-0ba835cd8a24", "sighting--c512439f-48a9-4625-b155-5c5412ff7b86", "sighting--a25b643f-a898-408e-a4df-5be986733c15", "sighting--3d80ac31-b536-4743-ba05-12566d247e57", "sighting--282f210a-05d2-4790-874c-457e9f757fae", "sighting--a1b115a2-fc07-4c5d-8f3d-70c20084fd0f", "sighting--fd7d4b12-c52a-431b-9be0-6f2718fcc50b", "sighting--2132fb6d-6553-4377-9c06-b8c194fda8a5", "sighting--a20605d4-06de-4377-b126-ca3062bd36d1", "sighting--b81c81a0-4658-46bb-aa0d-53641a145c6b", "sighting--23e3b4a9-46f9-4466-a21d-4437db690737", "sighting--b7e02ab0-84bc-479b-a73c-a3523188e6d6", "sighting--8d6dcb3e-a242-4778-aab9-5b8cac1e2aab", "sighting--98c79134-ad81-4f14-b0cd-f38b7e6528b9", "sighting--08dc8822-50c1-46dc-b199-43f3c7dd4e4a", "sighting--fc2a8e84-ba05-4a98-91c4-090f804193be", "sighting--532cba5c-27b5-495b-967c-4383ea1c5562", "sighting--0ece206e-e0a8-4bc7-984d-59603dacf976", "sighting--a7c7d9c8-be3d-4cb3-acbb-95be60eaedfc", "sighting--585bf072-661d-4907-bdc3-5625e326b0bc", "sighting--0fa18756-17dd-4243-bb46-2f5344b72430", "sighting--e4253193-dc8f-411c-a2bc-3417eea1e429", "sighting--d788f65f-1fba-457e-89ad-9ae61fc5c706", "sighting--bc70af8d-e84e-4a90-be08-fde668e480cb", "sighting--a27df842-388d-4933-9067-9350102cd7ed", "sighting--9a23d776-d0d7-48eb-804e-39b2c9003873", "sighting--e7bddc43-97ae-4809-b067-3adfe9099d7e", "sighting--1ac866dd-a062-4cca-8e19-902901d98a99", "sighting--ff9fa45b-7bf3-4fee-9ebf-979d2d7e14b2", "sighting--429810a4-f2e2-4ce5-9bb6-44d5163f9ffc", "sighting--05952aab-042f-4fea-8780-5eee70e1990a", "sighting--4a5c250a-9f5e-4d82-b021-9c7ef37e654c", "sighting--ab6d0c9e-8f9a-4b02-99f7-08dcc4413a5e", "sighting--3091bf3c-5887-4a7b-9e54-90b8fef6e685", "sighting--5ccbb7f5-69d2-4730-9b0b-0c7f7dd6b223", "sighting--b81ff443-4533-4e7c-9d8e-982488515167", "sighting--386eb3e5-4af1-4171-85a2-f73fefe270fa", "sighting--c0a5fbb8-4281-4429-9c5c-eeafa880c77b", "sighting--9c29515a-65fd-43a4-826f-1257651a83aa", "sighting--ec504bca-3df4-4c20-a2f4-846407cc4fc0", "sighting--0c247bf2-1979-4938-b8b6-4064ef75765a", "sighting--cdcd0c37-dc39-4b04-b3e6-77fe4df260e0", "sighting--faa0b0c1-0423-41a8-bd73-a2c7e5f78d4f", "sighting--aaa33b24-1c94-4354-a7f4-a4c5975a3737", "sighting--3e54c1f0-4021-4e9c-b87c-d7a4871b47e0", "sighting--2f89a63c-76c5-4e1a-95b3-abeb266161ba", "sighting--a43ee576-be86-4cf4-802c-cb40309b2cae", "sighting--ca0fe27a-2841-4abb-a9dc-dca5c994be33", "sighting--5a516a41-ea62-4ce0-adf4-5124f60bc979", "sighting--b5876f68-f290-48f0-bfbb-64ce424affc6", "sighting--a60e50ef-8284-4442-b027-707682b502ed", "sighting--b044a41b-21a9-4ec1-8709-e495fffa134b", "sighting--49456f9a-6ea2-45b3-bfdc-2cec08d227c8", "sighting--04efd8e2-ebef-4157-ba27-384914ae384a", "sighting--427b10a7-e560-4fcc-bc46-ab7911b51420", "sighting--ac782866-c540-4201-9130-6713a2d4819c", "sighting--096f273a-8b24-4cef-a699-3cd95a0bf1e8", "sighting--9f191cbe-2d03-4928-b3de-a1b342e2a1e2", "sighting--9016f78b-7a24-4ac6-a570-a81910067684", "sighting--6f428cf3-14a8-4890-9170-447021703102", "sighting--1af22dd7-a8ef-4576-b171-1f481db1bb33", "sighting--0a074537-b8be-4a11-82ed-ffccbba3027e", "sighting--8bc67987-5614-47ac-8e22-b5c0e3fd0220", "sighting--ee9a0f1b-d87b-45ad-9788-2cac6402a619", "sighting--b3eed28b-e245-4566-b00c-c77fbaa57ee5", "sighting--2c119f89-e3a1-4c74-aafb-a5e9f07d0844", "sighting--86899b47-c3ca-4f52-a336-be23a24fb277", "sighting--91c4afbe-8845-42b1-a4fe-206245f47012", "sighting--b8e2203c-e934-4009-bec1-08e4965ccb2f", "sighting--17760517-15fb-4153-b99e-d9f26e0293f0", "sighting--31038cc2-7802-4566-bf33-cf2392eb3d90", "sighting--95782adb-7e0d-4239-9f48-cb6a2b7face0", "sighting--2f5b4ef2-6c8f-47be-a438-3a5a9598f2cc", "sighting--9218281b-5771-45f8-9448-bdb1c44475cb", "sighting--cd1c512c-fa0a-4c69-9228-846502aa2c6e", "sighting--ba487874-207d-4b3f-92fb-289072b077f3", "sighting--c7c89bd0-6626-4936-82c4-e6902562a524", "sighting--2eec53a8-d8e2-43dd-a730-fb19c25f96b9", "sighting--c693471f-9e10-4e48-a019-10e1bba44f40", "sighting--98232f79-556c-42af-a3f4-7369683bfc8a", "sighting--df906e28-610b-46d8-90da-1f2d11d3e3bf", "sighting--24744dd6-870e-4c6f-b8a8-2aea88f43077", "sighting--26e0932c-382c-488d-8d89-7bc503fd8204", "sighting--18591bbe-d21e-489f-9773-7ece78e95656", "sighting--5bd7c57a-0d63-49d3-8e0f-1b9acd1512f6", "sighting--30064e1d-5f43-44cb-9066-e16595956155", "sighting--a9c838ab-37b8-4a11-88f5-c3b6c90067f6", "sighting--9162a77c-cc3b-4f56-85ea-c6f0267b64f5", "sighting--598d3e39-4b6d-43c6-a4a9-a15604d80ba4", "sighting--d73d7c7d-d62b-403a-a382-7fa091771b52", "sighting--8dfa5f72-e482-402b-8daf-8c2b6562d158", "sighting--ea804d32-9629-4a5a-8639-fadfd35bc8ac", "sighting--477a5924-8407-49ec-ba6f-ee4f0037a5cd", "sighting--e1dca352-1a7b-4c28-a16b-6c4d29ba777a", "sighting--e385c7a1-478c-4a82-94ce-15a92fe9b3b3", "sighting--fcb00474-e8d1-4f5c-9e26-b06a63d95148", "sighting--0547a936-2349-434d-99c6-edae12e7de2c", "sighting--d914d821-05d8-4c46-b5bc-c0a36b02f473", "sighting--4b994106-6e51-49a2-9312-5c90d66a79a6", "sighting--ddc731bd-b1ff-4fc6-b5be-1e9fa2a88dd9", "sighting--98f427fd-22d7-4e6d-a50d-0e92219ac1f0", "sighting--931e9c2d-7355-4d17-9697-5129ea818e46", "sighting--63bdc1a8-40bc-4cac-a98c-6dd169053c85", "sighting--940e6064-19d6-4b3f-9541-ef95886dbe3a", "sighting--f3905079-9c24-40c3-83e3-25940a75da8b", "sighting--ee356b84-02fe-4fba-b84a-630478e9606f", "sighting--67438180-249f-44bc-819f-9b96cabadf3a", "sighting--b7624210-d25e-405e-9d87-0c7bdd8e101a", "sighting--8b99bd4d-29e4-48c6-8ac8-de73a8231885", "sighting--de86cb55-6425-48ce-bca6-20262a370c66", "sighting--21bb1fbf-0a45-4050-98fa-23ac2993fcef", "sighting--dcf0aab5-f90a-42ef-9959-da0e8a28e203", "sighting--426a9f74-83d4-4984-8906-709535ff8e17", "sighting--00999a01-17e7-404c-aa8e-7279e59758a0", "sighting--bc87c0e0-442f-4248-981e-10592ea3186c", "sighting--1d334463-a767-4dc5-9e77-734aae31256f", "sighting--6e083c03-7a36-4d53-b1be-eca72e9fbabc", "sighting--3699528e-3834-44c3-bebd-ea18b641a7b4", "sighting--a1b46cfe-3130-4baf-bdff-06ac804cb539", "sighting--fadc9099-8d58-48e1-8374-d49f5c9ca51c", "sighting--594b5acf-c33c-49b2-aa20-4c4e01e4736a", "sighting--8ae91db3-2417-407d-9bd1-c00ff497654f", "sighting--72bc4582-fcdb-43e3-930f-f1bbee88f246", "sighting--42f0f409-9d12-4160-abf0-fa9a5dbd0231", "sighting--debec149-d05f-4846-a2f4-adbdb2544544", "sighting--428133da-b458-4c9a-b514-994117486c78", "sighting--c8e26632-77b1-4214-be8e-68b0890485bc", "sighting--365cdbb2-d8e9-42c0-981e-81759dcaf63d", "sighting--597ab198-1ba0-4b78-9aa8-3975d712e2a4", "sighting--493132f3-51ae-4a1c-b909-4afa9abacf94", "sighting--c7abe443-264a-4003-835d-b011dd8b69fb", "sighting--38d26584-1f8f-434c-955a-bdd16d670428", "sighting--88080801-1fdf-4a98-8563-8ba5d1f894c7", "sighting--31598f7d-27c5-4e45-b9ed-a5d63d62f59a", "sighting--c3d6e220-dd4a-495f-ae48-b4c45b4ad442", "sighting--93d19956-a100-4f03-af53-3b0843aa8227", "sighting--7dbe035c-b1bf-4dce-8848-ba6655c47295", "sighting--a09cf613-897b-4409-9534-649f4b4254e4", "sighting--829491f8-0889-4636-abcf-a9a907aa0002", "sighting--87b14b6a-25da-4286-a0a8-f5d33eff42e7", "sighting--0ad3f5af-956b-40f4-9863-c31319d1a9fd", "sighting--23db732b-4986-46e3-9aa0-b9c98a54d29f", "sighting--1bf337ec-458b-4db9-b992-e1a3be1fd03e", "sighting--3ec88fc8-04b3-41fb-9cd6-a52585a9bca9", "sighting--5e57215f-7e86-4f97-87e3-35eb3b6ba99d", "sighting--f703413a-aedc-4364-ab6e-716f86a2f9dd", "sighting--02a05d86-2cca-4f26-9f2a-fb81449ed6cc", "sighting--ffa78ec0-cce4-4d57-8701-4b484561e8da", "sighting--1c20bac6-db50-47c0-bd81-80bd6fe983c7", "sighting--3b28d5a4-16a7-4dc1-8109-c5f7a251c20b", "sighting--556b1ab8-ab5d-4385-be74-daf82d3b0824", "sighting--1d736dec-9111-4832-baf3-67f00bb7a46b", "sighting--7a80c1dd-2cf6-4767-a2f1-bcf73932ddeb", "sighting--4acf012a-fa39-442f-9229-be22f32ca410", "sighting--5adbf4ec-02b0-4bbf-bb83-88e5ee0b3245", "sighting--8de3fd1a-5870-4d37-857a-135f8fcf6cd6", "sighting--d965fbfa-b101-4169-8a8f-1c9fc17b5895", "sighting--c657fd87-2c64-49f4-8c23-54d73a4ce3cd", "sighting--52dc53ae-3fa1-4471-b6f5-73f181f4616b", "sighting--1d0b69dd-8e28-4933-a9eb-5713c945a81d", "sighting--45fc03ed-f7e6-46f6-818d-36ec3c5456f3", "sighting--be87876a-e29a-47f6-bbd7-0c1b2d6a962b", "sighting--ed0a618e-498d-41c4-adea-0edbc1ecf058", "sighting--413e71e9-a487-410c-94ad-ece4b1edbf4a", "sighting--19d0f0f9-4c72-4e23-bbad-c537955b90b3", "sighting--c1355d38-4bbf-4bd8-802f-0b1af6891731", "sighting--6f608974-0144-4628-8792-baf3a71e2fc1", "sighting--bb3020cd-55a2-49dc-ab20-f989244ae446", "sighting--6f4a3b5c-c76d-42e2-bae6-bb661d6dbea0", "sighting--faf1e72d-35e9-4ccd-aa53-10eb58651069", "sighting--e28cb70a-2de8-4715-b218-b0527346d38d", "sighting--20c79789-f3d6-46af-b47c-82203b991b5f", "sighting--2eacd33e-de83-417d-ac7d-58061dc5b009", "sighting--087cc9b9-04fc-4583-8c20-485abad1eed0", "sighting--675379c6-a545-418a-81cc-517a1cab2e66", "sighting--c6d25fbf-4597-4b4c-a0df-83258b963821", "sighting--a86f0386-66c1-4ee9-b34d-50ca827170b8", "sighting--566d984d-9058-4d9c-8840-e00fecd6e2ae", "sighting--d1673ae9-ee36-40b7-8510-95d44610482e", "sighting--e8f74cdf-f7e1-4524-ae27-1e27c07ecd86", "sighting--84031764-d56e-4547-aba5-be0e9022ffb9", "sighting--fb9539cd-d712-440c-8be6-bf83f0d5587c", "sighting--00623457-743a-4db0-9776-6777eae1f719", "sighting--a6bcafad-6c01-401b-93a4-a574c94d8906", "sighting--7dd1d21d-27b3-4bf1-bba1-2c7587571165", "sighting--25d2d0d3-d210-44b2-93df-0180cd68efbd", "sighting--b3c7125d-2587-47e8-a3e3-bbe67dcf986b", "sighting--f38932d9-236a-4a93-9fc0-6abb07b5c46b", "sighting--770143f7-a97c-44df-ae11-7f3ce579e1b6", "sighting--51c9dad7-3444-42c2-83d6-ac9d8d0981df", "sighting--e5f934bc-b737-4497-aacf-27ce00d37d2b", "sighting--40b67450-40d1-4a47-8abc-f100bc76623c", "sighting--a79f11e6-ec77-48a5-be62-d2474b56a35f", "sighting--eb61050d-415d-49e6-a7bd-1c744b405e40", "sighting--f71da226-a570-4e1a-ab40-acd8b10fd11e", "sighting--b83f968c-ccbe-432b-bbe4-bb046c832eff", "sighting--7ce4b846-81ca-4a09-9919-5b2692988e97", "sighting--47af3465-3901-4d81-8441-a17f7843d27c", "sighting--cea4fae1-4097-4e2c-a48b-f2ccc29df21a", "sighting--6cb37853-f657-4eb5-8fbc-7aa7c3905330", "sighting--56924bd1-85a6-4bc3-9cb7-b132378e0c9a", "sighting--8f4e6451-3b32-4844-a9ba-3834650d1887", "sighting--75d8f47f-5351-40dc-b50c-68a159572e45", "sighting--19e6930e-e825-4b55-af1e-e4ac2f475e28", "sighting--48a449dd-2cda-4633-aee8-a602fd9e6e24", "sighting--c87d1285-85a9-4a35-8594-e0ae0368ced9", "sighting--c26d69df-48fb-41f7-908c-f1e763d37f1d", "sighting--dddff032-946f-41c6-8c50-93991f80c024", "sighting--ebf213bb-4558-4070-87fd-165808efdeb8", "sighting--552ad567-83f9-4d63-be64-95f2a1a5f776", "sighting--fe774014-11ad-46e8-b52d-a52434268a92", "sighting--68b30613-3c6c-4b9f-af74-0c0f7efa68d9", "sighting--41c72573-9a70-409b-892a-fe45410890ba", "sighting--63cf6a26-afb3-43d9-b642-059518b13a06", "sighting--b01349df-bb7c-4560-84f0-de2314ac489e", "sighting--9a140ff9-ff9c-40cf-8057-a8e2eceda9e1", "sighting--f090750a-67fb-49f1-83c6-28cabd4fd76f", "sighting--030a58b7-0bdb-404b-9259-b1d8eb937e5a", "sighting--f52af16d-0f66-4264-9311-ccb72e7dff1c", "sighting--89a58f89-7f3e-4d8f-a022-68bf045ff140", "sighting--aea268cd-2b62-4f48-bfd6-0aba03b542c7", "sighting--047abb9b-7efb-4e70-b41c-452e4eb1006b", "sighting--4e22550f-4737-4ba9-8e6a-24e5f798086a", "sighting--311555ef-2cbb-4bd9-8615-09600b32a3c9", "sighting--ca2c0102-e505-40be-859b-f97638ae68a0", "sighting--1c0cce54-46ca-4cf6-b092-e3ef9480442c", "sighting--75bc9f7d-1131-4c88-a420-534628b9832b", "sighting--6e65ac1e-2fa5-4146-8536-4a39ae58b72f", "sighting--4eda7954-9658-4343-b2c3-7b5cd13c9848", "sighting--705b420f-29d2-4a0a-b4c0-8716da7aeace", "sighting--703c288e-563f-4060-bef1-e138a5263a71", "sighting--b922f3fb-c4df-4f32-b6ff-b4a3e0d0a8ab", "sighting--67c78959-65f3-4f89-8ca1-3b125182aba3", "sighting--371c7835-1051-4f29-9565-4ed7eec8f621", "sighting--59ac2b40-e6cc-4560-8687-0727dd12d3e2", "sighting--b874de18-4750-4bcf-a30a-0581923dc867", "sighting--eb3b51c1-72a4-44d4-ba27-56a791011924", "sighting--c746d8a9-79b2-4215-b230-59781240995b", "sighting--64c3c09d-f691-474e-9096-0d2d12f6cf07", "sighting--a75dad8a-819b-47b9-8d34-6df831cd4c2c", "sighting--9c4806f5-9ed9-459a-93d0-6e3630307ab6", "sighting--2e8473fe-c595-43b1-a1bd-97454b43b3ea", "sighting--4ee7614a-cad1-4982-b3f2-2ae2a40b85bf", "sighting--667f1087-c129-47a6-9d5a-b2748fae0954", "sighting--a5ad68f1-37e2-402b-b9b9-ba4e9dae63e7", "sighting--b6a6757f-cdad-47f7-8518-f2d63c319800", "sighting--05456184-1fed-4083-b802-855ddaccb86a", "sighting--fd0336c3-1b14-4157-b969-f6c7213cf742", "sighting--54e017b5-07e3-4e0f-aea3-00e3fda51828", "sighting--9baf0e1b-4f64-46ad-a7b1-65ebc9190f7b", "sighting--6a5018f8-6586-4c58-b23b-cdc0c2d25007", "sighting--a11aef27-0aa2-492b-8cd6-16b2f45ba22a", "sighting--768263cb-02b1-48b8-8417-3059380cb27c", "sighting--f09a9429-ce1a-4f08-9a61-ed9ed9755c0c", "sighting--f808a8f7-f155-4024-b024-8fe41e21ca18", "sighting--b96b8120-e031-4a30-a86b-91cb45479e50", "sighting--1eee7bb9-b81c-4948-bf6e-eca60a8dca64", "sighting--8e2a774c-a410-4af2-bead-2f952ce031b0", "sighting--d06e950b-c2a3-4ba3-a801-0cf377830c63", "sighting--c886d322-024d-4653-895b-63e44db49e23", "sighting--ba53869e-a2ce-4e1b-aad6-93ddbb506dee", "sighting--abd584ea-2687-4033-bda2-23b6d97b8f7b", "sighting--d15e0d1d-b48a-4882-8fc0-0849861981cc", "sighting--be2e5039-99e5-45a5-bc02-6fad24e3b496", "sighting--a4412195-1bf8-4aed-aa83-5b577d35d027", "sighting--076fedda-fd90-4652-8d7b-7101676cc12e", "sighting--86b87cf6-d302-40e9-b7ac-a6465a4ccb08", "sighting--cdf3de8e-9217-46a1-a1d3-46a6b7da7a34", "sighting--f5faeb31-1d62-4948-961e-fcbd54c2e9c1", "sighting--a0455d0d-cf89-4aa3-a68b-9e7f96dfcdaa", "sighting--292eddc1-6e18-4a7e-ba24-49c4105b12b5", "sighting--2af04d18-5a3b-49e5-8bca-6ab7fb1e9cde", "sighting--7d05da0e-fcdb-4b11-882d-7dbb83780286", "sighting--b35f54e4-7567-4e54-a2ab-c0377fa1f58d", "sighting--348c889e-d0df-4869-8ad0-94055997f65d", "sighting--e2b0ebcc-9c88-4119-b245-7b45f0e12489", "sighting--50872a6f-0785-4c9a-9cd6-a73aadfd68cf", "sighting--2096e378-8bbd-479d-a353-947e2737ffea", "sighting--23037098-a41b-4c29-8b2a-2fe0fdaf7341", "sighting--f1221dc1-118a-4dfc-943e-a66a8c797027", "sighting--4d1478f0-13d4-4878-8f14-a4c7f2a1bb87", "sighting--57b5e6c8-34bb-49de-80e9-96a4b9d31779", "sighting--fcd283b2-a7e9-4293-81bf-d284e2dd4c74", "sighting--b6b409e2-8a25-4dc7-bd5c-bdce2f919563", "sighting--bbcf28b5-2b69-472d-b4db-0cba3191e849", "sighting--d4551898-1e11-4e69-a7ee-52f848754798", "sighting--59ec122f-1f0a-4837-8745-6f5e81aa98ad", "sighting--7bfc5ff9-fc9f-4b81-adad-a48f25a7eabb", "sighting--a65cfcbc-5481-437f-93e7-68bdf9ae4d9d", "sighting--2e1c7592-f5f4-48c1-962f-6f04c7c13cbe", "sighting--a6fc832f-fc63-4cdd-a8c8-6487c90ec3b1", "sighting--5521a3cb-745e-4213-8267-a170ba8941cb", "sighting--263c9d47-e486-4734-9222-95e2a803845b", "sighting--1105dd76-7ef3-4c0c-86f4-e42e010b760c", "sighting--33eca4cb-3a42-422a-8a40-b933e1538366", "sighting--beb9c844-14a8-4f82-83bf-e0b783acf90d", "sighting--780c41ed-8b41-43fa-802d-23f7de9d2b06", "sighting--61c84a49-5c41-436e-a74b-43afbbe9768c", "sighting--65d61aef-1ead-452b-b5c9-d6a57be4147a", "sighting--c28951cf-cad6-400e-864d-8058fcdd7a5d", "sighting--e0038d1f-a737-4216-8028-d031fb100161", "sighting--f41dc21b-9b4d-461d-837c-05373862a0b4", "sighting--3995745c-7d47-4dfc-af55-2f800c9174f3", "sighting--89ed27a8-2e82-4234-8169-614eec0d9cbf", "sighting--078ea0bd-94c2-4393-a066-6a4d05272b19", "sighting--d5a65549-12d0-4ce6-a298-7b4425b60158", "sighting--213be53d-e46f-40e5-b1bb-a61b3248e65b", "sighting--6334cf42-0e58-4c18-b847-cf670556c3d6", "sighting--d843e884-3494-4f21-8a10-ad97f125273f", "sighting--7c4a09d3-220f-43e2-a531-7cc58e78372b", "sighting--f80826fc-d08c-479f-8650-a888b7e333bc", "sighting--e3f7bfe4-5f4d-41c5-bcab-e8d39746a2bb", "sighting--3f6af49a-1a9e-4b9b-9f18-3dcd9c052784", "sighting--30f54ecb-4a0b-4cb0-8a73-3e591a10215b", "sighting--5c9e4c5f-bf57-41c2-8e82-e0100b06bc94", "sighting--40159be2-4bb8-472a-bc9c-5b5241007171", "sighting--63e3726e-08bf-4f99-92c9-038d599c1a7b", "sighting--ff00e355-5cbd-408b-b6f3-69fd6f66007b", "sighting--be5a6e58-1c4d-489b-a57e-2226b133fe49", "sighting--b1a4190e-e395-4be6-85b2-bd3cad6bdb35", "sighting--7dbeaa23-21ef-4143-8aca-b2a05bcee3c3", "sighting--4a1a6a3f-913e-4fca-8599-b45e0b1d57bb", "sighting--7878bd72-c29d-41c3-9dea-6508ee402326", "sighting--afad3ccc-d8bd-481a-ba88-b74b69ce50e1", "sighting--a278a766-b5e0-4085-917b-519e62997073", "sighting--24cb30cd-486f-4394-bc2e-579bc37cc3cc", "sighting--4112405b-a3c2-4464-8223-e8fba26d70aa", "sighting--1d542343-b28c-487f-9ae3-f56ad6c5cf1d", "sighting--715f0261-25c6-415a-983d-0acbc0d4994b", "sighting--a8dbe85a-058c-46ba-924b-c2b4f6dbd20b", "sighting--904d740c-5d25-4588-af13-7d5a473273ae", "sighting--816970cb-f12c-480d-9bab-823868b6c61e", "sighting--39d44a50-19d5-41a7-b9e8-714ae6af5e49", "sighting--690e3230-75e1-4b3e-bba5-c1691083a940", "sighting--0c4447da-d656-4095-837c-e5f67e7fb78e", "sighting--d5d0322b-857e-41bb-8472-41f2191eaca4", "sighting--f3b04da6-54d3-411e-ac77-ffcf7cafcef3", "sighting--a6a9bd64-8053-4183-acd8-03bcd3d4031e", "sighting--cdbb0374-8c35-4aec-8029-2de6d749184b", "sighting--b41edf81-36f2-48e2-8de1-f559d9106e55", "sighting--ae922676-cd96-45ad-b737-45e78c0b353c", "sighting--86175c26-5565-42f9-998f-2fc4b41509f9", "sighting--009a77e5-c0f7-4f4b-91a8-9b9ba3b46e41", "sighting--c91d2bac-1f5f-4c9c-a4ea-107ff07e0b1b", "sighting--4385ed95-ea64-4001-ad73-34575796e588", "sighting--8ce1ccf9-9b76-4e5e-90d8-0de3f6d60f3e", "sighting--0693fd23-b908-4dd7-a3e8-1ada1f6adfdb", "sighting--282d4bfc-52b1-4733-87d2-fa811631606b", "sighting--253cbe5e-cbb2-4a13-b714-bd6937bc3df5", "sighting--3897c851-7df5-4ee2-bd0a-a912e4b66c18", "sighting--13790da6-ec06-45ed-a89c-913713c35db7", "sighting--34ea1256-ca78-4f29-a3bf-9621dd9e21b6", "sighting--e47e46ab-b76b-4767-993c-2db6f1d9aaea", "sighting--be1d5bf6-2640-437e-b919-c4c0ffa8a609", "sighting--d0012e98-6c94-40f0-b880-34ef9dad87a8", "sighting--f2507da6-59e3-4889-a985-1c47963fa320", "sighting--8b2771dc-ee97-4743-a26a-eb9a4fa92506", "sighting--1325c580-a15b-4f8e-847a-a9c156624a20", "sighting--9bec4cba-d680-40e7-a87c-4d31ea551206", "sighting--cbdaf016-023f-47d7-8939-f6b5ab834e90", "sighting--14bd21cb-6fad-4f2a-9c8a-59ded0069b53", "sighting--d5db2092-093a-4b5e-b813-6d12689048a6", "sighting--33a3ba1b-efaf-4f4d-aadd-b9f19eefc1d3", "sighting--14782f21-99db-4a04-92b0-7df07b19c6fa", "sighting--2abea269-7243-49fb-8ec6-37248cc0aeaf", "sighting--48c001fa-5f90-4a49-be30-c1fe01308814", "sighting--ee28f3dc-a023-4211-9b1a-e0edf3bf7b04", "sighting--bb8cda0a-72b0-4dee-b7c7-f0b875abdf68", "sighting--c32fa07e-8018-4545-8cc3-53bc5eb049ce", "sighting--92119caa-85d5-40ed-ba68-d1896ab36a87", "sighting--c18346dc-6714-44e3-b678-a0cb566da682", "sighting--c03c9680-10ed-4f25-88d9-2ed008f42945", "sighting--b6b243de-9bf9-4c57-b722-fc974dbb25b3", "sighting--8a78f4f8-471c-4a07-ad64-69f65bfb9828", "sighting--5f3fc410-bcf2-4e6e-b8b6-b1169590df01", "sighting--3df399bf-266d-49db-b52b-af28011b35e9", "sighting--3c8e57a4-720c-4347-b627-e2e6e5b7f2d4", "sighting--12a470f5-55d7-447d-b5c8-3a73687635a3", "sighting--7a03d5c0-f1ce-48cf-9ef3-805dcaf9abd6", "sighting--9fb29e93-4837-4081-94de-1ddd49970061", "sighting--9953d70c-53b0-4f46-93ae-1e8cccad5b6c", "sighting--d9cc5b88-cbf7-4ea2-86c7-a8219ec2a588", "sighting--12304f13-7ea9-45fe-bd68-c987f317a338", "sighting--1e06c723-d10b-4eee-9652-f64d68545a64", "sighting--7cf9a74d-fe8c-41e3-b6c6-208a9f0242b7", "sighting--c61ccb6f-a01b-4ceb-b31e-6b95b901ab1a", "sighting--4c0e4290-326f-49f6-a57f-8937cd2b64c2", "sighting--9e630a43-ae1d-4e59-8b3b-291dd3af06cd", "sighting--2a209a20-fdf9-45bb-8ea4-1f80b6183013", "sighting--e326c375-3ce3-47b5-ba76-1d7aefeccdba", "sighting--54e83bc0-7e47-44ff-a9a6-d4e414d85e75", "sighting--da6597a6-d0bd-4bd7-84aa-b2219586e926", "sighting--510d3b8d-6c1e-448a-9fed-9e17ae18d70e", "sighting--0dbdb166-2157-4c1a-a3ac-7819f58a488a", "sighting--75308bf9-5572-4c14-ac7f-30209342aab6", "sighting--adb98e95-d42b-49d3-9531-373d19fdc70f", "sighting--1f99be42-152d-4ea8-aa64-2deb37d6f6c2", "sighting--59c5ccb8-dfb1-4fa0-86fd-5a8401611d86", "sighting--c24c2375-5d79-426a-a62f-6a4ced032f1c", "sighting--542c60e7-8d02-420e-8675-ab68db75f825", "sighting--bc7733f9-a8ed-45d8-af51-48cdfa90f12f", "sighting--d01e7086-1b65-4328-b3de-0d4fef4bf47d", "sighting--67f9835c-f5e2-42c9-a049-fab56e6d6858", "sighting--62be3cda-1a9f-4f76-a71f-8999b39da115", "sighting--2fe1fea1-afff-4c3b-8bad-dc6215dcbfdd", "sighting--ac9a9bdc-6488-4544-b695-3dc6a0e03b0c", "sighting--d8c4c5bc-ce2a-40a0-8640-dfbb7f52f97d", "sighting--bddd32dc-4398-40c3-b1a3-92fec87a2d64", "sighting--65214d30-0eee-4db4-867b-f3e0b8216967", "sighting--cbe4efc3-9a0b-4ec1-bacb-a167b030b044", "sighting--ab2f0238-d752-49ff-8d4e-a8a54313663e", "sighting--07de24d2-6d23-42a5-a79a-74e49f826408", "sighting--3da424cf-e8ec-4f53-9a7a-681b96ec70b4", "sighting--74cc02c0-9225-4b5d-b79b-8d650cfdd322", "sighting--bf3a0341-a361-4007-ab9e-4e818a8fb2d8", "sighting--25aa8a6d-f232-41a6-8683-19aec5207eab", "sighting--8b676017-6f4f-4cc7-b704-7ce06c640ef5", "sighting--6048d555-cc0b-4bd2-bb0b-3417bc1027e0", "sighting--8ca95eb0-521c-4fea-9c63-86a528b08762", "sighting--5d454fab-dd92-4ef0-a46f-29645058508a", "sighting--7b6320b7-c6f9-4894-8493-d956e1a6f6f4", "sighting--00b8d643-61de-4a49-b42a-8c50d631a252", "sighting--b96c6166-6b21-4ac1-907d-b5f8d1f7a906", "sighting--77c0e789-820f-47e8-8d64-8ec68f83064f", "sighting--b658f6b6-5a59-40c6-afda-4436c47ea1e8", "sighting--919ff9a7-babc-4163-a7f8-310ed04658bb", "sighting--93a5fbe3-668c-40ba-945b-08964c2f3691", "sighting--35c18c17-c0e0-416e-854c-66eef8e76e83", "sighting--0b48c2f9-ab2e-4245-be52-dc1eb3e512d3", "sighting--b6ac636b-7562-40d2-8e89-d51244716016", "sighting--ab76a82c-d6d4-4b62-90ea-e0bf5bfb0d7b", "sighting--75a660b7-bbf6-454d-b6c1-7d3705f3912b", "sighting--df68d3e6-d239-4e97-b158-0c69647bfd9e", "sighting--2713f20e-0d21-4d65-82e3-8712f8d4e152", "sighting--cc376350-ff32-464f-964d-91e010c3547d", "sighting--467ff1c9-efab-4926-889b-0e38b20aedc7", "sighting--1eaa64b5-454c-4afb-8aeb-9c9d912a1d76", "sighting--e4c3278e-d252-403b-9532-d4eda22c76a0", "sighting--e07f1a9c-45a0-45ae-ad29-1c870a1cb2a6", "sighting--c56fae29-3d84-418f-84e0-24d0f0e92b4b", "sighting--fd4d5878-7a73-41dc-adf9-11ba48c34d7c", "sighting--3781e1b5-c192-47c3-93ea-e7ad97c137d8", "sighting--c205e531-dddb-4f93-8e01-5b0da48f1a5e", "sighting--2a486160-5562-488d-82e2-3b63cf7eba8a", "sighting--0d0f8996-3f52-418a-ac17-f5f0d67f44d2", "sighting--7a9040b4-15a7-45e3-b408-09771e1acf3d", "sighting--7c7a5f52-01f4-4ef7-bc9e-243430a17e27", "sighting--707d6be7-3c1f-4dea-b6aa-cd185e870064", "sighting--e513f189-4f84-4e17-b572-f4b100115975", "sighting--6eedc4f4-3459-4913-9527-8b4d89b3eb9c", "sighting--59620d32-830d-4745-9d77-7c2ea2ad8c09", "sighting--b52a5528-01d1-4d7d-9f66-4e1b05c9be5e", "sighting--6fc42c34-0d4d-48b3-8c0e-98c6dd80d6e1", "sighting--cdb0209c-b23d-4a6e-846c-a414bb364803", "sighting--8453f15b-2738-415e-8ceb-55a9f4f6cc77", "sighting--00b272fe-761b-40ea-9479-54d10aaac495", "sighting--991928b1-93f3-45e3-970e-7fc6d2bd8f71", "sighting--f70f35a4-fd45-4755-b31a-8c5454ca2254", "sighting--6fdb71e7-6fa7-48f9-b044-eff232a3e95b", "sighting--f05504be-2d6d-4a80-a464-f5ce3a7660be", "sighting--d22c0e07-8e68-4b78-8a59-f5258bde3b9b", "sighting--64c6ae7c-262b-4866-b1d7-3778219d73e8", "sighting--76e40e32-d421-432e-b330-e6f131a19b2c", "sighting--ad001718-4926-4a20-829d-84c449ad9226", "sighting--80385e06-9065-4e90-862e-9ef538855c36", "sighting--a84f26e9-3817-4408-89d4-8f0a4acf2204", "sighting--15882983-1955-404c-93a5-3e89a186885a", "sighting--c6d9a970-f1f6-4f23-b317-db7f163ea437", "sighting--2efee6f3-1caf-4adc-a563-4765081b11a2", "sighting--ba0defab-d40d-49f1-a590-23281c3bcfcf", "sighting--371bcb82-2a84-4d34-9d24-47d468daac80", "sighting--5eeb4323-a32c-4955-ac47-098940820f36", "sighting--066eff9d-662a-426f-aee3-5c9aa7e45d5a", "sighting--1a856cfc-8e92-4441-b456-1e4b024b31c4", "sighting--99257628-5cd5-42dd-9941-7a9a6c26cf7c", "sighting--f961078b-c973-442e-8bd9-4c2d3a010da6", "sighting--38b5e7d1-6fb8-48c2-a16b-11ca573bb30f", "sighting--e25535e3-be9b-4e10-9ed6-498e61ccb232", "sighting--3057b4db-02ed-4a37-8157-f8b8a176e95d", "sighting--eb6b88b6-d492-4822-94a1-0846d0bc77c5", "sighting--380e80a8-6cd7-4c43-9358-174eb2d0cc06", "sighting--324985d6-229f-4f5d-8c8d-987f588f9e46", "sighting--1ab74b26-9a70-4ff7-af0c-c37a87833a32", "sighting--58d1f663-ce3d-4ba9-bf7a-357b447c4dbc", "sighting--fbacc78e-e9e6-481c-b2fc-1c9576d00e32", "sighting--6a2d6bf6-f243-4ff0-9c81-cc069487467f", "sighting--3b9c0380-33d9-46da-87f3-c52118ef5419", "sighting--313c5793-21a8-4b8d-8b68-99d45e98b138", "sighting--c3a323c2-1217-491b-8252-fc89399aa601", "sighting--75fdf446-ea9b-4236-a973-ca1bfa5e8ea0", "sighting--6f423308-5e50-4f33-9e18-ededa7dccb4e", "sighting--dfe5440b-0061-4604-bbc5-b47587dba953", "sighting--47a2e6fc-8687-442d-895f-7ae4c38cfefa", "sighting--08911fe9-36a8-4fb6-aa42-fb0df7be3acf", "sighting--1f65c67e-7c7f-4a70-a824-321be08da91c", "sighting--dfac5840-7900-4d14-b504-cbf041be553a", "sighting--9aab0819-61d5-4b97-88ae-8a1d59484432", "sighting--7c899d26-5b79-49d9-858b-5bb7bdaff1cc", "sighting--69024086-8ba4-413e-8ede-70a7d879cb93", "sighting--67a380dc-57cc-4568-9f99-5863a86d961e", "sighting--bd771416-66b1-4f8d-9f58-f4c07bad7944", "sighting--9481ab14-dc8f-4ae4-9a71-4d37c0afc316", "sighting--c9b0f9d9-c527-4124-8c0d-21b3f5a409a7", "sighting--f4500852-3eba-43bb-89a9-cac58694d05c", "sighting--a5488fea-b1e2-488c-aa6a-888ae0cc5c2f", "sighting--df0c094a-0595-475e-bbbd-d9293c36f7ba", "sighting--561b1c35-a6f7-4aab-98dc-c1ffdbcd7373", "sighting--d9223817-927c-43d5-b9fa-2d211ad8c8ad", "sighting--ee91314c-c45b-4fd6-abbf-b6d7a9cc237e", "sighting--54563360-6dfd-425e-bf41-4efdf03f0049", "sighting--e62f922d-befc-4b28-b954-1a8380e07fbd", "sighting--d4e1f2e5-98ef-465b-b507-547b3493d0ac", "sighting--91ca941d-3465-4b85-94a7-a63f47728f90", "sighting--d8646923-835f-43a1-8cc2-1491035c9abf", "sighting--1b2f14a0-b12a-464c-bd04-cb3294c0d72e", "sighting--1e5637e5-3046-4794-9784-a5d2d8b1e35d", "sighting--9079924a-a419-41a7-9239-1443b18b864e", "sighting--c284d537-96a9-4d46-8497-d3ff92f14301", "sighting--54c9060d-0861-479f-9f7e-ff6779852ada", "sighting--e27b055b-8c7c-40f3-9c6e-11f23099cfd4", "sighting--29b8bda6-4826-4c17-81e9-340dc702892c", "sighting--fdf05dba-d7a8-4e0d-860c-479f94d3f240", "sighting--041fd435-0a88-4565-9ee7-5cd418b4016e", "sighting--70456149-5f37-42f3-9a0f-c106e6fe4dce", "sighting--a943dd9e-15d8-44e1-939d-f0cc4b9cbb03", "sighting--9f009a00-c41a-4d90-92d8-8cfb878a3b2c", "sighting--d11c6356-81a7-4093-9e2e-d9ee57d8981d", "sighting--ce4b39df-729e-4047-998a-9b6ea934ad91", "sighting--9b242bd7-1243-4036-adee-18381613d43f", "sighting--a256153c-57ff-4f1f-b111-88a5be19dad7", "sighting--b169de73-768c-4ad2-abf8-add8acbb52ef", "sighting--546a4b55-55ec-4614-8c8e-b6d6c2f5b809", "sighting--9e75a6ac-520b-4960-bc29-0a2f0d88bdea", "sighting--e8e9b416-21a0-448b-86fb-2cf475c3ce48", "sighting--50116ba7-319b-433a-888e-d13a84d21f40", "sighting--fcb0f4ba-54f5-49ff-af4f-4880d136cf5c", "sighting--11daf5cb-40df-4d05-8acd-3381092ba1df", "sighting--ff58721c-73b9-4804-8fa7-92a2d5a48e77", "sighting--6a440927-7b63-411e-a44d-06f5d8d0c4c1", "sighting--55fc01b2-c7d6-43d7-a41f-07e3066ce2f4", "sighting--ef9347fb-5823-4e59-80ae-e120fce672e1", "sighting--7242e215-9935-44b4-bd0e-02dec2a24311", "sighting--0df8edf6-2d7f-45dc-8250-da2de3d7898b", "sighting--13098962-7d11-441f-bdd4-011ff67a486c", "sighting--2a094fbf-c927-4245-9c4e-5721987dbf4e", "sighting--47f880c5-dd4e-4e4e-9cd4-589c5babef95", "sighting--37baf67e-5d2a-426a-956a-630e5056d5e4", "sighting--17037461-cc60-4ae1-9200-3ea4cfea67ac", "sighting--f093a3c4-fd3b-400c-8d5f-f120c58812d7", "sighting--26216e05-c12a-418a-b476-d6ded6108f6a", "sighting--de6a236c-30d7-490a-84c0-63a8a26d9843", "sighting--a283c639-6c66-482d-901c-be1a642c7a29", "sighting--307e8dc7-b02c-4b4d-ac5e-2f7fdd01ebec", "sighting--0c34d99f-7562-49ff-bdaa-ff65de3e9c2c", "sighting--2e0db539-0a98-464c-91df-6f0ddc267297", "sighting--1d792945-4ac1-4b1f-8fe9-341d2b910397", "sighting--405e983f-17eb-45ed-ab13-34082f718c58", "sighting--6983ae32-be71-47c2-993d-4effb07602a5", "sighting--2f09d56a-b52b-486a-9d06-061638c37772", "sighting--41e0eae0-2dfe-49ed-8684-d6f18772bfe9", "sighting--dbbec026-41ee-4196-adc1-e2c338170af9", "sighting--b627a26e-fdcf-4cd6-b0ea-020cc1ea37bc", "sighting--c1b8e122-eb0e-45d1-8941-bf7023a8d664", "sighting--a1879645-4b20-43c1-9ac8-3184c5caf5a7", "sighting--28c147fc-2739-42af-8344-03fab42dbffc", "sighting--1b412c22-9c90-48bc-8fbe-1ec26d965296", "sighting--013207bb-18bb-47ae-a9d5-0fd0bf0ec04b", "sighting--034902e9-4e4a-42ad-aaa4-cb0dfd6ec7d6", "sighting--d007757f-e3f8-441e-9a16-121e64932c7d", "sighting--71c6e332-0b73-4c81-bf55-712736053dac", "sighting--8102633e-8e87-45f9-93c2-49355e36d557", "sighting--be57cefb-8ce6-4dbd-bb1c-1c21aad32110", "sighting--72f9ce25-43b2-4fcd-88e0-6eda12bfd4ec", "sighting--807f0592-8c66-4f2e-88d1-8da0d4576271", "sighting--3531f638-77de-478a-9e5e-12941c19c551", "sighting--591f91af-7160-4211-bd7d-645c706b6487", "sighting--0baf7ee6-ba2b-41fb-b31a-7bd6ddf546ea", "sighting--ae801877-a109-4ef8-a75c-ca3de90f268d", "sighting--fcd96df1-cc97-4c48-a78f-6660d0d1171e", "sighting--82997530-cbfa-4d82-a332-d12864d145d0", "sighting--3f475c94-344e-4239-b7a1-89a0147cb4f7", "sighting--28749d25-1c96-4b91-8bdf-90916bec21b1", "sighting--a6ae4927-556c-4136-b712-afb46f3316b0", "sighting--de70c14f-0fff-4551-b2e4-a0b57c4b1a78", "sighting--21ce044f-d43a-4846-a65f-f13e2bf0938a", "sighting--37fcd73e-55fd-46cb-9365-9ed5dbde39c7", "sighting--70826646-d451-47b5-a597-64bffc680c91", "sighting--e0cfd05c-e7f8-4115-bd0e-33416edaa5dd", "sighting--47a55ded-2d59-4a5e-a4b6-58612fcc2ac9", "sighting--66db2e5e-238e-4e30-b089-056ea644d93a", "sighting--21e9bdd1-1527-4b8f-9675-2cbdba70f68f", "sighting--f0654a4d-a169-4e42-83f7-c179f09e7e21", "sighting--76dd80dc-1093-4a65-ad0e-ed9a1730690e", "sighting--99f450af-0f21-4e32-8370-47463e0d6315", "sighting--e21780b4-e027-4544-8b0c-153659b9b408", "sighting--6d24f0c2-3485-40d9-9dde-190a9f42a2c9", "sighting--1c7e3a37-27d5-437c-9e18-2816e04f5407", "sighting--bcea1fb0-e3f0-42c5-8b37-84dfc4a08309", "sighting--e2cbf1a6-511c-4eb9-9640-de73b69fcb44", "sighting--0f9d540a-793e-4b26-953e-d298ef6c7092", "sighting--3ca28b2f-fe28-4547-abc1-92a75608a44c", "sighting--113303e6-2683-40cb-bcde-1932b2e32960", "sighting--ed5d73e8-0d08-4e22-9d6e-67c44664c891", "sighting--45533899-d76c-4d0b-810a-e5592a100fc7", "sighting--87af25fc-3832-4df4-8496-f840d3fc61b8", "sighting--993e9108-8269-4920-88f7-7a986db46096", "sighting--e97d2818-e3ff-4b42-972c-ba48c350d783", "sighting--bfc9216e-e26b-4c20-964e-550db99274a0", "sighting--97e5a762-f642-49a4-8c58-61bb3a242829", "sighting--37db172b-3908-41ef-85d6-5a2d1cbb6036", "sighting--7d115b41-e415-4af7-8fd4-d6bc33a40959", "sighting--c9707618-8215-4ddc-a84a-4a72f7c4533a", "sighting--3c011662-d81b-401a-a86d-bd5f34df3cb5", "sighting--c9306917-6a8c-4097-b000-f9a768eeb5e6", "sighting--c47b9aeb-7beb-4213-9d13-104e6e25a20b", "sighting--9bee7129-992f-4847-acad-9620869a5a1c", "sighting--77d55fa7-9946-497f-be47-868f473207f5", "sighting--c8deee71-815a-4dd7-ad0d-97ec5db2ae8d", "sighting--bc701fcd-2f36-4aa1-b4ef-a46802efd12f", "sighting--5c9cfb92-a189-41aa-982a-6f6bd899d4c2", "sighting--b18008df-f56c-481c-87d1-48a83eba118f", "sighting--d0218c0e-c2de-454a-b99c-a204cae4d1f6", "sighting--d1e441b8-d0c9-49f3-89a6-c4fc7669886e", "sighting--c320395e-1f25-4a4f-8e54-67236ec2e4c7", "sighting--cbd67e41-fad3-4548-80d7-ece37dea9f4e", "sighting--82a07f2a-c6f5-40a2-84d2-dbfe0b27b773", "sighting--de02c02f-155d-4f51-ab49-25c7a1976865", "sighting--1f767019-5b8b-4519-9fd3-3da004fae1c2", "sighting--75ac334e-8482-4f75-8b47-810e673983b8", "sighting--a1c0cd19-20de-4f51-86ba-3c500938c6d4", "sighting--ea7ac06d-32e2-47fc-ae63-b3eb9bc19ed8", "sighting--1f43387f-a2db-4cb1-8ec6-e6db4fd56f78", "sighting--5d115af4-751f-406a-8a49-375c489cb08e", "sighting--2b40ccc6-f3e0-4fb8-8a17-1b6f60bc5b94", "sighting--35ac0d12-82d1-48e7-b793-3bfa78c18868", "sighting--e8a8e468-46a6-4a2e-b2a8-5272f1a8af9a", "sighting--9a2fd75c-cbc7-438b-a6c5-478fab6d531f", "sighting--82aeec07-fffd-4a7b-bdc7-4bb94e943cb6", "sighting--5375ab8e-77d7-4f1b-a98a-15945055fd10", "sighting--2d943ebe-7439-4218-acbd-fd2a4c11c390", "sighting--c0a26616-0202-4512-a9d8-67bddb15fbb8", "sighting--cbbb0828-04f5-46cb-afea-7cf9c5cd4c67", "sighting--b25231aa-3bca-4dea-b62e-80d3b8bca520", "sighting--a75ffe0b-3459-4940-b0c1-b63c658ae0c0", "sighting--0541ed67-64a5-4f4f-b224-4336c984a867", "sighting--03b8b639-7df2-4a67-a204-e509067ebcc1", "sighting--78200819-3d19-4ab4-922d-6e5f1d9eeba4", "sighting--b28ad742-fe1f-402e-abbf-5e40c282aa82", "sighting--132b7669-8e57-4f38-9e4e-5bce4435fe91", "sighting--a3944c26-8ac8-4064-8a6a-1107c66ded62", "sighting--6d72a668-ae41-4e19-a2a8-085d8b08415a", "sighting--b0e8c819-7521-469e-a9d8-9d4dafd013cc", "sighting--f62722a2-6a75-4dc5-b56d-b436b7a85075", "sighting--eb6ce189-9e32-4754-9446-55fea70ed782", "sighting--8dcc84f0-3842-4d70-af3b-45194cc59a36", "sighting--7e66db6c-8789-422c-bea6-1d2571e0dcec", "sighting--f80c8b61-c3fa-4f9c-941e-ad52086fb20e", "sighting--b7f9c7ec-88c8-4191-9dd3-7431a1dbc4c7", "sighting--c197910f-e070-4ce4-b953-6cc598acb7ba", "sighting--e651daa6-da3d-4d6d-a880-e6b736cf72df", "sighting--5c697319-3986-4382-b288-80039b8e63a8", "sighting--7be46dec-c994-4c6c-80cf-38603db73453", "sighting--8bcef3d0-7b5e-47e9-846f-c9d2fc708701", "sighting--c217acfc-a506-465a-9951-3945f4320e58", "sighting--afcf796c-5d52-4dbc-82a6-5781e4337f0c", "sighting--d697e8b4-1afb-42dc-94fe-546dd804c054", "sighting--bf77fc2b-0b46-4cd2-8333-22b840cb1188", "sighting--dea61877-9cd7-447a-9f7e-139ec497466f", "sighting--b2b28ada-1d48-4a53-a1c3-5010c302e594", "sighting--0a38f6d8-7f17-4b74-841e-264950240e9b", "sighting--dd080a00-357b-4ebd-bb38-36a4e58695b1", "sighting--3f38fb44-a50c-4542-880d-e26de9e83c5c", "sighting--7fdc7a3c-a912-4cdc-ae9c-384fc09b706a", "sighting--3cac3e34-9b36-45c5-bfc7-2be76878fb3c", "sighting--2809443a-b07c-4565-be08-0b518345ffe1", "sighting--d07a8e51-113a-49ee-b61a-d6f95d259cc5", "sighting--d05f8fae-41e6-476e-80ef-59a676d3975b", "sighting--81cf1006-880e-4361-8cd5-6604418a8838", "sighting--01cb3fc8-ee12-42cf-89d8-0b3afb2a2d02", "sighting--abc1ebc3-4dfc-4105-abe6-78d2393867b5", "sighting--9a256bda-9367-4b12-9a9e-cc824175a94f", "sighting--3548f556-8731-4f88-a407-ccb8ae8ff243", "sighting--ec6ed284-ae82-4adb-87a8-301d2f3a7d17", "sighting--c504a013-c482-41c9-8188-b6803c287ddf", "sighting--cd9ae2ea-c7b6-4ca9-b419-590d130389ca", "sighting--5961e475-d8cb-4895-94b2-d54f0970d8b0", "sighting--2f5c9194-2116-4f11-a8e6-9c3a9ee35e0f", "sighting--38adf1fd-563b-4e82-9cf0-4735aaadda11", "sighting--65259379-eaa0-4de9-bf91-be5b4d0b6578", "sighting--833b7ba0-f249-4d75-9ffd-0e692535b180", "sighting--e207ad60-c39d-49c3-970b-12f9ce0cf89f", "sighting--fb46eebe-5e34-458c-8c42-e12821ed81a4", "sighting--5b2c8a21-95df-4797-b05d-1528e4ef5aa5", "sighting--2264c6a8-9f5a-4423-a422-10ae66ee31d9", "sighting--721596bf-d29f-4bf2-8376-f6199e0e02b0", "sighting--0647de47-3702-43ce-a022-f1958a36d2b5", "sighting--350e844a-078b-41d5-822a-71f5f472c4f0", "sighting--06933abb-5981-4f56-a6e0-6c1aed169f5a", "sighting--e335d02f-9b91-4eba-8243-cc980a59e6cb", "sighting--e626dd22-e8bf-4e41-b9f5-76f449f7e1a7", "sighting--be28e910-054b-4531-96ba-f8e14d1226c2", "sighting--54d66177-00db-4ee8-8c80-950d07f32b6c", "sighting--93d5c087-a4f2-41f2-a7da-bc1b2cba8c7a", "sighting--ce67e89b-0930-48e1-9bef-090d19e31c2c", "sighting--d4dab6e0-c15c-4151-9c86-d03ef78229fe", "sighting--c766c652-f19f-4ba4-b320-7cc618a950cd", "sighting--67443ed8-900d-44ea-8592-c725eb03d8c1", "sighting--7f620bf8-0a42-4f9e-8458-922a8f5f64cb", "sighting--dfc216cb-8b85-469d-a1ac-c3f5d3d97a4d", "sighting--457ea13d-d5cd-401a-a501-f6872e2e52e2", "sighting--d29e1cb2-bc41-4ae2-ae60-d7ef8292d66f", "sighting--7fae5361-9b82-4eea-932b-e3f4b9506366", "sighting--5227d5fb-3c98-4fc2-885b-45c06f76a52e", "sighting--b13491da-2162-4ab2-bb53-f722e698dc73", "sighting--c8299622-6810-4689-86da-b26a6bc7ff94", "sighting--826b1dc3-20ae-45a9-9409-f87ae60b91e0", "sighting--5efcb527-611b-4afe-ab83-c26a42f7d9c8", "sighting--1b01cce2-8c10-4f53-a3ef-8c5f5e4974df", "sighting--2bea47a3-0925-4297-bcbc-2750354eba16", "sighting--c8df4ec7-394b-481f-afe2-47957807e3a0", "sighting--2fd42c49-ba39-4271-b4a1-b6300533a862", "sighting--d5aef54c-7c57-4d4f-afeb-1e80cb457df2", "sighting--4a08bb14-e36f-4599-91d1-36e116d703d9", "sighting--d5bd7095-d8e5-4d0d-95f3-9dbdbe1ffaad", "sighting--7c5ef37d-442b-4a94-ab9c-944794ae513b", "sighting--a3b761e3-d961-44e9-912d-c0e1e77806a3", "sighting--766814d0-ac9b-451c-91a5-527b411f4d9b", "sighting--546f7353-e1cc-4e5f-8f71-ac0767004010", "sighting--e0c375ff-f50b-4574-8407-0e433f2959fb", "sighting--895ce335-ed16-4ca7-a233-d5c828a80cfb", "sighting--ac627899-e8ea-4d23-99b9-0b7092dee25b", "sighting--c01e7be0-5f26-43b4-b4eb-f0802f6120f7", "sighting--4701e120-27c3-4d29-9881-6b7ca8a1d9a0", "sighting--db6366fd-7ced-43aa-afdf-0c8ab8530e28", "sighting--ff2ec4f2-0be8-4873-b306-d3357e53ac04", "sighting--8818bd64-2117-44fa-b012-1c19da25fa1a", "sighting--6a286800-2a84-4bbc-9900-16244146776b", "sighting--cb766106-c23b-467b-9f16-4d42924b81a9", "sighting--6dfaff1f-da65-47de-8142-b3d917de12e7", "sighting--d6497e4f-15c9-4b5d-9473-de4aedfd054d", "sighting--928a32f2-b09e-4b1e-aa52-9c8d2ecb6e32", "sighting--38f25f7d-f645-4506-a160-e9c28d914760", "sighting--29ab176e-2c83-4503-b109-f4a239f76df4", "sighting--350a58ef-96ec-4c48-b68d-90a1689e3143", "sighting--cc6c33a4-78f2-4b46-b307-d3c1b38f4e48", "sighting--97286d77-7a97-4d4e-9e83-5b9d92a5e2cb", "sighting--d8b1c951-fffa-4e76-a346-9b8876b8b56f", "sighting--de14ed39-f89b-4436-a8d8-78d844333f7b", "sighting--542cd057-ab13-41e3-98bd-1797dcdc0dc0", "sighting--17cbd414-bf72-48b5-a575-10f743889365", "sighting--7c2cd641-8b0d-49f1-a282-15d9406b28a3", "sighting--d5ddc7bb-eecf-48c4-b9c8-56b91c9c33a9", "sighting--f623d2d3-0853-4049-8dfa-e469c57cb482", "sighting--4fa3c21c-d195-4fb4-b670-8e076a9c5024", "sighting--5e149542-443c-4244-87c0-b35804f511f8", "sighting--8db75be7-53e3-448e-948a-9b3d2afb0bb9", "sighting--c7b3a771-92b0-49cd-81da-00da2555fbe6", "sighting--aabe0c54-22db-443b-9063-0caaf66b34ad", "sighting--9706a050-73dc-4dbb-bd3d-e1f0b7633d67", "sighting--8990c30e-f8ef-4a70-ad0c-2df04caeb9e0", "sighting--2f74094c-5eb8-4990-ba9d-c36c3d478fb0", "sighting--8382d0cf-35d1-42c3-8d35-4d8ef135d662", "sighting--87b4fc0e-8b3f-41af-ae8d-ca5b85f1e10e", "sighting--19f94de6-165f-4860-8d44-506014b51a13", "sighting--ac060b6e-14e1-4801-8af0-eea8e9b6609d", "sighting--c866b6c1-8acb-49d2-a633-23c9d0c5cd62", "sighting--017083a0-c474-404e-b63b-0256fbb8937c", "sighting--6d942e30-41de-4cd8-9eec-09df36abff2a", "sighting--b76fb3d9-a8b1-4708-b781-ad4b84d34d9b", "sighting--ba86cf9e-f40f-48e6-a4cb-ed4c6239feca", "sighting--f2f5efc9-e603-4ccf-b960-6ea2f667371f", "sighting--c42ffbb2-7ca4-4341-b05d-d27c5ab94bdf", "sighting--03eeea82-a5cc-48cb-8428-5f9550c8a775", "sighting--59fc9569-6b94-4133-9033-b933ce20dc16", "sighting--9be5dc0b-63d9-45ca-8aa0-e7754dd90c24", "sighting--9e101e42-cd16-4024-bd5b-a9f7a79b041a", "sighting--201ed33f-5715-4695-8c56-35b4dad8f818", "sighting--d0af8573-a895-49bb-881e-eed03b320a46", "sighting--ab2bbf87-4324-40b8-9008-749c70dabfc8", "sighting--4e1430a9-2bed-4cc2-8daf-9b550913845c", "sighting--3ea6fd4a-8b9d-4c53-979a-7fbcb729e3be", "sighting--cf20d63c-b560-46de-ba87-8e231974969b", "sighting--b49d850d-1acb-4fa7-9508-0344b68a8933", "sighting--16462474-2e94-4373-b7ae-58cf76c7476d", "sighting--bc2f33e6-0774-4fc5-9dac-863841173e1e", "sighting--bfbb8604-cd14-4ade-8f5d-a7c285ec3ccd", "sighting--10774bb2-23a1-4532-b25b-05d4f882b91c", "sighting--5f693060-6bb9-4e86-bd73-166aa8be3c22", "sighting--1199b5d8-10d3-43f1-a3f1-484e71d6f915", "sighting--49cff788-b921-42a0-867b-2c5feec29ecd", "sighting--05592379-bd8f-421f-a47a-1c65ba1a00d4", "sighting--2b6cb973-8cc6-447b-a87b-492269875023", "sighting--e34ca572-de36-4b17-bf6c-7b893afd19b3", "sighting--e71113dc-588c-4305-95e4-04a74d058b15", "sighting--5949faea-0c7e-4b8b-9c34-b953cd8629f6", "sighting--fe2634ff-d7c3-4211-8327-816b584124ad", "sighting--edcfd7d2-2bbd-4080-9641-b3d4b47d1d2e", "sighting--cdcdd036-59fe-4b80-abc3-074695ddbeb8", "sighting--bd807db7-74b1-4d27-8cc0-b31f30f6f05d", "sighting--13c59994-2867-4fb9-b213-28fd54da0dfc", "sighting--c386e60a-6fd9-40fa-9785-1034439dade3", "sighting--3cf80010-f1d5-4bf2-8123-d2e1ed651cff", "sighting--1ac0a49a-f301-4bbe-b4f9-4c5fef99780a", "sighting--00e91da2-498e-4b24-80ba-a9e7315fc464", "sighting--0607e8f6-d23c-47b9-b216-f86c35608faa", "sighting--92a86964-132d-42bf-9310-b01ade08d33e", "sighting--23a59cdb-8cda-4529-805f-1fca54161994", "sighting--064379d5-8391-47fc-99f2-5cb86d91ecc6", "sighting--739acd6d-abcd-4be5-8d9f-fc34950b5a6f", "sighting--cbd4a0cc-b0a4-4c6e-aa4f-3230b6ce5ba5", "sighting--6a3b1929-c19e-43ef-b47e-d9a8ddd4689c", "sighting--522d0f57-3c06-4540-832d-1acb7f350b94", "sighting--837e35c3-12ed-47bb-abc9-57ea20bfc560", "sighting--a673b3c9-1057-476c-a3d1-768e867ee3e8", "sighting--841d99d6-91cf-4ede-82f1-bdd7a68e7373", "sighting--74fd6ab1-b6c4-4265-bbd7-d9f78a35eaec", "sighting--51199f39-d3b8-4eba-bb11-5205caf4d141", "sighting--4b725427-206d-495c-bbee-2971dd5ccb6b", "sighting--0037473b-b66c-4e16-9487-16f0e9fe67c1", "sighting--42e4ea08-9a4c-4df5-8caa-fccb5bd074d3", "sighting--8b80a12d-7dba-4fb8-93f3-67b38c7da4f0", "sighting--38c41027-346b-4e11-b391-506e3ac72780", "sighting--917da4a6-d0d4-40a4-a9ac-5d4233993c1e", "sighting--8ed3dbfc-358d-4d6f-882f-f318b07dce8d", "sighting--5f5336ee-e412-4275-a6b8-1fdd8325c27c", "sighting--eb841f8f-8e48-4f06-ad8a-95799188c62c", "sighting--431d94d4-7f0e-4a8d-94fe-83cb3ba8cd42", "sighting--e6c22d4a-189a-4807-a5b2-713109b01e7e", "sighting--71d701ba-d488-4b2a-8936-85442514c560", "sighting--d9a23c63-91bd-47eb-95fa-96e444c962f1", "sighting--27585820-a258-4178-9a3d-e3ab7e00dbbe", "sighting--caa9a488-99fe-4dc7-bf82-07890569f844", "sighting--c407e2ce-b1ec-4500-a060-0b83fe2a1d06", "sighting--dc768168-ab84-4d08-b569-775b3651c99f", "sighting--f779f881-7667-4bbf-ab70-202e3a5ec84b", "sighting--87fc0904-e5e9-4c3c-9a71-41e77ec4eb74", "sighting--4d7fea32-6a43-4f04-b4af-91aab84b2ab1", "sighting--317e2f26-68ce-4735-b7c8-c9e8c100d91a", "sighting--7050894d-1d85-4b4b-8407-90001c3de949", "sighting--aeb8258a-c20c-4ecc-8497-95d340d50e02", "sighting--d1ec23e3-f8c5-4b38-8fa9-9ad69ef71079", "sighting--549843cb-f213-4b8a-a518-51b78dde5fb1", "sighting--76561d0f-c503-4ea1-935d-63d3f7ea504e", "sighting--6b55d989-920c-419b-bb59-06f96102263c", "sighting--3389166b-f57a-4069-9eb6-73603e0c03a0", "sighting--a76d5049-c40d-4b05-849a-fa19dedf3d7f", "sighting--8461116b-1ae3-4e34-be3b-4b7e01f3cb83", "sighting--ba95b70d-22d8-44a6-97bc-43b5e128a9a1", "sighting--30789145-6709-4257-b67c-f3f7e3ad0726", "sighting--d551f582-8dc2-4f44-8358-ff64c0d0c947", "sighting--b6b48abf-d5d8-4ccf-88a6-ff9de0616236", "sighting--af55e7bc-7c42-49cf-aac7-a2c04c519873", "sighting--001155dd-c97a-4fb3-88b8-86917a8c50a2", "sighting--0e61b67f-8436-415b-98d7-c3a191748769", "sighting--cb5bb11b-9e72-4317-8289-039a39f7c80a", "sighting--09d675d2-ec8d-46c2-ac06-de5fa9bb5fcd", "sighting--ab72144a-f1d0-4245-91ac-09da6d6a6209", "sighting--8d0bf7ff-4d11-4cdf-a681-dfd4226c548f", "sighting--f72b6e10-c846-4795-a90a-29545c4db552", "sighting--a33f1efd-165b-4a82-afff-d37f477102ed", "sighting--7dc2ebf8-7636-43ca-b6c4-a62aed933a22", "sighting--9da09f39-23bf-4483-af9f-a20b3ab02de2", "sighting--621a3424-72d7-4403-83f6-e849f845af3c", "sighting--cf515159-7c79-4c4d-8473-4b262fab650b", "sighting--a8506a03-cb26-4673-9a89-6d2f74a519b1", "sighting--a36cf5ab-1ccc-4388-8f56-4d1c1bf8c58e", "sighting--c1cf0ad4-1a42-499c-a587-cb4cd3478f01", "sighting--e8e7d9cd-ba14-4424-80c5-c2fc87bc2c35", "sighting--d2aa7e08-af9d-4c6c-b431-2bd12e033ad4", "sighting--25d138c2-1bde-402d-a780-0f987f335fd5", "sighting--a9f8d71e-01f0-49f5-8b56-d8a210790c49", "sighting--72f22ce9-632b-4075-8dfc-31851d34e2f2", "sighting--19ed85fe-9a37-4da5-b43d-05a8bb398718", "sighting--2c8ec2f1-b9f1-47e1-b761-65c4b6ded9e0", "sighting--646acfc0-230f-4c0b-8c3c-ff88c887ce10", "sighting--495c540e-daa8-4954-ac4e-14d6c706f348", "sighting--b29ac89b-d388-4e65-a5ae-ab0374ebe7c6", "sighting--45e84488-e35c-4e63-a804-fb6f24b234f0", "sighting--0023bd9e-6b9b-4504-b800-f5f48e1869a7", "sighting--29161b08-d0d8-446e-aafa-b34d1b7594ce", "sighting--8ce71eaa-db1e-4b0e-a214-cd8c473c4fe8", "sighting--078ee79e-6f0f-4e14-9c93-01c29ff904c5", "sighting--ad14515c-2a6e-4d91-a64c-d54f0638420c", "sighting--8540458a-6e89-48b7-8d59-bc5432642178", "sighting--1fd958c0-e0cf-4bac-a3dc-3e66905ba514", "sighting--2815e5e1-f598-4a4c-bd7f-8a6b8bbc3e0b", "sighting--a5901f9f-aa27-4a01-b104-eb9b4b4d3592", "sighting--099471e9-9356-40f3-8bcc-e5b70c513084", "sighting--c8a3ca24-2716-4859-aa7d-9e5653951a0e", "sighting--5c9ec4eb-ab93-4944-aacb-ac15ffe15086", "sighting--4bcfeeae-2eb5-4cc0-b1c8-b725bb983fb0", "sighting--35431a61-422a-40a4-8c2f-46d601089644", "sighting--7f06c9a9-2aef-4a19-9831-9e585dfaefd7", "sighting--4ad75e2e-6835-484a-9c9b-f83a461826c9", "sighting--f742b995-83a4-4ca7-b6d2-650d0dba5a9a", "sighting--eb634d06-5ee6-47eb-a6bf-629eb1f59275", "sighting--4d000469-d8fa-4f0b-a956-9df98e57f8c0", "sighting--c35e808d-502f-4740-a12a-189b90c5315e", "sighting--9608b732-cda1-4788-80b2-7f4524b06878", "sighting--7814438c-ceab-4a5e-81db-ed2d08ce9bbf", "sighting--eaf62daa-ba55-4379-8d24-1fd6953a3a03", "sighting--acf42891-b058-4f8f-8a25-94dd62f891a8", "sighting--6699b16a-b303-4aea-8dd7-fc0847cd7f34", "sighting--d2902996-ceec-4c34-926f-681216323ccf", "sighting--b619fe5f-a7a5-4e99-bb2e-d8ca6c0c2ae8", "sighting--78fe6b6e-713d-4103-a467-69fc03a90ba3", "sighting--750043e3-fd80-48a0-9dc5-05f0d7eff387", "sighting--14a74e97-edaa-4d5d-8b6b-c49a6dc2c620", "sighting--4097b9a7-d045-4153-9c65-c71d29e76b87", "sighting--c33325fc-9901-4129-ad58-4795da0beecc", "sighting--8ecc179f-d8e0-4456-9138-e2001b1002e0", "sighting--fa7dc312-7dfd-44d6-96ca-29654db94d9c", "sighting--7e60eb06-d725-4903-8a35-ac5ce8982a77", "sighting--cb1fac2c-a2b8-4805-9e93-8cdd1e321ae6", "sighting--4c930da5-6289-4bf7-b0cd-02ac91d0955e", "sighting--21530c0f-511a-42b1-bdc1-a9ba59b28ac4", "sighting--37e44061-70c6-4324-8c74-6fe721c39fce", "sighting--8b9c1ae4-c631-4e0d-94c9-9a676c021a2b", "sighting--18e24b50-3b00-4212-86cf-68ae6ca82f10", "sighting--9e3227e9-9c73-4022-9708-127af0b8c775", "sighting--db2e694d-03e6-46b1-b20e-ce3213172be7", "sighting--167d9fb4-fa0f-4ee8-8349-518daf099983", "sighting--d2df7722-a3f1-49d0-b9d3-66188372524a", "sighting--afd6dd47-60b9-4430-81fd-7a2f2b5549e1", "sighting--36257a95-19e7-4897-a6c9-f517e9bf1e51", "sighting--b2ca4dbb-6a6c-4593-ac47-d2e8ec450bb7", "sighting--bb23db2d-1e3a-4cb0-884d-8ffc58238464", "sighting--0160cd40-41b2-4841-a3c5-6ea52312f90a", "sighting--18374b62-46c5-4302-b6ab-abf6b15baf30", "sighting--54498ded-4236-4e31-8316-7a85da8b3f59", "sighting--818eff18-3a57-4a6d-b58d-e93c5dd1cc06", "sighting--0dcfdca3-0ebe-4959-998e-3911f2a322e6", "sighting--10874e53-e4f0-4b2b-a090-448b149af54b", "sighting--6235b336-5b9c-4b0a-902c-c21c1e4c8878", "sighting--b412edc2-133a-44f5-8985-7d9700c33c3f", "sighting--ccd8cc92-573d-4519-9de8-128c597d10fb", "sighting--fd0c5ebb-0621-4e12-8304-a87c0b3af2ca", "sighting--a7a8d4cb-edc7-4916-9993-877cd45da3e7", "sighting--ef653767-4ddc-469e-bf74-1322d3ff4aa2", "sighting--d0222cbf-1757-4415-810c-d17a6f2c052f", "sighting--1fb2bb7c-8687-4e37-b58f-85026c1ab8b8", "sighting--5cb76fc4-04b5-47ce-90ae-d862b8da16ac", "sighting--ba8cf7be-2849-44db-96d3-b5f0acbeb1bb", "sighting--67ca66e8-dcdc-4df9-b04b-900edfd77d5a", "sighting--6ee791f9-810a-4f44-8952-13196de74ed1", "sighting--7f085e22-6ad4-43f9-8a24-7514a4e66082", "sighting--7dddf714-f298-4b55-8585-ae16791ec73b", "sighting--c2091e91-6ca9-4001-bab1-c22a3418aeb6", "sighting--427adb22-0581-43f0-b247-cf505effb1ef", "sighting--19d068a8-e3bb-4afc-ba60-3a39730b4090", "sighting--3360affc-267d-4b46-9036-ad6e74d02efb", "sighting--37bb929e-37d3-401d-8018-5e200ffcaef6", "sighting--5c7f9dc7-f0a1-484c-b735-6bb91c7bbb61", "sighting--e1e52f63-f187-4110-a23b-d5cd5d843784", "sighting--3de3885a-1be3-42c1-b233-780f2077d82e", "sighting--77526dad-fe86-4c38-971f-ad988815878f", "sighting--58a94f1e-ca4f-4560-8b5a-f893ea7c27ab", "sighting--96811e62-a325-421a-bca2-ec1d94a49e0b", "sighting--4ae99356-b0f5-498a-970d-c9529876cfcf", "sighting--1ff4391f-1ec6-4f7c-8eb8-726a575da435", "sighting--cde4112d-a271-42f3-af6d-91f68d889962", "sighting--1d0beacc-17c4-4ec8-9b93-40675c6dcde3", "sighting--0a095456-20d9-47b1-8fae-281a553c5cae", "sighting--81483f9a-6362-47cd-b10a-b8177469e41d", "sighting--82392405-99ce-4cfc-a274-3b49f2f393f8", "sighting--f216ccdf-d048-448b-a22a-f51bf3165385", "sighting--cba78983-0863-466e-8f39-2060a692887d", "sighting--c84860f7-a48d-4942-98c3-74b89e79e95e", "sighting--a3f469aa-ece5-44f2-a6f2-073b911dbbeb", "sighting--02b515cb-3c30-4313-95ed-c737c4955b4b", "sighting--e207edda-f882-40c3-967f-84f8c5968a1b", "sighting--10e1f7d9-88a3-4770-85f2-d18a77e5d0ee", "sighting--677e7fdd-6fd3-40d7-b4d5-fb908506d07a", "sighting--51cac60c-9533-4820-91a7-3b23d5a25e8d", "sighting--2daceab3-a96c-40ea-9425-e20320fb509a", "sighting--9ab661c0-4738-470c-b2a3-dfe2e4117c03", "sighting--24bc03e1-9b5b-4854-91c8-ea1bac60e2f6", "sighting--68e89a63-823e-45e0-aeab-1ab3b5096b0b", "sighting--455ab50b-3bf1-469d-9efb-ec70a4a045c2", "sighting--e09fc2b5-a2ae-4872-87c9-9df209a6ed17", "sighting--8b8cef44-d8ba-4356-8597-6e9862bfe7c4", "sighting--70a12281-e93e-4e42-af45-dcb0db3c1f87", "sighting--15fc9ee8-d813-414a-887c-1ea0dff315c3", "sighting--1ad079ac-6f99-4cb8-9e84-0edeb0fb02f2", "sighting--3008262a-945f-49c9-95cf-88999c1c70e7", "sighting--461667e4-7b6c-4331-a240-9e3b6de70d8b", "sighting--acaf6530-4417-4ce0-a7ae-0ec2043a3aee", "sighting--7a084baf-9831-4758-aeec-939c437800ec", "sighting--d9f64a7b-c178-4b1e-8c02-5a61c4986126", "sighting--6539aad4-1976-482d-9357-f9985ab43ccf", "sighting--eda17443-d257-41cd-9714-6aa35763584f", "sighting--ea8d015c-f33a-4e0f-a5bf-9123707fd357", "sighting--4c02da67-dae6-42ae-986d-39c488562289", "sighting--9be3e8db-e825-445e-ae63-d5432ab5851a", "sighting--a6755744-b4ee-4f58-96fa-a774e61a0949", "sighting--df6506ab-7523-4fe2-9541-81df1a9f2515", "sighting--bb36aabe-5fa2-4abf-8736-cd7a2797f0de", "sighting--18af06c6-58ca-44c5-9563-9c41c22ba3bb", "sighting--e44c00bb-4773-4fcc-ac34-68c3302af4b0", "sighting--3e72f6ff-ed1b-44ff-8b2b-34859421769c", "sighting--fb5fcdfe-ffc1-49dc-bb2d-d9932b1ec010", "sighting--5a0fc7ce-b077-4069-b8aa-957f8f170ff6", "sighting--7b19c0fb-5012-44a8-84a0-f2a838f619c6", "sighting--d0af9dca-b1f1-4377-b241-131ef6eeb9dd", "sighting--e30fa58c-2d53-4cb2-b2a7-33072b5f316a", "sighting--db9dee7c-38fa-47a6-8512-131b928962a3", "sighting--d90fb2ea-6208-47e2-a5f5-cfb807f451b7", "sighting--9bd021d7-2699-40d1-a63a-fbee1105a651", "sighting--52f12c75-1289-4987-84d8-cbd259719364", "sighting--dc4683fa-afeb-4315-86d0-ec2f9f458969", "sighting--caca6895-cf1e-4897-8576-36f3ff8ab6c1", "sighting--7c4a223d-aef7-4acc-921c-8ba5d977ce13", "sighting--79fa2035-0825-4420-b96f-d31015ef1066", "sighting--e55ba89e-c0c0-4b12-bc9c-ab4ce23054fc", "sighting--047a2cd4-585a-48cd-8d44-0ee4dcd94d21", "sighting--89baa5ec-4de2-4083-a7df-5950e3d73222", "sighting--271b9eb3-0843-496d-9ff4-9054bf7df8ae", "sighting--4f203be7-915a-443c-8769-740c732f6732", "sighting--edc850e4-3fd9-47c1-885c-78276f86ed72", "sighting--8e844b36-04de-4834-9a97-b3354d3ac2cb", "sighting--9875b564-082b-4c9d-8abf-8a4f92064674", "sighting--828c656d-3aa0-408d-be0d-192a22d86250", "sighting--3a65d62e-4b17-4d0d-a3f6-96df302826aa", "sighting--cb1008ca-98ef-444f-ad5c-d7b2032290dd", "sighting--b78ebd3c-8dfa-4ac7-ba00-59d3966650f9", "sighting--39305f72-d5c4-4ea2-a550-49783c4fdaac", "sighting--83e99518-fb64-47fa-bf50-2b1bfc26c272", "sighting--af7f6759-4500-4e0d-bd43-c77686b40865", "sighting--2dbec89c-e65e-4b25-a47e-dcdbdfbf271a", "sighting--41913729-3006-4278-b4a8-2e29ce79682d", "sighting--426647b1-8c9e-4dfd-bb3d-98252a5da0ab", "sighting--0d10bfcf-2ef9-4453-9e49-b98e6fd65aa4", "sighting--099af948-e450-470c-a0b4-767cbc7751db", "sighting--765a4f9f-1a66-4f77-98da-cfc270897b98", "sighting--78befc47-c7d8-4887-a564-103e759dce18", "sighting--9531dd76-2d3b-4801-8ec2-25f84490df36", "sighting--9d6a525e-0262-4e94-82e3-779a5d481cb9", "sighting--aa221673-edff-447a-883c-7f45488a5ef2", "sighting--fb16aa01-4b59-4d67-bf75-4751b37631ed", "sighting--e8cfdbf8-2c07-4edb-98e8-ebc5fde56672", "sighting--e81b92c7-0770-4b14-8e6d-fefcaf54ada3", "sighting--04fb5dec-af74-463a-a292-980d3c7a5e8a", "sighting--fd7b34bf-e352-4469-adbc-76feeabb33db", "sighting--ca8e11e2-4c0c-420e-bd6d-46e386469f7d", "sighting--7260cc9d-e10f-4e4c-ad51-4b02615d47f5", "sighting--7e507db8-fdb3-45e2-8ce0-70589ca42dca", "sighting--82b39784-edc6-4a82-969e-b63e99cb0ff0", "sighting--f9c418d4-4ccd-43a0-8883-b7220f4249c2", "sighting--73be8745-3140-4010-bd93-a9688ec147cf", "sighting--18eb6c51-3114-406c-b1af-aa7b4cb5dd6e", "sighting--4820372b-4a66-4c4e-9927-eb184e48fe75", "sighting--7ae1c62d-0497-455f-bb7e-a9dff261ba65", "sighting--99f70274-3770-45bc-807e-ed9d73c1aa7a", "sighting--e942e009-3537-4f7f-a229-3f23384b59cd", "sighting--93eca0c7-d42b-4e8e-af19-0b8220a53338", "sighting--b60bb6b1-5f00-4524-b435-64ec3907b451", "sighting--1f7de0e7-420f-4ad8-b0f4-7e2c3114ec57", "sighting--8b483b63-79c0-4af3-a456-ff36548ce7e9", "sighting--9655502e-7a70-4a37-a323-8bab2e394741", "sighting--4c192677-da60-47b8-ac85-970cfe4ef6e2", "sighting--d3506ebc-acbd-4921-8c38-fa5a6bfec4b5", "sighting--1f9d70d3-42eb-419f-8095-269952304b27", "sighting--bb0e3369-af70-4faa-8d74-9e19923e29d2", "sighting--43640d9d-db2f-4ba9-9a53-4d5c441d9f31", "sighting--7d874a61-4119-4001-b29d-e57a1dd41e2e", "sighting--71c22174-7d0c-42e4-95d9-88824a7dc0ec", "sighting--50e1481f-25db-4e32-97fd-e5b8474c6351", "sighting--5a4c0f4a-f1c5-4948-ab2b-3258d3ba6bca", "sighting--9c671533-28b4-4302-8e41-54865e102016", "sighting--d3c3df68-47ee-49d9-a990-801f5497b7d7", "sighting--42a36166-1fbd-400a-9e50-46d7c3afe947", "sighting--3206bfe7-ce81-494d-bdbd-d74312a43f33", "sighting--e5af3d46-914d-4fc5-80ce-372f900024ad", "sighting--ee4e2025-5aaf-40e7-8031-a1b037d92750", "sighting--8f0f511d-da98-47d3-8d1e-2dc1c49a41d0", "sighting--6eca99b5-0892-4263-b39a-381d901f2de1", "sighting--ccdc5003-3f6e-4c22-9213-8e0e75126200", "sighting--ec36bd5a-e2bc-4c8c-8252-05a9c5564c0b", "sighting--c630d55f-c384-4cd4-a49a-a153d5abde37", "sighting--bcd6c3b1-1bfc-47af-ba53-3c41930c8968", "sighting--aa263801-c40c-43aa-b9c1-e0b73b64ac0f", "sighting--6c39e104-6439-4846-8596-6fb5b08775d2", "sighting--afe4385e-f5c9-4a9d-bb57-d3eaeced892d", "sighting--ab086a0c-0dfd-40ea-87c0-f1d6eb67b9d0", "sighting--04e854e5-969c-4037-ac08-85de5d1b7f81", "sighting--eb0ef5a4-7957-4f54-9c22-44ce79576b25", "sighting--828f52d5-1b25-4f0b-820a-0d0ad99ce6ab", "sighting--bb0b8df5-dda3-422c-86af-fb26649f0369", "sighting--750ab399-2c54-4f7a-a1cb-027be8cdc5b3", "sighting--ad6a19be-b639-41dc-a01f-ace097b1dcde", "sighting--2beded6d-7a74-4e51-986a-4954765be1f3", "sighting--d4f7d0d9-8380-4a25-bca5-af4a72719e74", "sighting--2d1da078-1a06-42e8-b18a-9d6b3e817b7f", "sighting--ca092d1f-b327-4998-8002-fcd5c40ae933", "sighting--2f860422-78ec-47f4-bea0-2e33e89bff3e", "sighting--04aa5be5-632d-47ba-93d6-cf9e590adb49", "sighting--978b81fb-3928-484a-bfb3-ee8abacde79e", "sighting--be431f0e-2b58-45a4-9300-3ce986dd962b", "sighting--0105145a-4f7a-43d0-b1ca-c7cbd6da7ce0", "sighting--c9351373-1dc7-4ea9-8af9-8e1c91425e8d", "sighting--7d29ae7a-554b-4b56-904c-df20a325b05f", "sighting--dd6f5f56-236c-4673-a967-849c3ed8d3b1", "sighting--e06021b2-0f90-4c9c-b950-00ad257b9e77", "sighting--0e8d0ef4-d803-4887-b10e-fcd3d163a8f4", "sighting--0e90292a-76b0-4a50-b1c1-4d78e9f7e986", "sighting--a09de6b4-9d58-45bc-ae82-08783e4513de", "sighting--3bb83c99-2ec5-41fd-bcd7-31f3187dc18e", "sighting--180405cf-7858-4716-a2f4-6c1173675f34", "sighting--cf7add3e-71b1-48df-a633-cec4d540485d", "sighting--b4960ff7-464b-4605-8637-5008a441bd37", "sighting--a165ef15-9704-4e9f-a8a4-bfbfd76d2f5d", "sighting--9bf37ca8-30a5-4ee2-9217-ef63e35f5cb7", "sighting--f39bbb14-5eec-4d96-85f5-71ed84b64853", "sighting--2d3dfb28-166c-4e14-b689-daf3c5fca51e", "sighting--a468da1c-a205-451e-94b2-4f8c9763053a", "sighting--70107435-20fa-4d3d-891e-247a7c8896bd", "sighting--a713da4c-29f4-4862-ab02-2c770ba2f9fd", "sighting--55f83154-0e79-4f91-bd5e-5c79bd7e3854", "sighting--9a6ec68b-f725-4723-9e4c-f16ca6ee6b0f", "sighting--8e246645-1f4f-4506-a7b0-19cbf2b4be06", "sighting--5bb05967-a66b-46c1-a7be-546b560ebe62", "sighting--fe3a9f3a-9cce-4c5c-b11d-528054a53a26", "sighting--d11ab85b-ca2d-426a-b836-67962028f56e", "sighting--76fafa83-026f-4572-92d2-f2025a160232", "sighting--63087fda-182b-4073-a827-ee178f1f1ae5", "sighting--adf30c9c-a733-4b21-8095-a2070b01b843", "sighting--d9704bee-8264-48f6-bdc2-9510b434d15e", "sighting--ab3f47dc-26f8-49e8-b235-9820be1876b2", "sighting--7f87c0e1-b777-4dea-be6d-5dd43d77113e", "sighting--9f7ea0aa-5500-4b71-b76b-c878520b430f", "sighting--ca8db8f9-773f-4e48-89c9-74938749029e", "sighting--d20923b3-8681-4f1a-898a-f1429ee0a340", "sighting--dddf3a0e-a4d1-4892-8a4f-7a3501be00f8", "sighting--1c226cc7-2712-4ef5-9d9c-1a5b0bb70979", "sighting--a53ebf30-ada0-4685-84ac-9a2731436a84", "sighting--07b3cc8c-9d21-434f-91af-1bfbf50d6c36", "sighting--3ae70bee-1609-41f1-adfe-459e9e8b49a8", "sighting--7e84039b-857f-47af-8f20-1418e7081d1f", "sighting--9e7db3f3-1d40-4077-9f66-0406aa360981", "sighting--d68765db-1acf-47ed-a0c1-52fa37258e0d", "sighting--a884be3d-a283-4d61-a493-5550b9c51fc7", "sighting--69c2429d-b153-4ea8-99f8-35d3ac3e7e4d", "sighting--46549206-82dc-41ca-8287-cfe84250cc8a", "sighting--9b6cc376-8d9c-464d-86f7-7bfb3281d2ec", "sighting--0aa3dcb9-7538-49aa-922c-9deea16dda3f", "sighting--170eaddc-38f1-4650-9cfc-e0a8c4806a9d", "sighting--8c65ac98-4402-4d1f-93e5-d569f2216d34", "sighting--344c5b2f-5fff-48c8-bec0-9de3999fe58c", "sighting--30095208-afb1-4842-b253-e00d4d81293b", "sighting--5c7f7cae-d7bf-4238-be94-82f37db892fe", "sighting--0622581d-4a8a-41c9-a393-4f5954f6141a", "sighting--6e24c03a-e557-4584-82aa-3cbd13df350d", "sighting--1717972a-6f9f-4c1f-aa07-707c34caec52", "sighting--ccf87037-399b-405d-a2e0-4c4d624bf99e", "sighting--97d4c739-48d6-4937-ab33-aaafb4fd4d0d", "sighting--87b7d23d-b605-457e-a37b-d5547f970bc9", "sighting--3c94715d-cead-4af8-b94f-a3faefeb84c6", "sighting--c18a6447-e504-40d9-8b4e-831dea1a663a", "sighting--47c2975e-3db1-408a-b7ec-a2cc8877dda1", "sighting--d60a1d89-0799-46e7-b858-765ce8d0a60a", "sighting--7fe37da4-125f-4807-844c-df38e34f16df", "sighting--4ac949e9-4a34-4df7-9933-ca1ce4e0a8c6", "sighting--533fe1d9-1d5a-4670-b8ad-02a430b98018", "sighting--91a9f69f-2ed0-4212-8107-78f2e2e8ebe1", "sighting--34d188a5-0a97-49d7-94a6-fb925e92749b", "sighting--2ca9459c-d4a6-4b7d-bbfe-ef1bb2516635", "sighting--8de9cef4-515a-4483-87db-a712701769cb", "sighting--9f3d8ac4-63bd-4718-a8e5-da0d2f4057c4", "sighting--ad31f9a8-c36c-44c2-9441-4db4d69002f6", "sighting--7c65a34b-5f05-4905-a781-f60eaca675fd", "sighting--093efc45-873d-46b1-b056-fe2eae939a63", "sighting--2d822d26-e0bc-4451-b835-3a24ae07e65a", "sighting--5bbcb6d4-6f69-4ce3-98d6-a9506abbec7a", "sighting--7602f87e-8feb-4d9d-a886-67b2b02ddd43", "sighting--d22a466a-368f-4dea-a03e-6640a12f796b", "sighting--c1921562-a6e2-472a-966d-20b4ebb56d48", "sighting--3aceb0ef-6701-4860-91c3-dea05ce1a7a4", "sighting--c3e4e9fe-b522-4440-b884-f99465786a8c", "sighting--043572d8-f70a-41db-98f4-920d7e6c41c1", "sighting--8b4c08e8-932c-4f69-8f78-e967fb989959", "sighting--c6091205-885b-436a-9652-2aff80c57d04", "sighting--198eb45b-9ad3-40d0-baff-74e47dcf2527", "sighting--cd3e5941-7712-4e0b-90d8-00bf837a8d21", "sighting--0538b480-e01e-40aa-98d0-cfd1889eed06", "sighting--86202bd7-8def-4193-9ab6-f229b4b4ebc8", "sighting--2598fdd2-c051-4e5f-9da7-bfa7a183952b", "sighting--8cff5756-1078-4329-a472-6d1fc7b52bc4", "sighting--fa629900-68d6-4956-b00b-4c521225455c", "sighting--5b619ca9-a62f-4c0e-aa50-fd70c1e76094", "sighting--795a4bac-38b3-40d5-b562-38de9830fc67", "sighting--6b9f095a-977d-4783-9cf7-6628d2d4aeac", "sighting--0ecc0b74-b2a4-46c0-8180-ee87a9cef43d", "sighting--15f17990-3481-47d0-9887-9833db1c7fd4", "sighting--7125fd3e-6af5-4bcf-a396-85c60e96d08a", "sighting--32d5f327-59f7-455d-bd15-75a1d59b4c27", "sighting--9ab721c3-215b-41cd-81ec-4f6db73cb14c", "sighting--3c995e01-bbb1-48e5-95cd-5832b6a16a72", "sighting--43967738-5efd-43c8-89cd-bd603436c84b", "sighting--8a366c02-1d3e-42aa-b2f7-8f361d173753", "sighting--e2a36436-3bdb-4160-b12f-2067650ac4c7", "sighting--b0125639-c2ec-4b80-96f1-842cd4dd6064", "sighting--4bd9c6cc-6a8b-45e1-9bb0-3a7f5e956a76", "sighting--4b30591e-8682-4761-b994-ca6ec4b79feb", "sighting--59914c6e-9fcd-4205-9a3b-88eded5162b6", "sighting--9e2c244e-8bb2-4508-a77a-a12e7df1033c", "sighting--9e22c838-574c-4259-ac09-d8c84a7f92a0", "sighting--18494645-7811-401b-8184-a2bb0e67dfad", "sighting--c84d2316-8575-4482-8444-76022c53c920", "sighting--1831eeaf-75c6-41f9-9918-817ff0964ab0", "sighting--6b3198d6-5f7b-4bb6-bee6-8290d4069b84", "sighting--2c2eca6f-8c70-40f9-a60c-ac8db3057a9d", "sighting--10817c36-e225-4899-94ae-17bcff9427e3", "sighting--ad712ad3-5770-4cd8-9272-54672a3bd444", "sighting--a76661ef-aa3a-446c-84c6-8d99748ff3d5", "sighting--6e5e7677-bba5-4241-9a3e-21f3a766c39a", "sighting--c1c82a3a-555c-40be-8ad3-07a425c9f083", "sighting--b676597a-470c-4726-b98f-46a6b6494613", "sighting--539d474d-ac44-42c8-b508-2ab409c8485e", "sighting--18d7323f-0a00-4abc-a651-644fe7301307", "sighting--13ee7d0a-37ca-4ec2-ae64-016898d2c0ae", "sighting--b436ba21-cc3f-4cc4-a024-dc91b57f3c1c", "sighting--3a04c23a-a2fd-43e9-a799-d18b6b0be669", "sighting--e781f0a1-6d11-4c31-ad58-554273042dab", "sighting--b81ffba4-824e-47e3-a734-17777262a53c", "sighting--9849e7f2-a65c-4afa-a913-577d83a150a2", "sighting--03081131-5201-4be3-9c3b-9ccdbeb21a3b", "sighting--266156c0-e44a-44a4-8c36-74190dd8eb9d", "sighting--60577f99-83fe-4e07-90f3-67eb65dee6d3", "sighting--601e7c75-0aa3-4789-8f62-df4144af623b", "sighting--bbffeba1-6483-423e-868a-5c3b21b054f5", "sighting--44cb9b6a-b91e-4210-a0dc-ba943997eb43", "sighting--b7febabc-85b8-4656-8c48-3b8fb00ba36b", "sighting--3574957d-3091-4999-a304-14cda54b47bf", "sighting--1be75301-f864-4317-9a66-f15147078bb8", "sighting--e20bb2b2-9bbe-4008-b623-61c2ab7b6460", "sighting--a661c41e-aa6e-4126-ad2d-1c485492aec1", "sighting--eba25872-73c2-4467-a6ea-ee2c503bf59c", "sighting--8c5ab734-ded2-45f7-a3e1-e3a320b649a4", "sighting--d489cbc8-7513-4011-8d41-7877472502b5", "sighting--09949844-cb70-4411-91aa-03667530c904", "sighting--044af48b-8e48-4676-9ef8-f5e5d8471318", "sighting--5b22e93c-d34a-413c-ad69-75293b0a2578", "sighting--21bc1c5b-fdfc-48ff-9959-e7c88dfc9954", "sighting--1e25c71b-417a-4ab0-b85b-ae836408fd0d", "sighting--bba2bfd1-00ab-44c6-bf07-217872726913", "sighting--fbf80d07-9666-42ab-b222-3619a83709b4", "sighting--9703a5b4-9b2d-465b-988c-51626ff86d01", "sighting--03d71e3d-552a-41f2-bf80-3fcc5f1b9ca1", "sighting--464f7752-6ec0-4e38-b065-dc35778ae174", "sighting--ee090055-5c32-4492-a0a1-a26b6a9e93c8", "sighting--f4b296a1-5eb0-4039-882c-173c67f88864", "sighting--42c2f40e-ae75-4a9b-90be-b8cc1abcb6aa", "sighting--91a17079-eb9c-4648-9440-921bac82efc5", "sighting--5dca23b6-248c-4362-aeec-38910625d7ce", "sighting--f558de88-eec6-4de4-a695-6967b28d1c94", "sighting--8ebae81a-5a07-468d-8f70-58bf78fd5779", "sighting--0a67b4a0-d3f7-45c3-ace8-aa7dffafc642", "sighting--79f19dbc-7942-4a1c-be2f-081625c57e98", "sighting--c94b7997-a61b-464f-a8b4-b41c9dc2784f", "sighting--3bdc7192-65f1-45a0-a3ff-f7eb86de4d80", "sighting--3b24049f-25f8-4416-81eb-3aed95bda127", "sighting--88f7218d-187e-4e8f-872c-d9a1014c9724", "sighting--2cb65fd9-b117-4d46-a973-d650826cffcf", "sighting--19887407-de5c-40c7-b41e-fc1dfa411545", "sighting--27416efc-f6b9-4c01-af7d-5d34c12c7c92", "sighting--42c77e28-b9dc-448d-ab87-d0537e171a31", "sighting--afb52d24-2318-4c6e-a6b4-7c7c966a24b7", "sighting--8a8acea8-6ca0-4c5e-8c6b-c1415a76ea32", "sighting--eb85cfc7-456c-4d6e-9b2c-f71fb8dd6c4b", "sighting--3df8427d-a632-4db5-8ab3-53ae8debda51", "sighting--82a98b64-129a-406c-aac6-1cd076c5573a", "sighting--b8e0eeea-479c-41a7-afea-e54f28d37bfc", "sighting--12782d45-1f96-48df-9865-878c9c1be80a", "sighting--b80b868b-aba7-4817-a82d-e8269bc2ea34", "sighting--2182c5dd-37db-42b2-80e7-b5b1b3acf7ec", "sighting--dc6cc5d7-4564-443d-9ef7-5e2b4c17e0ce", "sighting--70078cce-0b6d-45a3-931b-2b7645b28f9a", "sighting--889b3bec-5194-45a5-b344-8609d08cedb3", "sighting--23638b2b-a716-4b5d-986a-2719c0c4fedf", "sighting--ffceba64-f470-4347-8544-68c313e11c28", "sighting--d3e54ba1-2fb4-4b64-bf47-53c0aa319d5c", "sighting--2c27f744-9ebd-4402-9ac0-7b55ef147124", "sighting--dd47596a-6960-4d99-a155-71b6e6461c2d", "sighting--3bcf018d-5158-49b6-a238-4829adc34c18", "sighting--5b8bbdba-89d6-49fa-b5ae-c7f475e00df7", "sighting--6e4c6690-a7d4-4933-9ddb-85310959e5f5", "sighting--b5cf6afd-0afd-4b48-8658-ba6a73648745", "sighting--f0b4dd22-c5c4-4428-b68e-1e05179b7dbb", "sighting--14b890b2-a9a3-43ad-83f4-5fb71f97bfcd", "sighting--24a75a3b-b429-4f8e-9a16-42d829b9d1c5", "sighting--e03a6ab6-fada-45e4-a76a-34c89d93eec4", "sighting--c60f5d62-c139-4e84-8534-f0defed5af65", "sighting--ac62ecb0-4af5-464a-9fd7-298dd8ac472e", "sighting--e101d3ae-f024-4f04-b9de-2aae54e318b2", "sighting--f550a9ab-7d5a-43f9-a7d7-f1d8a954f5bc", "sighting--628cdb8c-3607-4f48-9514-16072327c62e", "sighting--f26a12a9-29f6-4447-abdf-697606bcc4cb", "sighting--b036e6de-8e9c-44c7-84af-d38d94eddc7b", "sighting--b87726f2-d2ac-4055-a56d-e4f76d8a1f76", "sighting--d8c65b08-3aa2-47cc-9866-704da79cf917", "sighting--309d8cfd-ad7a-488e-84d8-381f7cfcdfb1", "sighting--5be12731-e7ab-45a0-bd99-8d093f0678db", "sighting--1bbc0903-637e-47e0-8f8e-ecabd70cb993", "sighting--469ea22e-a11f-4e22-bd55-786bdf0e2237", "sighting--a9c0894b-2866-4f8d-8318-fdd7bf6506f0", "sighting--eb1425ef-830d-404e-9fea-c983c2da4dfa", "sighting--1b7abec0-1eb7-46e2-9f93-ab224aa7d6ad", "sighting--c8dc0b6f-3706-4af0-a627-780cd357a7d0", "sighting--6f05bb19-7a26-4a96-8dcf-447fe8dca4e0", "sighting--dd33a810-85dc-4a48-82d9-ddb7108e3715", "sighting--0af711e2-d5b8-416c-933c-e1d2cfe77a2d", "sighting--21c35428-e0f1-47ef-be5a-c3fde147b187", "sighting--c1da2789-e0ef-4299-8014-833993d014e2", "sighting--2674cddd-2eda-4949-a82f-e6fa06c98a70", "sighting--6e3c29b8-900e-4293-8137-92d91ad7c181", "sighting--c8250023-335b-4cc2-89d9-4a28f094c774", "sighting--627ed9ef-01bd-42d3-a82a-b65563b98c5a", "sighting--c1a8b779-7be6-44cc-a614-0c52c528e4f9", "sighting--50cb8a9a-eb67-42ed-9708-ff2a060a17d6", "sighting--9d4646e2-0c05-496f-8746-7051f0c1b442", "sighting--ec9d29a6-8d9b-4ff2-b548-368e95d2c8b6", "sighting--7e60300e-9109-4ba3-b332-e60049484785", "sighting--69ab1937-b663-4599-b282-48c1aa508f26", "sighting--dd472da3-fcdd-4f38-8412-e5876a945bc8", "sighting--65ec3e47-a085-4660-9b80-b32a447aa65a", "sighting--ded0c179-a70d-4f06-a153-da9ac1fd0b76", "sighting--c64ceb2b-9ea6-44c3-9c0f-3b1cb5659aa8", "sighting--21ad569d-2dfa-476b-ad10-baad14e21939", "sighting--1c7b12a1-5a82-4572-95d9-7b6deb3adf9d", "sighting--b990fe8d-eeef-4512-b2e3-17a9ebddd86a", "sighting--1f2bab14-0dfd-4b60-9711-826f3901355c", "sighting--a89bf806-d4cd-4842-925c-a44e0a4e7f05", "sighting--4f23153e-5123-4901-a55f-91f2d108337d", "sighting--a057f6dc-7363-4a4c-8ac8-bf4612ec1a98", "sighting--d030e761-7101-43f0-9140-48d42d991813", "sighting--3e826b45-8c8e-439a-9ac4-504653fb33d0", "sighting--12758fba-cb87-4b4e-bd7d-48c1f6b8a749", "sighting--aacbf282-b230-45f9-919f-89784210659e", "sighting--1ca8f633-20fd-4d1b-b02c-8eac4f720d68", "sighting--16729087-1116-463c-b699-960eed50851f", "sighting--a9010f7e-5fae-4429-adb5-44c8d4192503", "sighting--81048d9e-d16b-47e4-9a02-e66ac249b369", "sighting--88e060fc-e4a2-439d-9b46-f2e0898b83c9", "sighting--7a040f92-870b-4211-bec6-376db78caa89", "sighting--95cfb3f2-430b-468d-b2e5-c2a88efa0520", "sighting--9950586f-f664-4fc7-8072-ae75ffefeee7", "sighting--4bc3add7-b2ed-4ff4-abcb-16ff86df17ce", "sighting--0f394825-9afe-491f-b0b4-92b81a52c4d9", "sighting--494f241b-df24-4790-b8b5-9e13a2a769b3", "sighting--8144a17a-a18b-45a4-809c-87a0f503605a", "sighting--e94bc632-728e-4133-a2d9-1cc157213130", "sighting--0d4031c4-c6ef-4d8e-b57b-f24bdebcae7d", "sighting--944e2bae-c658-4f0e-9df1-5fee1031e852", "sighting--1fb0f53d-190c-4629-8e7b-6f9d2aa21f4d", "sighting--d2cf0ff4-c884-44c8-96b1-30ee0f2baf86", "sighting--0c907a48-c272-4c11-8cf6-8dc148165729", "sighting--dd7abd41-d363-46e6-9873-67b2e46b2c45", "sighting--9f9013de-b4fa-47ae-91ed-5782fed40064", "sighting--0b6562fd-712d-48b6-b0ef-695284cbb411", "sighting--02c97fd3-0acc-451d-ba62-50a758e2e6e3", "sighting--111a8fc8-4692-4b9d-a808-95a562ef3ccd", "sighting--7c6c1e6c-f1b6-4146-8083-a1791b2be7ef", "sighting--14d757a9-c165-4975-89ce-75e37c4b64ef", "sighting--3074c157-ea77-4f0e-a5cf-e0baf96b65bd", "sighting--5342da52-319d-4046-b4be-77ca6ac6410a", "sighting--26dd3079-e14b-4096-a543-dcc82131f8db", "sighting--0ef08c4f-df35-4d25-8cf7-072383cef6db", "sighting--2a780273-0874-4835-ad9f-d20f852aaa3e", "sighting--6a341068-77b1-4d52-a843-710066acf688", "sighting--e621ac88-d3be-4ff9-8bb8-d672e4cd70b0", "sighting--4db6239c-3a69-4126-b196-d53ded7f2289", "sighting--f52f82a9-a2d5-4054-9bb1-3a0eb537c0c8", "sighting--b44a9e61-30a9-46b5-acbf-9448c5a15a3e", "sighting--3da96be3-9a0d-4cc5-8bbc-b5560d5306b4", "sighting--1db8528e-0cfc-4f1b-9873-1962b7051988", "sighting--a347b529-947b-4f2d-966f-52143b58774e", "sighting--34a1d51a-1f53-43ff-9c96-2dafca84c98f", "sighting--75fa25b7-e2d6-43a1-abda-8e1986fe5852", "sighting--3d9f826f-257f-479a-aba5-79a4c77075ca", "sighting--9eeb4e95-069f-4674-b880-455667225cce", "sighting--066b65ad-1219-4b08-9af0-48de580e7093", "sighting--1525e7d9-0299-4ade-88ad-d5075c6f546b", "sighting--890bf602-febc-400f-8aba-6f3a921f62da", "sighting--7bdcec5b-d641-4f6f-b932-7e2d79bdb86f", "sighting--1fadbd8e-0523-41e5-a514-8b3890a9fb16", "sighting--43213617-d48a-49d3-921c-a819c660dead", "sighting--23e0527c-b0d3-43c2-85ce-cd4a80d1f1b5", "sighting--852ddee3-fab1-4313-9469-69c5e01b2ebc", "sighting--a5016e65-cc21-4ba9-926a-9ea5faa69b41", "sighting--de87cf73-aa4a-4d71-b0fa-4b230bb643df", "sighting--0ed817c5-8381-46c6-a446-3579b07e8eda", "sighting--6c056311-33ea-4c19-a8ff-9ab7756a98b7", "sighting--be0ba63d-b68b-4230-854e-84770b3f4f01", "sighting--9248d00e-f7d7-4b79-aa2b-b792ef04b540", "sighting--0fec11ff-b273-4e9c-95c3-b8b556b3bc74", "sighting--54b847dd-8dbe-4b40-bbeb-a3b195753350", "sighting--5d2fbc14-1e76-4604-88c8-18ebde279d1f", "sighting--0361199f-180f-453c-8f65-d664423f1d47", "sighting--84d635f3-1f16-4b94-bf2a-93cb04181b44", "sighting--a6321653-2f97-4096-a56a-177fa20c7e46", "sighting--3b6d9b75-ab05-4e06-b682-5ebed238f617", "sighting--c2e7dd1b-06a7-4c65-926a-fbb2d4010982", "sighting--1027cbe7-cc60-4028-86a5-08baadf10a08", "sighting--06ac548e-6eae-4dfa-bc0b-e55038b2f194", "sighting--5d07fc9e-7ee7-4838-8b9b-0fa3ecffc56c", "sighting--f792a5bf-cc7a-4597-85f0-87c9dba80626", "sighting--8111d8ec-fc16-45fe-b4ca-478ae64ea978", "sighting--633463d3-616d-4bbb-9f14-f1a21bd73ede", "sighting--d30e5862-a2f1-41eb-b73f-c7e8df4aaca6", "sighting--87470c2e-f98b-4761-8740-ccf09ffe03fe", "sighting--842a7940-ba56-4502-a0ea-e7722dad2785", "sighting--c7f66478-104c-4770-8bda-e3585a890bd9", "sighting--bbf5366f-bdfb-474e-ba7c-e258368d6227", "sighting--fcb53a00-aeb7-4ca5-aa0d-45db14c07fdf", "sighting--a2011665-1c14-4c40-af93-5f54cb406cd5", "sighting--fb696cdb-db14-46bb-b270-c51f9ac164a1", "sighting--b12a682a-24f0-4f5a-8227-b5bab3888505", "sighting--8f3057ae-74ef-4638-9e41-191c849ca410", "sighting--066c44eb-41d3-43a9-8c5a-b1bc1425052c", "sighting--caa0ee3f-8849-4c56-b1c3-ffa402c6b3b0", "sighting--77d255cc-46d2-4750-ad3a-763d1656f2ad", "sighting--1bc068ff-6dea-4fef-8cf0-2d1fc75dcff2", "sighting--1badf891-ca84-47a2-8e54-aafc2aa3deb5", "sighting--5a5e01f8-a626-42b8-9285-0f52a49e2407", "sighting--3c37168a-8b87-4d47-90ac-eed4df4222ae", "sighting--f5311f05-2dbd-4643-abae-29d02b6b8e9f", "sighting--dbc54f64-52b8-4e43-8995-1ab08a6e0fbf", "sighting--4cbe84cf-4ad9-47eb-8583-b8bd39844198", "sighting--01bdc45f-6d51-4f73-a4a9-9edc8a8c3a08", "sighting--0ab43319-057a-40bd-ba04-c51b986ff399", "sighting--94e14439-2a28-4bc8-bae2-8427846264e6", "sighting--bd07cb88-8e14-479b-b7cf-eccea7309021", "sighting--330b3087-8e0f-42f6-a5ae-1ac7f7ad4349", "sighting--ee92b4e5-bc3d-41f0-a4ee-add3c118a033", "sighting--e7f0d9cd-e191-4652-bbc3-d50a1a3bbe52", "sighting--a14df60b-fddc-467c-bbf1-8133f73e8a5f", "sighting--f6779098-7814-4588-85d7-a2d339d0f91a", "sighting--d1bcbb82-d692-4d64-a0f9-7ddea1516019", "sighting--d0dbe486-72dd-48b5-8b88-1f3ab5393046", "sighting--114957a3-0ab3-432a-a72c-eb2aa0cc5408", "sighting--bb86760c-7a5b-4cb9-9be6-0889596e9db6", "sighting--aa09276c-be51-4edd-b834-b77cec9866d9", "sighting--ed5706a4-554f-47fc-a356-e663b302df61", "sighting--b635d938-2565-4b6a-814e-f63aa0671ecc", "sighting--ed1bda88-91f4-43b6-8f6e-309a131ef44d", "sighting--770c597a-bede-433d-b9dd-090c1951cd8d", "sighting--f0770b55-da40-4478-a45f-5c586e23ced9", "sighting--ae79ff6e-69a3-48d4-8235-836e3c218192", "sighting--febbd226-2c4e-4c95-9037-58e1d31e5b7c", "sighting--f6f1877e-b6f3-44b0-953e-495096ec917e", "sighting--7d0fcfac-2d20-433e-a827-38603f524bf6", "sighting--5043bef2-bab5-4301-b98a-a74b7de2f556", "sighting--91e4844a-e793-4740-ad88-6ab746b08f1d", "sighting--c963441e-bd10-4b2f-8437-ac12f33f91ae", "sighting--3c87edbc-6a50-4fd0-b574-88af14eddf4c", "sighting--bef19b18-309b-445f-855e-86519506b46a", "sighting--87a22721-8bc4-4b7b-9875-407dc56e2636", "sighting--40594260-db2a-4233-be33-bb794bcb115d", "sighting--1340f956-4812-49bb-973d-a1c3103b85e6", "sighting--a1dadadf-6caf-4de5-8582-aaa27a172919", "sighting--ed8f3aec-f7f5-47fd-a53a-ee70b4132859", "sighting--fae29558-d8e9-4008-8dea-059d72bb74d0", "sighting--49b72c5c-f178-41f0-b804-9b7b6a2002a7", "sighting--3a9b6362-5fdf-4a86-a171-cf56cc73f11b", "sighting--8e382f4d-9ae8-4999-b003-2938dfa863a0", "sighting--1b53b01e-4c6d-4a98-9308-2c0cb4a6fb95", "sighting--0d52bbdc-3be5-461c-bea5-fc3e0bb49e66", "sighting--2da978cb-0d2a-49de-b108-b3511efbe32f", "sighting--5a7cea4e-abce-4d51-9bce-91adf8361f48", "sighting--e8f2ac1d-9de6-4f96-a896-8e74ec7524bb", "sighting--d48d6deb-5961-4a16-b0c5-57942171c6f6", "sighting--fa3be2e3-96b2-4fae-a1ad-e358adf9f5e3", "sighting--d093bf61-0bff-4505-bc4c-e45c5c7fe2b2", "sighting--3ece1a03-bf6e-45eb-bd09-1cc2f160f3b8", "sighting--9f356b47-9c46-48e2-9587-bfc31d42efb5", "sighting--832cec52-da22-42cc-9a94-e7e186b29475", "sighting--e64d2db0-d8c6-4fe5-899b-3ecd84579e86", "sighting--b49ebb49-85ce-40d1-a485-daf7e3790a46", "sighting--857ed836-7530-4720-b8a0-c636a5eca778", "sighting--74fc867a-8182-4f10-a942-c801618c09e7", "sighting--7c74fa41-10d7-4b65-ac24-9926e9bcb20c", "sighting--96a94fab-40bf-4810-ac17-e35208cc33c6", "sighting--76415c64-46ed-4e53-b765-49ed6c1b4d1c", "sighting--86f55d00-d0d1-4983-98bb-c0d0de2c7934", "sighting--dcde3f7a-862d-4c5f-b325-ca200b3908d6", "sighting--0ab4d06a-ec47-4a1b-86b2-f653357dacb4", "sighting--d3f07e97-1e05-43d4-bb10-d4dcf52e2ec6", "sighting--bfc6c146-a240-48e1-8da2-2e6b701e9d86", "sighting--472ed21f-ac9d-4d9d-afdf-47491fe38b6a", "sighting--17082d51-2b6d-43b7-8d5e-524ea8600268", "sighting--ef3f7225-f616-4abb-808d-c68902b7568d", "sighting--db0fee2c-3934-4163-8abb-4605b081838b", "sighting--0e093109-b991-4de1-8cd2-14edeacc337c", "sighting--0c5f0d63-d625-4bf3-a4b6-4a9c816d1967", "sighting--c2822b2e-76c6-404e-8c8f-934714e9898f", "sighting--9f3081b8-b437-4310-8212-d760e498fc93", "sighting--d4f47deb-9d63-4bdc-9c4f-11dca4b16179", "sighting--3bd36848-50fa-4e0e-b5e3-911001d1b271", "sighting--f61fce50-2517-465e-991d-1501e9df32a9", "sighting--06fc318c-8d95-45c7-85f2-3dca82be202e", "sighting--d9a7de9c-9c1d-4617-9bca-4251f1478f19", "sighting--c9df0780-1c4d-4a06-8a42-9b4888a3cf87", "sighting--a66a7632-a716-4f6f-9f34-b8e2d03fc4f9", "sighting--5be98abb-1dc4-4fdc-8d48-e11c92ef475c", "sighting--50d0e64e-5c71-43eb-ac1f-bf3758a3ef8d", "sighting--5213a579-24c6-4eb4-90aa-b54912ecc0b1", "sighting--5ff63fc6-d2ee-4d4c-8f65-ce26758b5ded", "sighting--01f8573a-c0a0-4468-983e-2014b6647cc4", "sighting--f3fb7878-a746-41bb-bb80-7abfdbf65033", "sighting--0d60048f-e69d-41e3-8c33-b458fcdae98a", "sighting--17e58be7-1eed-431f-be95-7488997b9025", "sighting--562465a0-f0c6-4d08-9754-5fa14e457b3a", "sighting--a07c1067-bb41-4247-9095-9eedc799ae42", "sighting--1d1aaf0d-8b62-45e8-98d5-ed8383d0a7f3", "sighting--5cbf3abf-cb4e-428a-a6db-2199b5f4df3e", "sighting--1aba2a5d-b948-451b-8589-02c8f2a1dfa4", "sighting--ba622272-5d7f-4a82-a0a8-0a39bf0cf53b", "sighting--aaa41af7-930b-4ad9-9cd8-6bab84879939", "sighting--cac9ca9f-d1e6-4dec-be2e-0a7322380769", "sighting--4ab71c10-f7e1-4d0f-8fab-a31ce5466701", "sighting--54581544-3aa2-42c6-9e00-7cd008fe7bfe", "sighting--d80f31e8-7172-4123-a1fa-3703da708293", "sighting--aad0716d-2aad-496f-bbdc-275f929561dd", "sighting--af0e4f5b-a52e-4a4a-a9b4-48190cd2687d", "sighting--7d015299-4834-4fa0-b7a7-64440e174680", "sighting--45507586-fd54-400c-842e-595e51d1e8ae", "sighting--3ad57cbe-2712-4871-b082-c14245462b20", "sighting--2a72a8be-6a45-4ca0-b79a-267d4a1cca14", "sighting--228044e9-7490-4027-b3f0-4b48450f63ba", "sighting--eca927e4-1094-42aa-bb9f-0238169cf7bd", "sighting--e37d899b-b437-46de-98f7-ec5df8352b13", "sighting--846454fa-487a-42e4-bfed-4184055df3d9", "sighting--c87a659b-2e99-40fd-a938-21bd7ae7f223", "sighting--a1b63cea-ba79-4969-bc1d-7359a0e06932", "sighting--5c078c55-c347-4c68-b462-51d74d0f940c", "sighting--b5c9e3e3-724a-42df-be55-01d2cc2864e7", "sighting--091a1acd-cfaf-4503-8e48-4806cb8056ae", "sighting--06e385b3-b731-4540-a345-0a298e8bdcc5", "sighting--1ddfa43d-ad61-4175-a40d-bc3e2fb98e11", "sighting--19e3fb73-f8ee-4f90-bfa5-b7e93c692533", "sighting--89c215cb-4329-4a53-b243-9b16e27015e7", "sighting--ac25fd91-62e0-4f8f-81d5-1b18db6cfb4f", "sighting--9ae72fa8-3ad0-4083-9c59-52fb66617f73", "sighting--70abe550-3188-4c68-9b95-d4c67a961d45", "sighting--be54f992-5837-4fdb-9645-c286b4c03295", "sighting--c622bbc1-91be-4871-a9ed-ba84a7329417", "sighting--a44fd852-cdf3-4ab6-8f01-027caf7c472b", "sighting--3db31923-cb1c-4e99-a19b-a487bb4dae0f", "sighting--fd89530c-55ce-4c58-beb6-4bf6858cd8ca", "sighting--77f9e3f7-5d6f-4ea8-912c-adbfec0ca63d", "sighting--becdaa1d-9dc8-4598-a2a2-a468ee905190", "sighting--43260339-b6bf-40dd-8d49-428411a4e476", "sighting--bb6f7a84-02e9-406b-b2ce-0a05badbde09", "sighting--9d6c03a4-321d-473c-87b4-31bb3c975e03", "sighting--1bd664f9-e89b-4a76-9daf-34a82b36e20a", "sighting--380ddecf-b6e1-478b-83b6-f73dd154c604", "sighting--959dd1a6-d6dd-4c5f-842c-99b50d703d4a", "sighting--1b112280-4106-4633-815d-eddbde66aa76", "sighting--e11bc109-057c-4946-932c-8a939a2a3abc", "sighting--968218b7-519e-4a96-932d-40b7429cc0e2", "sighting--82703f73-8300-422e-8198-a0afb89ccd12", "sighting--72c2bd22-bcdf-4f88-a072-2e3742c5a13e", "sighting--c373308c-e08e-4da7-b971-c12f2757129c", "sighting--1ac80584-981e-410c-b68b-04fa7f6c7267", "sighting--73e2037e-8998-4f92-9e45-ea9f69e3035b", "sighting--a63276b8-18e6-498f-8887-1d89146c08e8", "sighting--340658dc-5c90-44e0-9347-69d125affe2e", "sighting--c9dc23d1-88f1-4b9f-b318-26d8c95b8966", "sighting--abf7ca23-e0d6-4549-bf49-fdaa0a25b0e9", "sighting--c31c1e2b-a04e-48ab-b8cc-71b0833002d3", "sighting--b85de6aa-dfa6-4aef-82e1-5fba7dddcbe5", "sighting--f9425f3c-72da-40d9-832d-f94e6e5f4f0a", "sighting--a54ab539-418e-4fad-9f9c-df1cea4f1832", "sighting--de2d81d4-4665-4031-9494-90a1cdbb7bfb", "sighting--c971acfc-2d0b-43a8-8546-19ff411ed92f", "sighting--ea4caa9b-981d-42c5-9294-fee79caa21a9", "sighting--c6cc5c81-450a-471d-a892-c6e5e33ec4d0", "sighting--ab565f70-cd8e-4f65-8e7b-b8718153bd18", "sighting--ff679827-1fc1-4ee5-9d6d-e47b08d025db", "sighting--3a0bdecc-4a83-4a07-808c-b193c951a2cf", "sighting--eacc9831-55a5-4f57-a0cf-a90a69a97c13", "sighting--f7ebb2c0-e4cf-43d6-b76f-dc33d28b0da9", "sighting--25978b0b-a1dd-4d8f-b3c0-256a04ff7eef", "sighting--a13fcd1e-96a5-47ff-af14-0a514d6042f9", "sighting--aa57d2e0-a2d7-41ad-a2dd-2c67c6a236dc", "sighting--cdb92469-f89c-406c-8715-e313e02a20a8", "sighting--61278d68-cb81-45f9-9ca5-9a06ef2856e1", "sighting--1ed1a11d-852a-462d-a74e-3a4e5d8f47b1", "sighting--bd7f6637-34a4-4ffe-9f1c-c37cf734f277", "sighting--06c0c6aa-e5c7-4759-90b6-24c03f9ec072", "sighting--34de798b-04b6-4875-80a3-fa45b94aeceb", "sighting--dd414d68-d6ab-4d4b-99fa-99c2c590b2d2", "sighting--b2349718-74b7-435a-94f7-418566b82a69", "sighting--b15d421a-244f-4338-9673-975f313171a3", "sighting--a217548e-71da-4738-9d6e-6bc781f8d137", "sighting--6dd8e6ff-5aff-4024-a1d7-f7b8e6ce3619", "sighting--ff08b3cd-7c0f-4cfe-bdda-550002064dbe", "sighting--4c49d88a-8bb1-472f-8dbc-8b4e326d74b6", "sighting--4c28c087-4716-4685-9526-feabd1e7331b", "sighting--ae85fffa-0478-4eda-bdff-900bdcdc2a5b", "sighting--4f45be5d-fecf-47ba-a168-f1bb90f1b407", "sighting--fe103436-bb46-49f1-9db4-cae183ea79f7", "sighting--a5820a1a-4938-4703-adfb-00dedb7f5cce", "sighting--20fd9b93-ba51-4e0a-9ee5-158bde727768", "sighting--8a114b69-45ca-4b4a-b0d6-680d4d45bd47", "sighting--7b3e2e18-fed3-4a91-80a9-7d953643b1e3", "sighting--18ff7590-9c7e-428d-80a8-045ef100fb49", "sighting--6da55dc9-28f9-4ad7-be16-55f202d4f848", "sighting--e43399d0-92b5-47d6-a015-c4bb4786a9d9", "sighting--bd360a1d-1967-4b6a-9459-8642f8fe6f31", "sighting--6cce6384-1806-4a0e-bdf1-29fe634bb7e6", "sighting--522dc2b8-d03a-4c3b-b66b-54eb97c9e392", "sighting--45e963ec-ed2c-4858-affc-5681dd11cc3a", "sighting--4bfc3991-65d9-451e-bea7-c4f2a2e2b0df", "sighting--ac802708-ee4f-454f-bc1d-cc6f7fa6f800", "sighting--85e66176-2944-41f9-91ec-979a89abd42b", "sighting--bc459540-eafc-48ef-a5f7-46a51a788f6c", "sighting--f2a3ccd5-a550-4127-a65b-164177ad1797", "sighting--da3d2a7a-6a0d-4a7a-b0d1-4b1fbf58a332", "sighting--96b50acb-24ac-470a-8eeb-3c33c50c131d", "sighting--14a808f7-8789-498b-b321-78c9a3393a6e", "sighting--a721f050-9635-4166-a307-18bd2be86902", "sighting--ddc2858c-91e7-4e1a-8efc-3a7e446cc83e", "sighting--6b262730-989d-4d69-b2bc-8e85c0e41464", "sighting--431929b6-5a46-469c-a8bb-c4be505cf869", "sighting--ac86024c-694d-413d-aceb-7b4a474539c9", "sighting--6ea68a86-e1d1-4c1b-8edc-ab9a6558f3ca", "sighting--29348fe7-e7b2-4224-b6af-e61c999d1240", "sighting--012d6522-175a-4fb3-85be-504ed683ccbe", "sighting--b0b2b229-0bfc-4b92-89f6-1d69ba0316d4", "sighting--605cb925-ab56-4aae-a4dd-cdf1a18d5a1c", "sighting--f64f14b9-b025-422a-b81d-f4d16de64609", "sighting--67126f79-349d-4c82-8b60-541721c01950", "sighting--c347d2c9-5ccc-4728-bb4b-fe0ab57717be", "sighting--96a6a6ca-e05c-4a8a-aa74-ae49ac817b73", "sighting--cb27d736-38f3-4709-b709-b668678a81ab", "sighting--a451d985-2b91-485f-b984-80bbd16d1fa9", "sighting--661a78a5-38df-4e6e-b524-e330011610e8", "sighting--710381df-a251-494b-8bcd-73358bb2f44b", "sighting--bfca5c97-4e99-4061-8642-da738d2cebab", "sighting--63facd68-34cb-4afb-9522-e18d7e3d22bb", "sighting--b056609b-7542-44d2-8c64-f14022069db1", "sighting--07784afc-a930-4b1e-b77c-178d0752b7f5", "sighting--84429887-e362-418c-aafa-6d0c4b471a1b", "sighting--2940ecc1-c9e9-40c3-856a-c0f226272832", "sighting--ead61392-2368-4afd-a84d-8c72026b59ff", "sighting--b499e442-2abf-49a4-82e6-e7ad79ea7d95", "sighting--116ffeb4-c17e-42fc-bd82-a55e3bcb3dc3", "sighting--7c8c1fbd-1b04-4942-8e9d-86fb0b3bb308", "sighting--437c1bf0-535c-4902-8b2c-566cd604e871", "sighting--ce84ea72-16de-4afb-8bfa-8c1ff9e0c112", "sighting--62da802b-ad7d-441d-9997-bb158bc1d30e", "sighting--fe18a616-644d-4b98-b369-5e9b1bfc9409", "sighting--bd382140-75ac-4c5d-a8ea-3d12abf01ad6", "sighting--3f83198e-1212-4122-bc41-0c36bf34e255", "sighting--7abac7de-ec4e-4a25-99f0-0e056b090bcf", "sighting--6e14b904-390c-49af-906f-3c05f418f112", "sighting--f228d3a9-f877-4e99-8302-5bb4fd5ac6a6", "sighting--0c164458-32ca-4148-b4a1-cea1de781f58", "sighting--4b1c3084-cb16-4ad0-a251-b581d5ea3c80", "sighting--a7f3ce65-4f74-4c6f-8b4f-9ebb17148d8d", "sighting--2a14a0ac-ae2c-43cd-8726-61efa8723545", "sighting--1f85fbce-4eb1-4a0d-bc32-743e78e907c1", "sighting--873eebcb-5b90-4918-904e-72a8c56cb36f", "sighting--e2153510-bd8c-44a4-895d-a8cba6b8f77c", "sighting--3c680ec0-9c9f-443b-b2b3-83a79df0bb15", "sighting--13467b2a-fe84-454c-ad34-d4d648c9e762", "sighting--a00f8aea-1d7f-4dde-a1e7-df9ecc937643", "sighting--c8b2e7ab-78bc-4595-9cd4-631759928989", "sighting--83bc3623-9fa4-48dd-8138-f5973c1a4694", "sighting--c91b53c6-ed05-4794-89e9-58fb40f29b73", "sighting--b9ec32a6-24a6-415d-b300-2501f81b3bf5", "sighting--6fcdae10-f51d-4104-a205-899e4ac22ed2", "sighting--e169d3ee-0697-4ce5-95e1-5ae8daef17b8", "sighting--57ae578f-6e1a-40e8-90cd-cfde10186b14", "sighting--e2a49f5e-3fab-4674-b717-5619a49b1f14", "sighting--1328cd0d-6f2d-4f18-8361-9cae45b67c16", "sighting--1e9be9d6-7ee1-4e96-9bbe-79ca247bfa86", "sighting--df71bf31-a4cb-4466-9c97-6ca4a229ede3", "sighting--459f9c71-2b0e-40ba-aef9-9500340ffabb", "sighting--a3eca1a9-282c-4ff4-a6d4-dde3483478d1", "sighting--b8126b1c-e1d8-480d-a61f-95bb1cad4be0", "sighting--eece64c8-57b3-4e05-9bac-51e6d7932abd", "sighting--da283c39-e3cf-450c-87d2-d99cd7868b31", "sighting--910eedf2-3206-497f-a9a8-3b160cdddbc0", "sighting--b984d2b6-9de7-4585-84cc-efbd940213f4", "sighting--fb1a0cf2-a524-4889-85ff-f8e3d76ca55b", "sighting--3bb4c2b5-8aeb-4ffd-928e-722bcfeea039", "sighting--fed9d541-36ed-451b-b682-3cb7e4fc8704", "sighting--13ed10f1-e714-460c-bb88-0c6415272510", "sighting--ea1104cf-ad2c-4b81-96ef-2bbd08b26136", "sighting--e1272ed9-ecf8-408b-8a05-87cb2755a00c", "sighting--d437cfe6-a7b0-486b-86a5-fbf64ee0c0f2", "sighting--94f5e0d9-f860-4ddc-ac5b-3b548c141259", "sighting--32d5aff8-c654-433c-9e41-6925b50f1cfc", "sighting--80a708ca-3492-4ca6-991c-b55432d92a6c", "sighting--cbfa85a5-24af-4ecf-a69b-2623027eb0cb", "sighting--c1ea76c6-6bbd-4f58-af12-f9c4e31478e6", "sighting--490a4e2b-aa4b-4d81-8d12-aa55e429780f", "sighting--8419ec36-9f91-4eb8-bd7d-fc9ca1292072", "sighting--7cdf157e-56a9-4ee6-bdb7-61076cddff00", "sighting--4003a71d-d55f-42e3-a168-d213e92ee94e", "sighting--dbea51d5-4dc1-4a55-8509-b5c9d53354db", "sighting--24a4b8b7-2fb1-43d2-b5ec-c9935b56fea7", "sighting--fbd45bbf-4e34-4cf6-8104-be9a15212c0a", "sighting--a1a4f792-9f21-4c6a-96ca-a20442ac9b64", "sighting--e9b23cce-3795-4722-8f95-779a2988a40a", "sighting--f9247bbe-b526-43db-8a7f-43a5334a0fbd", "sighting--4da4e497-6d22-449e-ab3b-24e7c00f293d", "sighting--95ae2013-aa01-4784-a76c-fb9390946f36", "sighting--76351ec2-5da2-4848-9257-9a91c08d111c", "sighting--b76409c2-7bce-4e09-954b-362ec7fc57af", "sighting--0608c422-8bea-4d50-a84d-667e1a3d98e8", "sighting--167596a1-e516-4047-8f9a-0f9b175e2d85", "sighting--0add3eaa-7831-42b6-8b63-5b9965a5bda7", "sighting--d6ffa2ad-5edb-44e4-b426-62328e2ae21d", "sighting--348ddda8-3b78-413f-8787-d8717b384814", "sighting--105c7796-b1ac-4e79-8c0b-d6340c370368", "sighting--3aad0441-7014-4fa9-987d-0951e415c1dc", "sighting--2530b51d-0e98-4036-908c-d467fe2c7ab5", "sighting--03f41a0e-b182-440e-bf46-6eb786405c2b", "sighting--de136133-3e20-4431-95fa-c1fa67d730f5", "sighting--f67b8fc0-0401-4db9-9cea-8f93ce7e14dd", "sighting--2c8cfe06-02d1-4168-bd51-c80ef346c437", "sighting--ece38682-d953-4e08-aac1-4c89484bc670", "sighting--3d80cd48-7e96-41d7-9864-356912d76ee8", "sighting--4ad7574e-28ef-430d-937b-ab167438f0a2", "sighting--0038e9f6-3550-4219-baf0-d2d4e0022323", "sighting--652b7bc8-b1dc-4a46-a727-f40f8b05d97a", "sighting--5d20e07b-30cd-41a2-8443-7bcbc83235dd", "sighting--259ccd7b-284f-4c6f-a481-44aa5ad0b12b", "sighting--cc5b6d4d-4354-4423-9bb3-1a8c8e78479f", "sighting--e30ae6cc-d190-48d8-b420-3ec0032825ec", "sighting--759a36e4-fabc-43e4-89d6-6626ac207601", "sighting--d3a3b661-fd27-4b18-9906-f9a65e5cecd0", "sighting--04407dc4-a2d8-4501-8b71-ddb8691667ae", "sighting--9201942e-339d-412c-a2e8-305437f82c85", "sighting--6fd04d9b-f8de-421b-8dda-1594b068dd1e", "sighting--f9b901ef-038a-4fa3-9e94-b12f90e01cf9", "sighting--a97a5434-7fee-4751-95b8-8bf5627026ca", "sighting--b491bd0c-b5a1-4058-96ae-0b996ea49bdb", "sighting--36f3cea7-fc6f-4064-9c09-794dda27fba6", "sighting--3f414364-a9c0-4073-ba4b-670f7fd2bf8a", "sighting--d14fa91c-a1d7-429a-946a-7b440fd9cfd9", "sighting--134f5f22-31c1-4021-aac6-6d6f6f34db45", "sighting--e82bea5a-ad93-47f5-b394-2575b136f97a", "sighting--75cca08c-2c6e-404a-b30d-bcdd6db43874", "sighting--86c615a1-5efe-4dea-b6e5-6c3e59b6aa02", "sighting--1a82ed40-5ec2-454d-8426-62917e6e5643", "sighting--e4b4f659-c390-4c22-9614-0824c78cc455", "sighting--5142ff61-8d2c-4d58-a497-b50ea54cf400", "sighting--4155402b-8946-4316-8aa2-9e427b0aa025", "sighting--190e3e81-7e46-4651-99c5-a5c5b087ed07", "sighting--e20430a1-14dc-44fe-9511-9b8b16316569", "sighting--343e26f4-b300-4b48-ae99-aba8dd1d146b", "sighting--8247e9a6-4e58-421d-801b-3d5fccbdce95", "sighting--75f92116-e9e9-4d16-b047-0782da1205e7", "sighting--9b6216ff-f047-4da9-97d3-99876d3dd7ea", "sighting--ab50be51-ffd1-4ff5-8b28-76230a6330c0", "sighting--477cee22-ab82-437b-87c6-a2ad208aca72", "sighting--df767608-ef12-4d22-83a9-25ac923e2267", "sighting--aeb6d29a-8a9b-4ba4-a431-c8e0a91133d5", "sighting--fff0a271-b9c8-4a1a-b69d-1b07ce257592", "sighting--a23f3ba7-4f48-4743-bcba-0c3fb8963246", "sighting--69f2ea11-de0d-435b-a61f-a69d37f5bcc0", "sighting--97beb8ee-145e-408a-91a9-d0e9209e8cf0", "sighting--a4501cb1-cd96-48cb-b263-f4cfc638e6a5", "sighting--05249635-8545-4fed-a3eb-96a3a73c271d", "sighting--3f8f433f-c0d9-4bd5-891b-854b96179e01", "sighting--e125d716-58a9-4667-91ae-c7f1bbd69145", "sighting--a820c8b5-ec0a-4304-b7fb-5185818f85af", "sighting--84b06f11-8fa9-4f61-a938-eaef6ec71dde", "sighting--793500af-d8c9-4066-92b5-4cf11b0360db", "sighting--a5467698-355c-49c8-a437-2833078e8405", "sighting--d1eb08cc-a2c1-402d-a756-786adeda3319", "sighting--f2fb3d81-1653-4c15-b2b7-df814bff0f3e", "sighting--1665371d-ee00-4d49-89a7-5787fbdc945c", "sighting--79f1a4e4-72db-426e-9fb0-4fe335bb0960", "sighting--6209d1e4-2a23-41e6-a727-8087be349094", "sighting--b357d03e-628d-4723-8143-ddb8d1d5c750", "sighting--1307d4b4-c777-48d3-ba39-af45a6e35a9f", "sighting--6f257f07-ee5e-4741-8368-c31d5a93d45c", "sighting--018e5c8d-facb-44dc-8f71-4441f1898d42", "sighting--2878128c-432d-4480-baf0-e92198b658a6", "sighting--de3335e4-7fc2-4919-b5c9-1a6b224553fe", "sighting--c73ae6c3-6b10-4d66-95e3-5c5733548f45", "sighting--7f1df469-2297-4429-b8f3-47764342841d", "sighting--17589362-726a-493f-a603-3d432a741b69", "sighting--f20f3e3a-8c47-4baa-804e-17d45c351e41", "sighting--c7833599-23b7-416b-9f88-35cea6ec45b8", "sighting--4369bade-acfe-4a2e-b80e-e6ee94bc5a9a", "sighting--59d81843-d66d-4898-b66e-1f5e6c7333ce", "sighting--89e84021-8043-4e7b-b08e-8f69e26b6ff3", "sighting--459e9cdd-26e2-4786-bb22-ba34dfff0e67", "sighting--a107868d-5087-4fb7-82c5-684678ce20d9", "sighting--489f959c-76af-46ea-b68a-9004540d4f65", "sighting--ad2a720f-c068-422c-870e-67d57387af68", "sighting--bc652314-48c5-4eaa-ad11-b150a7c90cac", "sighting--eed7ad6c-5bf0-4806-801e-c90d59cbe8a0", "sighting--e4bc6f44-662e-40d7-86f7-f4fc79735573", "sighting--d955ced6-4348-43f0-be28-df39805ce46f", "sighting--f418ab76-3180-483b-83c3-bb01e03e7d2f", "sighting--8a74096c-57c1-428e-b80a-fc8ffb3d5135", "sighting--a8dbf7e3-2cba-47ff-8188-1b520f3b0f94", "sighting--0987fea2-1ca0-4918-bac2-713695d5ede2", "sighting--191771f1-636c-4f6c-b166-c6853649a166", "sighting--29e9ee6a-8bab-4678-873a-6956974c7cb8", "sighting--a42b2f1f-2d59-469b-bb4e-b7b5ee491c5e", "sighting--b08ad16e-1c9a-4a95-af3c-e06f8d6c65d0", "sighting--a94f9401-9bc1-402d-9b86-676144c0acd4", "sighting--d967fe4a-2755-41e0-a36c-0f6e892bf23d", "sighting--5fff3bf3-8b90-479c-b72b-2d7fb584844a", "sighting--89c6264c-7ea6-4077-84cd-3e95825738e9", "sighting--5296e18c-5209-4c02-89fd-33d94f88a171", "sighting--98e507d4-575c-4f0f-af30-6f7f33443c83", "sighting--f01a6c19-d181-493f-a712-a363f9fd3ed3", "sighting--503d52f2-def0-4f9d-9662-6dacdb69006e", "sighting--1b94be5c-6a5c-4567-bd71-44b34c1aa768", "sighting--8452002f-b198-4f4e-be52-fb8aca659a9d", "sighting--12914555-3220-47cc-8859-eb692d5088e8", "sighting--a9bfa2f0-63f0-4552-bd3d-f9e27c16f783", "sighting--0925dbca-f180-42fe-bf91-2c049d18bab1", "sighting--21b510da-462a-420a-9556-b09ced873540", "sighting--dac863b7-2cc5-495d-bf44-4eaab975d174", "sighting--2cff6487-faae-40b2-a0b9-0e9f3fa73f19", "sighting--64a61a51-fce5-4eb5-a5f9-ab5f1071b73c", "sighting--7e8d397d-bc61-4b9d-bb0c-7f466482a005", "sighting--c8b317e8-997e-486e-bdeb-abcce3c7459d", "sighting--44d8036b-e738-4bb6-9bdb-007c9b93783a", "sighting--f2a154d5-d21e-453a-92b3-f6cb6bf8f490", "sighting--abb396f8-0422-4bb0-96eb-60019d3b5c1d", "sighting--0d109517-9bc6-4eb4-b8d9-4eaed778aa49", "sighting--126d68a9-d11e-435b-8cb0-7567fc7f4b9b", "sighting--b644cf5b-21c1-42d2-945e-c1562c444a82", "sighting--5dc5990d-5362-4443-99f6-9a623a355b0f", "sighting--7712085b-577b-4deb-a380-a88561412894", "sighting--52c65ea2-1451-413e-a6b3-7ac27a9c9824", "sighting--14263825-a063-4c9b-9078-e81a28b5e170", "sighting--4c630239-88c9-4a05-b8cd-006fc69db3a4", "sighting--aa7332c6-2257-4cd9-80a3-0b18c5ad864d", "sighting--76fd606a-3ac4-4607-94e7-cd9d4f6448c0", "sighting--bd11ca40-1d08-4b2d-85c1-1f1fbb2027de", "sighting--ccc8bf35-9136-426d-b3e0-ca9f3c183cd4", "sighting--97c6a67c-d980-4df3-80b2-8d5884db4a48", "sighting--fa2e2e45-ab52-42b8-b3f9-dec893f3e2f6", "sighting--749106e0-1c1d-4e59-b0bc-cee8adabacc4", "sighting--ae271dcd-ee79-4d15-b0df-61c56b01e175", "sighting--583aa416-5b79-4224-8b52-3fe6511712ef", "sighting--54529ff5-311a-4d04-9a81-1bb5f38f2365", "sighting--17a6a40a-e0a6-4670-98d5-a317bc8407af", "sighting--3f5688cd-7d2a-42ed-a650-3b45302cc8c3", "sighting--5c6f412d-300a-4973-b2f6-a3873b3c7d95", "sighting--643b173e-9078-4bda-9963-a1984898808f", "sighting--7df4b406-a86f-44e5-a931-2048af100168", "sighting--0afb66aa-a8f6-44b2-ad6c-917dfa5837e5", "sighting--c22ea1d7-ac70-4e2d-8292-bc7e92f56d92", "sighting--916a46c6-0cf8-4af3-a9a6-f2b9001128b3", "sighting--c181eab1-1159-44bd-8a2a-e972d6c9e7d8", "sighting--605bbf17-d034-4d17-9d9a-bc474486657e", "sighting--2f74c4a5-b97c-4997-ac4b-11b03ecbfbc1", "sighting--bb2c30b6-1a78-49d8-9595-adc17d2318f5", "sighting--949ed895-4c34-4523-b538-7d976f76fd79", "sighting--73eb90bd-855f-4268-b172-637ff51401f0", "sighting--e5dcc45c-4b35-4e88-87f1-5562143ff370", "sighting--2f0f58aa-2eed-4ff8-9838-8283912dbf3f", "sighting--6a38a11c-e37b-4395-8fff-7dc3aa2f695e", "sighting--7b61ac36-9e8f-4cec-9d18-a24abaf39d7c", "sighting--95e00e34-29ae-4d64-8961-1408fd3efa8c", "sighting--7fd886b5-b6a7-4bff-a83d-c883a8b2d441", "sighting--e437b428-674d-42ce-8496-19cf9a2c006b", "sighting--3b3874d2-0ece-4147-b58f-ee973e8769c6", "sighting--c9b25c6e-4002-4ae5-998d-edefb6086039", "sighting--807aa66d-e327-4444-8942-ad6bb2dc5201", "sighting--3b320249-0498-4878-aa0b-1f67fab1403b", "sighting--d926503f-32a7-4803-ae5c-399a65aa0540", "sighting--cd9e20ed-a890-4efc-98c9-203ccb0dfbc2", "sighting--9313d631-571c-4369-93eb-98093a351e2b", "sighting--35287122-ada0-481d-94e3-c282f49fbd53", "sighting--0f6c4c17-f66b-4dd9-83f1-52cc28afd3d5", "sighting--bea0af38-1dba-44cb-8f18-926233ca6260", "sighting--f1f76cc9-512b-4858-835a-14f35a08f431", "sighting--9ecfc560-51fa-4fb7-990d-dc33f2954f2b", "sighting--e70a14f1-069c-46b9-ad5a-f36cf87a2a8c", "sighting--ed701954-083b-468f-8b1d-0b0b0c5df078", "sighting--d0da66ea-1d41-47e7-b863-13c457f9c8ae", "sighting--5866d336-e376-4e8b-8ee9-3c6f6e82fecc", "sighting--c9625784-63ad-4e3b-a7d0-a0ee567a2429", "sighting--549dd0e0-3358-48d2-a345-ff35144111ac", "sighting--c67e63d5-0fa0-4cd1-928c-953fd8735328", "sighting--08ba942d-b763-4bfc-8c75-b4ef498c7dc2", "sighting--ebdf16f4-b109-4775-840b-88748f3b9db3", "sighting--0141227d-7a5d-4194-b256-724de8aa367f", "sighting--18ead755-4e1e-4631-b1fd-bfc746d00723", "sighting--843d1aed-860a-454d-a2d0-4cb04bc4d8e0", "sighting--0568b084-a42b-44aa-9970-ce9e1eacbdbf", "sighting--6802570a-b013-4315-a081-8d3e3a171460", "sighting--1dff937c-84b8-4278-a2ec-210455bd55e0", "sighting--e76e5874-6715-459e-ab35-d6391ab46d4e", "sighting--d76d69da-c5fa-4fda-b057-328399515032", "sighting--6fcd58b5-c368-4a2a-b3f8-c778442fe6b2", "sighting--60389023-028b-486a-b2bd-2153db539c05", "sighting--1547a6a6-da26-40c1-a746-e87e4348fbeb", "sighting--7f722879-1b1d-4e0a-a2ac-e2b258397048", "sighting--b28eafba-8e7c-44f8-9592-97a8da74e72d", "sighting--2fcb4544-3994-4e9a-b275-09aef036b4ab", "sighting--8b4a8c48-fb0a-47a6-ba52-e38f94b4f068", "sighting--7b552684-2f97-40fe-8bdc-1c83082622d8", "sighting--c5e83b1f-a706-48c4-87c2-8e9a8a1b3e5f", "sighting--5fc35a5e-c5b5-4600-8903-4f283d635bc5", "sighting--b8f3aa33-3996-4ae7-a100-bfd4c115f8cb", "sighting--a56f42b6-964a-4ea0-bd8c-ca5016498524", "sighting--e9f7a696-52aa-4c9a-a43a-c51a622a9bc3", "sighting--4809b902-dbd1-4c74-8389-b3cf9e1bebcf", "sighting--e59f9f92-c68d-441c-8a84-4aa04a5043e8", "sighting--4a886f65-7c0f-417a-9ab1-bafb12dc2ccc", "sighting--f2833f1a-2f3e-4370-baef-4fbba3a96cbe", "sighting--2e2b95b8-2074-48f8-ac3d-dc66717a544e", "sighting--9d83d7e4-f8e9-45c2-b89e-7e009be7ae09", "sighting--e646933f-641a-42fc-9e93-67f1684b7d71", "sighting--c8df7ca8-2a9f-41d8-aeb1-86dbb45175fd", "sighting--b9afb49b-d265-4cce-aa13-18e0d4688541", "sighting--503d5e18-3cdc-46eb-aea0-74711229690a", "sighting--88004ab5-6a97-4afb-802f-eaeaf4449062", "sighting--971c8fb2-51a5-45ab-91a3-ed439c2445e6", "sighting--3068e295-d2c8-4a62-859e-d4636f570fea", "sighting--60ed2945-aa18-4682-a4a8-1fe7a355ce5e", "sighting--6e7f0a61-0574-4549-9940-ab17130b4e02", "sighting--0a4205ce-170f-47b2-92e0-bc5fde560713", "sighting--8fb498fa-26d6-4ffb-b2cf-9732e8dc3d8b", "sighting--5c040e40-804b-4f30-ad0d-1fbae61785b6", "sighting--92f020b5-d184-485f-aec8-d2e9976a2bc1", "sighting--a5324caa-48e3-4d63-b976-c3d03a22c13b", "sighting--e2f06f60-c689-44c5-a37e-7cc9fef7ad88", "sighting--ee254f90-7cbc-4cbc-b61a-cec10b549ebb", "sighting--10df1190-ce1d-4e55-9303-ebc9b764f974", "sighting--0f605f69-0825-4b60-a6d6-c1ccb82916f9", "sighting--f0c299e6-f984-4a6d-8273-345431bbf545", "sighting--c932ccd9-949b-4d4b-b09f-499764df60cd", "sighting--026d567f-1b62-4a34-832b-781900e675a4", "sighting--03acdd9f-b669-4ecd-bc1c-23d0a2f2bfef", "sighting--0921e515-e576-46fe-9817-bb6ca9b3f897", "sighting--d4b2cad7-4534-4fdc-b53c-ff6da0b8fa01", "sighting--7e8b682a-0ca6-4728-b931-78c4c46eed1d", "sighting--7743adaf-0d4c-4b6a-8b97-013f5108291c", "sighting--2d028bec-59b0-487e-9997-3adfe8a122f5", "sighting--20952466-227a-4c7e-9d26-cb0f57fea68a", "sighting--f179e3d6-9f35-4f1c-b316-8c9741daa966", "sighting--dcdea463-70c5-443f-859d-09eb4a89187d", "sighting--0b00c22e-3148-41cd-b55f-80f9355ae949", "sighting--b8a10517-a16d-4be9-8afd-76c271e677da", "sighting--a547c0f0-b55b-4172-bdbf-d2fb689ed77d", "sighting--cdbe6274-3e8a-4e66-8232-222da46b68f8", "sighting--ae6dc660-f2c5-499f-9060-d71ce22298bb", "sighting--c792f69e-966d-4c95-b87a-d1a5c674ba0f", "sighting--7dae6a8c-8e67-49d1-94d2-15e6bd1d8ec5", "sighting--b213c259-b1ac-4fed-bd7d-f6c967240b35", "sighting--990769de-219d-400a-9784-4d22d935a21f", "sighting--cb412206-1947-4395-8b57-27e0353e9fad", "sighting--9571f7a6-1c74-46c0-9a57-3ecc2da56c56", "sighting--55832580-3181-43a9-8a91-f9453b8caed8", "sighting--5b17693e-b7f3-4084-943f-80bef212c9c9", "sighting--f86cdd7d-aae0-4b95-a9a8-83901b19a9bd", "sighting--73e08321-b84e-4599-a7c9-6e7c18b23309", "sighting--431cb409-8a2a-4bcf-9a25-719247a5a1a3", "sighting--16fe8e93-a44a-4222-b6f2-4d91f050414c", "sighting--eea9dd93-4fe0-4846-a100-ed23592fbf4b", "sighting--136b462c-e7e5-43e2-b611-d90327c4e099", "sighting--6ff721b6-d0a5-4580-84ab-59119d80e646", "sighting--0308c4b9-1777-4087-9035-8176e7f83387", "sighting--bdda0425-9646-4b2f-ba67-ed254ad92775", "sighting--0c0e498b-ac68-4004-9362-38458c51894a", "sighting--48284350-3868-41c4-adc6-93f8da6925b8", "sighting--63b60a97-2e6b-4399-9aff-e6438bab4d5a", "sighting--11c303c4-dd8c-4778-a35d-6a2a819bf9b7", "sighting--1b37fd64-ebdc-4b14-a6a5-21d6597b935c", "sighting--e30785cf-b4ad-4ff4-8d20-e1b20df001da", "sighting--5cddea66-e271-4363-9af9-2bd6c55ee84c", "sighting--d52d231b-2908-4a72-9bea-82a20ccc79a6", "sighting--d2cad499-81bf-4148-8246-fa18a905ced2", "sighting--5e69f29a-ba71-4eaf-9f02-e0f5529bf474", "sighting--be6dafe6-b628-4cda-b72d-104a0c8800cd", "sighting--7b34cd6c-0420-45fc-a110-f4fa44088a71", "sighting--297fbcf7-0e8b-4bfe-b526-708f027064b4", "sighting--a6d72a8c-36ce-4830-9b70-6dd975c866b9", "sighting--c5c4d182-2ea2-44de-a7bf-1cb3625196c9", "sighting--76166ea9-82ac-4f01-a3f2-df814e9ad722", "sighting--96e9cef3-2163-40d8-8502-34239733d8fd", "sighting--3031f7ea-4149-4887-9cd7-61186efaca2f", "sighting--f40c0913-f65c-46d1-a671-f6938651f9f4", "sighting--25466e26-e1eb-44e1-9d80-8721e94f4f07", "sighting--26775428-15ef-44e5-b84d-959cd1325237", "sighting--d042bf59-6c11-4958-8bba-fe9b715604db", "sighting--a1dbff24-7990-470e-8a1c-e2aa96833939", "sighting--e533e6dd-258f-4e14-a49d-5c1eb8062c27", "sighting--8eb21fba-c166-4b39-b987-eb2eed4598bd", "sighting--79f46709-1e6f-434f-8326-94c17ca6b7ac", "sighting--99dec25a-3105-4c83-8ce6-ab1cd543420f", "sighting--879aed27-c538-466b-bc41-1c0d5acca7eb", "sighting--005b025b-e3ec-4417-b396-a17420111689", "sighting--797dc121-cdb5-4090-a2d6-f024804b4c4d", "sighting--ba510cda-add6-43cb-b5d3-6daff2cc91b9", "sighting--93f342c1-aba4-4096-8c07-2c97d98a5c8e", "sighting--dc10a7fd-e33a-412e-beaf-0328d5aebdbb", "sighting--2e39aad4-0697-4b7f-bff4-332f61f0d087", "sighting--59ff80f3-fdba-44d8-8585-e962f51eaf06", "sighting--ed25f361-e97a-47fa-82d1-7eafae48f6c8", "sighting--8a99c700-709b-45e1-aa46-4bf509b8accf", "sighting--75810c6c-5ffb-4c3e-81d1-f0bbf30cc3cb", "sighting--70e3e288-0401-455b-a474-f64dc2f11fbd", "sighting--2edfc7ef-337e-40d5-ab69-cf8ea5f08505", "sighting--2c435da2-001f-4d48-bb06-c72450b0833e", "sighting--24e5f46a-cdd9-4386-8a1f-dade5770ff90", "sighting--b6e37294-fd40-4fa7-bdcf-4c84c15502a6", "sighting--27b9734d-2746-4574-a969-5bab435a12b7", "sighting--7b4dc398-607c-4bf7-8634-52b12af2507b", "sighting--917aa606-1677-446f-9478-ddb0f8bfd9b0", "sighting--83769ef8-0c21-4f3f-bb28-38b90b18d484", "sighting--0d325868-3a0c-4bac-bfd8-64641fadc564", "sighting--0aa33293-6796-451d-8c31-738672eb7cd8", "sighting--4b832575-1db6-4c01-8f32-5806fa0bb498", "sighting--41878be7-953b-4412-9fb7-f13460fcef14", "sighting--d0247d61-6406-4c6a-8ce9-46077e4be509", "sighting--0db8a4d1-211a-42b7-88ff-a845cca259a0", "sighting--c737baab-0be2-4fd6-8b79-28f6ff61c95e", "sighting--866f1937-b487-4db9-b14d-a783e929a519", "sighting--0f4b4970-be25-45be-9aea-ca4eb13ebea9", "sighting--c17d4b56-d5f8-4ed9-a2e7-9ae3aa6c2993", "sighting--1a2e4293-84d9-448c-a558-519c006b6ee9", "sighting--11d6a49c-3e96-4f11-a97d-94b279255678", "sighting--dea6f437-5472-4fcd-8ee2-55e7a4efe3fd", "sighting--e13c1f65-eee6-42af-8ef5-989f5eef963a", "sighting--24392dcb-3beb-4926-b146-53538c48ecfd", "sighting--fd0ab81b-e728-4c89-b10f-d12633199992", "sighting--15cf2c7c-ac76-44ab-8603-c457adb89c07", "sighting--878926f9-f988-4de6-a573-bcadb6408421", "sighting--b9c8a540-0ff5-42b6-85ab-89c8cbe3164a", "sighting--4987993c-53b1-4a34-91ff-f344549b4420", "sighting--5b07cbd7-4652-405d-b753-94348d431e2c", "sighting--43d5d11e-2fcc-4b71-bee7-6c58b894a07d", "sighting--e7e6f664-2bf8-4e7e-8d24-4bce0bd5de98", "sighting--7bbb1a5a-750c-4ee4-a8d9-06dd3e21b384", "sighting--fdfed2cc-2ffe-4a7d-850e-299088186d39", "sighting--e5e9a108-0892-43c4-a040-1773fea33efb", "sighting--7d1c96c2-4802-4f78-8403-3b6091f5e48a", "sighting--d1bd189f-1231-4d03-807a-c89b37c1cc8c", "sighting--31cc4ac5-6a5e-49bc-a88a-5f19c28e9f23", "sighting--33479c63-29fe-409c-a0bb-b72a83067f9f", "sighting--3eaa7a80-0ccf-456a-9be3-14a13e96557a", "sighting--c4e82093-292f-4c95-a4c9-30c5ed9ebb91", "sighting--ea6aecac-49f9-4d6f-973e-9765a96a019c", "sighting--b82debe0-14ca-451b-b092-a643cf83e4ab", "sighting--352074e2-3d03-456c-9a76-2aa3718ab9df", "sighting--0662a213-c767-4e93-be21-137bd5dd3c91", "sighting--fe4f0edf-7c11-4308-a5cc-91d271aa2162", "sighting--5e532abb-64d2-4831-a865-146792ba2f21", "sighting--1903d9ce-ff7b-4516-904a-2ceeee9a3152", "sighting--22d028ae-0234-4335-90b2-a76ce315f328", "sighting--1a621a60-e4ef-4e7b-84a2-c41ce4a90531", "sighting--4006659c-dbd7-4acc-8c34-6f57c2d8d6d1", "sighting--3b0295d4-9c93-41d8-9328-77aa764acd52", "sighting--b7fe77b4-b270-4e04-9aeb-c9e5fb393e31", "sighting--5a46b5fb-24cc-4fe2-bc7a-d8817767bf04", "sighting--22b43b61-7f31-4f12-b422-5e613fd8f3c1", "sighting--fbe53cc3-7c5c-4cc5-8b00-9f47cd001799", "sighting--3fd14ddb-9044-4042-ac77-e59a7b1fdd36", "sighting--b11c536a-04c2-496f-b92e-c8f5dddb08fa", "sighting--96a63975-f0a5-4651-867e-4549dbd96777", "sighting--af6ad5dd-b8fb-418b-9224-15d476bd1bd4", "sighting--c85ab860-da05-45e5-8c0e-efe103e87fa3", "sighting--74b294c3-3ee2-40d7-9bf8-f7e3e73d57f8", "sighting--1a3e5d6f-9b1a-4a52-a84d-7859d9325f7a", "sighting--4d1fca74-1420-4082-b265-b987c013fa0d", "sighting--da51ed3e-ce10-4c76-93c7-8c6708c1622b", "sighting--18af244b-5dd0-4847-9da9-a96614ed1061", "sighting--b344bb77-34f7-458a-9de0-7309ebe5b7e4", "sighting--d2288623-9530-4c2f-97de-7705518270a2", "sighting--003912bd-de0c-49bc-bfa9-cb8065cdeed2", "sighting--0f96d817-63a0-45df-b2fa-b74bd499a937", "sighting--c3b194e6-8aad-42f7-ad9a-e9d208b09ff9", "sighting--558bda6f-c1c0-45bd-ab51-521cf29f65fc", "sighting--b94f4268-6a92-4bde-b0bc-7f6f116323e8", "sighting--cbb8c2d1-e3a4-4e7a-b3a4-e772901337ca", "sighting--d27b40fe-de39-4ce3-b368-4f2a7f402901", "sighting--520ac124-5d50-4a21-998d-ec3ff770837a", "sighting--51481c66-796e-455f-8496-d08e38a59410", "sighting--8742d450-2b40-4173-adfa-cf476a499acc", "sighting--7dc4aae1-f98a-4c4a-8800-76bb05a2981a", "sighting--67be4c3e-d8bf-4960-b6bc-94cfbed8c75e", "sighting--c6332b05-4993-4278-8dcd-48ddc9ad7c9f", "sighting--04c43a54-1525-41e3-b401-fe0e5c65a314", "sighting--cad2e5b5-c194-45c4-8539-de9fedd5c1cc", "sighting--8ec561c6-228a-4536-8649-5cdb70c4da18", "sighting--fefe4f73-f03e-4f93-af23-fc5f68e8364a", "sighting--13555a9a-cc8b-4f04-9c1e-afea52a80e2b", "sighting--877dd85c-14f4-4bb7-99bb-6d081a892765", "sighting--063ffb35-fcbb-4c04-a975-f9f7a685f9fe", "sighting--676d672b-47d2-43ab-9357-2925820d7364", "sighting--6560b962-16f3-44c2-ba8e-329d17765405", "sighting--c85c1b49-d143-46fb-8fde-473068c58024", "sighting--d6df1732-29fd-44d5-bdde-9e19d6f548c0", "sighting--f5d9034e-3226-4997-81cf-596e9a481a5b", "sighting--23791f6b-2d6d-4f70-8450-780ad047812f", "sighting--adc83a8d-6257-462d-a4ef-cd9ee0a0c9f9", "sighting--46b0bada-932e-40f9-9c4f-f148b585db31", "sighting--178cec97-cd47-49e7-a18f-454d0bd89a89", "sighting--0ebeefa1-3b1a-4af0-82c5-5a45fd30134a", "sighting--777ad2ea-64ed-43a1-a8a6-dd37e8f7f91f", "sighting--5c0a2d39-7c08-40cc-af94-786af6e5623c", "sighting--dd20fb11-e3fb-440a-b137-32978e2815bc", "sighting--e09cae25-9127-46c2-9921-b36e9351c824", "sighting--41595f2c-a0c2-42f5-acca-dd1ac3b53f99", "sighting--7b29bea2-54ac-44bf-ba9f-6ad134e325d5", "sighting--5fe01776-13f0-46f8-a9f8-fa6d329266ba", "sighting--77975972-07cd-40cc-9006-e3e36fb4db95", "sighting--f40ec21a-a794-479d-a34e-a10baf31b152", "sighting--3a880ad5-512f-44de-9161-91c52202e447", "sighting--090891d8-1817-4024-8ee6-3a732727a3e8", "sighting--b626b261-0c5e-4fcc-89ea-f0cbe3d8a365", "sighting--a5bbb3a6-053a-48a6-9957-ee5c83d59000", "sighting--a2e74eba-688b-4f00-ba28-db8688138db9", "sighting--fdf8f3da-c6c7-4b55-a605-b253e51e1ac0", "sighting--dea04efd-018f-4c16-aba5-64979cab7cef", "sighting--d9e477b8-7122-4f00-a7f0-abbeb916938d", "sighting--503fef58-21ce-4d3f-84c8-e9b0bc1c517b", "sighting--cbbc169d-bb33-4851-8f7d-fd0d44111f33", "sighting--3ebee29b-58f0-4dfb-8875-4739373cedd7", "sighting--c15244f1-b903-4007-97f0-0b105a8c3480", "sighting--b5a4379a-b8b3-40d2-9b5f-edd0db56ce05", "sighting--ec6c8cba-6cbe-43de-803a-fd246029f5d3", "sighting--945e36f3-5979-4cb9-aa2c-47e39bd518c4", "sighting--969f9452-65b6-4a34-a9ee-f33f8e71782f", "sighting--6434e26a-528e-47ca-bbdf-2ca616b3d0ed", "sighting--7147b4a9-38bb-4541-a056-6a81f41c27f1", "sighting--1f13dd55-979f-4f9e-80b9-1dd2aceb693b", "sighting--475e8eb7-67b9-4087-abf8-fadafbe0fac7", "sighting--8f40fb1a-5bbb-4b42-b9f9-6092abc9b5a6", "sighting--f2e6aaac-5687-4de5-a216-866f0b4a9d27", "sighting--53ce8ec6-1316-47da-b8e6-b0c9bb372d86", "sighting--97d0743a-e912-43f3-9635-289795596315", "sighting--a12356db-2508-409b-a6c4-19e459d05e79", "sighting--9b407230-59c2-4560-8dcd-0e8fa8d38948", "sighting--7389c77b-cfed-4afb-b296-b70ea4f3efb7", "sighting--848c738b-c4b0-49a7-9704-253ef26ff263", "sighting--141c82a5-62e2-44a2-9b0d-9f918c9a78ac", "sighting--53f3c1f5-4b3f-41bb-aacb-3480e19be5d3", "sighting--4c3d5fac-14d5-4bb3-a2c7-4ec8e4096db3", "sighting--aa8743f8-dbe7-4921-92ed-9dbf555e47b7", "sighting--61218cb1-d2a7-4bf0-a6e5-372db0d23228", "sighting--d3069df4-d105-4005-8d8b-fcb45fd92343", "sighting--5ecf3940-3e90-4340-935c-d5460794bb36", "sighting--e855a123-dd94-4a66-88d2-99e40ad43ceb", "sighting--f8f98a39-02fd-4d11-bb8b-9c425783e1ef", "sighting--8e670fe9-637a-45f7-a94f-406606aee0a9", "sighting--a91e401c-59f7-47a0-a3c0-85d1793ff157", "sighting--29e5d09d-271f-47e7-9fae-388ce75ef347", "sighting--3b239551-7927-423d-9208-db4c664edc99", "sighting--9b07b378-37e0-4ace-8b8f-c7090374b44c", "sighting--67263ca3-e9be-40f8-abc3-67b676b56ec7", "sighting--b14370c6-bf95-49cf-aa4e-738ac561c579", "sighting--22e31d9a-22a1-4c91-8f29-432b1caafaa6", "sighting--c23ef2af-75ea-4d5c-b535-962e7c0cc874", "sighting--5b748dc4-04d9-4d58-a6eb-8f186b545877", "sighting--c42e0489-0071-452e-86e4-7160aecf3c36", "sighting--05e0dacb-ef2f-465d-80bb-9ef6580aa045", "sighting--194a262f-2f84-4524-b8fe-d7a8a068e8d1", "sighting--80cc45b0-41fe-49c6-98c3-e0678ae77338", "sighting--258508ed-eca9-480c-aaee-147de155db6e", "sighting--4ae24c5d-c74e-4cf6-bacc-3d4cdf4d6390", "sighting--e79bf15b-dc30-42bd-8cc0-a914445e51eb", "sighting--d15e980e-ce66-4d60-818d-8ee767bc3e05", "sighting--d5b5c0f9-bc7b-4d1d-aabe-11963c00406c", "sighting--599d55b2-6c79-4001-a420-a38be655d345", "sighting--24f4f827-0d45-465c-8195-60a510eef133", "sighting--8b626081-8785-4b48-b38c-9ef015d442f1", "sighting--e45df234-0318-45b4-9522-66e662b8de29", "sighting--fbbfcc79-9756-4997-8ca8-04676c9f3862", "sighting--e313a2b1-dc21-4ce0-87f7-a1afe0daf716", "sighting--6985c96a-61ab-4e3f-94d7-caa47c58cd69", "sighting--9fe364e3-b2b6-46f7-ac41-841748c1d468", "sighting--b8eed438-d037-432d-9d7b-9bfc6aa0b1f1", "sighting--831fbf37-3929-44cd-b191-480171572993", "sighting--8b39784e-412b-4c82-9001-5677f2136f8d", "sighting--693918e9-9b12-4b9f-ad5c-aca0586c64f2", "sighting--fc984e07-ad27-472a-9717-0441e5d428bc", "sighting--b16a6880-3eae-4dd9-8963-65005a367938", "sighting--d7a901c4-4062-45ed-b8a9-de6ff8380663", "sighting--c3ae0295-4d1a-409c-8681-d4986738d218", "sighting--ef3ad674-7019-480a-968e-8697ae3d2cc5", "sighting--e7e1215a-c035-44fd-93fa-a2a33fda1b64", "sighting--20f9a9ab-3eeb-4f5a-992e-ad43f6b4e929", "sighting--97d968cb-319c-484a-a09a-931b8b8545e0", "sighting--655e7614-f42c-4053-8b86-3e4d8ba1bf49", "sighting--b8b6d5ca-9907-4018-8f63-c48c37be479e", "sighting--a2e66cf1-d0f1-43cd-802f-c2fa2cc9c648", "sighting--7506d7bc-6205-4ffb-9cfa-3f8c32197629", "sighting--41f6a342-a6c8-41f7-9962-7083c7d738b5", "sighting--3219ea9c-58f8-419e-9c42-01671fca2079", "sighting--017ee02c-298f-4286-ac33-048fa7b11763", "sighting--2e1a39a1-731b-47d4-8868-f301feb51b35", "sighting--78fab224-250c-4261-87a9-f36cc70ce4dd", "sighting--a2fba60c-1856-4492-98dd-c1c28b48a4a2", "sighting--6304fc39-0fd0-4f01-bdd5-6e2de5c39c26", "sighting--abc9b245-a7dd-486c-878d-d447aff07710", "sighting--999db6f9-e4e8-426b-abba-5f5a56293ee9", "sighting--339d1b1e-d5a3-4ae0-afb3-398302df3a4d", "sighting--886ce6d6-f9bc-4b97-ad58-680aa62e8a26", "sighting--31786acc-8be2-4a7a-a52a-bc2f46032c4e", "sighting--6d00f3b2-71be-4072-9005-9b5888b1250e", "sighting--68efd82c-2a48-419b-88d1-3f69e15c8dae", "sighting--6761ce76-d20b-4a9b-ac73-0c07b1033a39", "sighting--e41aee34-2eb9-4047-a9e7-7b5bdc75eb70", "sighting--5d079dfd-5deb-4014-a1ad-706c8bd9fddf", "sighting--6205cced-8324-43f1-bc6e-e40da6f8bced", "sighting--1cd7b67f-0e97-45a5-9ef7-f03cc2b7d68f", "sighting--e89c63a2-a260-4091-a32c-db7e20eef663", "sighting--c0ca0b5b-8b5c-4de4-a37d-d7594d495b84", "sighting--dce58b54-07ca-4053-94c8-b1e9304d49bc", "sighting--d3c8f5de-62af-4a52-b84d-1d2c9717a93c", "sighting--88cd5fb1-c79d-423e-b156-9238246ee68d", "sighting--48547724-6946-4dbf-bd45-84f844c708ff", "sighting--67435cab-bfe2-4ff0-962f-416c5c51f866", "sighting--a94ad258-0494-45b5-8a4c-d2db1dd0a3d6", "sighting--23ad9722-fe42-4ceb-9d53-c965a2c70985", "sighting--6bbf10eb-6660-40a1-bf98-c4393cb0944f", "sighting--ba0bacba-daf9-42ea-ad83-eeb4c5aedc02", "sighting--46d67972-4982-42c3-9577-fe4d37edb02c", "sighting--e407cfbc-a937-4356-b828-40cbd39e61f8", "sighting--f49c82f7-7665-4a01-9f5f-e8250525939a", "sighting--7ab63f1d-3bd7-42d1-a3e5-91dfb382db29", "sighting--9d7cc512-96c2-4f8b-9647-a30adb6a1ad6", "sighting--529cc8c3-8bb2-4405-90a3-adddb66d733c", "sighting--902e4bdc-ad11-4409-a5e8-39195b6f9fba", "sighting--b53512f3-d24c-4f0d-9bd5-b30db5472a84", "sighting--bf034bfa-97d1-4104-9148-4e75f7a40c62", "sighting--57c44573-7fc0-434b-aa97-17cdf89367b1", "sighting--e71c2b0a-1197-4240-917d-18462c3ca9a5", "sighting--b495a089-7c55-426e-b7f7-eb17cbbdae16", "sighting--ac91322b-89e6-4c40-a136-4bfef531e815", "sighting--6634db28-39de-4409-a4ea-67ffb2b82f92", "sighting--05a587c4-490b-4fa4-af69-1c446bbe08a0", "sighting--3e57b753-b684-44fc-83a3-d43748c0af9e", "sighting--8352cfd3-4e9e-4046-86e7-639a9ba63811", "sighting--b0571670-6127-40a7-a55d-85eb2ff5c02a", "sighting--733629a6-dda8-40bb-aa8a-03771c74e9e2", "sighting--1c548fda-3ecd-47d0-a08b-736678d22fb7", "sighting--02b8d4f7-d9f4-468a-8b5c-3a35f5940520", "sighting--75e94d54-0b59-44a0-8b93-b2d69297030f", "sighting--6b2b05ab-dfda-4c99-ab38-f0b45814094b", "sighting--cf05632c-3000-4839-9d29-b4bd239b2b10", "sighting--50ae84af-e96e-43ab-8748-018b2412ba18", "sighting--944d79ea-a9fc-428d-a573-619250ed61b1", "sighting--ebbb2f29-e0c2-464b-8b37-bf89359106df", "sighting--683f34f9-9bcd-451c-a93c-944d30b0de08", "sighting--59f9b12c-30e6-4be9-b423-6c754bb25219", "sighting--08e29989-d4e1-4fcf-831c-568de0711a49", "sighting--58584e70-a307-4c33-83a7-1a649fade14a", "sighting--5df298f1-7b76-4663-9328-b81a632de4ee", "sighting--d39115d3-135e-49e5-b4b6-fbe51fefe47c", "sighting--8bda31e6-1e58-474e-8061-a96e3e62597a", "sighting--71a9d937-4970-40b0-b93e-9093440a76e8", "sighting--f746aa73-1cdd-42cd-b938-1a1ea1245189", "sighting--ce34577a-35a1-408e-b027-ebd75981d6d2", "sighting--fbdd84d3-846e-456b-bf7e-226f955a209c", "sighting--a0efa4c0-566b-4b0a-abe8-2b3a5f91e45e", "sighting--69a03f53-7251-4123-8bdc-a0498aec4704", "sighting--33d7c50e-f705-42c3-bcb6-d597c5161245", "sighting--3511b5a6-f99b-458c-afca-a6a5d3eaee53", "sighting--ff738f9c-faa8-44f9-97df-9c497c335bf6", "sighting--d38ea10d-9456-4862-9dcb-719cb0a0841c", "sighting--9c3e5e76-e371-4641-964f-f3050affa9c4", "sighting--e70ac8b9-204c-4b81-8cc4-4ba892a25112", "sighting--c4678c78-7551-4992-b201-bec78b7b5f4f", "sighting--115e2428-7960-4ea6-8aec-7d1b1504fd04", "sighting--88fbfa0f-5ba8-4e0f-a8ab-9726ee6be41b", "sighting--922958b9-d23e-453b-99d7-fd53a13d0cbe", "sighting--af802b48-79cd-447c-823c-b445a94b9dae", "sighting--8c9b47d3-a298-40b4-9f46-1f18cae6978b", "sighting--657e50ba-373f-4628-9536-630c51f6183a", "sighting--f12960d6-982a-4dc5-8426-8f5f5380c3ba", "sighting--6af3adea-073b-4190-806b-adea976b73c7", "sighting--82f72029-73a5-4bcf-b1ae-470063a389bb", "sighting--4b9c071d-6b0a-479e-90b3-c40edbe34e94", "sighting--54dbf0c2-0b4a-4070-927f-761e9232452a", "sighting--67fa2c58-1766-47be-a23c-2695dc0e0e79", "sighting--2d1477d9-0755-414e-88b7-0207962b847b", "sighting--d51edb1e-d693-4e38-8444-8718c5d8b50e", "sighting--020d74f7-fefd-4010-b83f-cac6959fa9a3", "sighting--5bb547ed-3aa4-43a7-b77d-fdf9e87f03f9", "sighting--cbf57dfd-7a9a-4e00-a6d7-6db27a6f8de9", "sighting--4569bc1d-6bb9-4a19-8da5-6d7b13e6db35", "sighting--2ae6bdf3-73ac-4eef-a83c-b6e04b6362e2", "sighting--6bc500b8-615f-4ba4-91da-d5666a5006ff", "sighting--37231a8a-1390-4ae2-b75d-ecf44d52ec3f", "sighting--80c8f08e-5898-4fad-99db-2b5f1a74451c", "sighting--87ee6134-54d6-4b70-97d5-35f203830e69", "sighting--8a728ce2-68c6-4c58-9477-3f6deb914234", "sighting--60ef49fe-d87d-48ee-8431-53698bab2ea6", "sighting--0ebeb00e-ca37-4c0d-86c1-b684a08c3e27", "sighting--6c21ad72-7433-4211-b0d1-4d77da714599", "sighting--4725e115-740f-44b1-86f9-cdf06c80b9fa", "sighting--7d23046a-c395-447d-bf3a-736a6e2f388a", "sighting--8b3d8874-c246-4a4c-b777-ae654a73ba5c", "sighting--87692926-4fb6-49d6-82c4-fc9dbbaa34e3", "sighting--b5e69e8b-f081-406c-accb-3bb7913b8579", "sighting--e8855fcc-0aff-4a71-9038-e40ebc41e2aa", "sighting--93b155b3-2b55-476d-b9b7-5fc76b0f5d89", "sighting--306e37dc-402b-4659-97df-abfc9fcee061", "sighting--6e147e84-c246-4030-bb76-1602d694d8b7", "sighting--b4f1e23d-6020-4f6d-bd65-72d9809c4e8b", "sighting--83bb859c-0df9-4573-8eab-5d4e7ac4242a", "sighting--8536af93-774f-4138-826b-6c864dd8ba01", "sighting--7be691a6-6ae9-4aef-a8dd-e72581bd0a2f", "sighting--806600e2-2d9a-4c4f-9df7-23af8a393a4e", "sighting--1a2faf14-8619-40ee-916f-b2263a711f7a", "sighting--a8f8c5f4-300b-4f04-a6b5-f7dcf3af2f35", "sighting--4eb322a3-fc08-40f5-ac80-50f925b4b167", "sighting--68a475fe-88fa-41d4-ab05-68bac34d905b", "sighting--f64992e9-9f3b-4ed1-9f0b-2bdfe84bb7cf", "sighting--6b01dfab-f6b0-421e-96dc-763c74e33b20", "sighting--a7ebd1d6-30cb-406f-a9dc-9aab13048152", "sighting--b71704a8-5f74-48da-861c-8b66b3cabd88", "sighting--0499e744-7c2f-47b9-b804-196dcaddadd4", "sighting--bd4c7b34-a367-4462-a17c-015ff1518c42", "sighting--bc9b0b7d-582a-48f6-a9d9-35a925c571a7", "sighting--194912cf-3d2d-4196-9f99-0745f09a7a3a", "sighting--41e924da-3d66-47fd-98ef-d93459abe981", "sighting--c244e87d-63b0-439c-b270-673c67898cac", "sighting--93614bad-33ad-49bb-ae73-ced021242d09", "sighting--a19c161a-ca80-40e5-95ae-c8e7d6b54ce9", "sighting--b977aaa8-aed6-4501-abde-28b1abe72317", "sighting--477dccd7-d959-49f8-aed6-98152057cd11", "sighting--bb7cba28-d18a-43f6-bf38-46a0f1f6e149", "sighting--b107afbb-7e2e-4c81-b70b-1688c0fc2891", "sighting--7c1be03c-ab46-4cc0-8153-84424251e78f", "sighting--551cc62e-7eee-497d-8adc-7eae603a2d85", "sighting--2f108ccf-bf56-4a78-ab00-821da6f88db0", "sighting--a32c448c-b7d8-49c2-9cb6-6d40ec30ce4d", "sighting--32e4f043-0902-4995-9694-46ed420e515d", "sighting--f0eaf9b0-320f-47a9-b32a-905fd74b839e", "sighting--aad0ab95-a9f6-4274-b11f-28ed1b81a583", "sighting--92edd0bb-ab38-4230-b515-947ff6771109", "sighting--f056dbe6-ffed-4ef9-b775-b5a9c159976f", "sighting--0a04437c-c0dc-47c3-ae6f-2c5bcc31d5ef", "sighting--808f00e8-f057-46d3-a4bd-3e9a4c4e9799", "sighting--c2de7caa-ae48-42b4-9667-9c228b83936a", "sighting--ffe637d0-f275-4e41-8a5a-f2d9ed9c9982", "sighting--e94229c2-5448-4dda-ab5a-2b81897af147", "sighting--44538a2a-5160-48da-a9a0-018f88ab4565", "sighting--aa3800b4-addf-4cdd-9558-4d63eae2f5cc", "sighting--9ded74bc-c4cb-4d0c-87f1-ca2b7f89e374", "sighting--fd84b140-429f-47b8-b68a-28fdaba0f220", "sighting--10b6a14c-10e3-489d-a293-d6e0345caf39", "sighting--76a2cf47-0428-433d-be4e-48e1337fedae", "sighting--00b50db9-bfb0-4608-8d6e-3fa2a2de37a7", "sighting--b860054c-aef0-4a74-8294-0a83af804ce7", "sighting--cb335ba6-b8a6-44c0-9b68-28c0a81275d2", "sighting--d0b9732f-c200-41f3-8e0b-0e9c0a072932", "sighting--8bb396b9-42ff-49df-be8a-3e24d817ce17", "sighting--c80b03e9-f595-45e8-8e6d-d6714d141cc9", "sighting--205b3b92-df74-4267-b8c2-3d3f8db15edb", "sighting--34a4dd5f-7f08-4cab-8e07-8f9df48baa0e", "sighting--30149fa3-2d5a-44d0-b014-8beb202f7803", "sighting--72f9d79a-af2e-470d-b859-7be4fff61e78", "sighting--f95a61c5-b30c-419a-bad4-c484eca233ac", "sighting--82becdc6-fbef-46ef-a68d-6fb90e5c09c0", "sighting--6825e9ba-2d9a-4b27-bca3-c09373f0c378", "sighting--07411398-2dcd-4280-83f7-65f79460be7c", "sighting--55c17077-e46b-40d3-8c16-6eeafbc1d1cd", "sighting--0f737a6c-8895-46ef-9cdd-72a2d366c63e", "sighting--631ea366-77e9-4aaf-8759-1bb965b12bb4", "sighting--131e3e64-d738-4e55-876b-9cae75dc6098", "sighting--635b41ff-29c2-4d43-81b7-96ddfdceaa24", "sighting--d2af50b8-94ce-4874-ac0d-86858660ca3c", "sighting--0d5191dc-22a2-4099-8567-d48a86561377", "sighting--80a1fbcc-bc75-48b7-98cf-5f99f2b19a2d", "sighting--411a4ada-dc6f-4b90-83e2-cfa7471e3d8d", "sighting--b2ae2aa2-dbd1-42dc-8296-d69ecf972c0c", "sighting--64e903ba-3b18-43f8-ab6f-40a5c84ce018", "sighting--35b44fe7-a52c-47d5-8e18-c1c1f4a2ef71", "sighting--d61496d3-1c4e-46d1-8ea1-60f70c5c961c", "sighting--b2470fbd-16dc-4f88-824a-e4200a28e020", "sighting--60500320-4b4b-4330-8163-2e5cac6777d5", "sighting--a19b4a22-388e-4571-b78a-026159159a2c", "sighting--cfa3c8d6-804b-4362-b7be-f35ec3a9f216", "sighting--446c10c7-9dad-4a13-abcd-62b656243971", "sighting--3d817ee1-e07e-4fbd-beed-77f498fd9c8a", "sighting--6cd69754-0469-4887-b36d-c6a6b110cb05", "sighting--1e26e319-9c56-4af2-a92c-708df34d5703", "sighting--fa2898ec-a0dc-4e5f-8abe-b4d070cf2a66", "sighting--126bbeab-ee01-49be-a3f2-566605eefe2c", "sighting--fa15385d-861c-4adf-8196-9b4de589ddb4", "sighting--0ef0a311-3036-400a-80c4-0398cab75662", "sighting--e27dc2e6-774b-40fe-972d-c2834df4826d", "sighting--8aafa9c8-58f6-4803-8ac9-650cb229a523", "sighting--d58904c4-47f8-42c5-b8a0-579e20b9c4bc", "sighting--73493c92-14c8-4e25-aa02-5461f1be823f", "sighting--cc5def50-051d-4342-8581-dd2a8ce8d2f1", "sighting--97b1a7be-c232-489c-830c-7ae6dfaf8248", "sighting--b2535c58-b452-432e-a30c-371fde2ac23f", "sighting--4d804713-68ad-4024-bf9a-4df9fec8f05f", "sighting--6d192e19-b6de-468e-9279-0764dc329665", "sighting--16e69420-5deb-4997-9cdc-662c849a67f0", "sighting--3c41c454-6c22-4d26-855c-5c029a641aa0", "sighting--31fbdf86-b483-4e76-846c-09f88673e087", "sighting--386128a2-b5cd-4bbb-bf59-2837302dd422", "sighting--d434c62e-ac28-4563-a443-a9352078ab48", "sighting--3d9b676c-a781-4a54-99f3-8d4811620bd0", "sighting--95bd588a-bdc4-4848-b734-9c0053f8d8bd", "sighting--9a26fa5d-8e18-4313-ad8d-41c5beb86203", "sighting--9f34e70a-0086-412b-a357-74719ff626e3", "sighting--4722fc6a-aff9-4683-8063-4dfd429da67b", "sighting--11ec9111-952e-405d-86fc-43ad6896f4d3", "sighting--2789d684-a9fe-435f-aae8-7628588677cd", "sighting--9481c268-2220-40a8-b489-ac7ab835850a", "sighting--ac994066-5068-4e7c-83e7-1786b02f574e", "sighting--228e8ed9-6fd4-422a-a5dd-f3940672884a", "sighting--d120944e-61eb-4370-ab65-74f481f18fc6", "sighting--b837d501-efc8-42f0-aa78-fb07399c21b5", "sighting--87f541d3-1774-447c-9d7c-5fd38ed9842c", "sighting--516de1df-a388-4bed-b92d-a29ef5bf6a96", "sighting--b8fe6699-d3e9-42dc-acde-b6fdf3aee3d2", "sighting--9e5242c4-aaaf-48ff-a17c-b80ab6d888a5", "sighting--a4c2a5ce-e9cd-42b3-8705-f211f215bf6d", "sighting--efe62a58-e69f-4a8a-9f9a-05a7f7fdd83a", "sighting--48ed3c2c-c92d-406d-9ab0-b4a6dbe56f47", "sighting--3b30298c-8716-44b2-b8b2-96e83a073402", "sighting--c2398746-8a75-4c36-921a-eb6b5622fbca", "sighting--be52556b-d704-47a7-a776-1ee3197d2c6c", "sighting--cc4b9988-3e06-482e-8285-1cefd48a41bb", "sighting--7f72baa5-7630-42cf-8356-c7f3fbae139c", "sighting--7acfe9f4-8d00-4499-b1d4-122fc139ac76", "sighting--b9e46959-9f57-42c8-b587-42a4ec4262fe", "sighting--50fe0178-f76c-4295-862f-e5d86efbd234", "sighting--7858a9b4-7c7d-4000-bd43-d45420f1f2bd", "sighting--e2fbcada-6053-4a10-9a20-3b445814f56c", "sighting--57c7d7ca-7e4b-4e54-9297-d9dcc5e75e2e", "sighting--6e4fe151-a7d2-4ecd-8ce7-88b84abe4c06", "sighting--bd46b3d7-a4ac-49dd-a31d-88f62b99847c", "sighting--b53a77d0-2938-4eed-abac-8294fbb1fa34", "sighting--6d5d4b0b-37d0-47c5-ae38-ba2ff7f16433", "sighting--28c9cf5b-d409-4171-9a5d-dcd9dfd5c132", "sighting--f572e397-81fa-4c1e-9c28-766a91d8aae6", "sighting--b8f0f0b9-9f49-4b92-a625-7f1d9a761e1d", "sighting--b97015c3-c742-4266-8bce-1eebba363a2c", "sighting--b85cb22d-dd2f-442a-9a06-b08f6ec63755", "sighting--d9deda3a-42e8-457c-8a69-42a7bf33b0e7", "sighting--9a874826-53c0-4d3c-b5b0-36f345dd6fcd", "sighting--63cdfc51-c8bd-4dc6-8b9c-a5f6de93afd7", "sighting--8232dc5c-64d0-4e6d-80ae-ad48c9b741da", "sighting--5cd75c61-6dc0-4394-acaf-72b35b94e4a3", "sighting--643b7805-1b3b-43f8-8195-b80b718721dc", "sighting--9f34a92a-faa1-4f4e-9010-9ca0eaf8da7c", "sighting--e36d021d-9f67-42ff-97b4-22ad308e9c37", "sighting--049e0bc4-9096-4063-ac14-6bd08134d669", "sighting--75f03934-b8dd-464a-80af-4a351337ff92", "sighting--02bf794e-01b4-4f27-bcab-e6ace69dd093", "sighting--e7b224f6-0a95-42e9-b9ec-b1cc147e829e", "sighting--f53219dd-f269-464e-94ed-e047fa0abfa6", "sighting--ac427374-ec4a-4803-bf77-c53b498bc0b6", "sighting--d68abc06-59ef-496c-b9c7-4f60dbee7b82", "sighting--0ce10a9c-1d5a-4659-ab84-e2f1f8bfd102", "sighting--23ed1e9a-232e-4221-801d-69f0c22b3d75", "sighting--61c631cd-0a99-4d52-b64a-7af6025bfcf2", "sighting--423943b5-2823-45af-a80d-432c726dd787", "sighting--eb949264-6a7e-4188-ab8c-933d216f26fe", "sighting--a23e8751-b3c0-440a-96e3-2684b2971c7f", "sighting--00495ba1-3c3e-47bd-b3d0-24eb696f7cbf", "sighting--fa000707-7ca0-4d17-9d5b-8cb40d0a1d94", "sighting--a3bcc86c-f02e-46e9-af87-737752c222cc", "sighting--d63da847-5f6b-42c2-86b0-efebef875e60", "sighting--69e59410-614d-4d5a-b9c0-c0a6572cf180", "sighting--26483ba1-5e96-4ae8-8863-30a9beb73388", "sighting--69031ccc-8e14-4f6e-9695-cb324cf504e1", "sighting--c8ddf53e-d145-42eb-92d2-d2bd37b91346", "sighting--ac842f55-4e48-4435-b9e0-9199a2dd5946", "sighting--fc18f038-5348-4104-a39b-27585605197a", "sighting--c636e3bf-b942-4980-9a30-b61c29e6cc59", "sighting--59655e23-02cd-4f45-9f86-7fb396832fa5", "sighting--007bc15f-8a55-4817-a300-c243c504235c", "sighting--da67c0e4-269a-4a79-90c5-7b2c0690c5ee", "sighting--508cb80b-480e-4181-aef1-2f24b8e8a45a", "sighting--94bc71c2-2073-4ebb-ba4d-4921db7494e4", "sighting--85ed5dd6-9759-4da3-8fa3-7e453155dc4a", "sighting--fd76ae78-d93f-49fb-88da-4a6ba9a1d20d", "sighting--1ec205bd-3ad8-4090-a883-a00dcca482ac", "sighting--6a47915c-9b62-4651-827f-d9ba2195257e", "sighting--1808faca-7ce2-40a8-9908-ca306196f539", "sighting--391b1f98-54f8-4a4f-a346-6920a552f91d", "sighting--d41af443-b82b-4a7f-bc54-5d76d8dd4920", "sighting--d6ac74dc-fa26-4301-b775-bea0c1216e45", "sighting--d755cffe-9636-4d1d-9d51-2abb95dcf41b", "sighting--be08866f-bb0c-4414-aaca-4170eb25aa2c", "sighting--afbe4186-60b9-434a-b34b-a57ffb961980", "sighting--f5e95b0e-9342-4352-9de1-4d798987db36", "sighting--56d6ce1d-d637-45ba-89ac-63c954bd82e0", "sighting--4fe88eb7-46df-473a-a5d4-f5dc22a00902", "sighting--8126016d-788f-47af-8704-ca61f3ac7b47", "sighting--d1e3d49d-255e-47e6-a8a0-1346aa775bfa", "sighting--e49a7a8d-f9e4-4087-8051-41046f902d4e", "sighting--47a8cbd9-fada-49fd-a589-e52353cf6cb1", "sighting--aabac0f9-a70a-4869-9150-7047d3e7d893", "sighting--81e4b90b-96b8-4c76-8376-78e506ccd09d", "sighting--2a9cfea7-0f63-45fa-96fb-73491569b36a", "sighting--972daee0-f653-41ed-8f3c-12665e4e7268", "sighting--5272b7f5-9b5b-4245-9aac-5f80b78793e9", "sighting--28191056-61a1-46ea-b6fb-18c0c1e46026", "sighting--0f5ec78c-a24a-4d9e-b347-0ba2c8d0c37e", "sighting--ea62e979-b57f-42f5-99da-9698a9d131e6", "sighting--cbb09e4a-214a-450d-b1b4-2573946faa0f", "sighting--598f72c4-dca9-4773-acb2-64768e2669ac", "sighting--aaad5e51-67ca-424a-b264-ea2be77390ff", "sighting--ca666267-ee5b-483d-9168-3fbce47ec1bb", "sighting--8ee78f04-365b-4c45-bc9d-13920cf3bad9", "sighting--0b047352-8424-46e2-8527-817ed7034f49", "sighting--e2fd41ca-6a64-4c3a-a69b-a3884026c3ea", "sighting--729c354b-3069-4c47-9228-d971c0faaea1", "sighting--d890aebf-f6df-4ae3-b2ab-2445c20db351", "sighting--817bbc3c-eebe-4d0d-b9f6-13e2dcc7ba66", "sighting--130f55f9-a92f-4fa1-bf4c-976ae8d4bd55", "sighting--5a26ea6d-3d5e-4bc8-a901-ca9971b14b60", "sighting--f58075fa-8c0c-46bf-8ebf-e16118ac9a74", "sighting--561ef36d-e9ce-4fee-9ff6-b4884463cf57", "sighting--2f707238-6f1d-4571-a6e7-6ad905b78bc7", "sighting--44d5d0fb-5496-4bfd-99e7-f453a46b6bdf", "sighting--ee623c86-5b21-49f5-a4f0-61cd4c76a9c1", "sighting--39afb56c-ceaf-44ce-b921-c62db6085088", "sighting--910aad18-d7e5-4d03-a032-c8f0559fcdb0", "sighting--cfcba373-aa96-4e99-8010-5b54d381bc72", "sighting--32b55cd5-0710-4e33-ace0-5e081faea40e", "sighting--0b779ad9-1102-4d85-87a5-7646d26bc8a3", "sighting--a7c01123-ac49-4f0a-b20b-f46c7104e87a", "sighting--11feab9b-d4f0-483a-8cb2-f3165832c9d8", "sighting--4df495d1-94a3-4962-bf45-7ecbffead487", "sighting--8a8aba53-5c84-440e-a2e3-a1f141d55b86", "sighting--ac4dd820-65d1-40bd-9b58-50dd1c51519b", "sighting--6139bc2e-28bd-40b1-ad7f-5f161842b2fa", "sighting--4b8b5506-0be5-462b-a550-5f17d79ebdd6", "sighting--e0a31920-45f5-4f45-8c40-0d10b84db976", "sighting--7924abe2-8c7f-4cf9-beb0-6458d5cfee18", "sighting--be1b3d1a-bd59-4892-a29e-84935e1c77cb", "sighting--74897826-7da2-4161-9a53-6349f306eec7", "sighting--1d1064ee-9887-458a-a2b1-8ef214a3c6e2", "sighting--512be45a-4089-47a1-a6cc-e537979b044d", "sighting--6faed614-87ae-41d4-ab04-0a67f6f3760d", "sighting--ea7da731-a973-49f0-93bd-aa2f3d13c474", "sighting--23a2f045-d64a-41a5-bcc2-d5909363ec9d", "sighting--edeca98b-df2b-4d58-bc62-77e8f04ed07a", "sighting--e4eecedf-6616-45b6-86bd-33327413caea", "sighting--ab188f89-2e02-4783-a24c-99c6a7298ad6", "sighting--6c0f13d0-5c53-4617-8018-bb8f69475783", "sighting--3f728e47-cd3b-42e1-89aa-93cfefba4e7a", "sighting--3581fb4d-07f1-4ac8-85d8-e14e6201481c", "sighting--fe38a552-567e-42e3-b4de-a5a70b449613", "sighting--b861364f-f8bb-4b0c-b7ff-9fae40cf9867", "sighting--d14a1d58-3cfd-4cdc-b4c1-cf62961a026a", "sighting--1c524b1e-3b78-4f5c-be43-bc6d80ee58b3", "sighting--b7d93bec-1727-413b-9172-69b0778a62cf", "sighting--088e54ec-5ae3-4b9f-a77b-702c8d8c4b52", "sighting--285aef99-b710-40a8-b613-1c7a17fd9ba5", "sighting--a46a90ec-1ba8-45ac-ab15-ebf9c4b1941d", "sighting--db090911-0223-4b1a-aad6-af5643195bdd", "sighting--742ad4ee-270c-4e2c-9ad8-6b706815543e", "sighting--7f3f8c9b-58db-4737-8cb3-cc47d0978508", "sighting--e4bcc2f8-f5c4-4b04-ad10-e0aeeb7c6ee3", "sighting--a9ea4956-2406-49b6-b93e-ccd6cef13b3b", "sighting--66e25dd5-7ef0-4d0a-8f2a-0928900e4718", "sighting--e3571813-90cd-4148-adc7-e3423ee0444d", "sighting--a9e4b3bf-211f-46f9-ba17-fe2d356a89e3", "sighting--6bc1318c-df09-4301-80dd-6c300db52a87", "sighting--b7b1ca0a-a537-4d9a-b0fe-4d4139ba0a24", "sighting--29607f17-743d-4b22-8d87-511fde0f9092", "sighting--0e2ede55-5bf6-4fbb-a89a-ecd415e8d6cd", "sighting--f35261e8-293e-42ef-9226-91c1636c5b3e", "sighting--04893d85-72d4-43c1-901a-ebda285aaa90", "sighting--977727b4-85ec-4cdb-a4e1-cde3bf9b5409", "sighting--6e3827af-50f9-4ea0-bd9f-1e1ea390acb4", "sighting--a9643af1-66fa-4022-b5c4-a3cac4a8afd8", "sighting--c8796ea6-9d9d-4772-9e53-8e1da2eb5d41", "sighting--7e63d13f-d3d3-4552-bd6c-e5a80a009fb2", "sighting--41f7f268-b35b-45b5-951c-531376c76f9f", "sighting--654dbc8e-1878-4201-bdfd-9ad511b24dd6", "sighting--56d62d4d-3752-4cb4-98fa-45e0c9b6e993", "sighting--20c6a744-8d92-4f6a-8e6c-f967a842b335", "sighting--47c77d76-0058-4876-a157-b8f9260bd232", "sighting--f4093444-a645-4071-ab1d-1f51e2304c1d", "sighting--67c4d050-d6ba-41dc-b2fe-8e4e59a3ec3c", "sighting--8b00345f-948b-4b4d-b6fe-4c12b2745603", "sighting--c1ffbbed-37de-4445-8d46-f3763d3fb5d8", "sighting--cd44f769-5e76-476c-a247-c875649e5740", "sighting--0c0c09f5-e300-4574-b9f4-de011c13d880", "sighting--fe56a4a0-1d63-4296-8cd0-72d26a6339d2", "sighting--2a6f960f-6977-4498-8461-f2368e70b5e0", "sighting--75e8b158-492e-4d90-b6d7-2df021c906f3", "sighting--d8ff167f-e078-406f-8722-21db9285a006", "sighting--cf2876ce-b483-4dec-9a82-fd6842e654c0", "sighting--cbdc1f6c-f1a7-4a1c-91f7-68d0d8d51301", "sighting--295b7075-96ee-4ad3-94f2-c704eb1a322e", "sighting--a7c419b1-2b91-4b5a-b4ae-67dcf751f67b", "sighting--84563be6-869b-44f5-8f8a-84cb6004c49a", "sighting--db0042a2-1ab5-4fb1-b23b-703219c7efc8", "sighting--1490cb27-a414-49c6-a90d-dc16ff554686", "sighting--8103df24-b8f7-4834-9b16-c6597eb95593", "sighting--b2d3781d-5aa2-4be5-8a03-c8277d607e81", "sighting--fea9ea03-7a71-4398-a0fc-97f7e608b706", "sighting--fcec396b-b9e7-4fa3-9f4b-aaf10b91f64f", "sighting--e503578f-8eaf-4e61-99e5-6be4632231cb", "sighting--7bf3c61b-6e79-4eda-84e8-2cdbbff9741c", "sighting--4ae4409d-3868-47ed-bcd5-61be2cb7d471", "sighting--89cf73b7-f66c-445e-b2f1-eececa1070b2", "sighting--eb0e7930-2db3-441d-8f3d-6a744b51069d", "sighting--18b0505f-4eac-4517-ae23-d15e149e6ff8", "sighting--98a8475a-aebb-43bb-8213-40cf6ebd1cc6", "sighting--095c35ef-56a0-4ec8-8eab-70ccab1a58d0", "sighting--75d4371f-344f-4486-aa2a-c09ec559719a", "sighting--501399e3-7d96-40b0-b72d-3456898868e2", "sighting--b2bf935c-c6a9-4ce2-b65f-31b2e68adcfc", "sighting--772b1807-0e48-45e6-9456-bbcbc4c73ac9", "sighting--ccbe10fb-db6a-4e31-b79e-1adbf7fb363f", "sighting--a23de5de-5533-4a20-8241-6845420a3ebc", "sighting--e9d68317-12ac-4a28-b8db-8899d3385489", "sighting--baa9af22-d3f2-4da2-adba-0970f2d6b5b2", "sighting--768c103d-bcff-43d3-a97f-e35e3fad9536", "sighting--365206b0-b5e7-41b4-bcc2-301e85da67bf", "sighting--5ed0172b-70d8-449c-b11c-479db0d3ffbe", "sighting--f838f987-d63f-4999-80e9-63e1aa8d31c0", "sighting--62c5aa80-335d-416b-8701-e42eca5404b0", "sighting--543f08e5-1e07-411b-8094-d5194c2d686d", "sighting--ee388153-154e-4440-8adc-7f836cd43d7f", "sighting--94997b66-3030-4bbf-81df-c66fded930ae", "sighting--8465a4ba-fc4c-47c3-9458-d72403e5791d", "sighting--e1701e68-d651-4c44-aade-b1189610612d", "sighting--4c3828ce-a45a-4bf9-aa36-4d9f7c539a5c", "sighting--e2bbf5fe-120e-47ce-a956-042bbc8f33ff", "sighting--6051899e-4fbe-4a77-bc2b-253e74e0111c", "sighting--d3f4aa9d-7f09-4d3e-9958-4733b1148a46", "sighting--b0dd8d71-7368-43d1-b1c1-e29162958883", "sighting--434a13ee-b6d5-46ee-946c-a047381e1cdd", "sighting--f347b5f6-4bc2-460c-9999-5b993d2ff970", "sighting--b0b30299-9ddb-4d55-b38c-4814015775fd", "sighting--5071718f-9375-48aa-9fb3-30ab19d8d4fc", "sighting--3068d7c6-0f8a-4401-a39c-146fbfcbb276", "sighting--6c15d5cf-d981-47da-b179-7f05e09d2294", "sighting--76e8a363-f5e3-4f15-b160-5894c284ef77", "sighting--d882b546-0a0a-49ae-9bcf-d90dcd39bd3f", "sighting--989e0c7c-e2d4-4ae8-a176-a6cb89e1aa90", "sighting--ca605650-cef6-4ca6-8810-58fc24815ce4", "sighting--2648d754-470b-481c-ab0e-10c379013f8d", "sighting--d822e463-5669-4a38-b225-932df828404b", "sighting--8eba632e-09a8-4cfd-998a-9ee9399fee5c", "sighting--b3b0db29-672b-444b-8c29-05852af0bfaa", "sighting--4b3e770b-ce99-44c2-9020-437543176472", "sighting--121338f3-45a2-4766-99c1-59522a4f7565", "sighting--f7face4c-c950-42ed-8ec2-d561e86c716b", "sighting--2d4cacc9-7699-4876-a8ae-a6230505ee24", "sighting--29f5d69a-0927-486c-8de3-9dcc4231ad6e", "sighting--acda6d26-577a-47a0-9af4-7014ce881942", "sighting--9d63ec0c-e244-4e14-9cbe-c6ecb1f4141d", "sighting--aa9cef16-b90f-44eb-af00-43af7e2d41c0", "sighting--68965ecb-3273-435c-9c9f-a81ab31c6e09", "sighting--51ca027d-290f-42fc-b24e-1c20c4915f0b", "sighting--5a6fa75a-81ee-431e-b951-05318dd21290", "sighting--62121435-7b3c-4cb4-bf64-73d39936f5f8", "sighting--331382e5-0141-4e07-8f86-a1f25abd256f", "sighting--18f854a7-da78-47f7-bd25-8a626b474350", "sighting--2c8a41e6-64ec-499e-acbe-135154d027f0", "sighting--7652955f-2ad2-4c04-8ee8-ecbe1e582140", "sighting--4d79a362-e0a4-4635-8fdd-c7a08630b414", "sighting--f8729774-ca9e-4de8-a6f4-37a2d46781fd", "sighting--702117ec-febc-4e40-9730-753a90e1feda", "sighting--97a70228-f3c7-4db1-a34c-8aa0b4b60936", "sighting--d6a36062-d398-40a2-8d90-c4858c8298c0", "sighting--28cf9746-ac6e-4f59-8662-37abb12ec08e", "sighting--a0b8916f-bdfb-47f8-a7e7-9e3e53042e93", "sighting--0dc3ba8f-bd25-4f14-ba71-1768c993e6cf", "sighting--cb37a6c1-5964-4d47-920a-79ac7d75f887", "sighting--44931b7b-8d38-4119-ae9f-45afc344df9d", "sighting--6c555863-eb64-475a-9615-41cf8e9ebbd5", "sighting--4f3a1b6c-0c14-40ae-8333-b048b1f588da", "sighting--5732bd83-534e-4ad9-952f-f4df6ea3b526", "sighting--1c8cdd90-4ec8-48a7-9b37-f0cc4792b305", "sighting--e170b072-7560-42e9-ba40-11e59d72def7", "sighting--53f055d3-5523-4e8f-ad4b-bde48e962a15", "sighting--f5b0e2bf-0737-4bcf-a2a2-f3a9011683b7", "sighting--7789fb55-3563-4ac4-ab0f-9fb073746e52", "sighting--93e9feef-b62b-417b-975a-56c7cd7d1f9a", "sighting--4bd928eb-2a76-46cb-a550-ef4da7e9eb00", "sighting--3354831b-c061-4545-8d95-5fa4c9a38b52", "sighting--f6cc83fa-f567-468c-9264-da824148eb48", "sighting--51ed6eb0-1b88-42e5-b674-e2f47a6f245a", "sighting--19d589f2-cfa3-4303-b539-980779c0543d", "sighting--72a6618c-2970-4fa8-aca6-f321500d6a19", "sighting--08b2a5b6-ce9b-4b3d-986a-6d58ad1be96a", "sighting--07b0c4b7-47a0-4889-b7ec-1dab29efa712", "sighting--5aacef16-dd1a-46d7-a358-1deedeca998c", "sighting--92a076d6-e4df-4c62-9d3e-5d84c50681f0", "sighting--58c46ef9-7a40-4a99-bb99-e8728b7df404", "sighting--cc9a069b-5b26-4bdc-ac83-6d006f17d001", "sighting--5f2ff4d7-496f-4a77-8380-c5b9a078f883", "sighting--3928e83f-0787-4cfa-96e5-ca6e81d99962", "sighting--25436676-0c3f-495a-96c3-48f7ffe137f9", "sighting--ea5b1dde-84aa-45db-850a-331c19fca2c6", "sighting--420e8a69-30ce-4b75-b307-978de1f0cc0a", "sighting--c1bf476c-85a8-4ba7-bbda-a7d23b96b869", "sighting--6b6030e3-d187-4d38-b622-0bb746a2521a", "sighting--5a091020-adbe-498f-b3de-036d087e9dff", "sighting--903d7859-e633-4e6a-98db-efbd469593e1", "sighting--2d813b60-b535-4b9c-86bb-495247e4c871", "sighting--e468344e-2f56-449e-af6f-5d84a020a388", "sighting--55521bf7-ce95-4bbd-922c-c0a63d2bd53d", "sighting--d0c5e082-0d49-46f7-b237-ee53f49b61f0", "sighting--a3df33f4-f5ee-4993-86c4-32e58a757046", "sighting--64ec84d0-4e37-44d2-a34d-eaa316baf79b", "sighting--71e5fee9-6b3e-4e47-b4f2-1000eb827a74", "sighting--2267c082-326b-4d04-8b8a-85cd34a17bc9", "sighting--d835c252-432a-4d3f-ac6b-5115e4d13706", "sighting--19add885-30ab-4230-8fbb-57785bc22c71", "sighting--100ac703-002f-4296-8bf3-0f3a0c9e996f", "sighting--fe9c048e-a966-4043-ab55-7c9c2a4c3a1b", "sighting--8bcd00ed-b2e5-40d3-9e5c-969f124eb7f6", "sighting--28cc18a3-a9dc-4654-bb90-15dc07483056", "sighting--b37fea3b-5918-4ed0-b5c4-d2d2db4948f6", "sighting--5eee82b1-33cc-4a36-9a50-8d1ab3bbae94", "sighting--9c71e17f-fa66-42c1-8cc9-f9f1bb015ba9", "sighting--9925d452-4032-4d13-b192-34f2eb676a64", "sighting--89e04ad9-ade0-4b69-ad88-6562c4e44223", "sighting--90af88ed-ae78-42d0-a505-e4d8281e6e20", "sighting--6f8b8969-183a-4364-989d-a2b85a771b60", "sighting--b4bb52de-3eed-4b2b-a056-214314a33d05", "sighting--86e74864-37e5-4501-a1b1-8d0943f1cb69", "sighting--ef03229f-1027-4fca-bc87-11d93a398b84", "sighting--a4c183f8-693e-4b83-bcf7-bdaeb1f46aeb", "sighting--0d8c0f0b-a716-4f66-ae64-7ca6a65f3cf4", "sighting--aafa3b3c-d8ed-4f8e-b4d9-5cacc8cacb72", "sighting--5cc6705f-603d-495b-96fd-a28afd79cc51", "sighting--1b95485e-5057-4a97-b5a9-c54397f7930d", "sighting--f76eaa80-5323-47eb-bac8-5e182521a052", "sighting--d640ce02-f1f3-4d33-b695-323321a41cad", "sighting--e1915b5e-93fb-48da-a60e-4e035cdb285c", "sighting--e7877c24-d667-430f-b52e-a13aa912c791", "sighting--02ab0400-3f6c-4fac-b336-1d51969e17db", "sighting--4a56571b-8262-4788-9d63-6cb82b0a517b", "sighting--fc0de89f-b3f0-4f13-b2f9-02fa3d51d0bb", "sighting--4143b15f-c4ef-4493-a08a-62f06dadbad2", "sighting--2e3222fe-dac3-4f84-bba8-c99e4ee83e3f", "sighting--289658d3-20c9-4e30-b5a2-3f273ab9f06e", "sighting--cf9c10ec-e55f-4cef-a77b-0812f1a0086c", "sighting--dc087f37-51a2-4a91-b2fc-063bb57ee556", "sighting--77c2c108-b228-4572-9c99-0e28e4dc1a9a", "sighting--058498a0-0ad9-4412-9f46-9550e57954e7", "sighting--5c7dea35-ca69-4a3b-a350-e9686406a86e", "sighting--d5f74a64-7317-43cb-9083-b9ec1c26cc6c", "sighting--61fce58b-3706-40b1-a1bf-bbf07f962a24", "sighting--3572633d-4ba6-4c86-a0f6-1bfccd300216", "sighting--10b57d56-90c3-45f0-a0ff-adf3f4c58037", "sighting--2065c643-76b8-4de4-9489-26ca2a715bc6", "sighting--62f5c2a0-b672-460b-ac4b-291f2254f568", "sighting--484187f8-ee5c-47e7-9cb3-15d45b01a1d0", "sighting--8bdbbd1e-4c64-4be1-a489-b10ef23c3484", "sighting--dd4ddd75-9564-44b8-9f98-2c924a7ae1b7", "sighting--fd2fdefa-492c-4308-be41-aa5b9a4a2b8c", "sighting--8c791f0a-1387-45c1-a9f8-f2a66a2550da", "sighting--0bde0da1-1a76-47f3-bddf-6c423c526ca2", "sighting--b9eed3f9-eae7-4ed3-b167-6ee039b352ca", "sighting--3e32459c-54dc-4c37-8df9-7dedceef0970", "sighting--4a8b16a2-a605-49ec-a36d-8ecd7906db90", "sighting--f37dce60-684b-447d-9a1f-40918688e8c4", "sighting--34a8ace6-e677-4440-80c1-bcad65e59429", "sighting--f53d4b0d-b028-4c87-9715-aa2bfb1c31ee", "sighting--a72af7f4-856d-4422-a771-875084945f77", "sighting--086e2925-6fa0-4604-a4d4-d922ae084feb", "sighting--15b2a088-228b-4737-9ba0-58456a71e422", "sighting--7854e405-1fb7-4270-a302-fd9607ca3dd2", "sighting--7e723494-4997-4b19-9610-1da41d99231e", "sighting--06feab2a-2ad5-409e-ae16-0920788e4078", "sighting--38e6820b-384a-48f7-9195-e364535a2deb", "sighting--35900aec-ac78-435f-bc60-2334e7a94bca", "sighting--dee4de84-3d38-4837-9113-44e34f8e0ad2", "sighting--2aa562b8-c001-43a6-a405-45293ca3717a", "sighting--02187bdf-2084-45bb-9198-cf820b28fdfc", "sighting--d6f814de-30d4-415a-8dc3-5204b9498fbe", "sighting--3c6b3b6d-7ad4-48ed-b8bd-785befeaedf6", "sighting--0149ec43-a259-4432-964f-266756711c76", "sighting--945343d9-660c-4915-8c14-36d820130e57", "sighting--f6d131b9-840b-4ea7-bff3-b2d6a4403e8d", "sighting--f58c34fa-87b5-443e-9709-5a19b37bd020", "sighting--bfd0ad79-2b0f-4218-ad35-3331f4032f1f", "sighting--ea643391-5d87-43ca-8471-a3433b90f997", "sighting--3e8b8b6e-e64c-429e-a3e9-9a5edd1eec2c", "sighting--d2c467ac-aeaa-41e3-8093-2588b55ae39d", "sighting--6f46e0cb-217e-4e4d-918d-ed1769608512", "sighting--4f44f489-a19a-4c78-957a-27f856777cd5", "sighting--18369563-fe4b-4060-b514-df8558140c17", "sighting--473b93b3-28ec-411c-96bd-c8e279b15e56", "sighting--774fe208-3019-4b86-a7f9-452423467f6c", "sighting--6320e321-f348-40c9-abbb-6ea2f0c2d964", "sighting--23613fdc-2c95-453e-8e44-626c949bcbad", "sighting--5b886012-9a51-4db1-bac5-29b6164cc84b", "sighting--7f2a73c1-45f2-46e9-bc03-493f62d3c0ca", "sighting--707f9884-eed9-4769-bf12-8c603af240bf", "sighting--a09b03e8-a43b-4091-a900-f5048cc99539", "sighting--2fe78727-1f40-4a14-9055-de77a1a3c777", "sighting--d5e953b1-01ba-437e-afd8-49b3c8c5e81f", "sighting--9b800b56-453e-4cac-b0cf-5f39141925df", "sighting--461c4ac8-da0f-484d-8430-dd20d9dceac9", "sighting--c2d80b1e-881a-437c-8ad7-17ee9657cba5", "sighting--fcb0d777-9ec6-4596-9994-5d1f1fa21d93", "sighting--d69fee6b-9774-46e5-94ae-afef7c3ce97e", "sighting--bda0e0be-e619-4a06-aab9-c90d7b422d45", "sighting--fc227228-7106-483b-bf40-ae5cbb92cfd8", "sighting--34fb05ab-b7d9-4d12-9403-c7549f13e4f8", "sighting--9f0303d5-a710-430b-81c9-861835aa45f5", "sighting--3dbd266c-96ac-45d9-a82e-6e7d33addc38", "sighting--139e2351-f517-4341-9518-7ba445ed473c", "sighting--e9b8287f-c03d-4980-b011-6350d290e701", "sighting--5678adbb-d735-4375-8648-bd2113e9316b", "sighting--cca4fc90-6b1d-4210-abaf-115e741f211c", "sighting--05f5b13e-3334-4587-9020-09a0920ddd15", "sighting--f005176c-779e-446c-9d38-6f6362638fa2", "sighting--b96d62fa-342a-42b2-92a4-31ceef5fa9e1", "sighting--f8f9058b-cee2-4ab2-b6ec-def735ede20f", "sighting--ee015980-2907-4368-ad2b-21f4c0c11a44", "sighting--7e6dce5a-1ac1-4bbb-9267-a841ee142c95", "sighting--def750a8-adea-479a-82e8-22db04b2780c", "sighting--89c72858-5a3b-48d2-aa5a-c8d1195da40f", "sighting--81d9399e-8f00-4937-b0c9-5cf2c0b7764f", "sighting--5db2dd1e-2438-4689-83a3-2ac2b57ff556", "sighting--4dacfc10-11c1-4c09-ae9e-de89f7330b73", "sighting--a9c8ef8b-41ea-412e-9b29-dc5151ff59c8", "sighting--e4da760e-a707-49ad-8ae0-530263af1976", "sighting--08785a04-6408-4213-b279-2fbe55f0fc70", "sighting--af8359f6-1947-4d05-a7e2-f7c3b38fd513", "sighting--33550c17-380c-4614-a63d-fb1e917bd3f2", "sighting--4a5b4639-12cf-494e-bc71-772030d2b794", "sighting--2e2e2f42-8eda-462c-88b0-aa3d4fb929da", "sighting--6a43eceb-fd7a-4c9f-bd74-7447d3ff136f", "sighting--8f387a57-2180-4d5a-aaa1-20981d82708c", "sighting--0cef7705-9257-429c-838a-2987bfafc33a", "sighting--5ed5242c-b1ad-4a61-b027-7150e107ea5b", "sighting--48df5a24-ff07-4eab-a4e5-8ac3480434f4", "sighting--412cf0d9-0631-41fd-9a12-3658bdab7ed1", "sighting--321c15fa-c84c-433e-b4d7-cd6b8e1902f6", "sighting--3aafa096-2a95-40e2-933a-a55116e64a58", "sighting--2f78c3f7-f966-4109-ba90-a346755d130a", "sighting--b800cd43-2d82-49c2-bfb7-ebc04ca071db", "sighting--48701559-9d7f-4d09-81c6-8f2e240f17f4", "sighting--12392853-907f-43df-96c7-9eec0074667b", "sighting--8bc5fc0a-d74f-4e27-ad10-31269e24d975", "sighting--03c3fac4-8558-4d62-9dbb-6d1875968be2", "sighting--3b8b2049-ccb3-4e8d-8bb7-c8364bc24ad4", "sighting--847a64e0-a1a3-4407-ba8f-5ae5f4f9ecac", "sighting--a163bcb4-5714-4185-85f0-35226a5a2ef6", "sighting--8b55c8cc-67ad-471a-8a73-98ac1a1b5f16", "sighting--3b677dec-12cf-42d5-a06a-f046e9a17af2", "sighting--6484b0f0-87a4-41ba-a253-56811a0fedea", "sighting--b6bbc9a4-07ef-41e3-ac99-0e8e98cce719", "sighting--aa7c2e81-5d5a-4239-9ebf-6d8e5b849da1", "sighting--9292951f-2fdf-41ad-999c-edc76ccd1a7e", "sighting--a3b97e43-779a-4cbd-ae66-5f93bb98cb9c", "sighting--b07d9518-b959-439f-974c-a25e2ca67678", "sighting--9f6d0fb2-30e8-4d8c-b6b7-755b854808a5", "sighting--8c4bcf4f-7739-4a81-858e-a2dd2dd55ad5", "sighting--29ccf39b-e2a8-4c6d-bf52-ad0bf731738c", "sighting--a1dceba2-bcfe-498b-b29d-c9f18c64cc99", "sighting--a1d88a11-8c99-4737-bbdc-947d415a6757", "sighting--e955ef0f-7ba9-4593-9332-778513d4d9db", "sighting--e2376ca0-503b-470e-bd99-1bc77a6bea61", "sighting--b47c95c9-094a-4519-b1e7-6ac6638a93a3", "sighting--31696383-1580-40de-95bf-48c73cc2f2e2", "sighting--f678a371-e3df-40ce-b819-eabc0c642893", "sighting--9aa1ba32-7025-480e-be1e-25a858083e73", "sighting--02b863a6-0b92-4a1f-a999-d7b3724a102f", "sighting--35fb4c67-a39c-407a-9692-9b355bc96622", "sighting--989c49ab-07ba-4d73-9a7c-3a80ff9e7dd6", "sighting--ec727897-8bf6-4aca-a391-990f1d15a0da", "sighting--2a67a9e6-27d0-492c-802d-dfb3554be4a3", "sighting--572c36cb-eb70-4c25-9779-817615e13f4d", "sighting--9f2c3ed1-a0fa-4707-ad1a-0a733fe9d8af", "sighting--df12f980-950c-43a2-a32f-cea10fbc5698", "sighting--77bf6515-ee99-47e1-a79f-09f886fe941d", "sighting--60f9d8e0-b9ab-4bfa-b958-6de2ee97b523", "sighting--f1e19e41-56b3-42ff-b8c6-b152f70d4b66", "sighting--4f1dc467-01cc-4ac9-92f1-84d90887f6c5", "sighting--b6d07294-8a8c-47fd-9c80-8029c0ce0fdb", "sighting--df6c1125-5bdc-4a59-aa43-eac50e162d33", "sighting--8f79fb5f-4bc8-4b65-ac92-816ee6e4b1b7", "sighting--7fe81e5d-306a-450c-a83c-80b5e260f0e8", "sighting--6f85508c-7d29-499b-aca2-1d74bf163b71", "sighting--086bef97-b64e-4582-b9dd-c74f4f9f85e1", "sighting--313c19c2-d5d4-4540-9d78-db5ac3121dc1", "sighting--575efefe-819a-401f-a30a-c60ebeb5898b", "sighting--26157afb-e824-4326-aa07-e7ee74a4472b", "sighting--cc78329b-1ee8-4d0f-ab95-ecc1f7c0b6fd", "sighting--e8a4944c-2237-4d58-9704-7eeea58c8a37", "sighting--69f7d80b-9302-4cbc-ae18-438616a79755", "sighting--d728c748-4401-4e2e-9b6d-dd21ae5accce", "sighting--daa3aebe-e424-480e-8469-57267752aceb", "sighting--cff8daf8-b0bf-4195-aced-ebc624648cd5", "sighting--b71c305f-2e51-4671-8690-0f5ecdaacab4", "sighting--6f03e61e-34d0-436d-9732-a9d0eec68bc5", "sighting--4c3939ca-8c29-4744-aea4-1acce185feae", "sighting--24fcc628-c02e-432a-9e80-de0e7a2d35bc", "sighting--f2a25760-ab88-4de6-b170-fae2baa0d6ad", "sighting--0493bf59-212c-4c01-b2d1-8c8a41d2467f", "sighting--afaa332f-b6fd-467e-aa5c-60d1b0d01693", "sighting--5a1a8d27-0f70-4d16-bdeb-1a1d7fd1c067", "sighting--821fbd08-1f4a-4b44-8d24-86b5618e01dc", "sighting--fb82206b-4648-45e3-ae0e-e104fb43fbd6", "sighting--a9d09ef7-087c-4d20-a90b-96293932ec60", "sighting--2391a1e7-7ac8-43e5-8f62-f769ed0c0551", "sighting--389c64a1-5218-4d5a-8374-3340afce990d", "sighting--127ba4bc-db98-4ab0-bb97-5798b83f6ae8", "sighting--1b1802e4-14e9-4c9d-ac8d-7d64f6d0499a", "sighting--4e1e6758-13e3-46c2-a8fc-7599cf6a4f96", "sighting--46f353a4-c1b1-40c1-9f94-a8e73f5bc3f4", "sighting--42340d52-c104-4b73-b20d-3e90e13a1790", "sighting--0e57e34c-de67-45aa-a29a-511026e217f2", "sighting--e610815d-7c88-4c43-b218-80e85f2fd50a", "sighting--f6208cfc-55bb-4bc3-a289-e01d17501d52", "sighting--4fd0b4e4-9f31-4099-8138-560ef8a509f7", "sighting--953b227a-4c0e-43f9-8c43-d6f496835755", "sighting--ba30b8f3-47cd-4494-8b0b-35cb90d108be", "sighting--29c22469-c9f1-4efe-b4a7-7c10e37c7008", "sighting--9033d63e-5398-4e33-805c-8c3f1cb7cbaa", "sighting--762202c2-2471-4eab-857f-d42ce80735f8", "sighting--d81aa83e-42b7-495c-ba0c-1e62e4b42ca4", "sighting--a4f6b033-f13f-49ff-958f-1d9e1d2fc50b", "sighting--476faf39-4e9a-4a04-9043-7445a71e838c", "sighting--ca1d7c61-99eb-4cff-9f0c-1469c1115b90", "sighting--b0e1d53f-2c52-4b12-920f-523358b01ce0", "sighting--86361384-8e9a-44d3-8f2d-68d4c08be5ff", "sighting--f855f95c-1615-49d5-bbd3-e0e4f220a43f", "sighting--09091547-faa5-4f3b-bf69-0ac6d743ba66", "sighting--2518ee89-d9d4-4ec6-8bc0-e83744ec7c2d", "sighting--fcc6aaa1-68dd-4e59-8629-16067bf902a8", "sighting--8b6737fc-3e29-4617-a6f2-6dff8b5fd4c1", "sighting--88ba41e6-ad8f-4c97-8ee7-db39cd7ceb23", "sighting--01f88578-67e8-4d12-92ab-875b842646ac", "sighting--41df4500-e274-45ea-89f3-e435c683e056", "sighting--09d9817f-638a-4b02-8a8e-630218d2177e", "sighting--dd52afb8-e096-4e6e-a762-c87f5d5fe817", "sighting--05af6c11-1cfd-46ef-824b-739bc7674abc", "sighting--475f6ceb-0fae-4c06-aeac-5324b01a03ac", "sighting--1f587d76-a12c-4cc4-8dbc-5b0fc6d8bd51", "sighting--17f549ba-1406-43c1-9717-b9669c8fc541", "sighting--0ad58207-9e60-4d50-bf0e-467c9411ab94", "sighting--4d9e9884-1327-4c6f-b0fb-c12725e4ff96", "sighting--fe272d60-06de-4aba-b0a5-81918d1043fe", "sighting--71d701f5-74f4-4c4d-94b5-552610389288", "sighting--9d1debb1-87fc-4800-8b3e-e60057764c24", "sighting--8c5e3d5d-1a28-46ef-8ccc-f924991c200e", "sighting--44ec4132-885c-43bc-b01a-119416d44695", "sighting--cc86b182-a634-4f2e-88e4-ba2d699141b9", "sighting--fcb43bb8-a6ed-45d2-9b41-d2274ac79000", "sighting--4353b9ac-088b-4751-8f2b-724f9c6194ee", "sighting--c9bef161-7274-4aa9-9fda-63a7c979c948", "sighting--0156f29b-6543-4447-ad7c-1c7bdfe852fb", "sighting--22e74ece-3d10-4665-bcbd-79807a563e6a", "sighting--2f6721b7-d437-47aa-9c43-2cb9ccd5924b", "sighting--8bb49f3a-7ffe-4c2b-abfb-f98ff6d438e4", "sighting--d0067bf7-5015-41cc-82c6-8c14d752eb0a", "sighting--8295810b-de07-4f67-9db2-afd845f912ad", "sighting--4401cc56-5b0d-4f79-9950-ef41c09ce95c", "sighting--2a301fd1-b8a2-4628-902c-25e259290ae1", "sighting--4890afc1-126c-4705-981b-19bd5b906159", "sighting--e3a40ec8-d53d-43b5-90b7-032938b4d9b1", "sighting--379c7052-ee55-4983-bc19-39e9f862ed57", "sighting--e0f6c840-27c8-4218-b4a3-a7c90abe409b", "sighting--cf333ba8-9a8e-498d-9485-1d093260f451", "sighting--909a1ca4-9626-44af-a964-df8d803a299f", "sighting--c935359f-9e77-467f-bb1b-8de0b11030c1", "sighting--efc9be75-56ee-4fc5-a72e-6a2610f7e061", "sighting--4c21afbb-9687-4b39-b40f-5f9812dbd7a1", "sighting--ba8eb3cc-dac8-4a64-8422-d09a27e6a39a", "sighting--ca106167-41c3-48f9-aa60-9df66c1251d6", "sighting--3be537f2-e4cc-4830-af57-dde010b3b6ea", "sighting--4bddcc66-c2c6-42fb-a374-04d92997c436", "sighting--c919e322-8b1b-48fe-b6ad-3f71de6120ac", "sighting--46d1f468-98b0-4ef2-ad93-24df98e9f882", "sighting--044855ae-2b6e-4720-8f1f-58400303560d", "sighting--a6906e11-ad33-4821-8782-c282fe0dd8ca", "sighting--ec7b6009-bbbf-475f-a05d-463b7b36a6b8", "sighting--ef730450-de46-4f31-8c8c-0aaf6abbee34", "sighting--0511efa3-61e6-4a5d-82dd-874057117e4e", "sighting--dd640c17-5405-44b8-9f54-5ba233bbccc0", "sighting--c84992ee-cc9c-4f42-8a3d-2d6685f6314a", "sighting--cbd55f4b-b274-4be8-8b31-601f2b7f05d8", "sighting--308d528a-d776-455a-a5f2-438b83ef3f28", "sighting--4f39f6c1-ea68-468a-8feb-a78badf29ea4", "sighting--00d61d1b-fa5e-4a66-80ab-36edd9fe538e", "sighting--c8c45599-e5e3-48e0-a7ea-bc46d63e5238", "sighting--9bb49788-d783-4e86-93d5-770d6f4702e6", "sighting--9afc42ac-eff0-40c1-a6da-80998e6457c2", "sighting--bf22d217-0331-47bd-aaf6-cc3d92bf8c13", "sighting--64478b5c-8a43-4a34-ac6c-1149cf35b0e9", "sighting--f5ebf1a9-9c59-4c78-9f2a-bb4c475405e6", "sighting--e89a1203-fb04-460a-891a-ca2b7c542697", "sighting--b4ee81dc-49db-4615-b827-102ddca55053", "sighting--326aa0c0-ffe4-42f5-8a9d-e8722ba2636c", "sighting--f9e8563d-870d-46b3-8390-cad6c0bcf238", "sighting--930d546d-710d-484e-b446-859fd27f7505", "sighting--23b51bfe-99bb-46b8-b8ec-1437ee70d11e", "sighting--94b9d25e-46e8-426b-b764-8948584961f4", "sighting--e301a488-7c7e-4fec-9055-9b6efc514e0f", "sighting--47387ad1-bddf-4c44-9628-cf496a52ef9d", "sighting--751f10b4-aa74-4754-b90f-688f33f0058f", "sighting--f2f5d7ae-a368-4dc9-9f1d-26961f9452de", "sighting--9c1598c3-ad7a-42da-8f2f-548e9054528d", "sighting--26c27b56-2384-4687-a73c-86467f271778", "sighting--d237fa2d-ad3c-4d92-b33c-82d9c28a358c", "sighting--d76885d0-45e1-4673-b9d0-321bc54624cd", "sighting--6dc52f02-2706-408a-b3d1-aee4204147ef", "sighting--b474e0e0-22a5-40f7-ae26-4781773d34b8", "sighting--3ac77d21-4747-4cf3-8a7f-591d649931f2", "sighting--8f867bbd-acb2-447a-91b3-0b77b93aeea7", "sighting--2572b1f0-9220-405f-bb9c-37fee9d5e45e", "sighting--7dfa7e37-9674-41b6-a7e4-9f8cf597078a", "sighting--27210a27-73c5-4683-b4c3-dbe8a926fb03", "sighting--17285ea7-5d69-4778-8a28-9a7b04d9a43f", "sighting--0affa5a3-27d6-405b-8dff-d1a12ffe8012", "sighting--f7f038a5-7cfa-4c12-af29-d856c47f496d", "sighting--2396bc0e-0ee7-4b89-abc7-6342038339c7", "sighting--c2d66849-380f-42ee-9474-becedfc4e300", "sighting--8275053a-d72c-44d1-8efa-bac129a03e9b", "sighting--6a11de2b-ee3a-4896-97e6-fa234b2584bb", "sighting--b1754f63-dae6-4491-a9d9-ac0dacffa057", "sighting--5b6500ca-8027-4a87-8db5-582aa4a03557", "sighting--1b362a34-8d49-41c4-af48-6df750081c4c", "sighting--747af842-833d-4687-9686-ec7ece95a06a", "sighting--0fbe648a-0ae2-4d8a-8a2b-f8680091cdb9", "sighting--5362d328-6e31-4a6e-b744-4bd1ad15f6d4", "sighting--18e7b259-d458-424c-b841-62782a3f56b6", "sighting--fb9e1ce3-b773-4f1c-a82d-0d56b5d7b918", "sighting--6aec6d43-ff21-4c6e-833d-95322c7fe11f", "sighting--09037e05-e713-447c-aefb-0b321a9c82e0", "sighting--af7d3ea5-884e-4586-90ab-4d5584c56a9f", "sighting--575f6fa0-300d-4450-9a22-82c7ba199ece", "sighting--29efb363-b2ca-4868-bbbb-0c9129912f08", "sighting--da5a7877-37c8-4f86-8dc3-9daa213b57e3", "sighting--331e4f9a-e4cb-4c0e-bc95-6cc4ea90f881", "sighting--e2563285-08ea-4ef5-b4ff-c2f6660ce893", "sighting--ab8cee9a-e977-4261-8c82-8f5267123277", "sighting--00cb8c7c-7b94-4e7e-86a8-296be28c19fa", "sighting--dc2e8014-ad87-4ad1-9014-0b30ba3eb188", "sighting--920a1741-596d-4446-b3ee-d0d790387a8b", "sighting--894cf657-e3f2-4957-a7fa-dcf55db0dc00", "sighting--5c5ce772-5760-4e49-991b-5f4219268813", "sighting--1ed5f090-7e47-435c-bcb0-cfdaf0a74fe1", "sighting--b2e4381f-e050-44ca-88aa-1f1b808852d4", "sighting--61b6a04c-a590-40a4-9caf-0755cf7ef4ca", "sighting--1177512a-7e57-4b6a-85e2-50a41885207c", "sighting--e1cad3da-90c1-44ed-bac9-408d008e33aa", "sighting--cf26fa28-d9ef-419c-b4fe-0db3b80015db", "sighting--41bcddc9-f6bc-406f-a263-8cc2cc2e46f4", "sighting--f3bcf5c4-8ee6-44e9-81f1-d035adc6dc47", "sighting--ac8b59bd-0c2f-4637-a776-066739d0d990", "sighting--fccce556-d42b-414c-8d97-43562ce73e07", "sighting--2530feaf-69d9-46ce-ab19-cd568de093dc", "sighting--77cf9c8f-be29-4c79-9b6d-f468ee5e2bb9", "sighting--e9eac2e3-5169-4a15-94ac-a38f2aae24a9", "sighting--d703c9b3-4b66-4da5-bdf4-c3c209484f20", "sighting--536c4907-4546-49b1-aa94-fac3f0b9724f", "sighting--acd2682e-20c5-49f0-928f-fefeea10fb12", "sighting--d77e50cb-0748-4357-bb2b-910358202500", "sighting--15e6704d-6516-4e52-8a77-9e578a476d1c", "sighting--2dde7f17-2452-48ce-a95c-1e664b10b6df", "sighting--83137f65-3bab-4bb7-ac5a-5edd6231de91", "sighting--a6811008-e4d0-4f7d-a90a-ee6c58ceb60e", "sighting--0b6b2a0e-bfa1-4469-93df-f0bdd1dbc772", "sighting--d99ed5ca-42c6-41e6-811c-2240ccf1d2c1", "sighting--449f11d6-ab95-41fa-b600-35786d2c5f29", "sighting--54d2f72a-3dec-4efc-b888-8182862de7a3", "sighting--a18aba23-cebc-446b-ae4a-cec5584a0c74", "sighting--058d6c07-f902-487a-a4a6-eb6dbd0790ac", "sighting--57365551-1bfc-4cd8-8da0-4ef7a857a413", "sighting--f246bf98-7075-4dde-8fda-2580b17de8f7", "sighting--c62960dc-3ec3-4ac8-ac11-55a742330ea3", "sighting--34137a14-b1b5-4f4c-b69c-faf826cde374", "sighting--76acf136-13b3-48c7-8151-8094bb45522c", "sighting--c8129a0e-8f58-49f4-898a-91e7ef379286", "sighting--57256150-6ac1-4813-aefb-701d3f9c2c79", "sighting--e6feaaa8-6f06-4799-b82a-ad02da9808ae", "sighting--ccc9683c-8c18-4fc3-bb92-2eff5f23d0a8", "sighting--c9945630-4db2-46af-bb42-0f7baa3016c5", "sighting--d1adbc31-c9eb-4dc2-8ff7-93be30ad7a1a", "sighting--3f70cb40-a55f-43fd-b9fb-32f3225bef93", "sighting--c8767edb-ca67-49f2-bc7d-0fa6242a7d01", "sighting--aa10c90b-8e2a-40c1-b598-648e1b4cbcde", "sighting--50161b8d-6ac8-44db-b697-e804a720e67a", "sighting--02bee58c-e31a-45af-bcc7-7b19b353c08d", "sighting--9b1aeaf2-8088-4eb4-9604-ec584b31212d", "sighting--6c7f34e9-b02e-4efa-8c63-2377145139c8", "sighting--e95922b3-6518-431f-826b-f809745b8a9a", "sighting--bc6ade2c-8050-48d9-8676-4bddc04eb588", "sighting--5d8cef8b-b99f-4693-9d89-8551e6a4385a", "sighting--d900cdb5-0edf-46b8-a6bf-bf94a3175482", "sighting--e0603299-7170-4523-b0a8-e2d0aecded55", "sighting--6e1daf19-fb69-4191-bf64-f8c3506f5dfb", "sighting--8bc51252-e72c-4756-a755-dec38bd517cb", "sighting--5953dfd9-706a-41a3-893a-b89ab28a87f7", "sighting--e70bf2ea-9699-4b5a-b601-2d39bdbe860a", "sighting--897bd15f-46b1-4fe0-a02c-f1f6db54e55a", "sighting--6a497e79-f3c4-4c72-8854-32dfba1b5dcc", "sighting--67705a1a-69af-4fd3-9509-1abc9a77cc31", "sighting--688ff91e-c83f-4fe9-ab1d-4dbab8002873", "sighting--bacc13b4-1c98-47e2-9a3f-f48a57a10d7c", "sighting--774b04d5-4fd0-446c-8551-5678760a89d4", "sighting--6cd0b688-0ad9-4336-ac14-1180c3e3492c", "sighting--de338cc5-fb52-4741-84dc-44b4446c7fa9", "sighting--0a22ae77-f1ac-49b6-88d8-53bbad12f306", "sighting--64852d0b-0968-435a-a434-4b44556837a2", "sighting--2c9a0399-daa2-443f-a991-fb08bb7dae77", "sighting--9ccfecd4-5ec0-497d-8a11-c0ee6356d47e", "sighting--2b6e5798-b047-4233-abba-de16b0dfc5bb", "sighting--0581280e-6557-4eae-a4c0-40220cf29efb", "sighting--cce6507d-867e-4276-96dc-2e1ac6f6d652", "sighting--a0ed8126-e64c-4110-aa82-429ea2f6f263", "sighting--cc0f69c1-88ea-42fc-8942-27540c9095e0", "sighting--88d8c6ba-7e3f-419a-9e65-f683a9543b1d", "sighting--9bec059a-196c-4730-90a7-e44d5301e490", "sighting--5b7478dd-3b0d-48db-9733-5b695bb0e879", "sighting--0b9aab8b-d98f-40cb-a8c9-cb6178e9c3e5", "sighting--32d939c2-eb27-43b3-9aaf-0f644edc44ee", "sighting--a6685191-7aef-4814-8bd7-6ba974ad20b8", "sighting--dfffbb13-f048-4ec0-9489-5954e01d1c40", "sighting--57b9c466-0d02-4b39-8682-afee7c9e4728", "sighting--18e219f7-4713-4cc0-8059-8cb51c600b0c", "sighting--d12d2d7a-b29f-46b0-98c4-bf2029c122cc", "sighting--3045e824-f6ae-430d-866f-df232bcca51a", "sighting--99b1ed4d-8eeb-4f92-8278-284bf45a66e2", "sighting--c856360a-ac2f-4653-a94a-ae2792e1730a", "sighting--6ba16576-1886-4463-a08c-4af7e581ae8b", "sighting--5e946a08-83b4-4f3a-b0ca-15cac85e61c0", "sighting--d8b30182-03cc-4ff8-a823-3e664adc2544", "sighting--759fdd9f-6c39-4d90-862c-3fb85d9dcb8e", "sighting--8fd7d1de-55b6-4977-825a-ff668d38d725", "sighting--86ce0c77-5b0b-4539-85df-4dd4f3162eca", "sighting--ba4b89fe-edd1-4432-a7c3-c96e83c3561e", "sighting--e19de69f-bee2-4a6f-9da0-6c51ef09879f", "sighting--b4079428-3705-439b-9434-409efd76a369", "sighting--417cacd4-ed36-48f7-867a-85c288135d90", "sighting--b032618d-3ada-4aa9-9d1c-a607c1ccc839", "sighting--ac2d9f4b-4142-4cbf-9a67-4e2d61edf611", "sighting--b346d927-065c-45e3-8101-e14a5ea0fd98", "sighting--dd972203-cde4-4c90-9b66-4c843a48e7e4", "sighting--dc89440a-a3ff-49fa-b76e-a93c26a481c1", "sighting--25417670-9d06-42ae-91f9-5134f62cdd20", "sighting--7c840744-2ef8-477f-b4bc-cadec7f3cffc", "sighting--301e1a58-c31f-451a-9c1e-abfc67785647", "sighting--eeba0352-d660-423e-b811-9a3ae3db34d8", "sighting--2f511ec9-5de0-4f43-8d5d-4b71231182cf", "sighting--a3519975-a205-4240-bc5b-900cea01e4f9", "sighting--5299cd0b-c586-435f-96ca-8d84a052de4d", "sighting--6013f10c-833b-4722-8686-02e52034485c", "sighting--0676adff-9fbe-4bd6-ae16-ca5c98679e42", "sighting--907e2b9b-932b-4f9a-a9e0-9b692ed9495b", "sighting--4c61b048-41fe-4091-9b2b-ecf5ed19694f", "sighting--9e88d772-c4c3-4caa-a28b-2bc7d845fa42", "sighting--1aba872b-6c2a-4908-8b22-aaea6fb9f8b4", "sighting--8ec00681-d819-4168-a2fe-32c8ebc06c9b", "sighting--d7b8065b-1e6d-4bf5-86d3-040636971522", "sighting--b80b1594-2555-4b98-ac42-46cc873e5b72", "sighting--afafb530-c083-4ebf-92d0-77d69fdb31fc", "sighting--b5d16c87-d24b-4e9e-b1bc-efc2c64704ec", "sighting--bd275093-e15a-4257-bfa3-2db8646e6b5b", "sighting--222e8af3-9471-42bd-bca9-ed6b16a11a17", "sighting--3798c47e-5ddf-4d31-b97c-b306d824d537", "sighting--f74225a2-201b-4303-a819-5b9e3a816ec8", "sighting--d5aba899-f695-4860-a35f-801eb02b22d5", "sighting--c115dbb8-165c-450d-80a6-47353c775fa6", "sighting--9482c11b-399e-4cfd-844b-f8254adabfa2", "sighting--ab619ab9-047f-4722-8963-c577c9687765", "sighting--8e895779-8e6a-439f-bd6c-0e75f25943f1", "sighting--e05045c4-5e3e-4bb8-9aef-684d8e6e6fae", "sighting--0bf0d3b3-266a-4462-918c-e10f55d9f479", "sighting--18037049-8d65-4e68-b747-710b575abb01", "sighting--2baed182-a49e-45a8-8443-7f1cca65f3dc", "sighting--81b9e0e4-d00a-4fd1-8c46-ac52c0602441", "sighting--189b0b7d-6037-45ca-8c26-5e28604a616a", "sighting--9b96382e-cf21-4905-91a5-48f7a4f60b5c", "sighting--a1a0dd3c-d0d1-4106-9172-b2191467c71c", "sighting--28f55c23-4323-4703-a2e5-34b20d8970d4", "sighting--331ae869-78f1-4a79-9b4d-3561ca642440", "sighting--93aa91be-7566-478d-9a00-b9b1991b727d", "sighting--c1a9b244-edc8-4382-af27-e418fa3af22a", "sighting--4e1fbeaa-9dc1-47c9-b0b2-647dbb204796", "sighting--96f6a748-d087-4114-b066-de67f723d3e5", "sighting--daa994dc-2d2c-4256-9339-35b024d1c97f", "sighting--ae730e07-e82d-4995-bf09-948a08142361", "sighting--fd05d37f-ce08-4230-aac3-abb7ed34220e", "sighting--f116e16a-b73e-4244-bd3e-c6564ed92dbb", "sighting--bbdf6ccc-3a45-43a5-9e28-2284d5819cce", "sighting--e505b306-fdb3-4254-92f3-f451a037eb5d", "sighting--91aaefc7-4f63-43c9-983f-f5c81d02d9bf", "sighting--df9b52c5-5dca-4843-ab33-a1301676b2cf", "sighting--fb55bf9e-8c69-4e64-b014-933bfcc3ebfe", "sighting--3b64e10e-3043-4ea3-a95d-b1eea2110a97", "sighting--51725c23-5484-440e-af5f-676819401874", "sighting--d4adf97d-8355-42b5-8e24-93b18968e386", "sighting--c49180cb-4fb3-448c-9252-0ae681ce8eb7", "sighting--c64b6409-2fd3-42e8-9507-367fca7d3bb2", "sighting--f4947621-c9b9-42af-a9f5-0b6a9dfa4507", "sighting--66416794-39db-44c3-8b3d-54aa0546e56c", "sighting--93236341-902b-4045-94ed-f0e9a1203491", "sighting--377421d1-274c-4ae9-b269-294acc57be6c", "sighting--6d947a32-a401-42c9-8b4d-391d2b6ee80f", "sighting--f60bf502-8e7c-4df4-9844-ee806f4e8b9e", "sighting--13c9ae04-bd43-4352-b19c-84a618886b67", "sighting--7815de63-1f88-4aa4-a80e-055f726682a8", "sighting--63ef1901-bfa1-4048-81c4-6720d74dce5b", "sighting--63b9eb9b-941e-4ec4-83c2-35965e8fc81a", "sighting--09baf14b-9d34-48cf-914c-dbc6a3a8d46c", "sighting--53e98d7b-5948-4842-b8eb-000aa7ad82ad", "sighting--f04be950-dc7d-4047-bc9b-9cf9d128a1bf", "sighting--0e0a8aaf-cc27-4d6c-8cad-1df802a45144", "sighting--894f13f3-cac4-40cd-8ca6-45db793fe403", "sighting--9be84830-3c19-4869-b9d6-12a379f25d0b", "sighting--5dc88246-3018-407c-a243-b6a69b35b8f2", "sighting--40b64ca2-3ccc-4332-86dd-ca12c39ee93a", "sighting--4d571819-30b8-4052-9217-e15e1c2823f7", "sighting--2e5f5296-3154-4e08-8749-462e3d3c9e4d", "sighting--fb3b8440-22c6-4e6a-a0a4-a9d0da527bd9", "sighting--b2b67bb0-1976-4bf0-9258-1bc51a29e663", "sighting--c2f0b208-d089-4506-9505-2eca831af212", "sighting--165417be-feb8-45ec-9af0-23e3515e57e2", "sighting--b87f1705-8f5c-4173-82f8-ed3bb667e289", "sighting--7796d87e-a2dd-4af2-8644-23af12598b48", "sighting--10ac6ae2-edfb-440d-bd81-f7343fcf7bce", "sighting--963a96bf-a0ad-43ec-bb55-5a7c54180389", "sighting--dfbe3546-d51d-4fdb-9ffa-0b656791f177", "sighting--fa08166a-a6ed-4e44-bcd6-a2604c7e006b", "sighting--71f980f2-4e04-42fc-88c1-7a96a464f790", "sighting--8eff4885-1650-494d-86bd-5ce9c58e57fa", "sighting--e1a5f0ac-0fb7-4746-87db-1b6ff7df10a3", "sighting--acc7754c-e6ef-4aba-ae43-55191aee890c", "sighting--d97ec9f1-04b2-4faf-86d3-4e6ba11f83d4", "sighting--5090ea63-bf90-42e0-9247-fc9824cdeea1", "sighting--ac695a71-1590-41e5-a598-e0bc245453c8", "sighting--d4618fa2-ae98-4af8-b0a4-89650988ea72", "sighting--4bb42211-fa3d-4617-b112-35bf0587d3cf", "sighting--d3a0dc6f-27cf-4814-ab94-d7b6b667cf1c", "sighting--9abd53e8-5e47-419b-b0af-8a1ba2defff8", "sighting--061eeded-3c85-49e8-b79b-e792479a0d9c", "sighting--e3417282-6cc2-4250-9f0f-fef54b86b932", "sighting--1e3dc801-01db-450f-bd1b-981bba318fab", "sighting--a0d91376-f4ed-4d2a-834e-7ab266148598", "sighting--12c6c22a-6007-404c-829e-1d9eeec2b61d", "sighting--40ed85de-2a87-4678-8d2c-1b0e127732e0", "sighting--e48eb77b-1efe-40e6-9d5c-26b364e0ee87", "sighting--d4d2c5a6-1942-4d5d-839d-34cc1617fe7b", "sighting--b952f699-731d-4ebf-bd85-0adff788c6e2", "sighting--7eb30a3e-e073-4d85-a867-4644177e0c05", "sighting--25fbdc5e-ea94-4585-abde-7f39b3ebe7ab", "sighting--09e7edd2-9a18-4f5e-a23d-75b1f370213c", "sighting--d05fba54-8542-47ac-8929-641866d35592", "sighting--b7221916-ef3d-49b8-9020-e6a4477e23fa", "sighting--b09fe8d8-39ca-4890-91ae-eead03e4eeae", "sighting--56cbac67-98b7-4829-92d7-0c28fcb1677a", "sighting--25a04ceb-94ef-4c23-9ece-ae043fe5cadc", "sighting--4c288cde-78a2-4ffc-9e39-3e729604c979", "sighting--39fc33c6-2771-4fc7-b23e-94281d6084ff", "sighting--fa537e16-13eb-46e4-9a67-a6c7f05d5f11", "sighting--b4a04241-ea2f-4d7d-a98c-8f0ba4d08347", "sighting--49ea3691-a00b-45a2-a849-25f32b4400cb", "sighting--018ae362-fb17-4fcb-9466-9818034e4a46", "sighting--9b03c240-e180-430e-8041-f67b976a9a05", "sighting--58a44f2e-128c-4697-ac9f-353730b2e84f", "sighting--6b781291-8abe-4a52-bc76-d692a4215d7b", "sighting--4e5f79ea-6f33-4b63-bf33-77642ba83488", "sighting--cdbe8f85-28f4-4869-a8b0-0f1865c53a61", "sighting--a136fcd2-bcaf-4c0b-a616-9cb4d1121a67", "sighting--ed0ffd88-0755-450e-ae14-276d23c61375", "sighting--fea97166-e4d9-4c7e-b989-1274db139db6", "sighting--1be37ed3-454d-487e-b43e-df68c7cc5c9b", "sighting--c194a57c-9a95-4017-a6a8-18e424d560ed", "sighting--e8adc683-ccca-4773-803f-9c422bb65b35", "sighting--92cadc01-bf2e-4303-8f6a-dd245c2f3935", "sighting--9f5f240a-f8ba-401a-9963-0e63d5417a18", "sighting--ebc8bf97-37af-4ba7-a7d5-61c868b0bf3e", "sighting--526fd3ec-b72e-4fa1-81b7-3a8178179ad1", "sighting--2652cdc2-9336-4d52-beed-8468034ea2ee", "sighting--bc473652-b19b-4f0b-b6bf-c9ea73f32686", "sighting--452d4b88-899a-4159-ab03-0fa60ea204ab", "sighting--321f6761-4a29-42c6-b2ae-915717e99475", "sighting--1f43d0a5-12aa-43ec-a58b-e3a8f88f5876", "sighting--c766a11d-93c0-4c4f-b1fd-71739a964b7e", "sighting--dc1b789c-4544-4035-a552-112fa0cf3ce9", "sighting--770290c4-2d59-45a3-9e61-ec6065d42e34", "sighting--6afee186-47c3-43b8-8503-ec576cf922be", "sighting--59a8da06-2754-472b-96e5-fae4e6d0b5ec", "sighting--28581b98-e124-4669-861d-fa77f69c10e0", "sighting--5b1ba077-0ddf-4057-80a4-b2cdcc6a4d9a", "sighting--dc9c759d-bc61-4707-8c5e-8c718466fa8a", "sighting--100fccbb-7dbb-4835-9465-433609ad469d", "sighting--4e509d19-a8dd-4475-80bb-2736e33c7628", "sighting--dfb785f9-318d-4eaa-b47c-76418ecaf877", "sighting--4c0c5b96-2d68-40da-b5b8-2fd69324b433", "sighting--9dbdad5c-3876-444a-bf19-26886516a946", "sighting--1a57d9e7-6ba2-43f4-be15-e190165e8f99", "sighting--9e2631a8-0611-4697-8412-23f55c02a50d", "sighting--07cd9989-59a1-4103-980c-b4bab0fa9092", "sighting--f60da50b-bbdb-490f-97ba-300d415ef9b3", "sighting--8f782559-720c-44d8-9d66-6c9e3a1ba66f", "sighting--ecd68699-a03a-4798-8b4d-3b6c402dbe6b", "sighting--84ebd6ac-7ec3-455c-8751-ebd7a3b77638", "sighting--9ed6a302-f1c6-4e4d-91b7-d407ed919a24", "sighting--ec4d0737-d646-4ae7-98b3-4b40e9225849", "sighting--28f9fb57-e573-48d1-b10e-2daeb4340539", "sighting--4f3194b6-7374-4d71-8a32-856359f69725", "sighting--b6a3361e-8f8d-4560-b8ff-b1b39039ce20", "sighting--ffeefa5b-c224-417b-97db-ea0ab1dfea50", "sighting--a31c65b0-b0d8-41ad-af1f-bcd265a4bc03", "sighting--ca131410-61f0-4f06-b1f4-6704470ac329", "sighting--316dfd5c-5afb-4a74-bbb6-a286f55010eb", "sighting--e242cb7e-2f45-4276-a739-362c4d50f2fd", "sighting--44767bc0-ea0c-4ce0-bdd5-a99438a64a8c", "sighting--9cd1b5c2-a992-425c-8378-0e5847dda500", "sighting--4436aecf-2c42-44d7-9066-05e77666caec", "sighting--18cc5220-fb61-47fc-b23c-7335fe9a2449", "sighting--af3cdafe-2aa7-41a1-8fbf-bd54821caeef", "sighting--56c46ec0-d413-4593-9e3e-7f76daadeba6", "sighting--df2b914e-a019-4198-bd00-52a335085b35", "sighting--de568235-cfd9-48e5-8ab3-ec9dbcf0a7b9", "sighting--9de690c9-c665-4d24-9afa-4f3ad6f33ec5", "sighting--3ffe88bd-7fac-4c41-9b19-36ba7188072d", "sighting--cade6c57-4f59-4f69-800d-521c8c226a95", "sighting--a8a614be-56a1-433d-b97e-bcebc1e460e4", "sighting--605e46d6-a5e0-40cc-b4f8-94aacde7d41d", "sighting--3aa406d8-43bf-4feb-b29c-62d7e5f96847", "sighting--b65b0988-b835-4fda-8474-9b2d32d8ae1d", "sighting--869f394a-7f47-4c7f-b4f4-ead1c6ec80ac", "sighting--40d2378d-8af8-4195-9347-6f39f4eacaf4", "sighting--d403b877-9ac5-4e39-8ab3-bd5692e19f8c", "sighting--15d4b327-c764-43fb-a7d3-b97d5314328e", "sighting--82fce263-503b-48f4-b104-ff3eb432e4e9", "sighting--55f7dc3f-7481-4656-aade-56bbf1533388", "sighting--d1b8a3d3-f792-4e41-b115-af4edf34bbde", "sighting--31e693da-6696-4d57-88a6-476e73da8935", "sighting--1e2a1ddf-d7e2-443f-9bf9-ae670fe56278", "sighting--51983fc1-00b3-47e8-be14-71bd74917666", "sighting--914dc074-f8b2-4d55-aab4-183c2332dba9", "sighting--00b6ef44-2be9-4054-8139-d54dc5363d6c", "sighting--6edae1a3-f20c-4a4a-bf5e-16d5bcc85d11", "sighting--a2baf408-5c13-485c-843d-fca8a5e33f41", "sighting--526feba8-be02-4adc-971f-70b6587f7e22", "sighting--590317d9-9faa-40ab-b8e3-f26e529e9276", "sighting--05b1f064-4d7a-4af4-9d47-ecfa4e895ac9", "sighting--b365e3ad-fe1a-4232-8f17-5a9631491951", "sighting--2d0a15ef-272b-424a-a6cf-c76f887c6d01", "sighting--6f78f936-73ed-4776-afb6-d785f18525a0", "sighting--477683d5-31cb-4786-b252-9951e5d709c8", "sighting--ac36081f-ce19-4405-8b9d-5df98ebc41ad", "sighting--b28a5927-1288-456a-b8d0-a13a9a69cf04", "sighting--55e53620-b8e1-4309-b92c-a083689ba293", "sighting--1bf31387-7908-44a5-b361-c4b0d70682b5", "sighting--8fa33e99-c516-4e1c-808d-1b024456df6c", "sighting--25579ff3-5e41-4b22-963d-e1308289859a", "sighting--28da9386-1d2b-41ae-9fd1-2b571c295d66", "sighting--f7f6e1d3-c53d-4598-b58e-65bc23072655", "sighting--faa9a4f4-68b5-4c53-a603-b8a685cf5c6c", "sighting--4274f43a-6fa6-482b-b3f0-aa4de2d4ebbc", "sighting--2a75e22d-7228-4297-9a52-ed722ff05570", "sighting--9c399388-723c-493c-b3ff-a9e17670b43b", "sighting--a5e4ab69-3f23-49d9-91a9-d6b1ad340665", "sighting--ed53efe8-0c27-4158-89fc-f2a44b9f3def", "sighting--fdb3ccf3-1638-4f26-b6a6-56b03f079b27", "sighting--3d98c743-e1ca-4442-82bc-a81ca50f2717", "sighting--e1c894e2-dcbb-41ac-933a-be2e3a3ba8d6", "sighting--5a406ad3-3390-4869-b7e4-34abd21f2207", "sighting--5b328ed3-8f01-4342-ad78-716d4032a4dd", "sighting--2d07bd6d-8c20-4177-a2df-334834998cf6", "sighting--5639c17b-cdfd-4bc9-9b5b-3b643861e3b4", "sighting--8f1d4c14-3f48-44d2-96e5-80210292120c", "sighting--ad56933a-50ef-412c-af25-d32d5e25d032", "sighting--8b68a4e0-ced5-4f1c-bde8-7724693e6651", "sighting--f003755c-22bc-4520-a22b-377377603627", "sighting--f9224c41-6610-4187-9f9c-abbcaf5346c7", "sighting--8b373cf4-a79a-42c8-bcb5-c9dd1f878811", "sighting--59e5d4e9-69a0-4a17-925a-54101e65520a", "sighting--e50d9167-0a19-4b91-a21c-d60a2162f996", "sighting--0b022532-bd9b-4004-aea9-2643bae43c88", "sighting--aa704dc2-cbe3-437d-a5eb-a0d322546f86", "sighting--9336a522-61ec-4c1c-996f-70b9172baa98", "sighting--5aae5a5f-f06c-4be2-b1f4-27314e47a77f", "sighting--50f4c108-c4db-478e-8efd-57a23d9b40a1", "sighting--a2e682a6-f752-4f85-a340-68d6b8e622eb", "sighting--9491b654-bcb2-4e1f-a2f0-c30c8da70900", "sighting--95d12eb0-2e01-4dec-b1f4-ee152bd09046", "sighting--a2abb9d7-eef7-464e-a7c4-5d9c93be3308", "sighting--f6403ad4-9457-46e8-bfbc-6c053b185ba6", "sighting--7264d403-9c70-410b-bc5e-2cf6a6f41473", "sighting--f6d2e1fd-423d-4c62-b0eb-811e7255c103", "sighting--c37cda1b-137c-44c7-a463-6e531d282fc4", "sighting--d7f23a5d-cf32-4696-b7f0-377ca00a729f", "sighting--8f0c8490-4286-4d26-b780-ce5273c0b194", "sighting--f46e43f0-4639-407a-bf3b-3e204e816e6f", "sighting--f87bdf5f-75f1-48ca-954e-74d290554725", "sighting--6ee12314-9259-4448-91c6-1137fe926e5d", "sighting--b6996a68-1ef4-464f-83fc-31ce4bc31f7b", "sighting--62612b1a-7562-446e-8999-e793e2373f07", "sighting--fd275d76-e671-4776-8a8d-1d629efe12a7", "sighting--57eef113-32c5-4ee6-bc3d-4aae9dd0749d", "sighting--b5706fca-b172-4114-8159-d70328074b90", "sighting--b7b305f2-b187-4de6-8751-f44a645140e2", "sighting--1f1c534b-6493-49bb-9238-cae35ef4a50d", "sighting--6ce79599-a8a9-4dd0-bb39-e6a714f7a233", "sighting--c43277ee-8d2a-4f9a-bb4f-a738025d8100", "sighting--ef9c962f-fcaf-4b9f-a9cc-867acb8cdb0c", "sighting--9b7a645a-bd2a-4f35-bde5-d5ba2171d29e", "sighting--b0ba0b2c-a74e-4423-8f2a-588b902a08e7", "sighting--4043be2a-25c3-49dc-8913-33feba86f260", "sighting--3f303942-48ad-4ff0-ad90-eec7d4579f16", "sighting--32ff5917-9d31-4ee7-8409-dd3bfd3f6e0e", "sighting--27275862-e28e-41bb-bdff-06ae813005b7", "sighting--01f4fe9f-3f30-4c56-9a83-297165b90d46", "sighting--0d33f890-640c-4435-b9d8-dd3d7701c6cc", "sighting--3070986e-9666-41c2-a01e-125cefad3a2c", "sighting--75252837-1847-4dbe-bc9c-6e65e5336df9", "sighting--3544a057-6351-414a-a8bf-3d7b132eca2d", "sighting--75e4ab03-2589-4e85-b4af-5d5f0cedd7fa", "sighting--c1db7949-62cc-4591-945e-82e81fcb201f", "sighting--15f556dd-68e3-4c26-a052-bba4b1ec85a1", "sighting--008638dd-e8e3-4707-8af7-fb1b8bb808d4", "sighting--1f1c0ec9-63c0-4853-bf2d-19e92a109ca0", "sighting--2d91e8a7-a830-4606-94c8-50a658c294ab", "sighting--06fa08f5-5cfd-4eee-8d1a-aeda57544f49", "sighting--9316f536-8be7-42f0-96eb-9fac8a299e46", "sighting--d44882fe-24a7-4384-b51a-2fb3165c4108", "sighting--f4c79b8b-2f86-4081-b875-0558becdb60a", "sighting--3f376b58-4d1e-42f6-8de3-c083dadd1dd8", "sighting--e54753f7-66e7-4b89-804e-0b812d2c2cce", "sighting--18191fe2-0517-4c7a-99cb-d98fe5401925", "sighting--a9d57adc-9546-4188-a71d-d5181e000883", "sighting--1fcbd62e-53b4-46b2-81a7-e9d61f8bcbd3", "sighting--15540fce-97f3-4f36-8bde-d80f62d4f7d3", "sighting--cfcf8e04-6d32-409c-b276-1d8ed380f4c2", "sighting--c4fc4709-d393-4b2e-9b80-2fa270a581cb", "sighting--708b441f-c5dd-4465-91ea-22af7614ebc7", "sighting--7875782a-f128-4cff-8d9b-c2c0867ab253", "sighting--4518df6d-f5a3-4f33-aff9-9d5a505ee949", "sighting--5c88c23d-5079-45a4-bbfc-47ab4d377a80", "sighting--ffe8b801-449e-4c0e-8045-2977cdf30498", "sighting--59e4f763-85f4-4913-bd02-4d4a7d431825", "sighting--afb163ab-cba0-46b9-8f44-8a743644660c", "sighting--33407bfe-6a70-4f48-8772-0b0814fb56a7", "sighting--67724d9f-f926-4899-bc82-d37f9ff4f04c", "sighting--92e1f24a-7432-4022-88a5-1187c30e0d3e", "sighting--b3cdf2f6-8c41-4c7a-8eb8-58f5582aba0e", "sighting--2890d36f-95d6-4b95-a76b-84183e223e4c", "sighting--4dfe858f-e3f1-4767-82a1-1a07bf72c7ea", "sighting--b2000e56-fcf3-4cb3-9a91-6a79036c5a24", "sighting--ce069bcf-d465-4a17-9c91-87de489a2262", "sighting--b6464d91-7098-4633-9228-d2120d625f80", "sighting--3b3175da-1497-4953-9169-93ea0536af51", "sighting--77c2a052-8b59-40b6-9de1-e41a3d951d0c", "sighting--9b183e53-f88b-4758-a4db-fdc6f2396b4e", "sighting--b4603d7e-4c16-4958-9b3d-65e9407a43b4", "sighting--256bd311-2068-4b06-85d1-4cfb6842945b", "sighting--599713fc-5497-4295-8372-d1712a8a9e13", "sighting--b1ecc67d-d0c7-455c-a4f1-0a312068c2ea", "sighting--f8546626-8333-4ca4-9336-1b07f1317553", "sighting--b19616a1-8fcf-425f-b559-58f240432a9b", "sighting--6c433d77-60a0-4c5c-b90b-30e6d0df70b9", "sighting--4a3cd1c9-5868-43d4-ad5d-3282ba70a550", "sighting--d286c40c-4c80-440f-8282-9e925bef4c8f", "sighting--651de00c-0660-4837-a9db-ed337f68307f", "sighting--75a69de6-a47e-46bf-a6f6-e536d676b3b4", "sighting--e2a17aa3-c914-46fa-8335-a928ed26919d", "sighting--8ba963ce-57af-4174-a3a2-531265c726eb", "sighting--a0282176-f9a8-4e0e-bc88-1c723d3aa8ad", "sighting--4cffbeda-b732-4e54-b381-20da68366281", "sighting--58f6ce92-852d-435c-a471-7aa31cb92a2b", "sighting--eb0916c0-7f57-45f1-ac42-749ac42267b3", "sighting--d24dbb28-5812-4e6a-9fd1-52bb5ff82d24", "sighting--6962e91e-cf48-4926-891f-034922b8777e", "sighting--59230199-c984-45a5-82de-46c255ea572a", "sighting--944ff7a3-46e4-4dc6-befe-cd32fbd7c3ef", "sighting--7bab33b7-43dc-4b53-89f2-ac3e1eac0601", "sighting--a71f9002-08fb-43a7-a840-a822b319b278", "sighting--bbd4ba0f-9395-4a7e-9bae-e7c4fd1931af", "sighting--3bfdfe18-ee41-4e1c-acc3-5fe7e43e6a78", "sighting--6b29f67c-936e-4378-a390-b0b22467c783", "sighting--b19dda51-c60e-4800-a759-b7e696848412", "sighting--57f98081-2523-4af0-9b6d-580724ed4c1a", "sighting--21bda63b-5f55-4941-a4b4-82f0832e2f70", "sighting--c834effb-f5b1-44e5-b398-09da9523a8eb", "sighting--eca27b91-8a4a-4eee-a728-26f0f4ca860b", "sighting--bd4864e5-241c-42e7-835c-092ab1cd6671", "sighting--0c2c9aae-5be6-4c92-9bc8-b5f980666b1a", "sighting--46404e08-7232-46ca-8b64-f6c25abf9e91", "sighting--7e30c282-9464-44b4-a7a6-b6659c431022", "sighting--93ab91d3-b2df-4c05-b4b3-fd4cd6a243b3", "sighting--b37bd129-2f8e-48bb-8d94-f196ed81aaa3", "sighting--98b5d5e2-ca8f-4d15-84df-a34b682eedb5", "sighting--6da5f0ce-f408-4995-a2ac-9e14e4b14c73", "sighting--b465f62c-89a8-4311-a3f7-0a12427c6bec", "sighting--0728ffe0-8763-4467-952b-225ef0419444", "sighting--658da1a6-c48c-4795-80a7-85e4698465b4", "sighting--3ce8ead4-8afd-49d8-bf22-d71539074685", "sighting--83e4bddf-2faf-4fb8-9345-093afe57e4f2", "sighting--73c78421-9c3a-49ce-8381-df936586bb36", "sighting--fefe5227-69e5-42d8-bcb6-fc981b1f6b74", "sighting--c1951771-76b7-4528-8520-22303b95e564", "sighting--e3ce7014-3ffd-45f1-aef2-da328406d776", "sighting--664298f4-a1cd-40ac-a090-eecb9fed1d68", "sighting--0bf18be2-94d0-4d11-a543-cae367335591", "sighting--31e6ec5e-18f3-4405-8a20-afee58e983d2", "sighting--b445311a-7fd2-42df-8fb5-18e9e0058c4b", "sighting--34d12a7a-6a0d-4aeb-a609-32b6b019683a", "sighting--5ff9f446-9a7a-452c-9595-6026ddebf09a", "sighting--59faed84-61a9-4fdb-92d3-1032b7b3fcae", "sighting--76ce0cf1-b579-46ab-bd3b-e5d6d9f93f49", "sighting--1e77df46-9c40-4c2d-89cd-6a02558651f8", "sighting--c19c3063-74d2-4a86-a331-ddbe313152d3", "sighting--89922383-46f1-4a3b-8b70-00bf682425fd", "sighting--9328a51e-bd73-49c3-bb1e-135491b7564f", "sighting--355dc5b1-4b7f-4176-a9e4-cf5099d48fea", "sighting--55790a29-8f17-4c11-ab6e-acebac0843a8", "sighting--4138f7e4-3832-49ad-a58a-2cd2f7e3d7eb", "sighting--3f9a0c24-82e9-4d6f-a89a-79e8bc2acb68", "sighting--b29becab-8439-4b57-ba6c-3b2110c4fe8c", "sighting--a5c4b972-31d4-46b3-b7f6-2319d5f46d1a", "sighting--33ae4e55-01d9-4be0-93b1-ab729b0a0adf", "sighting--61add0ae-17f2-4015-8053-529e0bd14be4", "sighting--01d76334-0a9a-456d-8be0-c6d3ed41dfd3", "sighting--a431df18-89d4-449d-80c7-2018fa42d11e", "sighting--a29ea20c-a415-43b6-be25-eefc54d61cf7", "sighting--8e1cea93-e8b9-4823-b072-ccf5bebf501f", "sighting--28a7cdfc-34dd-4180-bc7a-191242b57580", "sighting--f73ce1bc-88c3-4aa7-ab4e-b8c6321f81c2", "sighting--9b68e525-485e-430c-a14e-dcf25c4e309f", "sighting--e0bddd75-5be8-4514-8b98-ed53c7c6b9d7", "sighting--b9b4584c-a4f7-46d4-81ad-62b4a6b76948", "sighting--e0dbb8c7-48ca-4414-b0f0-132de22390af", "sighting--5475b432-9665-490e-8131-ec2250d777a5", "sighting--706c1fce-d6f1-411c-b1c5-76eddd5c82c3", "sighting--2112751a-4c38-4b18-bf51-aa344945958e", "sighting--93f54035-b41e-4aab-a576-cf099659eac8", "sighting--a977345e-6fde-4314-9e76-4494e445a2c2", "sighting--70c356d5-162f-43b2-8f0c-539ad01e5c57", "sighting--4c835d8d-9d0c-4202-b692-c7a4b96225a6", "sighting--b9f5ed00-0ff3-4fb9-81a0-9a8a39e9ecbc", "sighting--9208e141-c8f2-4b61-84ca-f2bf0aa50ca3", "sighting--4e1125e1-d620-402a-bec0-ccd6b93d9a93", "sighting--7aefd993-d317-4484-a8d1-21268e22ef86", "sighting--8a70e158-e190-42a7-ba65-eec3fa584eb5", "sighting--910856f0-d296-426b-ab75-02c9e0159a3c", "sighting--7eb7b866-822a-4f4f-92d4-8a367d643447", "sighting--2e488a2d-daea-4e14-a1fc-493e1b674029", "sighting--92379bbc-c1e6-4612-8273-7b1f1c8cb396", "sighting--98b0b029-2086-47c1-b96c-e52cd7f0ec87", "sighting--2c9ad103-998d-44e8-80b7-3b2817160152", "sighting--b0307e62-3bc5-4490-84dd-d7d3f2c9e462", "sighting--c2989a54-a76d-4498-842f-3d6de8c57eac", "sighting--e096ea9c-79e9-4515-a193-52a115f74ab2", "sighting--36f83e07-e3ac-421b-8ed8-7c2c5ed326e7", "sighting--f75c9415-8544-42c0-83e0-310cdd23ccc0", "sighting--88c775fa-a5af-4786-8af9-d41ed5d92574", "sighting--7a0337a9-770f-4943-85d5-dc8f312afb47", "sighting--db4406ec-3446-41bf-bb1b-330c0aa1449d", "sighting--a7921f61-bb9b-4206-93e5-2e7b4fab7eec", "sighting--7438c672-c017-46f4-ba38-c6d9f1a368ad", "sighting--53f92bd9-84e2-48d5-91f0-6255cfa53bcd", "sighting--adda969d-9e7c-4a26-93fa-b8edc6cfc15c", "sighting--6c1d253a-82aa-41ac-a410-c1925072b41f", "sighting--110ecb14-6054-46d4-b058-4a4d3164d768", "sighting--b753b1a2-9390-4f7c-88a1-6fcd8ab4abb3", "sighting--4d981b37-262d-4294-b51c-db955b990963", "sighting--f3813919-4a7f-47aa-8d03-4d77a8b4c764", "sighting--90415b24-fc8d-46d7-9894-56080aefdd4e", "sighting--7058667a-6d73-4d42-ab25-a367da846002", "sighting--9d97d3dd-b202-4c64-9170-faeccff409ce", "sighting--5a80b70b-ca81-4e52-bd84-c325c383bf7f", "sighting--0d2e9f55-14f1-4870-a4a0-e77a3c822955", "sighting--811ade82-c5a8-4db6-8217-d119c85c1535", "sighting--ac73ee1c-9a98-4989-9990-640375b21982", "sighting--862125d3-d9dd-4329-8c34-38144e85a696", "sighting--ecbd50c6-557b-4d2e-a42a-d352c8c6a2b3", "sighting--0b9dd7b6-c25e-48a9-89cb-b45ce35d8d54", "sighting--4db0da16-d170-4348-841a-3c0c79ba651d", "sighting--c8d5be8e-46b8-445a-a090-942be90be1e2", "sighting--f7ed4be3-181e-4ec7-be79-17cbae32e98f", "sighting--623ebafe-9902-4218-8072-a70b81f61bb4", "sighting--bd9a792d-269b-446f-a72b-29ca889d8eeb", "sighting--1ac07369-a8e8-4249-a8da-d16de6e9a9fc", "sighting--ca794b2d-76d7-4ab1-888d-1e9b3613916b", "sighting--71e828df-444b-49be-9ba6-55c026d27119", "sighting--af1ca8d3-9af6-44c9-b716-9c466d1eff4a", "sighting--f2b0167d-bb43-4f1b-9023-9f30511ac119", "sighting--932a9808-f870-4206-b91c-eb810f6900d1", "sighting--62bbd849-21b2-4790-9314-0480d40f1766", "sighting--ecb5ce0e-ee90-4bc8-a138-9451cf892a8a", "sighting--f68616fa-e1ad-434f-9bbb-ff12495c4214", "sighting--da6943a7-8996-494b-aad2-554c99a0ec5a", "sighting--aa10fce0-6504-4b48-be43-a11337ee5958", "sighting--7573c796-5cac-455e-93a2-06ff3243961c", "sighting--2358285c-05e7-456d-a293-5e49f8cdabc0", "sighting--e9522e14-70ab-431c-b306-0b81373f4c79", "sighting--b52f812b-759a-459d-84bd-1ca76204b608", "sighting--2cab2747-b429-4849-a94b-99929fd6ed3d", "sighting--0b384d0c-2fe8-4732-ac95-7ad9c644c2db", "sighting--d9564a69-89ea-4c3d-a8a2-891b06b20939", "sighting--7785b4f1-95a4-4993-a033-4890775873c7", "sighting--98240c9b-fa9f-44c4-9b87-56196b752c5c", "sighting--2565e2f5-4a0c-40f3-96af-c040189a9537", "sighting--0e184017-78f6-4b4a-a598-9fa7203cc5f3", "sighting--97ae920e-dfc9-4ec8-bb11-52bbdb088949", "sighting--a493066d-ec99-4ad6-a16b-bb1c4c411c58", "sighting--98b88b71-ea74-44e0-a7a0-b7d9671593ba", "sighting--2429510c-cda4-4bc6-a24a-1c9b95042dad", "sighting--8d5e0e29-c3f5-4daa-9524-05c26005ee52", "sighting--8fe462e4-deab-4368-a3d2-8d66dff16c4e", "sighting--c3dde7ee-f54a-4df9-87fa-7c4303c4fd07", "sighting--05b9c983-b747-4e15-bdcb-8a677455f760", "sighting--058a03a6-b25a-4f68-b1d2-691443566fdb", "sighting--7e0a7a64-7a0c-46e8-8ba8-04383bd19564", "sighting--bae1e586-7e31-49d0-8210-4a3bc5dd9ffd", "sighting--17b68306-a1ca-470e-99cb-1c1e390d9ff3", "sighting--a36f1065-fbc9-4149-a72a-f0bd6877bcb7", "sighting--0ebc5b0d-6061-40ef-b277-2d63b5355658", "sighting--adf2f4b6-c331-4e42-b1cf-09b1105dfc26", "sighting--9c77083e-1e2a-421b-bc82-b7e908243b87", "sighting--3601e9cd-9c78-4ca4-be90-e011f7bb1c8d", "sighting--521b0904-ef37-4162-94c0-b1712c080deb", "sighting--472a152e-d357-48a9-90d2-cb702c3719da", "sighting--1646dc1e-aee4-4632-98a0-ed5b1a0afc87", "sighting--843399b2-c554-4ad3-b059-65a03d9448a4", "sighting--425ec1b0-ae5f-4846-8c61-df2a13de0207", "sighting--f7a1e2ac-d858-4dc9-8598-f96bc21f70cc", "sighting--028c9704-1c70-487c-92c4-40efdeb11f84", "sighting--1bddf3c2-48bc-455b-a6ac-9bf54635298e", "sighting--8d8fa2ae-07ca-4442-8edb-61292518a28f", "sighting--dfe1d1e0-cae5-4050-a843-4613c5cc5934", "sighting--4dbedbb6-aa64-4872-ad5c-f53bbc50e358", "sighting--3abf109d-bce3-4a54-95ab-7fed58831f72", "sighting--7dbbc03d-05b5-4b90-a66e-09fe1a241a7f", "sighting--14ef3f66-7ee1-40d8-8da2-63b950a02bdb", "sighting--5a191d6f-5d61-44da-8661-acd00338781b", "sighting--5264f51a-8b40-4aa4-b5bc-2c3ee7b65b82", "sighting--ba981196-8a0d-45a0-af35-1f4a9b228f62", "sighting--00332a57-60ae-4811-be87-1db6589cc9d4", "sighting--7dd14ba8-e16e-4e17-b968-9abfb2cf1e36", "sighting--ca4772d7-681f-4b2a-8901-a3aa3ab6450b", "sighting--d3d8c70c-9f81-4969-9147-d7d7d6a4c30e", "sighting--3f046897-4483-4c35-9626-b57bf9ef939e", "sighting--af35c6b3-1280-498b-a13e-7091733a6da7", "sighting--3274a20e-4450-4fbb-a446-0b9fcdda2cbd", "sighting--7cf72395-6991-4e1d-b720-7669e2232c23", "sighting--7990c86e-da96-4306-8190-ada7fb3825d6", "sighting--858488b8-30e4-4774-ad4d-ab99712db9c1", "sighting--6692a012-a7cb-49cb-bf7e-b734aa0bc8a2", "sighting--60afc87d-8052-459f-83ed-6a49d512a565", "sighting--4ea3c6b2-dfb3-4571-86b1-e9e794979c89", "sighting--9dd15b06-96a8-4e7f-9f0b-27610eee060a", "sighting--b9142779-f5d6-4fea-a930-2f8abcd89986", "sighting--f3c1c435-9459-49d8-8e8f-26a8af4ff4b9", "sighting--82e1d7c2-a301-460e-9936-07a95ae94e66", "sighting--e8ab31a5-1f07-466a-beca-9fa72ba87dea", "sighting--64d78abc-8437-43c8-9e71-afadf550fa3b", "sighting--56d5aaf0-f583-460d-b8da-9985aff925be", "sighting--53a96c4a-f3a4-4b2e-bd25-e61375726b9c", "sighting--35cd2121-302b-4f7d-894c-31dce31d7404", "sighting--b2e411b2-a2d7-4bca-83df-207940ceb54d", "sighting--7cb1ad23-ad71-4171-bc8c-1f20eab1f25f", "sighting--277bf860-40a0-4596-a1eb-8226aadfd2e2", "sighting--52795419-3950-49d8-bed3-3389dec2d6d4", "sighting--679bcad8-2d98-4667-ad41-6bdb731690a8", "sighting--3136db89-66e8-4272-97e5-d71c8b0ba926", "sighting--7ae847ca-f152-47e8-ac9a-72fe678d9c61", "sighting--f9dacf53-5f6e-40b0-ae27-fd98efe594c5", "sighting--2e23e54c-f7c2-4d12-839b-2fd27ac69db0", "sighting--20fb1a67-2618-47c6-85c5-696dacfcc710", "sighting--da3dae73-ab3f-41a0-b99a-d4c9e8df362a", "sighting--79f4a48d-08b3-45c7-b9e6-5b6fd9a09753", "sighting--2bccf3e7-669d-48dc-ab6a-559a5126f68c", "sighting--8e7c1c4d-5e61-4ddd-8a88-9d52a1562e60", "sighting--ea8a1d05-9bc6-4e92-be0f-c267326afe48", "sighting--ca0046a4-2050-4544-b651-700dbb4c6920", "sighting--f4b922dc-517a-4138-813a-1d152258b20b", "sighting--40d97e23-6ffe-4444-80a7-04a8312bdc2f", "sighting--27245187-5372-4573-8af0-f058e56000cf", "sighting--c851eacf-ebe2-4837-b807-69d561152db8", "sighting--e72dbaff-126d-404a-b331-26806de2c358", "sighting--be6825b2-fe1f-464d-b422-51d464e3edd7", "sighting--871d252f-7608-4796-a536-f3a2ca7a9748", "sighting--a5e01230-b696-4076-af68-35cf8e315078", "sighting--c4633ad6-df06-4bb4-86f4-6435602669ea", "sighting--600d908b-fece-4ec2-8634-686300b7f19f", "sighting--d96e72a5-e6a7-4035-8c4c-3bed00d19432", "sighting--c658d02e-627b-4579-88e7-5243fdad0fe7", "sighting--e786de0d-7433-42eb-a260-c9cfdf060bcc", "sighting--b53bc651-1ff9-4078-b23f-a046033620fa", "sighting--83cf07b6-632f-400b-b04d-33d1502c94d3", "sighting--b729dc09-ad2a-45f0-9cba-0240e9830180", "sighting--c6cd4a85-7577-4616-89c8-d07ef6523d7e", "sighting--0be8319a-fb65-464f-93d1-9d84d0ab06da", "sighting--28c56843-b3e9-4090-a474-b4d536d3a0b7", "sighting--d447b6eb-de8f-4a46-9990-e83bd56c4022", "sighting--57857c27-9892-4a00-9c50-93d37b411d30", "sighting--f30614ef-2b07-4777-95e7-ca2d073006be", "sighting--e11cbfe9-9a43-4d01-8c21-90ef3dc42813", "sighting--799561dc-b24e-417b-955c-2b1948eb183d", "sighting--24bd8395-a692-4995-87e2-c618a570a271", "sighting--c91abf36-d072-46ec-9f86-4ce21249981e", "sighting--7a8687f3-9eaf-494f-a566-1efa1d1285f3", "sighting--333a3880-db00-4a54-8095-ddae13c16b86", "sighting--8e3578f8-9608-4a48-b234-e95ed3196df7", "sighting--204eebc6-0813-4c58-8ccc-45801e9dca35", "sighting--e62594b5-5571-4956-af8f-08e92ab0e69c", "sighting--60040622-726a-47db-a473-ad72fb8c6778", "sighting--7ccf492d-f70c-44bb-8107-4c7ac85186a8", "sighting--12c6ee06-43bf-45c4-8179-f623b5e9f807", "sighting--0ae9ec02-ed3a-4a2b-aca5-37c3de3f11ea", "sighting--5cd59038-cb9a-433a-9ef5-f888ac16ce30", "sighting--f50cef72-7d3b-4a1a-a21e-266150349bbc", "sighting--fb41201d-153d-403b-a85a-e4b786c08d5a", "sighting--00a0f03b-44fd-42ce-9f1d-6904c95dd7fd", "sighting--fbb2d388-5f44-407d-b2d8-95f5e838ae02", "sighting--5f30bb91-fe43-404c-a321-cfb31754ea1e", "sighting--9aca299d-57a8-4342-8aa8-7079c596262b", "sighting--52a3c36e-d45c-4f6e-832d-a1e27e9f598a", "sighting--a98cf0e3-b8dd-47aa-ad89-3d5dc74bb939", "sighting--6dc0a911-3cfa-4dbe-a148-1fb8b782f91c", "sighting--313417b9-485f-4cd8-9ff7-2a9a8d239200", "sighting--268d0d89-caa2-43c7-8d61-676a03acfae7", "sighting--9c4e0fae-0bec-4dcd-acc7-625e17f3a4e0", "sighting--3d6cfe99-837b-4c31-9610-28cf6e2243a8", "sighting--662b9a63-4d62-4433-a5c9-570102159ea8", "sighting--8790ca7d-bb9b-449d-ab1a-e246e9961747", "sighting--c99a548a-662e-4fec-bda4-4ef5177af5a0", "sighting--b8496bc0-8d28-4e03-b82f-57a7e684aa82", "sighting--a5ca3f64-64d3-4c51-8b4e-d37b240eeb12", "sighting--f71c27f7-92a8-4e94-badd-e4f2a45cffca", "sighting--6805d344-a434-4337-afa8-58d1d5ca0387", "sighting--cfc6a4a7-34b9-4d23-a366-0fa6a072c967", "sighting--14cf1663-67f0-4deb-b66d-df672dd0c559", "sighting--7c961394-54ef-4060-a50b-1edda49ceec7", "sighting--85ee3510-775f-4ad0-a28d-7aab39fdee84", "sighting--4abd0c94-0fc6-4b13-b390-95fa0d77f6c5", "sighting--413691f9-53a3-4268-8d69-fed32de12577", "sighting--73af6758-65ff-41e2-ab04-0579ade500fa", "sighting--65510069-028c-4359-8efc-611acbb5113f", "sighting--5098d993-2a43-4dc2-b565-4925c8966d31", "sighting--ceebfc73-e21d-4354-ae5b-40dc25529cb3", "sighting--c3d89f0c-0671-4f8e-abeb-ef57c4a02751", "sighting--bd828286-9cd5-4980-9660-40690fb4dc71", "sighting--98b1e722-39c3-4d5c-9419-d4b1ffb183ca", "sighting--5ec237be-8aa7-4e73-9615-362bbe298d61", "sighting--3d673f6b-62f6-4392-8177-ae016dabeb49", "sighting--07abee34-5df6-496c-a522-0d89e32a0def", "sighting--01bba905-9a3b-4c6f-bada-edd884837cee", "sighting--4dc1dbfa-9bf0-4934-984a-1a34daaa12f6", "sighting--97613d63-dc9c-4799-8e25-6761a721cb5c", "sighting--75f6cd80-3ef9-469e-93c9-db2ab127bd66", "sighting--bd0dd44a-90f0-4ef8-a308-0eacedf3f59c", "sighting--efa85dbb-8a75-43f7-a0b6-112fe0df1981", "sighting--b8c0d4bb-f969-48ab-ba01-7ffb26917b2a", "sighting--4698c979-d452-4506-a773-c2f800ba5268", "sighting--dadae247-b435-4a05-942e-3c0f085b9154", "sighting--fc2bf76e-b316-4f2a-a6c4-599781120935", "sighting--b1df756c-7e1a-4dce-8b7e-6824dd78bddc", "sighting--bd093612-b48c-4152-a9ca-fc1c5a965e9c", "sighting--339c5c89-e4b4-4ea3-a7c7-f676a0239048", "sighting--f5a0c254-a823-4ed1-a2c4-b463e0f53d2b", "sighting--ab3f9295-683c-4d7c-b132-61e2a3cab634", "sighting--ac5d2699-e6ae-41b8-afe4-168e6244575f", "sighting--68d52eea-8070-4b45-9b20-3bd63b58e74d", "sighting--056f9490-98be-43f3-bdd6-87ff221062bd", "sighting--2c047833-7cc8-48b6-b837-4896a07ae898", "sighting--8e273fb3-a84f-4cf5-9794-2646ceaf59fc", "sighting--487c396a-1a7d-4e6d-82d0-d51e916ca684", "sighting--755e3efb-b70e-4c8c-a84c-645e76869765", "sighting--0adc35b9-5cf0-4183-90ae-f24845ed8093", "sighting--5f661f94-a5a8-4bd2-ae04-325e3e100788", "sighting--cba4a6c8-1958-466c-994a-e3a21d569a88", "sighting--422d195c-9ed8-46cf-8964-b967f06f2241", "sighting--f965271b-56cb-4a21-a2f4-37facab30cd1", "sighting--49ef398d-473b-41b2-b0f9-e025d79ff2dd", "sighting--fb43b9c8-1aed-4fd8-8667-9307d8b05c92", "sighting--efca620e-f7c4-4b7b-9706-b8a0b5882f7e", "sighting--40731b32-a81b-40bd-86fd-88f7af5c09c5", "sighting--459a163e-0671-43c7-b9e8-3a6794112c4a", "sighting--beeb94b0-d789-4759-a488-d6fd95269a48", "sighting--35182be6-7c91-480f-9e66-1886eeea7e0a", "sighting--ede541ce-8d28-406f-9c69-3a147e23e80e", "sighting--28f1ef10-6df8-4331-a997-26268d752b3c", "sighting--ba2f282a-395f-484c-a92e-b198d24aa4ab", "sighting--36baf2d4-48ee-4780-a1e9-963a468c5765", "sighting--e1a38fa5-9e6c-489e-8919-d20147855698", "sighting--4da54a6a-baec-4f19-bb28-5f712722472d", "sighting--4138e29e-1866-4a4c-b62a-e0864a34c5da", "sighting--ee46bb50-38c4-4675-9f79-274a83c6eee0", "sighting--2d0e1aaa-8ec0-4a95-9e03-e92cbd07d36c", "sighting--919aea54-3626-480b-9cce-8ff13d8a802a", "sighting--504b90eb-6b90-4edd-9bca-1074579464ee", "sighting--4d5d1f18-8cef-4415-bc70-0bb130923782", "sighting--dabb5dfc-9154-4551-bf82-415a9e235c7a", "sighting--7f79c46a-50ea-4dfa-9bdd-7d42fcba344c", "sighting--6db37e70-897e-439b-b81a-9c4dc078712e", "sighting--ef57a4e6-dccf-440f-aff8-1f3c43ec96f9", "sighting--fab21df9-65fd-4bb3-a77b-9cf871b67dca", "sighting--96216fbc-75cc-400b-8f4d-f8352bc6a2bb", "sighting--6bdd79a7-49a0-419e-addd-40da3ac41764", "sighting--69f18627-1107-493b-b584-7093c73d0616", "sighting--ae7daa05-27da-4c08-81a7-47cd62d9c49e", "sighting--fa9e436c-399a-4f3b-ac70-14806fe0ff9d", "sighting--9794c6a9-73ef-448f-88e9-d4cfe9f1ad51", "sighting--2cecf23d-8396-4c81-bbd4-dcd56b4cc2e0", "sighting--1e258725-1993-4257-ac6b-1e0558add6d0", "sighting--9ee84a9f-2994-4d80-8dd8-dfa5f55c3ef3", "sighting--cb56918e-a917-43d2-bc94-155620c1fadb", "sighting--339d8918-8116-4a7b-bd24-a77bdd01932a", "sighting--aa79ce96-56d8-4ecf-bb63-a9ec3352bb0c", "sighting--d4b7a1c2-9d9a-4091-98e5-4dc002278b6a", "sighting--2c49ef82-86ed-496e-97ec-e99d979c514c", "sighting--63920080-43ba-401c-b5ad-a17c3c64d34f", "sighting--602718a1-e3a1-4e9e-a8d4-55cf54e87218", "sighting--fed00ec0-c50a-429e-a5ad-e53cb06237e6", "sighting--d0db0899-7873-4483-9bfa-d7bc86209c4f", "sighting--9c1cac9b-3176-409e-8721-e5a50644c682", "sighting--37c7d427-dec4-4f32-84e4-bc28ef6b47bf", "sighting--824ad17a-708b-44c1-b725-614916cede7e", "sighting--e63fff14-e6a9-4c0d-87b4-1db7e0fc1f94", "sighting--7710cddf-e141-41f9-9652-53cdc2e8dafa", "sighting--5932abe5-dca5-4bf8-85eb-3c84e2afe6c1", "sighting--e6cd71c2-5710-4565-97c4-149491f2caa2", "sighting--6fbfb3d7-cb30-4ab7-a48c-d2c2dfd61bed", "sighting--85144822-5eae-4359-8614-075dd776cb6b", "sighting--8d2ca3e4-befb-4e21-bdd9-452677b7d7fb", "sighting--7d0ae986-09e3-4745-854d-3ddf5c6c9672", "sighting--e5948c41-2c46-4cba-8899-cf4e4e331696", "sighting--1d439c06-15fe-4296-b764-24fa5f7088b0", "sighting--137f3d91-8f0c-4c02-bb04-16110260ab7a", "sighting--7e36bf80-f619-4f0a-baf7-bd5db130b44a", "sighting--5ff75427-4b4f-41d5-ab01-6edb64703d7a", "sighting--2f022ad4-cb27-4504-9080-9c6215012dcb", "sighting--9bc2dc67-fc69-45a4-bcf6-8724854125ce", "sighting--67e9e6de-34ee-4953-86a2-40017f77b827", "sighting--e8150394-b667-400b-a6c6-6fd0e524b34c", "sighting--98e20853-c5f4-4ee1-8c7e-ef6328f21536", "sighting--e51dd226-3da8-4c97-ab3d-6dfc776ed88b", "sighting--695c0154-6b23-4443-aad5-ccf2e415d432", "sighting--57ef93d7-7678-4749-a5bf-d0128ebb87e6", "sighting--8c3d2ef9-91b9-487d-8ee2-eeb0b90a4680", "sighting--1e8d1978-3753-4a08-b6da-b32c66ebd38b", "sighting--32ecb032-9c3b-4578-aca1-4e959dab15a3", "sighting--2bc7d25a-70d7-49c1-8db9-f68350f947d4", "sighting--0b1354c4-47c9-4445-ac08-a263cb2612b0", "sighting--fbc9958d-a964-444d-b0b6-2cb66f3c66e4", "sighting--c3418fd6-79fa-4745-9d3f-a5338e05d26a", "sighting--d7ef43f2-2756-40b6-898d-d1db0563208d", "sighting--cb53e3d8-cd88-4b55-9e2d-58948dbd09db", "sighting--b7378f08-180c-4db6-b8f9-9c577daead4b", "sighting--34143bad-92b2-4614-b569-dd17d4493550", "sighting--98f56cd5-783e-4873-905f-b53683212b37", "sighting--376a43ba-b2c9-4b93-8eaa-7ea9ee9932d9", "sighting--045086a6-c6c2-4d47-a4dc-215b546bca7d", "sighting--c15a52b2-2303-4d20-9953-1b39eb80bd37", "sighting--c91f4cab-7fcd-4e90-b41d-6de7d367fb07", "sighting--5d21fcd9-1236-4a12-942c-c12da9786a8f", "sighting--5d81efa6-ee60-4ae7-a964-e5d62401a2b3", "sighting--6668afe8-faae-4cd1-bc26-de688d2f9bb3", "sighting--75d31eb5-0438-48f7-9f1e-4437f15b2317", "sighting--6ad6f864-00a8-4d45-9d7f-29742d65f7a1", "sighting--ff003b9a-ef2a-4ac7-a292-21084c316c4d", "sighting--36ba9517-d7cc-4a7b-8d5b-d42f2728174e", "sighting--48eee0ea-68a2-4d8b-a618-eaaa0be98cbc", "sighting--f0a3d341-9c54-4028-a614-1643c0635b15", "sighting--1b2d3608-bf41-4b7d-bd66-2f0612a39c0d", "sighting--f54ee4c0-0966-44f2-b35c-b82b1ac360c5", "sighting--f40a1816-973c-4783-afae-7841ca241549", "sighting--8491b3e0-7184-4f6b-b1e5-2bda73e6b213", "sighting--fbbfa22e-2c9b-4d75-8c03-b12667c616a4", "sighting--bf50e960-4d3a-4aaa-8a76-85791e9c9245", "sighting--c98c3d1e-a88b-4762-b245-eb81f9d81a6d", "sighting--b01ff98e-b299-43fb-aa86-d3a10b1be2a2", "sighting--b7dcb872-1918-4e92-88e6-018493e138f5", "sighting--4f4cf79a-4525-4248-92e6-6753b145d993", "sighting--a78acbca-63f3-4952-878a-1692119cdfb6", "sighting--1b15c6ca-3d47-4d3e-ae78-6304d10e7318", "sighting--f0d38170-433a-43b7-b901-6e33bbf1bcfa", "sighting--e18df778-38f4-45a4-a63c-af75f7c0d039", "sighting--675298d7-f0e0-4c44-8a71-4b4ca1d98117", "sighting--a08ce419-c799-4e3e-abb5-73c8ddcc5d7a", "sighting--1416cdde-119f-41fc-a623-3d7cb671bef4", "sighting--3221971d-5054-4280-9dda-9de6cf10d227", "sighting--4aa0ed48-2815-47ac-b1a6-d2284251c4bf", "sighting--80a019a5-219d-4651-aa22-e60a45c7f8e8", "sighting--7d8b16f3-8f67-470d-a440-d254cf93f4ff", "sighting--54f3e898-68d8-4e51-8b43-1aa12e2a5da4", "sighting--05a99a6b-8685-4dc6-b3a6-4d27f1fe0cc1", "sighting--d2b6743b-c37a-4d33-bd5d-b0a1402b1c6e", "sighting--57955c11-8cd4-4301-8839-60b1e9ce209b", "sighting--ad7af6b3-f50f-43e4-a142-95323cc2e857", "sighting--2f79fed7-cd1c-4757-a739-fe2589f149ce", "sighting--6e3035ac-9a0a-434d-9b77-76d395fb2ab5", "sighting--9baed17a-94e0-4648-83b9-21c27bb86dc7", "sighting--51dd7925-78c6-41f8-b02a-6a193f398af9", "sighting--de75bc01-74fa-4c8d-b70a-409d57a59608", "sighting--bce66ff0-27e1-4ed8-bb7a-701191f05c26", "sighting--5c9156d9-d177-4c22-a4a0-088850154346", "sighting--a3bf32b3-7688-4aa8-ae2f-52373ed87904", "sighting--3e426f4d-8b8d-4414-92b5-c103ce0bd2e1", "sighting--784a81a8-35d7-4742-9e05-17c54f81fd7c", "sighting--beca1df2-50ef-4957-b2bb-5c6064d62bc1", "sighting--8779abca-7554-43d2-8536-5646ccb164a5", "sighting--39ee72ad-585e-43af-a4cc-911730ce3b7e", "sighting--878509f2-cfcd-4026-af9e-7c36dae86503", "sighting--e5c3b6fb-88f6-4fd3-80b7-feec764c7298", "sighting--3ef04eae-6c83-4a1e-ae56-7c416059a56f", "sighting--79a58dbc-a549-41a5-9c62-84e2f1754720", "sighting--28d1e6e8-5874-41c5-b582-ebe66762f1ca", "sighting--daf324bc-e72c-42ee-b305-59fd8e871dc1", "sighting--a2b8cf8f-23b4-431a-bcd5-bc68e264d32a", "sighting--f62d994a-9bd1-4638-803d-03bd52f2ecc0", "sighting--f1101adc-a33a-4a7c-8cb4-18bc14343928", "sighting--c36be3a7-886e-46f8-96c2-00b9238f18ec", "sighting--5a71f6b5-c416-4aaf-8e4e-d5d2ec7ec784", "sighting--1b11ea30-4a95-4b43-b7c0-4f795fce5218", "sighting--22f603e5-2937-46ee-b44c-faafa83eb4fe", "sighting--a97289d1-e8ea-46e1-a6fa-59e0452ea367", "sighting--f5c86462-cce8-449c-952a-1c77a0d63af4", "sighting--8dfb0b00-85a3-4ef3-8ad7-400d936008dc", "sighting--c2a89bcf-e636-4887-a9c6-bdc78ee7aeef", "sighting--63578fe2-1179-4f46-9530-cdcb7e1773c6", "sighting--c7986c13-7137-4673-ab82-83592013053f", "sighting--700878cd-842d-402f-b90a-3575436a9018", "sighting--7832ad61-6cbc-463b-9d4b-76fcb3f3fde5", "sighting--fdb664fb-b3ad-4659-82cd-99735909eedd", "sighting--092e9747-c426-4ee4-8f26-b9b852c9168c", "sighting--f9a86682-54ad-42fc-afed-f81fc7c6b903", "sighting--e5451e82-62f4-4a72-bd29-d01060ad474c", "sighting--8fc22668-054c-4b22-9bcb-700b646c8440", "sighting--93653d6d-69e8-4d44-9626-1f632283fc6b", "sighting--6f901d8c-5c99-4045-a30b-7ec3450bd42b", "sighting--fd9e746b-8707-4a96-82a2-60e0c4128fe6", "sighting--20cc9c0b-9fd1-4f41-9dc6-59dbce1956c8", "sighting--c8c343ba-5ceb-466e-9193-31ce0aa96e08", "sighting--c1595204-24be-42af-a811-fd1f4508d70d", "sighting--acf34b0e-f16a-4196-bcef-65341b00f5ce", "sighting--f11229b5-7327-40d4-b90b-1762fb203bb0", "sighting--7cff9391-c671-42aa-964f-b902d3ebc55b", "sighting--1cd51491-20f4-4629-b97e-1055cee6cc8f", "sighting--114dfc81-ae9b-46b5-a2a5-003391c46c24", "sighting--952dfecb-c4b8-4843-bce2-e54bba8b00a3", "sighting--d4e8d1b0-070e-4fe9-93aa-d846b7f8eaf8", "sighting--40b82f0b-bfd8-467c-a8b9-ddb76f50c80a", "sighting--24b902c8-ccdb-4972-8a95-959df6777b9c", "sighting--3e3d36b1-d03a-49ac-9d47-65c20757c7e7", "sighting--5db8e06d-585b-4422-9ee5-30b8e9a362f5", "sighting--019a4e48-007f-4bc9-b717-a1eab1129d26", "sighting--9a65ecca-0cd7-4dfb-a8f8-ca7562a046e0", "sighting--507dacdc-0325-46bc-8c45-1c4d220b5131", "sighting--eb7d8b5e-cdfb-4f79-bd75-e40fdd2c07d7", "sighting--6239eec5-912f-4332-915f-c04670567a8a", "sighting--e5f71729-59e2-42c8-8110-c63d01988c05", "sighting--ec63af85-5f8b-4384-b042-1d0b0742de48", "sighting--9621f201-943b-4b7a-a9f4-9471672a9d37", "sighting--14787f78-1bbc-4f85-9baf-b789eba546e1", "sighting--89bc88da-9ed6-41cf-9fc2-c424ffb2b642", "sighting--128c5ea0-1004-4e70-8973-951d9e175c87", "sighting--40ac0e24-4e4b-4cb7-a367-75d115f7fc99", "sighting--dbc26b36-bafd-4f6c-938a-cff2e0047e4f", "sighting--37d0bfb8-8f1f-46cd-9024-b72f542dc946", "sighting--4afc6541-ff5a-46aa-80c4-4047d0bcb29a", "sighting--196d5999-01e0-498c-812f-527fa37d6384", "sighting--466c412f-556b-4b65-8af1-66ee908e1149", "sighting--d70559d1-c306-4993-9957-bd2f8feaba18", "sighting--5a42cf1c-52d6-4977-876f-814a4392098b", "sighting--dfa89416-7179-4816-81fa-d2e9e85dd32f", "sighting--cd2a98a4-7af4-42dd-a719-6b1710cc44e1", "sighting--70258507-08be-4e1f-937c-adedac74f0a3", "sighting--efd8d9ac-7190-4f30-9a3e-27c8d0dca0c5", "sighting--a4a7f52b-a9f9-4fe9-94c5-72f08d08b57c", "sighting--b9b07191-528f-4fe6-8663-c174e1035c31", "sighting--eec7bdfd-c1de-4aae-885f-92e365d657a8", "sighting--43a5b67b-b7e6-43d6-a83c-e608b8504b59", "sighting--9d4f6cb6-b9b7-4435-9c0f-15b3d5e0833d", "sighting--d627899b-282e-4271-826f-1958ec127650", "sighting--64887b5f-b65f-4cb8-8bf7-f93c1d335425", "sighting--f50dbd70-a232-48f1-9994-8cc437ccbb7e", "sighting--94b95a4e-64b7-480c-b7e4-8fdf955828de", "sighting--58cffb42-a17e-4303-adf3-e50843b59c41", "sighting--5ab4ff1a-1575-4f5f-b10f-c8cb72cb8135", "sighting--4edb05f3-98ee-4767-adc0-3c5b9d41aee3", "sighting--5d229765-0698-4528-8286-4924844cc532", "sighting--08890394-7bc5-41f3-867e-03fc4eca8685", "sighting--f71d5c31-31cb-4ab8-9005-68ebc9a5be09", "sighting--95a50993-d02d-40df-bdcc-8fbef6ec386f", "sighting--8a6fc360-85f8-46ba-8f47-d6151b675b51", "sighting--bc1aed38-f0bd-4553-bb32-687518ad31a0", "sighting--d4c63300-75bd-4128-8c2b-a9e8abed8a60", "sighting--742d0b8b-0489-4311-8e68-ddfb1765664c", "sighting--4129991d-c095-4c98-9bba-76bbf7f561b4", "sighting--2367ed2b-5588-4a81-b386-cdff046c66f4", "sighting--b129d597-7029-420e-ac3d-211732234ac9", "sighting--01ffc82e-2285-482f-a388-f67eda517c01", "sighting--5cd34b90-8f7c-4ab7-bf7f-921525c18cb2", "sighting--956a176a-31c2-46d9-87b4-8325db60e01e", "sighting--1ec22f0f-960e-41bc-8a4a-b31f2725d7cb", "sighting--571351cb-5ff6-4799-b329-176aa5bdee83", "sighting--68bbd6fc-6d5d-4a2c-8715-8f5d25213f96", "sighting--47d64c82-9710-4824-877e-b3bad05fa00b", "sighting--5505939d-8399-4973-a663-0df543f8d0e0", "sighting--5dabd592-2470-4190-9bba-a461d7a234d3", "sighting--d9612db3-f1b9-42e2-85da-6ab1ed979a26", "sighting--b7db891c-df84-4cb8-af86-7139d23a05a2", "sighting--536ea5d0-02f8-4161-851e-6a5cc8f55d1f", "sighting--07db77da-1dc6-4b1b-ba54-81ee193acc0b", "sighting--94df436f-53b9-4216-9d46-63d0b54c2aed", "sighting--8ec3d1ac-0ce1-4015-9c50-8e263569a576", "sighting--4fbd643b-bd02-4769-8e87-48770ed18319", "sighting--afbaed72-4d09-4694-9a38-d60a2a4ba1cb", "sighting--d48b380d-30b3-4a3f-8ceb-20487d7db621", "sighting--f5b9472f-80de-4818-b2e8-ae6dc77d01e6", "sighting--baafa6c9-d776-4cb8-8592-e1fdacd023cf", "sighting--9a1d3138-7600-456c-8c39-20e769dfdc0f", "sighting--fa40603d-308b-4688-9a2a-06efed433ad8", "sighting--c01a7e5a-f670-4412-b9fb-6f2f2ef20de1", "sighting--99f7b45a-b17e-4e20-93de-17de52ceae2e", "sighting--40bb111c-a412-473e-8ee3-ba9825e47c32", "sighting--b9dfb8f9-4dbc-4289-81c2-124a701aef13", "sighting--2afb1973-2aa9-47c1-abea-bcae3b806cd6", "sighting--d01fc843-33ea-4fd3-9f4c-a3681eabc198", "sighting--072cd69f-cf8b-4f13-a1b8-a1defe389e1e", "sighting--801bcb35-f452-4649-b8af-68fd03dad507", "sighting--bb9241aa-93b4-40e9-bf15-6a2f33548674", "sighting--44037092-2e29-465d-9360-ac1d876632ef", "sighting--d17b5c37-ee71-407b-b1a6-39496b5e2dde", "sighting--9c50b986-044c-4fc5-ba8f-0ea783176898", "sighting--37d57f0a-28c1-4111-b601-ed9c5616c66e", "sighting--fd253839-8beb-4373-bdc9-4df5bc4abd13", "sighting--374939d3-01da-47b3-a3f5-8bb719f912bf"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-16T11:00:01.656Z", "modified": "2026-06-16T11:00:01.656Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "marking-definition", "spec_version": "2.1", "id": "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9", "created": "2017-01-20T00:00:00.000Z", "definition_type": "tlp", "name": "TLP:WHITE", "definition": {"tlp": "white"}}]}